$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/ceda3ed4-49e5-373f-b1c9-7344fce724af.roa File: ceda3ed4-49e5-373f-b1c9-7344fce724af.roa (raw, json) Hash identifier: TxC/V1OKCaj83zEBM8zYxda1GQG29L+WfHawgGF34b4= Subject key identifier: 1F:E8:28:E9:ED:33:CE:AC:EE:51:64:1D:10:F6:2B:50:32:07:5C:65 Certificate issuer: /CN=e179ce28-23c7-45e1-9b0e-d90358c94f57 Certificate serial: 010D0C9F4328584B84E7815DB82E279E733C38D0 Authority key identifier: D8:05:C7:2E:26:3F:DA:B8:F5:43:EF:F9:51:95:84:40:1C:9E:F4:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/ceda3ed4-49e5-373f-b1c9-7344fce724af.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 46539 IP address blocks: 2605:cb40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/e179ce28-23c7-45e1-9b0e-d90358c94f57.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/e179ce28-23c7-45e1-9b0e-d90358c94f57.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:81:5d:b8:2e:27:9e:73:3c:38:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e179ce28-23c7-45e1-9b0e-d90358c94f57 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=2837b3c8-91c2-4654-8a0c-338528822c84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ab:bd:1e:4d:ca:3a:e4:e2:cf:f5:2a:50:96: 35:35:5d:9b:0d:71:18:f2:57:fd:69:90:9f:37:5d: b3:c4:e6:96:b7:0c:05:a6:a5:3a:68:ee:5d:1f:36: 7b:70:12:01:1c:d1:ec:82:63:a5:62:0e:fd:7a:31: ef:59:d9:0c:71:ff:7b:72:6d:c7:b5:55:45:6c:e9: cb:8d:05:e0:7b:20:36:3f:3f:04:21:ac:f3:ce:1b: cc:32:98:70:e6:22:df:d8:66:d8:bb:01:2d:10:b8: 01:61:85:5d:40:9a:aa:54:32:83:f4:d4:7d:2c:03: 7f:9a:7e:b8:7b:63:d1:78:b4:e7:83:49:30:4a:58: 04:65:39:a5:98:91:47:4c:99:7d:c9:26:66:37:cb: a2:eb:b5:35:04:86:47:27:d1:d5:f2:59:6f:4d:c9: 38:06:36:ad:12:2c:49:a4:42:21:c4:03:a7:d5:1c: 4e:08:88:0e:57:09:c8:0c:e0:5e:20:ea:89:05:61: d4:50:bb:69:0f:0a:f2:8f:0a:7b:eb:8a:57:93:1d: 04:99:67:36:f3:6a:7a:34:6b:96:bc:6b:c2:eb:ea: 99:93:2f:14:e0:b3:2c:5e:61:0d:47:65:20:8d:42: 35:e2:23:b8:43:fc:9c:f3:e5:ef:a5:80:7f:13:d8: 1f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:E8:28:E9:ED:33:CE:AC:EE:51:64:1D:10:F6:2B:50:32:07:5C:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/ceda3ed4-49e5-373f-b1c9-7344fce724af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/e179ce28-23c7-45e1-9b0e-d90358c94f57.crl X509v3 Authority Key Identifier: keyid:D8:05:C7:2E:26:3F:DA:B8:F5:43:EF:F9:51:95:84:40:1C:9E:F4:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57.cer sbgp-ipAddrBlock: critical IPv6: 2605:cb40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:92:fe:f9:9b:16:a1:22:48:79:c4:a2:6b:d7:97:e6:30:c8: 7d:3b:6b:d8:94:bf:7a:e9:91:7d:76:09:f8:f6:5a:f3:e4:5d: ff:01:14:cf:64:b8:ee:48:03:bc:c2:43:70:00:e0:57:15:0a: 2f:b0:a8:8a:71:59:1a:5b:9a:ab:96:1b:a5:b7:8c:c6:5b:74: 6d:89:28:24:40:56:93:18:a0:0a:f4:83:e2:df:7f:25:3e:b0: cb:ef:28:ba:52:f7:9f:22:da:9a:a7:07:ed:19:ce:a8:cc:6f: aa:4a:2b:b3:bb:56:5f:67:cf:32:f5:fa:19:7d:6f:14:d3:91: 55:19:e5:28:23:9b:ec:99:43:5c:74:0b:3b:ae:40:ea:b9:f8: 93:16:61:b5:6f:d1:bf:77:f7:51:95:16:8b:d6:9e:6a:7e:98: 64:0c:e3:27:74:5b:7a:5a:49:67:a3:af:60:05:46:16:c7:36: 50:3c:78:20:08:c2:5a:d6:0c:9e:f4:cc:dc:b0:16:2d:bc:58: 3c:f3:ca:2e:bb:08:e6:de:10:f8:6e:39:98:2d:48:46:ae:e7: 63:f0:d7:ee:ca:ca:32:88:c6:6c:a6:a0:a5:e1:e9:15:07:8b: 28:a9:3e:0e:aa:fb:dc:69:54:65:56:e3:66:de:9b:6d:01:45: 24:cd:36:fe -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuE54FduC4nnnM8ONAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE3OWNlMjgtMjNjNy00NWUxLTliMGUtZDkwMzU4Yzk0 ZjU3MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk MjgzN2IzYzgtOTFjMi00NjU0LThhMGMtMzM4NTI4ODIyYzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArau9Hk3KOuTiz/UqUJY1NV2bDXEY8lf9aZCf N12zxOaWtwwFpqU6aO5dHzZ7cBIBHNHsgmOlYg79ejHvWdkMcf97cm3HtVVFbOnL jQXgeyA2Pz8EIazzzhvMMphw5iLf2GbYuwEtELgBYYVdQJqqVDKD9NR9LAN/mn64 e2PReLTng0kwSlgEZTmlmJFHTJl9ySZmN8ui67U1BIZHJ9HV8llvTck4BjatEixJ pEIhxAOn1RxOCIgOVwnIDOBeIOqJBWHUULtpDwryjwp764pXkx0EmWc282p6NGuW vGvC6+qZky8U4LMsXmENR2UgjUI14iO4Q/yc8+XvpYB/E9gf6wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFB/oKOntM86s7lFkHRD2K1AyB1xlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMTc5 Y2UyOC0yM2M3LTQ1ZTEtOWIwZS1kOTAzNThjOTRmNTcvY2VkYTNlZDQtNDllNS0z NzNmLWIxYzktNzM0NGZjZTcyNGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTE3OWNlMjgtMjNjNy00NWUxLTli MGUtZDkwMzU4Yzk0ZjU3L2UxNzljZTI4LTIzYzctNDVlMS05YjBlLWQ5MDM1OGM5 NGY1Ny5jcmwwHwYDVR0jBBgwFoAU2AXHLiY/2rj1Q+/5UZWEQBye9GAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lMTc5Y2UyOC0yM2M3LTQ1ZTEtOWIwZS1kOTAz NThjOTRmNTcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXLQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAvkv75mxahIkh5xKJr15fmMMh9O2vYlL966ZF9dgn49lrz5F3/ARTP ZLjuSAO8wkNwAOBXFQovsKiKcVkaW5qrlhult4zGW3RtiSgkQFaTGKAK9IPi338l PrDL7yi6UvefItqapwftGc6ozG+qSiuzu1ZfZ88y9foZfW8U05FVGeUoI5vsmUNc dAs7rkDqufiTFmG1b9G/d/dRlRaL1p5qfphkDOMndFt6Wklno69gBUYWxzZQPHgg CMJa1gye9MzcsBYtvFg888ouuwjm3hD4bjmYLUhGrudj8NfuysoyiMZspqCl4ekV B4soqT4OqvvcaVRlVuNm3pttAUUkzTb+ -----END CERTIFICATE-----Generated at Tue Oct 21 17:57:41 2025 by rpki-client