$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff/f1ab79d8-9ba8-341f-b4ae-165cdb969a2d.roa File: f1ab79d8-9ba8-341f-b4ae-165cdb969a2d.roa (raw, json) Hash identifier: lb981mLxI4k7yB2J9AOAjhfWU9KBvSY3KPBitq3Inzs= Subject key identifier: FE:BB:A7:43:0B:FE:A4:DF:CA:53:3F:E7:30:46:07:E5:6D:82:45:39 Certificate issuer: /CN=c17eacde-68de-455f-97dc-4d67847c03ff Certificate serial: 010D0C9F4328584B89177A509BDDDEA4F0C74120 Authority key identifier: 34:FA:19:93:2C:BC:98:3C:00:2E:50:7B:F8:9E:BC:72:C9:F3:BC:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff/f1ab79d8-9ba8-341f-b4ae-165cdb969a2d.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 21577 IP address blocks: 2604:d580::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff/c17eacde-68de-455f-97dc-4d67847c03ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff/c17eacde-68de-455f-97dc-4d67847c03ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:7a:50:9b:dd:de:a4:f0:c7:41:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c17eacde-68de-455f-97dc-4d67847c03ff Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=d70b4d55-38c9-4f48-9610-1ee8e60c7cba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e3:27:ee:75:74:39:a1:75:e7:d1:b5:40:8e: cb:2c:b4:15:d6:fa:8f:11:41:f0:ae:ab:6b:2a:22: a8:04:be:5b:8a:2b:8d:33:e8:b9:90:be:71:3e:03: b2:ca:90:da:1e:d1:c4:a4:09:97:57:c4:19:94:c7: ed:8c:88:49:0f:b8:9f:62:9a:2c:ee:38:57:80:38: a8:79:5d:46:e0:1e:b9:02:a1:01:df:15:b3:4a:7f: 28:4d:6d:72:3b:b0:54:37:ea:bb:2e:1f:49:3d:e3: 5b:bc:68:b9:aa:79:9a:f2:f9:3a:cd:29:7f:47:84: 67:8a:28:f0:33:54:de:dc:f9:b8:09:b4:61:b8:bc: 7f:98:1a:a9:7e:f7:70:b1:61:90:0f:71:b9:c4:8a: 9f:0e:e9:a7:9f:35:fa:41:a1:46:9b:ec:3e:9b:e2: 64:3b:b6:c5:e6:9f:8c:c6:35:33:9d:df:04:2c:e5: 08:4a:2a:7b:8d:12:b9:40:ce:64:8e:a2:76:99:1a: 7e:4f:28:3e:0a:d5:c8:ce:04:6a:6d:00:37:6d:0a: fe:97:d1:e1:46:bd:9e:42:3a:23:61:55:fd:5a:00: 0a:f3:9d:45:0c:e6:cf:fb:f7:32:7a:9f:c4:36:7b: d3:b7:b3:47:02:ce:89:dc:3f:d6:ec:89:9c:25:82: e3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:BB:A7:43:0B:FE:A4:DF:CA:53:3F:E7:30:46:07:E5:6D:82:45:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff/f1ab79d8-9ba8-341f-b4ae-165cdb969a2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff/c17eacde-68de-455f-97dc-4d67847c03ff.crl X509v3 Authority Key Identifier: keyid:34:FA:19:93:2C:BC:98:3C:00:2E:50:7B:F8:9E:BC:72:C9:F3:BC:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff.cer sbgp-ipAddrBlock: critical IPv6: 2604:d580::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:7d:4a:24:fa:8e:32:a7:50:bf:c9:62:1f:6c:5f:54:77:ed: 3e:72:d1:6b:b6:07:08:e7:12:db:6b:2c:1e:91:2a:6b:f2:24: 79:07:6d:9c:36:d6:0c:4e:ce:73:f2:98:62:19:05:df:00:35: 46:46:9e:8d:df:a0:21:68:24:89:51:90:7a:4e:52:7f:31:12: a1:49:f6:ba:57:22:ac:ec:de:3a:03:54:83:67:43:1b:34:8c: 37:d6:6d:67:b1:37:18:40:19:68:b4:f4:03:6d:3a:11:fa:01: 1a:ee:eb:a3:6c:ad:a3:4d:53:7f:da:ba:b8:6f:3e:62:4a:52: 35:4e:41:c3:ae:9c:75:86:e4:a0:80:d4:fa:37:25:5c:77:42: e0:cc:8c:64:5d:ed:4d:5d:a8:30:6a:e2:2b:fd:8b:1e:b6:32: 4e:8f:b3:eb:45:77:1e:d1:66:9c:18:4e:da:75:e2:42:ce:86: 2a:c7:db:65:f2:4c:e4:be:23:89:6b:41:11:a4:24:7e:a5:1e: b1:e6:e5:8c:db:24:23:81:d9:44:05:30:22:9d:1d:ee:f2:4d: c8:58:04:ec:2e:b3:b9:fa:00:15:42:69:55:c6:23:b2:38:09: 18:f4:0c:9f:f8:f2:48:39:7d:ff:23:5a:44:89:08:0f:e5:3c: 7d:04:3f:4e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuJF3pQm93epPDHQSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzE3ZWFjZGUtNjhkZS00NTVmLTk3ZGMtNGQ2Nzg0N2Mw M2ZmMB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk ZDcwYjRkNTUtMzhjOS00ZjQ4LTk2MTAtMWVlOGU2MGM3Y2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOMn7nV0OaF159G1QI7LLLQV1vqPEUHwrqtr KiKoBL5biiuNM+i5kL5xPgOyypDaHtHEpAmXV8QZlMftjIhJD7ifYpos7jhXgDio eV1G4B65AqEB3xWzSn8oTW1yO7BUN+q7Lh9JPeNbvGi5qnma8vk6zSl/R4Rniijw M1Te3Pm4CbRhuLx/mBqpfvdwsWGQD3G5xIqfDumnnzX6QaFGm+w+m+JkO7bF5p+M xjUznd8ELOUISip7jRK5QM5kjqJ2mRp+Tyg+CtXIzgRqbQA3bQr+l9HhRr2eQjoj YVX9WgAK851FDObP+/cyep/ENnvTt7NHAs6J3D/W7ImcJYLjIwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFP67p0ML/qTfylM/5zBGB+VtgkU5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jMTdl YWNkZS02OGRlLTQ1NWYtOTdkYy00ZDY3ODQ3YzAzZmYvZjFhYjc5ZDgtOWJhOC0z NDFmLWI0YWUtMTY1Y2RiOTY5YTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzE3ZWFjZGUtNjhkZS00NTVmLTk3 ZGMtNGQ2Nzg0N2MwM2ZmL2MxN2VhY2RlLTY4ZGUtNDU1Zi05N2RjLTRkNjc4NDdj MDNmZi5jcmwwHwYDVR0jBBgwFoAUNPoZkyy8mDwALlB7+J68csnzvK8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jMTdlYWNkZS02OGRlLTQ1NWYtOTdkYy00ZDY3 ODQ3YzAzZmYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTVgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCXfUok+o4yp1C/yWIfbF9Ud+0+ctFrtgcI5xLbaywekSpr8iR5B22c NtYMTs5z8phiGQXfADVGRp6N36AhaCSJUZB6TlJ/MRKhSfa6VyKs7N46A1SDZ0Mb NIw31m1nsTcYQBlotPQDbToR+gEa7uujbK2jTVN/2rq4bz5iSlI1TkHDrpx1huSg gNT6NyVcd0LgzIxkXe1NXagwauIr/YsetjJOj7PrRXce0WacGE7adeJCzoYqx9tl 8kzkviOJa0ERpCR+pR6x5uWM2yQjgdlEBTAinR3u8k3IWATsLrO5+gAVQmlVxiOy OAkY9Ayf+PJIOX3/I1pEiQgP5Tx9BD9O -----END CERTIFICATE-----Generated at Mon Oct 20 17:01:07 2025 by rpki-client