$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/3d8645fc-35c8-35da-ac88-7a4e41c4bf61.roa File: 3d8645fc-35c8-35da-ac88-7a4e41c4bf61.roa (raw, json) Hash identifier: R20W0N+NhRmJgd98nLL7OJeExf65r2AQouhU0DigwiE= Subject key identifier: CD:C8:07:E2:1E:00:C3:4A:20:E6:9D:4F:A5:B1:22:87:E1:6D:62:57 Certificate issuer: /CN=1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f Certificate serial: 010D0C9F4328584B8BE223224430E2660BD36E40 Authority key identifier: B7:57:F9:6B:5B:30:14:07:9A:7E:C9:8B:1D:DE:34:96:DD:EE:A8:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/3d8645fc-35c8-35da-ac88-7a4e41c4bf61.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 19518 IP address blocks: 2605:1500::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:23:22:44:30:e2:66:0b:d3:6e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=c61c3d8a-1735-417f-bc70-0b9404bcd081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f1:99:e9:73:af:3b:ce:20:1b:75:6f:3e:c3: df:e0:19:f7:8c:61:b1:6d:01:1e:1f:f3:f3:33:82: 30:47:b8:3f:27:b6:1f:63:89:9f:63:54:d3:63:b7: fb:b0:09:f3:64:9d:b1:ec:63:7b:e2:df:45:f4:e5: db:51:b5:84:01:8e:bd:76:65:ce:b3:99:d5:3b:81: f7:c2:40:78:ae:a0:66:2c:e6:a8:91:94:39:e7:8b: b6:31:36:89:29:53:2f:be:64:af:eb:1d:c3:bd:42: f5:30:b7:60:a2:b9:1f:e5:03:0a:7a:3f:0a:2f:25: 2c:04:f5:a9:eb:81:12:3c:3a:c8:da:6f:67:85:e7: 7e:89:2c:84:e0:30:1e:64:50:27:dc:2e:27:85:9b: 15:f6:34:e1:4a:97:b6:be:38:1c:c4:ee:ea:31:b3: 73:42:d2:25:fc:10:04:20:f2:d7:1a:01:b1:3b:32: 3a:9a:bd:9c:e5:b8:8f:d0:4c:b8:08:1e:1e:a7:0d: a1:b3:58:19:59:86:0d:61:b6:d4:6d:ff:0a:80:79: 31:62:ce:4e:c8:e4:1e:61:c3:34:b4:d8:5f:30:f5: 6f:e5:27:e8:f2:85:e3:ba:8d:6f:e1:a4:aa:49:11: 91:ba:fb:bc:b6:6c:ca:6e:92:6f:88:2a:f4:b9:33: 00:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:C8:07:E2:1E:00:C3:4A:20:E6:9D:4F:A5:B1:22:87:E1:6D:62:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/3d8645fc-35c8-35da-ac88-7a4e41c4bf61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.crl X509v3 Authority Key Identifier: keyid:B7:57:F9:6B:5B:30:14:07:9A:7E:C9:8B:1D:DE:34:96:DD:EE:A8:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.cer sbgp-ipAddrBlock: critical IPv6: 2605:1500::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:db:ad:3d:7e:8a:be:6c:34:6e:4d:6e:9d:11:97:24:c9:80: 13:b3:74:27:2c:a4:f4:e3:a1:3f:32:54:51:12:e5:71:c0:f9: 39:b7:48:f7:42:b6:39:1c:ad:ba:8d:a5:0f:66:7a:9d:39:b5: 74:4c:5c:83:d5:c8:a7:17:90:d3:6e:17:50:78:df:3f:46:6a: e2:61:dc:0b:bc:33:09:8d:e3:d7:db:f5:f5:99:49:f5:0c:10: d5:62:b6:d1:73:9a:ce:e2:65:78:29:3d:c3:b3:15:92:f6:db: cd:4e:3b:bd:bd:8d:02:9e:3a:45:28:f0:1e:02:00:c0:3c:f0: 0c:32:9a:24:62:fd:5f:2d:5d:b3:89:e6:84:e4:5c:45:62:d2: 84:00:96:12:af:c8:ff:5a:63:90:ba:7c:51:fe:4b:6d:29:cc: 25:41:f2:e9:09:aa:1b:d8:06:c8:d8:0c:c9:f0:5b:ae:15:b7: 05:b0:1b:46:0a:e3:48:e6:a2:a5:d0:c0:f7:e0:f4:05:3f:ae: be:14:db:54:e3:f0:bb:4c:2f:79:ae:c0:4c:15:67:cf:ba:4d: 3b:a7:f3:91:dc:14:fd:4a:4a:c9:84:b8:60:31:c4:1c:31:f7: ee:0c:12:36:a9:5a:2a:37:2d:3c:6e:1d:87:0b:2f:a4:c2:b4: 87:5f:75:6e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuL4iMiRDDiZgvTbkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWJkOTViYjYtZjhlNi00ZDY2LThkN2ItZDVhMzQyYjM1 ODdmMB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk YzYxYzNkOGEtMTczNS00MTdmLWJjNzAtMGI5NDA0YmNkMDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfGZ6XOvO84gG3VvPsPf4Bn3jGGxbQEeH/Pz M4IwR7g/J7YfY4mfY1TTY7f7sAnzZJ2x7GN74t9F9OXbUbWEAY69dmXOs5nVO4H3 wkB4rqBmLOaokZQ554u2MTaJKVMvvmSv6x3DvUL1MLdgorkf5QMKej8KLyUsBPWp 64ESPDrI2m9nhed+iSyE4DAeZFAn3C4nhZsV9jThSpe2vjgcxO7qMbNzQtIl/BAE IPLXGgGxOzI6mr2c5biP0Ey4CB4epw2hs1gZWYYNYbbUbf8KgHkxYs5OyOQeYcM0 tNhfMPVv5Sfo8oXjuo1v4aSqSRGRuvu8tmzKbpJviCr0uTMAowIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFM3IB+IeAMNKIOadT6WxIofhbWJXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYmQ5 NWJiNi1mOGU2LTRkNjYtOGQ3Yi1kNWEzNDJiMzU4N2YvM2Q4NjQ1ZmMtMzVjOC0z NWRhLWFjODgtN2E0ZTQxYzRiZjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWJkOTViYjYtZjhlNi00ZDY2LThk N2ItZDVhMzQyYjM1ODdmLzFiZDk1YmI2LWY4ZTYtNGQ2Ni04ZDdiLWQ1YTM0MmIz NTg3Zi5jcmwwHwYDVR0jBBgwFoAUt1f5a1swFAeafsmLHd40lt3uqFAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYmQ5NWJiNi1mOGU2LTRkNjYtOGQ3Yi1kNWEz NDJiMzU4N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgUVADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBu2609foq+bDRuTW6dEZckyYATs3QnLKT046E/MlRREuVxwPk5t0j3 QrY5HK26jaUPZnqdObV0TFyD1cinF5DTbhdQeN8/RmriYdwLvDMJjePX2/X1mUn1 DBDVYrbRc5rO4mV4KT3DsxWS9tvNTju9vY0CnjpFKPAeAgDAPPAMMpokYv1fLV2z ieaE5FxFYtKEAJYSr8j/WmOQunxR/kttKcwlQfLpCaob2AbI2AzJ8FuuFbcFsBtG CuNI5qKl0MD34PQFP66+FNtU4/C7TC95rsBMFWfPuk07p/OR3BT9SkrJhLhgMcQc MffuDBI2qVoqNy08bh2HCy+kwrSHX3Vu -----END CERTIFICATE-----Generated at Tue Oct 21 04:44:48 2025 by rpki-client