$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/2e98b634-aaab-3aba-a91b-f70a3a88dea2.roa File: 2e98b634-aaab-3aba-a91b-f70a3a88dea2.roa (raw, json) Hash identifier: diGQxtu//57LhcXo72Vy9cZ9TC7WKwhUEyhm1lBUE+Q= Subject key identifier: DF:70:95:E3:22:D6:59:54:AD:47:23:B8:9E:F3:5B:84:D5:6D:35:2D Certificate issuer: /CN=0c82e125-4df5-4912-a714-101a1caa5b99 Certificate serial: 010D0C9F4328584B758C926CC4A6420FE071BD00 Authority key identifier: C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/2e98b634-aaab-3aba-a91b-f70a3a88dea2.roa Signing time: Thu 09 Oct 2025 01:00:28 +0000 ROA not before: Thu 09 Oct 2025 01:00:28 +0000 ROA not after: Wed 07 Jan 2026 02:00:28 +0000 asID: 54054 IP address blocks: 2606:700::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:8c:92:6c:c4:a6:42:0f:e0:71:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c82e125-4df5-4912-a714-101a1caa5b99 Validity Not Before: Oct 9 01:00:28 2025 GMT Not After : Jan 7 02:00:28 2026 GMT Subject: CN=b4ca683d-794c-4e69-bcd3-e99c3fdd521d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fc:66:eb:fa:06:eb:43:cb:99:86:98:88:17: 94:c7:5c:2c:65:25:67:54:95:dd:48:8f:32:4b:57: 73:65:ea:ef:cc:48:49:62:2b:7a:f1:35:66:b5:b1: 29:30:e6:8a:6f:28:ad:3b:a1:50:ad:94:c2:e2:f2: b5:08:e6:a0:31:15:77:fb:7a:84:cf:c7:df:52:f8: 6c:cf:f1:a6:65:f6:0d:95:bb:fa:0d:85:d0:55:1d: 6b:2f:ee:32:88:9d:b8:9d:4a:b1:74:6c:32:2a:3a: 00:84:2d:f2:d7:82:4b:e7:60:53:ad:41:6a:df:92: d0:c1:de:42:08:45:0c:76:35:44:5a:df:9f:4b:91: 34:2d:3c:2c:c0:9c:91:fb:1b:b1:e7:1f:05:c1:fb: d5:b1:18:d9:f3:ec:21:3a:53:b1:da:cf:73:f6:d0: 26:22:68:2f:e7:47:3e:18:75:dd:72:50:e0:ad:20: ae:1a:cb:c1:bb:1c:42:f4:78:ac:e3:e7:20:fd:d9: cb:a0:02:30:92:cb:8c:9d:6a:07:db:58:0a:3f:d8: 9a:af:e8:30:ac:93:b3:4f:da:9a:81:5e:72:a0:4b: c1:25:2e:83:5e:40:66:4c:25:e5:56:88:71:ec:93: b1:65:9f:f6:73:a0:99:63:69:cb:08:09:29:4d:f2: 1d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:70:95:E3:22:D6:59:54:AD:47:23:B8:9E:F3:5B:84:D5:6D:35:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/2e98b634-aaab-3aba-a91b-f70a3a88dea2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.crl X509v3 Authority Key Identifier: keyid:C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer sbgp-ipAddrBlock: critical IPv6: 2606:700::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:e3:a3:bb:bf:66:e5:0a:c9:30:1f:38:3e:fb:1b:5f:34:79: 9a:81:45:c2:3d:e5:62:a5:7d:3d:fa:23:33:03:93:02:b8:49: 6e:d2:cb:a5:87:0f:14:49:ad:74:2c:2a:48:c3:3a:e1:a6:e0: 6e:94:29:56:30:dd:39:e0:eb:47:4c:f8:9d:c1:55:0a:37:70: 80:7f:d9:b9:4c:29:7b:58:43:38:30:22:ef:cb:76:5c:41:63: b1:90:24:21:9b:f9:71:f7:b3:1c:e3:4b:a2:21:3f:63:94:e2: d5:b2:18:3a:48:55:e4:54:67:bb:1d:6b:7d:de:5e:42:f1:96: 16:ed:e2:7d:5d:fc:06:69:8f:7a:62:d9:e5:40:7b:5f:6c:39: 6f:2a:b9:d9:19:66:af:ee:79:61:37:46:02:8d:2b:a9:81:a7: 6e:3f:1e:0f:1d:af:17:ea:4b:f5:e4:2b:69:f9:77:ee:59:74: 61:2c:2d:12:9f:41:24:e8:12:c7:6a:10:32:25:07:cd:e8:91: da:dd:32:de:22:0b:ff:00:29:1c:65:2b:8f:d4:6b:12:1a:ce: 2d:a2:60:78:d3:a2:ce:40:d2:00:7a:ca:6f:f3:83:f0:4c:2f: ae:4d:57:83:01:95:f6:79:6d:af:69:b4:73:e1:1e:71:b5:47: aa:e5:fd:25 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt1jJJsxKZCD+BxvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM4MmUxMjUtNGRmNS00OTEyLWE3MTQtMTAxYTFjYWE1 Yjk5MB4XDTI1MTAwOTAxMDAyOFoXDTI2MDEwNzAyMDAyOFowLzEtMCsGA1UEAxMk YjRjYTY4M2QtNzk0Yy00ZTY5LWJjZDMtZTk5YzNmZGQ1MjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/xm6/oG60PLmYaYiBeUx1wsZSVnVJXdSI8y S1dzZervzEhJYit68TVmtbEpMOaKbyitO6FQrZTC4vK1COagMRV3+3qEz8ffUvhs z/GmZfYNlbv6DYXQVR1rL+4yiJ24nUqxdGwyKjoAhC3y14JL52BTrUFq35LQwd5C CEUMdjVEWt+fS5E0LTwswJyR+xux5x8FwfvVsRjZ8+whOlOx2s9z9tAmImgv50c+ GHXdclDgrSCuGsvBuxxC9His4+cg/dnLoAIwksuMnWoH21gKP9iar+gwrJOzT9qa gV5yoEvBJS6DXkBmTCXlVohx7JOxZZ/2c6CZY2nLCAkpTfIdvQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFN9wleMi1llUrUcjuJ7zW4TVbTUtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYzgy ZTEyNS00ZGY1LTQ5MTItYTcxNC0xMDFhMWNhYTViOTkvMmU5OGI2MzQtYWFhYi0z YWJhLWE5MWItZjcwYTNhODhkZWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGM4MmUxMjUtNGRmNS00OTEyLWE3 MTQtMTAxYTFjYWE1Yjk5LzBjODJlMTI1LTRkZjUtNDkxMi1hNzE0LTEwMWExY2Fh NWI5OS5jcmwwHwYDVR0jBBgwFoAUyDy4ggA7MgjtxRD3UBDgaNSWRPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYzgyZTEyNS00ZGY1LTQ5MTItYTcxNC0xMDFh MWNhYTViOTkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgYHADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAR46O7v2blCskwHzg++xtfNHmagUXCPeVipX09+iMzA5MCuElu0sul hw8USa10LCpIwzrhpuBulClWMN054OtHTPidwVUKN3CAf9m5TCl7WEM4MCLvy3Zc QWOxkCQhm/lx97Mc40uiIT9jlOLVshg6SFXkVGe7HWt93l5C8ZYW7eJ9XfwGaY96 YtnlQHtfbDlvKrnZGWav7nlhN0YCjSupgaduPx4PHa8X6kv15Ctp+XfuWXRhLC0S n0Ek6BLHahAyJQfN6JHa3TLeIgv/ACkcZSuP1GsSGs4tomB406LOQNIAespv84Pw TC+uTVeDAZX2eW2vabRz4R5xtUeq5f0l -----END CERTIFICATE-----Generated at Tue Oct 21 00:06:40 2025 by rpki-client