$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/b0aead21-fe86-32c1-8560-e3f695d01240.roa File: b0aead21-fe86-32c1-8560-e3f695d01240.roa (raw, json) Hash identifier: LeITqIcc2dPXXSBxaqIGfJr5O4e6UZLd1bd75zYRdXY= Subject key identifier: A8:70:65:2F:93:CF:8C:E7:73:54:21:E8:CC:8A:9C:EE:42:60:8A:91 Certificate issuer: /CN=66afc7a0-9424-431b-87aa-fab4c7032ed2 Certificate serial: 010D0C9F4328584B8EACE945D1225357F9E4FDB0 Authority key identifier: 8B:B7:43:2E:1D:4B:AF:D0:79:03:06:96:4C:AC:AD:5C:64:24:61:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/b0aead21-fe86-32c1-8560-e3f695d01240.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 19919 IP address blocks: 2601:1600::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/66afc7a0-9424-431b-87aa-fab4c7032ed2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/66afc7a0-9424-431b-87aa-fab4c7032ed2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:e9:45:d1:22:53:57:f9:e4:fd:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66afc7a0-9424-431b-87aa-fab4c7032ed2 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=580b6eba-8a6c-4616-b49e-5b51eea27ff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:33:dc:ac:ca:1d:c9:85:44:24:ad:49:2e:95: fb:17:95:61:ce:e5:98:d7:db:7d:30:46:b3:4b:82: 22:d2:4f:9d:0f:f5:a7:87:3a:fa:d3:bc:32:9e:ed: 0f:11:a1:24:09:fd:13:66:b8:fc:30:c7:47:bf:30: 1d:58:35:05:45:89:4f:47:45:50:0a:d2:5e:fa:cc: c3:13:e5:51:9a:41:96:60:d0:d9:a8:31:d2:4a:3e: 2d:14:28:d7:31:3f:1d:23:97:04:8a:d1:31:cd:4a: d5:08:88:df:c1:d0:7f:c9:96:df:63:50:3d:09:bd: c7:3f:9a:d1:97:4d:77:3d:f4:7f:ce:07:56:9d:a0: 4f:be:6e:96:cf:b8:8b:22:b9:23:08:ac:e6:f8:cc: 20:a9:62:8b:75:b3:b9:26:ed:41:3f:c6:82:e3:39: f0:b5:ad:32:e9:f3:72:21:1e:40:6a:53:04:8e:ca: 50:bb:f6:12:94:9a:2b:3e:6d:66:20:d0:1c:e9:d7: 09:b7:ed:5e:55:f8:90:03:b7:7b:6a:03:3a:24:24: 64:33:44:04:c0:db:4b:8f:7f:38:d5:d3:ad:50:81: 9b:46:1e:12:ce:2c:e7:24:c0:35:1b:c3:2c:f4:5e: 5f:d1:cc:88:25:ce:06:8f:f7:f6:70:fc:8b:e1:d2: 25:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:70:65:2F:93:CF:8C:E7:73:54:21:E8:CC:8A:9C:EE:42:60:8A:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/b0aead21-fe86-32c1-8560-e3f695d01240.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/66afc7a0-9424-431b-87aa-fab4c7032ed2.crl X509v3 Authority Key Identifier: keyid:8B:B7:43:2E:1D:4B:AF:D0:79:03:06:96:4C:AC:AD:5C:64:24:61:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2.cer sbgp-ipAddrBlock: critical IPv6: 2601:1600::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:57:63:bd:bc:80:8b:ef:3d:13:78:51:88:a4:3a:fd:0b:c9: 5d:86:9d:5f:b0:7d:f1:b4:9f:cd:a2:25:42:09:57:63:4b:d7: 7d:c6:08:ae:69:be:6f:d7:55:71:a2:6d:1e:f0:77:87:60:66: b4:ad:44:25:d5:bf:54:98:86:ca:1a:45:5c:6d:f1:58:37:c5: 01:70:da:72:1c:2a:2b:56:a1:d6:af:d6:e4:5c:15:07:d5:8b: 2b:10:12:94:73:87:b2:03:ac:d5:45:bc:85:f7:22:ac:09:ec: 4a:54:23:3d:6c:9e:34:d2:ce:67:05:65:2c:9e:95:00:78:3d: 36:91:76:9d:47:80:ca:18:95:29:19:0b:22:75:ba:df:fe:de: 4d:3a:62:91:93:dd:8c:79:3e:91:01:47:b1:cb:fe:af:4e:80: 79:7f:0f:6d:b8:fe:47:d8:f9:f9:0a:0b:79:03:8a:f3:15:6f: 81:f1:54:7d:ae:88:b8:ff:20:e6:3b:59:e3:16:7d:61:71:c8: 20:96:66:2f:8b:18:3f:95:6e:58:6c:b0:ea:b9:06:f2:eb:5a: f0:9b:d9:24:59:d0:07:57:1a:09:c2:06:cf:11:77:6e:f9:8a: f4:1c:cb:3d:b4:ef:57:7e:2f:63:2f:c8:28:11:2d:09:a7:c6: 49:2d:fa:34 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuOrOlF0SJTV/nk/bAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZhZmM3YTAtOTQyNC00MzFiLTg3YWEtZmFiNGM3MDMy ZWQyMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk NTgwYjZlYmEtOGE2Yy00NjE2LWI0OWUtNWI1MWVlYTI3ZmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDPcrModyYVEJK1JLpX7F5VhzuWY19t9MEaz S4Ii0k+dD/Wnhzr607wynu0PEaEkCf0TZrj8MMdHvzAdWDUFRYlPR0VQCtJe+szD E+VRmkGWYNDZqDHSSj4tFCjXMT8dI5cEitExzUrVCIjfwdB/yZbfY1A9Cb3HP5rR l013PfR/zgdWnaBPvm6Wz7iLIrkjCKzm+MwgqWKLdbO5Ju1BP8aC4znwta0y6fNy IR5AalMEjspQu/YSlJorPm1mINAc6dcJt+1eVfiQA7d7agM6JCRkM0QEwNtLj384 1dOtUIGbRh4SziznJMA1G8Ms9F5f0cyIJc4Gj/f2cPyL4dIluwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKhwZS+Tz4znc1Qh6MyKnO5CYIqRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82NmFm YzdhMC05NDI0LTQzMWItODdhYS1mYWI0YzcwMzJlZDIvYjBhZWFkMjEtZmU4Ni0z MmMxLTg1NjAtZTNmNjk1ZDAxMjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjZhZmM3YTAtOTQyNC00MzFiLTg3 YWEtZmFiNGM3MDMyZWQyLzY2YWZjN2EwLTk0MjQtNDMxYi04N2FhLWZhYjRjNzAz MmVkMi5jcmwwHwYDVR0jBBgwFoAUi7dDLh1Lr9B5AwaWTKytXGQkYSAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82NmFmYzdhMC05NDI0LTQzMWItODdhYS1mYWI0 YzcwMzJlZDIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgEWADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA8V2O9vICL7z0TeFGIpDr9C8ldhp1fsH3xtJ/NoiVCCVdjS9d9xgiu ab5v11Vxom0e8HeHYGa0rUQl1b9UmIbKGkVcbfFYN8UBcNpyHCorVqHWr9bkXBUH 1YsrEBKUc4eyA6zVRbyF9yKsCexKVCM9bJ400s5nBWUsnpUAeD02kXadR4DKGJUp GQsidbrf/t5NOmKRk92MeT6RAUexy/6vToB5fw9tuP5H2Pn5Cgt5A4rzFW+B8VR9 roi4/yDmO1njFn1hccgglmYvixg/lW5YbLDquQby61rwm9kkWdAHVxoJwgbPEXdu +Yr0HMs9tO9Xfi9jL8goES0Jp8ZJLfo0 -----END CERTIFICATE-----Generated at Wed Oct 22 00:44:45 2025 by rpki-client