$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/d04dd6f5-30fb-3bd8-9178-2ef70d0acf25.roa File: d04dd6f5-30fb-3bd8-9178-2ef70d0acf25.roa (raw, json) Hash identifier: VM6BnEVtY8S0cN8MgBNR3esGPdSaQtOuAXH96xqGiY8= Subject key identifier: B6:BE:73:44:F9:CA:10:FA:2C:A3:75:2E:1E:69:9E:A3:FA:F4:0D:8B Certificate issuer: /CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b Certificate serial: 010D0C9F4328584B38219E50B9B8C92F30AF7920 Authority key identifier: 06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/d04dd6f5-30fb-3bd8-9178-2ef70d0acf25.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 2610:e8:3180::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:9e:50:b9:b8:c9:2f:30:af:79:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=29748f2e-87bc-4f12-9a23-8da8efd2c3ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:76:23:2e:21:43:14:a7:cd:d2:d2:d5:5a:d7: 8d:65:5a:63:f6:ad:cd:02:66:39:59:f3:16:39:9c: d2:d7:1a:29:88:1c:69:fc:00:65:1f:0c:92:4d:91: d1:65:5a:ad:1a:e5:d1:6a:33:15:37:a9:30:3d:ba: 3e:e9:b4:9a:4a:d1:4f:72:56:b5:22:15:57:04:fb: 24:82:be:64:bc:86:f5:3a:f1:2b:83:7e:59:a7:7c: 52:ac:8d:49:48:a5:dd:21:f9:f6:f9:3c:f0:02:c1: 40:c3:82:14:3c:dc:27:c1:51:75:7b:63:b0:68:1c: 5b:17:2a:5e:3a:05:e5:03:24:7b:a7:4d:38:ee:7b: 8a:ab:4f:f5:f1:43:18:92:59:2a:f1:ef:c3:ba:86: 6d:ad:cf:51:15:63:7e:f8:b5:29:10:49:a7:0f:18: 63:2c:20:2e:46:00:92:11:22:9f:6f:55:d0:38:cc: 94:25:bb:58:df:a8:d0:50:59:4c:22:f0:84:fd:f5: fc:80:f2:83:94:7d:2c:1f:57:5b:6c:e7:da:7a:fc: 80:26:e2:ab:c9:9c:84:46:d6:b6:57:0b:e5:1e:6b: 28:fc:36:29:0c:c0:1e:0e:1c:38:cd:52:8d:90:ed: 0b:eb:5e:bc:e8:1c:17:f5:aa:dc:6e:a6:d7:b6:15: 5e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:BE:73:44:F9:CA:10:FA:2C:A3:75:2E:1E:69:9E:A3:FA:F4:0D:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/d04dd6f5-30fb-3bd8-9178-2ef70d0acf25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl X509v3 Authority Key Identifier: keyid:06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer sbgp-ipAddrBlock: critical IPv6: 2610:e8:3180::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:dc:bf:79:44:60:35:8f:16:89:db:ce:e8:a1:52:22:ee:37: 71:27:81:14:5b:ec:19:f1:2e:ff:a5:bb:4b:e4:b6:d9:ad:c3: 1b:64:7b:65:cc:95:55:cb:b7:b0:7e:38:56:31:a2:c9:c9:eb: 71:4e:59:97:bf:77:3b:6f:5d:97:c7:a1:a9:c0:fc:77:92:d1: c7:3c:33:76:f1:a3:47:0e:10:d5:cc:b2:a1:5d:d3:ee:fa:3c: 60:79:a4:c2:96:a5:3b:98:57:da:63:34:e8:be:5b:da:17:44: f6:17:c3:d8:53:85:71:26:88:f1:39:fc:f2:2d:a4:1f:63:16: a3:90:58:42:29:e0:83:7b:7b:d5:ad:4b:e1:b3:fb:a8:80:9a: 8b:e4:6d:1b:61:c1:0d:46:f9:29:7d:6f:0c:c7:f3:77:4c:86: bc:de:95:9f:cc:e6:e2:2e:7f:2d:77:2c:4e:05:7d:9b:61:68: 71:96:c0:a7:45:65:5b:e4:d3:ed:46:a4:f4:75:ad:99:d5:79: 4c:17:a8:09:a1:ee:a9:e3:7f:a3:7a:f5:07:31:11:5b:6f:08: 9e:d3:5e:39:62:24:1f:08:e7:54:7a:4e:71:53:88:a4:ee:fd: 9f:6d:eb:8e:c8:e0:47:6b:27:d0:13:53:98:53:ab:bd:ef:25: 1d:68:ab:3d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs4IZ5QubjJLzCveSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM5NDI1YzUtNTJlOC00ZWFjLTllMWQtYjA3MDc5Yzg0 ZDdiMB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk Mjk3NDhmMmUtODdiYy00ZjEyLTlhMjMtOGRhOGVmZDJjM2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHYjLiFDFKfN0tLVWteNZVpj9q3NAmY5WfMW OZzS1xopiBxp/ABlHwySTZHRZVqtGuXRajMVN6kwPbo+6bSaStFPcla1IhVXBPsk gr5kvIb1OvErg35Zp3xSrI1JSKXdIfn2+TzwAsFAw4IUPNwnwVF1e2OwaBxbFype OgXlAyR7p0047nuKq0/18UMYklkq8e/DuoZtrc9RFWN++LUpEEmnDxhjLCAuRgCS ESKfb1XQOMyUJbtY36jQUFlMIvCE/fX8gPKDlH0sH1dbbOfaevyAJuKryZyERta2 VwvlHmso/DYpDMAeDhw4zVKNkO0L61686BwX9arcbqbXthVe6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLa+c0T5yhD6LKN1Lh5pnqP69A2LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lMzk0 MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcwNzljODRkN2IvZDA0ZGQ2ZjUtMzBmYi0z YmQ4LTkxNzgtMmVmNzBkMGFjZjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTM5NDI1YzUtNTJlOC00ZWFjLTll MWQtYjA3MDc5Yzg0ZDdiL2UzOTQyNWM1LTUyZTgtNGVhYy05ZTFkLWIwNzA3OWM4 NGQ3Yi5jcmwwHwYDVR0jBBgwFoAUBiGHe0/vkdqGTfcX0R/RGNKyU6swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lMzk0MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcw NzljODRkN2IuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJhAA6DGA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACLcv3lEYDWPFonbzuihUiLuN3EngRRb7BnxLv+lu0vkttmtwxtk e2XMlVXLt7B+OFYxosnJ63FOWZe/dztvXZfHoanA/HeS0cc8M3bxo0cOENXMsqFd 0+76PGB5pMKWpTuYV9pjNOi+W9oXRPYXw9hThXEmiPE5/PItpB9jFqOQWEIp4IN7 e9WtS+Gz+6iAmovkbRthwQ1G+Sl9bwzH83dMhrzelZ/M5uIufy13LE4FfZthaHGW wKdFZVvk0+1GpPR1rZnVeUwXqAmh7qnjf6N69QcxEVtvCJ7TXjliJB8I51R6TnFT iKTu/Z9t647I4EdrJ9ATU5hTq73vJR1oqz0= -----END CERTIFICATE-----Generated at Mon Oct 20 18:02:40 2025 by rpki-client