$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/825148ae-8ee9-3b53-9fda-ff6eb4912a52.roa File: 825148ae-8ee9-3b53-9fda-ff6eb4912a52.roa (raw, json) Hash identifier: z1IB52vleCQH0HjSSZ7mb2OEb0e5JxR5RVUy9qcZgq4= Subject key identifier: 72:94:F5:59:00:CB:38:2A:3E:49:92:C2:29:BF:62:10:B6:24:17:95 Certificate issuer: /CN=6acf8afa-6cb1-4c9d-84c7-5ee8845003d1 Certificate serial: 010D0C9F4328584B6BC74E9414320B47773DE180 Authority key identifier: D8:2C:17:54:D8:10:8C:24:31:5E:DA:EA:32:BD:49:1C:54:5E:95:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/825148ae-8ee9-3b53-9fda-ff6eb4912a52.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 22987 IP address blocks: 2604:f6c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:4e:94:14:32:0b:47:77:3d:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6acf8afa-6cb1-4c9d-84c7-5ee8845003d1 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=ad0f57ad-4c57-456d-9970-21666d2dc010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f7:6d:b7:16:53:8e:91:30:b4:a2:91:51:5c: 03:ac:6a:55:37:d8:61:02:9f:d2:b1:9d:ac:82:3e: 0b:c8:63:12:2a:4b:59:ef:6b:4a:d7:67:04:fd:2b: b4:70:a0:b7:6d:ec:ff:6c:1f:12:53:8a:3c:97:11: 5c:34:55:e7:8a:b3:5d:33:f9:d4:0c:9e:fb:43:33: 16:ec:f2:ef:ce:30:34:1c:c2:78:2e:02:b6:90:af: 92:bd:67:9b:b7:68:cf:f3:e4:78:d4:32:47:34:fe: 93:aa:88:a6:45:46:e1:76:d5:2d:e3:7c:b6:6f:94: c4:22:73:73:29:a7:b9:69:be:dc:f9:44:fb:28:0d: ae:56:61:0e:80:3d:ca:e5:20:8e:bf:35:fc:5c:28: 08:a2:e9:e4:e4:c3:5c:8c:19:cd:2b:f2:d3:2d:a2: aa:74:cb:09:06:c4:7f:f1:9d:15:35:56:06:e7:b6: 48:39:5b:3e:1b:3e:98:ef:89:41:1d:a6:ba:16:e6: ba:82:8b:99:b2:51:d0:05:09:a2:10:4b:dc:12:fe: 9f:d0:3c:04:95:b8:16:fb:13:06:29:fd:a3:04:68: 7b:d9:0b:16:9f:bd:87:24:f8:34:09:96:5f:38:1d: 31:c9:81:10:16:62:bb:dd:d3:ee:d8:64:18:63:bf: a2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:94:F5:59:00:CB:38:2A:3E:49:92:C2:29:BF:62:10:B6:24:17:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/825148ae-8ee9-3b53-9fda-ff6eb4912a52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.crl X509v3 Authority Key Identifier: keyid:D8:2C:17:54:D8:10:8C:24:31:5E:DA:EA:32:BD:49:1C:54:5E:95:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer sbgp-ipAddrBlock: critical IPv6: 2604:f6c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:6d:bc:e9:d8:34:e6:13:e6:f0:57:f6:ae:ab:24:55:bc:10: df:98:95:4c:2d:8c:0d:94:c5:b0:b4:45:c2:92:34:35:3b:c3: 01:41:50:6d:e6:8a:1a:ad:33:c2:25:5e:bf:59:8c:de:98:b3: 80:17:f7:1c:b2:13:df:1f:41:c4:e3:15:f5:a5:fe:59:4e:60: ac:75:9b:40:6c:7c:01:85:70:eb:fd:c7:c6:fb:10:eb:80:29: 66:e7:91:55:07:85:1b:ac:81:15:23:a1:fd:2f:5d:c2:d3:5e: 9c:3c:d4:f3:db:d9:a2:68:f9:b6:57:3d:3b:9a:c5:9a:7f:5c: 18:df:77:aa:ae:7b:be:0d:c4:77:89:08:8b:f3:b1:3b:ae:01: d6:d0:76:81:95:f0:25:da:16:29:9b:a4:ac:e4:da:64:2f:ca: 72:8a:75:9d:33:45:e5:59:67:66:bf:31:f1:48:9f:ff:49:6b: 76:cb:d4:62:dc:e9:0d:d3:3f:1c:de:e9:09:30:20:df:91:f1: bf:67:73:5e:99:2a:e8:1c:17:05:4c:8e:c9:ec:6a:0c:73:0c: e1:71:89:2c:4a:de:df:96:7c:28:91:29:36:77:e0:84:a4:a2: 1a:cb:31:33:99:87:90:e9:17:42:de:36:a2:c1:70:75:9b:22: 27:66:3c:64 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtrx06UFDILR3c94YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmFjZjhhZmEtNmNiMS00YzlkLTg0YzctNWVlODg0NTAw M2QxMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk YWQwZjU3YWQtNGM1Ny00NTZkLTk5NzAtMjE2NjZkMmRjMDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPdttxZTjpEwtKKRUVwDrGpVN9hhAp/SsZ2s gj4LyGMSKktZ72tK12cE/Su0cKC3bez/bB8SU4o8lxFcNFXnirNdM/nUDJ77QzMW 7PLvzjA0HMJ4LgK2kK+SvWebt2jP8+R41DJHNP6TqoimRUbhdtUt43y2b5TEInNz Kae5ab7c+UT7KA2uVmEOgD3K5SCOvzX8XCgIounk5MNcjBnNK/LTLaKqdMsJBsR/ 8Z0VNVYG57ZIOVs+Gz6Y74lBHaa6Fua6gouZslHQBQmiEEvcEv6f0DwElbgW+xMG Kf2jBGh72QsWn72HJPg0CZZfOB0xyYEQFmK73dPu2GQYY7+ijQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHKU9VkAyzgqPkmSwim/YhC2JBeVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YWNm OGFmYS02Y2IxLTRjOWQtODRjNy01ZWU4ODQ1MDAzZDEvODI1MTQ4YWUtOGVlOS0z YjUzLTlmZGEtZmY2ZWI0OTEyYTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmFjZjhhZmEtNmNiMS00YzlkLTg0 YzctNWVlODg0NTAwM2QxLzZhY2Y4YWZhLTZjYjEtNGM5ZC04NGM3LTVlZTg4NDUw MDNkMS5jcmwwHwYDVR0jBBgwFoAU2CwXVNgQjCQxXtrqMr1JHFRelVYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YWNmOGFmYS02Y2IxLTRjOWQtODRjNy01ZWU4 ODQ1MDAzZDEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgT2wDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAlbbzp2DTmE+bwV/auqyRVvBDfmJVMLYwNlMWwtEXCkjQ1O8MBQVBt 5ooarTPCJV6/WYzemLOAF/ccshPfH0HE4xX1pf5ZTmCsdZtAbHwBhXDr/cfG+xDr gClm55FVB4UbrIEVI6H9L13C016cPNTz29miaPm2Vz07msWaf1wY33eqrnu+DcR3 iQiL87E7rgHW0HaBlfAl2hYpm6Ss5NpkL8pyinWdM0XlWWdmvzHxSJ//SWt2y9Ri 3OkN0z8c3ukJMCDfkfG/Z3NemSroHBcFTI7J7GoMcwzhcYksSt7flnwokSk2d+CE pKIayzEzmYeQ6RdC3jaiwXB1myInZjxk -----END CERTIFICATE-----Generated at Wed Oct 22 00:18:40 2025 by rpki-client