$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/3eeee4d3-e250-340d-9b70-0dfe3a06b37d.roa File: 3eeee4d3-e250-340d-9b70-0dfe3a06b37d.roa (raw, json) Hash identifier: iUzcpRuhpEOYYxe4vR28ERg/Yvfpd2YiOhRIjsT0l0U= Subject key identifier: D5:87:01:24:87:A9:35:B7:28:A7:E8:46:90:7A:91:A0:67:07:E5:DA Certificate issuer: /CN=ebff2bbd-fab0-4f48-a625-d53c63f1bbe6 Certificate serial: 010D0C9F4328584B7B21F066532B50075D95B880 Authority key identifier: 43:DE:DC:F8:9F:C5:8D:6E:3C:61:F8:80:3F:72:0E:D5:0C:74:A6:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/3eeee4d3-e250-340d-9b70-0dfe3a06b37d.roa Signing time: Sat 11 Oct 2025 01:00:30 +0000 ROA not before: Sat 11 Oct 2025 01:00:30 +0000 ROA not after: Fri 09 Jan 2026 02:00:30 +0000 asID: 18604 IP address blocks: 2604:1a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7b:21:f0:66:53:2b:50:07:5d:95:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebff2bbd-fab0-4f48-a625-d53c63f1bbe6 Validity Not Before: Oct 11 01:00:30 2025 GMT Not After : Jan 9 02:00:30 2026 GMT Subject: CN=819010d0-69fa-4d31-b276-a3beda6ca72a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:8c:5c:6f:72:63:ff:54:35:97:6d:17:aa:3b: 9b:3b:6a:0b:f4:db:22:18:84:cf:fa:33:48:e5:39: fb:e5:7b:39:42:bd:18:a0:45:41:7b:f4:f7:6d:20: f5:29:06:bc:73:e1:4b:d1:c5:ff:e3:15:97:08:2b: 3d:5b:2c:86:68:a2:48:d8:09:ef:cf:2c:5b:66:f3: 91:de:65:8d:92:13:be:41:a5:c0:98:c4:71:06:24: d5:0a:2c:1c:77:15:da:0d:1f:97:ff:4e:89:66:a4: a2:62:c6:6b:c1:ed:b7:e6:15:3d:1c:ee:86:0e:46: fa:8f:ee:70:5d:b7:fd:1e:d4:be:fc:77:21:3c:18: 7a:c3:0f:f7:03:f7:42:76:b9:ca:bb:63:d3:71:5d: 90:1f:b9:39:86:10:b4:9f:21:15:76:1a:7d:06:c5: a4:f3:96:32:2d:50:c8:f9:18:b3:5a:67:67:9b:de: 57:aa:35:37:27:27:07:5e:c2:e3:ee:ff:65:4b:54: e9:74:38:ab:ec:c9:22:56:e9:bc:1a:61:e8:d5:88: d9:94:17:bc:8f:38:6a:77:fd:e8:a6:a2:59:e2:0e: e6:3d:74:ff:a0:89:5c:72:7b:f7:5a:7b:01:01:7f: 59:d6:17:aa:e7:9e:e4:cb:9d:04:33:72:0a:5c:d1: 00:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:87:01:24:87:A9:35:B7:28:A7:E8:46:90:7A:91:A0:67:07:E5:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/3eeee4d3-e250-340d-9b70-0dfe3a06b37d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.crl X509v3 Authority Key Identifier: keyid:43:DE:DC:F8:9F:C5:8D:6E:3C:61:F8:80:3F:72:0E:D5:0C:74:A6:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebff2bbd-fab0-4f48-a625-d53c63f1bbe6.cer sbgp-ipAddrBlock: critical IPv6: 2604:1a0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:25:0f:f9:3f:11:a6:9a:74:60:3a:97:e2:e4:a1:79:40:6b: 52:0a:f4:84:7c:87:85:27:7d:2a:79:f4:b5:fa:c6:cb:ec:28: 4e:9a:d4:4b:8e:55:fd:ef:2e:ee:cd:66:33:43:d2:4b:6b:b2: c6:ab:11:15:14:e8:7c:56:b1:4c:10:78:6e:f3:8c:43:ea:a9: 35:9d:ce:84:c9:e9:60:41:ed:9c:9a:ec:74:89:77:c0:7f:fe: e7:d7:f5:62:c7:59:1e:0f:7a:7e:a8:69:75:62:dc:7b:8d:4f: ff:50:2c:71:e3:89:11:64:fc:05:63:8e:5f:d2:ee:31:62:ae: 15:9d:1d:aa:76:d1:4a:2a:b1:12:76:ee:53:c1:64:67:8b:49: 41:8b:cc:66:76:23:50:4d:cd:0d:9c:f6:3a:ee:45:09:b4:1e: d9:da:8c:e5:b4:dd:74:d9:27:7d:48:f3:bb:70:88:59:67:46: 5d:aa:72:52:23:23:14:15:c9:dc:a0:cc:c0:a8:eb:78:01:cb: a9:93:6b:d6:9c:ae:95:89:56:a3:b9:b7:4b:2f:cc:4b:40:3b: 5f:0f:23:c1:4c:a6:fe:8c:06:f8:fb:7c:68:52:d9:e4:5e:84: 37:24:70:9c:35:85:60:aa:5d:bb:7a:4a:dc:26:ce:8c:45:dd: 4c:e7:aa:74 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt7IfBmUytQB12VuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJmZjJiYmQtZmFiMC00ZjQ4LWE2MjUtZDUzYzYzZjFi YmU2MB4XDTI1MTAxMTAxMDAzMFoXDTI2MDEwOTAyMDAzMFowLzEtMCsGA1UEAxMk ODE5MDEwZDAtNjlmYS00ZDMxLWIyNzYtYTNiZWRhNmNhNzJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYxcb3Jj/1Q1l20XqjubO2oL9NsiGITP+jNI 5Tn75Xs5Qr0YoEVBe/T3bSD1KQa8c+FL0cX/4xWXCCs9WyyGaKJI2AnvzyxbZvOR 3mWNkhO+QaXAmMRxBiTVCiwcdxXaDR+X/06JZqSiYsZrwe235hU9HO6GDkb6j+5w Xbf9HtS+/HchPBh6ww/3A/dCdrnKu2PTcV2QH7k5hhC0nyEVdhp9BsWk85YyLVDI +RizWmdnm95XqjU3JycHXsLj7v9lS1TpdDir7MkiVum8GmHo1YjZlBe8jzhqd/3o pqJZ4g7mPXT/oIlccnv3WnsBAX9Z1heq557ky50EM3IKXNEALwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNWHASSHqTW3KKfoRpB6kaBnB+XaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lYmZm MmJiZC1mYWIwLTRmNDgtYTYyNS1kNTNjNjNmMWJiZTYvM2VlZWU0ZDMtZTI1MC0z NDBkLTliNzAtMGRmZTNhMDZiMzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZWJmZjJiYmQtZmFiMC00ZjQ4LWE2 MjUtZDUzYzYzZjFiYmU2L2ViZmYyYmJkLWZhYjAtNGY0OC1hNjI1LWQ1M2M2M2Yx YmJlNi5jcmwwHwYDVR0jBBgwFoAUQ97c+J/FjW48YfiAP3IO1Qx0ppMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9lYmZmMmJiZC1mYWIwLTRmNDgtYTYyNS1kNTNj NjNmMWJiZTYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQBoDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAwJQ/5PxGmmnRgOpfi5KF5QGtSCvSEfIeFJ30qefS1+sbL7ChOmtRL jlX97y7uzWYzQ9JLa7LGqxEVFOh8VrFMEHhu84xD6qk1nc6EyelgQe2cmux0iXfA f/7n1/Vix1keD3p+qGl1Ytx7jU//UCxx44kRZPwFY45f0u4xYq4VnR2qdtFKKrES du5TwWRni0lBi8xmdiNQTc0NnPY67kUJtB7Z2ozltN102Sd9SPO7cIhZZ0ZdqnJS IyMUFcncoMzAqOt4Acupk2vWnK6ViVajubdLL8xLQDtfDyPBTKb+jAb4+3xoUtnk XoQ3JHCcNYVgql27ekrcJs6MRd1M56p0 -----END CERTIFICATE-----Generated at Tue Oct 21 05:10:51 2025 by rpki-client