$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2f9ba919-b6ef-456f-b272-bb7d311a635a/de35d089-77f9-3823-9f5b-ee26a6b6fdf2.roa File: de35d089-77f9-3823-9f5b-ee26a6b6fdf2.roa (raw, json) Hash identifier: 1mQNiCtnm66RITGS40iE5M0NgPBqxQbDKHV4AmjAm2o= Subject key identifier: 80:A6:17:66:C6:59:80:24:B1:90:64:52:2B:EB:4D:9D:D6:B0:58:5F Certificate issuer: /CN=2f9ba919-b6ef-456f-b272-bb7d311a635a Certificate serial: 010D0C9F4328584B33F19E63A6CE10C2D433EE80 Authority key identifier: CA:51:AF:A4:A5:ED:FA:86:BA:B9:31:B7:3D:41:6E:63:42:A2:EE:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2f9ba919-b6ef-456f-b272-bb7d311a635a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2f9ba919-b6ef-456f-b272-bb7d311a635a/de35d089-77f9-3823-9f5b-ee26a6b6fdf2.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 25769 IP address blocks: 2604:8500::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2f9ba919-b6ef-456f-b272-bb7d311a635a/2f9ba919-b6ef-456f-b272-bb7d311a635a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2f9ba919-b6ef-456f-b272-bb7d311a635a/2f9ba919-b6ef-456f-b272-bb7d311a635a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2f9ba919-b6ef-456f-b272-bb7d311a635a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:9e:63:a6:ce:10:c2:d4:33:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f9ba919-b6ef-456f-b272-bb7d311a635a Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=4f13995f-5500-4da6-8fb6-4f6c8dcf232f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1a:8f:80:d9:db:ba:f0:39:7c:b0:90:5c:fa: 96:49:ce:3f:b9:77:76:73:78:74:48:80:32:10:43: 30:b0:f9:ae:f4:57:4c:48:ed:bd:2f:a2:c4:17:37: 09:f1:41:dc:0c:a4:c9:9b:f6:f9:5b:8b:1f:92:77: 5e:9d:24:73:e1:53:d6:a1:c1:8b:69:20:91:e4:db: af:2a:32:a5:c0:c7:ef:7d:52:6f:69:30:db:8e:14: 50:84:3e:95:c8:c5:33:9c:bd:07:28:37:62:f5:56: da:7c:56:71:3a:ea:38:37:00:e9:e8:00:6c:7e:c1: 87:83:47:bc:3e:96:ec:d0:cf:de:ad:f1:e7:6e:db: 23:95:39:62:3d:ee:7c:2e:f6:39:b7:2b:76:a6:81: 47:6d:53:b1:ed:40:af:62:f1:ad:75:84:be:cc:a0: 1b:8c:03:4b:94:d1:e8:db:37:1f:20:13:fb:47:77: 90:f7:1a:d2:97:dd:b3:51:9e:4c:77:af:ec:c4:b1: a9:b6:33:d0:2d:11:e4:1e:9a:8d:87:8c:ec:69:b4: f4:25:d5:86:c5:28:99:3d:e4:2f:9b:b3:0f:58:0f: 1c:21:87:de:8e:37:c5:f9:32:60:4c:88:c3:76:23: 4f:6b:b3:09:bc:3b:bb:93:c3:9a:a0:56:43:fd:1a: 50:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:A6:17:66:C6:59:80:24:B1:90:64:52:2B:EB:4D:9D:D6:B0:58:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2f9ba919-b6ef-456f-b272-bb7d311a635a/de35d089-77f9-3823-9f5b-ee26a6b6fdf2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2f9ba919-b6ef-456f-b272-bb7d311a635a/2f9ba919-b6ef-456f-b272-bb7d311a635a.crl X509v3 Authority Key Identifier: keyid:CA:51:AF:A4:A5:ED:FA:86:BA:B9:31:B7:3D:41:6E:63:42:A2:EE:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2f9ba919-b6ef-456f-b272-bb7d311a635a.cer sbgp-ipAddrBlock: critical IPv6: 2604:8500::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:e4:b9:a1:a0:64:26:37:44:44:8e:b5:65:5a:7f:ba:b5:5b: 23:ba:89:75:5e:d6:99:8c:25:60:88:f6:f8:13:d6:59:4f:da: d7:05:da:38:41:ae:d1:47:a8:98:f5:8d:6a:5b:4b:4a:ec:9f: 5e:2e:c9:6a:82:2d:ed:30:fe:31:ec:40:ff:d7:03:2a:99:c4: 87:b8:88:04:72:5a:1b:b0:63:ef:27:43:af:65:1f:15:dd:86: 66:68:a3:58:d8:70:f9:23:6f:c1:d9:ae:b6:92:de:99:12:60: 90:25:63:bb:18:4b:80:88:13:6d:2b:e3:b1:b6:01:1d:ec:c6: dd:5b:e3:9b:be:bc:75:86:e7:9a:f1:28:4f:1b:9f:bc:f4:d4: d6:f2:9d:57:4b:77:1d:ff:13:fe:ce:d3:1b:5e:9f:66:d2:3b: 9d:56:2b:79:64:e6:47:b8:1c:c3:e6:99:54:27:19:81:98:7e: da:38:9e:49:71:62:07:a2:1b:0a:91:bd:aa:74:93:5d:24:77: 64:79:33:31:0d:73:90:a9:66:a1:0b:e8:bf:d8:b3:e4:7d:d7: bf:64:a7:8b:2b:cf:92:40:66:48:03:07:d9:2f:bf:73:a8:92: ab:d2:af:21:a1:ed:10:79:3d:ef:b4:5f:db:5c:8e:fb:cc:4a: 79:3e:b8:9d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsz8Z5jps4QwtQz7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmY5YmE5MTktYjZlZi00NTZmLWIyNzItYmI3ZDMxMWE2 MzVhMB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk NGYxMzk5NWYtNTUwMC00ZGE2LThmYjYtNGY2YzhkY2YyMzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxqPgNnbuvA5fLCQXPqWSc4/uXd2c3h0SIAy EEMwsPmu9FdMSO29L6LEFzcJ8UHcDKTJm/b5W4sfkndenSRz4VPWocGLaSCR5Nuv KjKlwMfvfVJvaTDbjhRQhD6VyMUznL0HKDdi9VbafFZxOuo4NwDp6ABsfsGHg0e8 Ppbs0M/erfHnbtsjlTliPe58LvY5tyt2poFHbVOx7UCvYvGtdYS+zKAbjANLlNHo 2zcfIBP7R3eQ9xrSl92zUZ5Md6/sxLGptjPQLRHkHpqNh4zsabT0JdWGxSiZPeQv m7MPWA8cIYfejjfF+TJgTIjDdiNPa7MJvDu7k8OaoFZD/RpQmwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFICmF2bGWYAksZBkUivrTZ3WsFhfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yZjli YTkxOS1iNmVmLTQ1NmYtYjI3Mi1iYjdkMzExYTYzNWEvZGUzNWQwODktNzdmOS0z ODIzLTlmNWItZWUyNmE2YjZmZGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmY5YmE5MTktYjZlZi00NTZmLWIy NzItYmI3ZDMxMWE2MzVhLzJmOWJhOTE5LWI2ZWYtNDU2Zi1iMjcyLWJiN2QzMTFh NjM1YS5jcmwwHwYDVR0jBBgwFoAUylGvpKXt+oa6uTG3PUFuY0Ki7nIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yZjliYTkxOS1iNmVmLTQ1NmYtYjI3Mi1iYjdk MzExYTYzNWEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSFADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCJ5LmhoGQmN0REjrVlWn+6tVsjuol1XtaZjCVgiPb4E9ZZT9rXBdo4 Qa7RR6iY9Y1qW0tK7J9eLslqgi3tMP4x7ED/1wMqmcSHuIgEclobsGPvJ0OvZR8V 3YZmaKNY2HD5I2/B2a62kt6ZEmCQJWO7GEuAiBNtK+OxtgEd7MbdW+Obvrx1huea 8ShPG5+89NTW8p1XS3cd/xP+ztMbXp9m0judVit5ZOZHuBzD5plUJxmBmH7aOJ5J cWIHohsKkb2qdJNdJHdkeTMxDXOQqWahC+i/2LPkfde/ZKeLK8+SQGZIAwfZL79z qJKr0q8hoe0QeT3vtF/bXI77zEp5Prid -----END CERTIFICATE-----Generated at Mon Oct 20 11:06:55 2025 by rpki-client