$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd/c730344e-7e34-3542-b771-2ccda9e850ac.roa File: c730344e-7e34-3542-b771-2ccda9e850ac.roa (raw, json) Hash identifier: u6Xlvu6DCHgWcOVkQK+8pB4v39aSiMvDpYARR+zf/Vc= Subject key identifier: B2:FB:6D:9C:7B:64:C8:16:A6:46:D3:AB:1A:86:78:88:FF:75:BD:D5 Certificate issuer: /CN=2c059c4e-9cb8-45ce-a71c-c3a4cf379edd Certificate serial: 010D0C9F4328584B7C876939A95AE1FA45462E80 Authority key identifier: 53:EC:FD:94:00:6F:F4:F1:6B:A5:58:C8:6E:19:B4:DB:06:1C:5F:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd/c730344e-7e34-3542-b771-2ccda9e850ac.roa Signing time: Sat 11 Oct 2025 13:00:38 +0000 ROA not before: Sat 11 Oct 2025 13:00:38 +0000 ROA not after: Fri 09 Jan 2026 14:00:38 +0000 asID: 11821 IP address blocks: 2604:5d40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7c:87:69:39:a9:5a:e1:fa:45:46:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c059c4e-9cb8-45ce-a71c-c3a4cf379edd Validity Not Before: Oct 11 13:00:38 2025 GMT Not After : Jan 9 14:00:38 2026 GMT Subject: CN=43de4ea8-ed7e-4d56-8773-3d9aedaf8aa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ac:b0:ac:f2:fb:a5:af:84:6b:19:3c:75:3d: db:4b:91:85:09:8a:88:2c:22:2d:25:3c:b8:62:24: e6:59:fb:30:3c:64:0a:1e:9d:d9:00:69:c3:40:4a: c9:b1:3b:ed:9e:5b:9b:97:2a:c2:dd:05:f4:ee:fa: 56:30:2e:6c:db:40:39:15:bc:ee:75:bf:d6:cc:cf: 32:fb:2f:20:3d:66:72:bd:c0:30:93:66:b4:0e:33: 89:e3:9d:ef:87:c3:8c:34:71:e0:ae:da:6a:97:fc: af:9c:b7:b7:61:f7:27:5a:ba:c2:86:61:f3:6a:50: 22:43:23:6e:24:a2:d1:49:e5:f9:25:d7:fa:ae:9b: 8a:cd:0c:2a:d7:62:00:35:3b:09:96:f0:aa:0a:c3: df:a2:67:c4:4e:49:57:c2:2a:5a:19:e8:51:b4:22: cc:44:b3:ad:85:04:7f:4d:35:0a:d9:78:2f:01:32: bc:7d:be:f9:08:8d:f3:69:20:fa:3c:03:39:e5:1e: 1a:ff:4e:84:f6:ed:ed:9f:69:38:50:0b:7c:f8:d2: c4:7e:12:24:05:cd:df:cc:5f:af:da:0f:01:d9:ef: 17:3a:e9:05:c7:9e:e9:5c:8c:b7:59:3e:f8:d7:15: ec:7b:31:96:7c:f2:6d:c8:7c:d0:f8:28:88:9b:16: 28:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:FB:6D:9C:7B:64:C8:16:A6:46:D3:AB:1A:86:78:88:FF:75:BD:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd/c730344e-7e34-3542-b771-2ccda9e850ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd.crl X509v3 Authority Key Identifier: keyid:53:EC:FD:94:00:6F:F4:F1:6B:A5:58:C8:6E:19:B4:DB:06:1C:5F:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd.cer sbgp-ipAddrBlock: critical IPv6: 2604:5d40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:18:b7:7e:d6:5a:0b:d7:57:1c:c7:76:64:3b:82:1c:91:bb: 0e:7d:9f:ac:a6:3d:67:b7:11:d2:39:87:21:e8:fc:a1:08:28: 7f:55:1a:da:76:36:c9:9d:02:fd:18:88:0a:25:9c:74:ae:b9: 22:81:75:3b:9b:26:fc:62:a5:66:e0:9a:bf:c6:f6:67:bd:75: a8:93:4b:5c:54:aa:ee:4f:fc:36:b0:b9:39:4a:12:d8:55:c6: 4a:58:d7:dd:d9:80:d4:44:c3:64:90:da:c6:32:87:59:97:12: 12:90:cd:57:93:db:18:cb:06:73:6b:fc:a8:f2:6b:bb:7c:b6: 4e:6f:6e:0c:2f:48:14:75:47:b3:97:1e:60:f9:75:39:71:59: e7:0d:f7:ca:00:96:85:65:37:18:db:9c:60:cd:2f:6e:9c:a4: 90:2a:48:71:fc:ec:8b:14:38:53:aa:71:e2:6a:31:c1:5f:d0: 0f:09:05:fc:73:e3:e0:41:12:43:b3:db:c9:f8:8f:40:a2:8c: 8e:cb:61:5a:bd:0d:7d:3a:aa:c0:15:b4:b6:f6:25:2d:cf:55: 5f:32:91:05:be:bc:a2:67:5f:47:63:a9:43:7b:a5:af:32:bc: cb:bc:5f:6c:23:4b:b3:4a:17:9d:49:cf:73:2c:3f:38:86:ab: e5:c4:de:9e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt8h2k5qVrh+kVGLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmMwNTljNGUtOWNiOC00NWNlLWE3MWMtYzNhNGNmMzc5 ZWRkMB4XDTI1MTAxMTEzMDAzOFoXDTI2MDEwOTE0MDAzOFowLzEtMCsGA1UEAxMk NDNkZTRlYTgtZWQ3ZS00ZDU2LTg3NzMtM2Q5YWVkYWY4YWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKywrPL7pa+Eaxk8dT3bS5GFCYqILCItJTy4 YiTmWfswPGQKHp3ZAGnDQErJsTvtnlublyrC3QX07vpWMC5s20A5Fbzudb/WzM8y +y8gPWZyvcAwk2a0DjOJ453vh8OMNHHgrtpql/yvnLe3YfcnWrrChmHzalAiQyNu JKLRSeX5Jdf6rpuKzQwq12IANTsJlvCqCsPfomfETklXwipaGehRtCLMRLOthQR/ TTUK2XgvATK8fb75CI3zaSD6PAM55R4a/06E9u3tn2k4UAt8+NLEfhIkBc3fzF+v 2g8B2e8XOukFx57pXIy3WT741xXsezGWfPJtyHzQ+CiImxYodwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLL7bZx7ZMgWpkbTqxqGeIj/db3VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yYzA1 OWM0ZS05Y2I4LTQ1Y2UtYTcxYy1jM2E0Y2YzNzllZGQvYzczMDM0NGUtN2UzNC0z NTQyLWI3NzEtMmNjZGE5ZTg1MGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmMwNTljNGUtOWNiOC00NWNlLWE3 MWMtYzNhNGNmMzc5ZWRkLzJjMDU5YzRlLTljYjgtNDVjZS1hNzFjLWMzYTRjZjM3 OWVkZC5jcmwwHwYDVR0jBBgwFoAUU+z9lABv9PFrpVjIbhm02wYcX1IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yYzA1OWM0ZS05Y2I4LTQ1Y2UtYTcxYy1jM2E0 Y2YzNzllZGQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRdQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBJGLd+1loL11ccx3ZkO4IckbsOfZ+spj1ntxHSOYch6PyhCCh/VRra djbJnQL9GIgKJZx0rrkigXU7myb8YqVm4Jq/xvZnvXWok0tcVKruT/w2sLk5ShLY VcZKWNfd2YDURMNkkNrGModZlxISkM1Xk9sYywZza/yo8mu7fLZOb24ML0gUdUez lx5g+XU5cVnnDffKAJaFZTcY25xgzS9unKSQKkhx/OyLFDhTqnHiajHBX9APCQX8 c+PgQRJDs9vJ+I9AooyOy2FavQ19OqrAFbS29iUtz1VfMpEFvryiZ19HY6lDe6Wv MrzLvF9sI0uzShedSc9zLD84hqvlxN6e -----END CERTIFICATE-----Generated at Mon Oct 20 21:02:55 2025 by rpki-client