$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/f433861e-ef73-3c5a-a3a5-e7ba5578687c.roa File: f433861e-ef73-3c5a-a3a5-e7ba5578687c.roa (raw, json) Hash identifier: 7JAMtRKtTLR2nDG+LLPZ4QDuo5WZQ5KRQQ+rwYfoeVE= Subject key identifier: 67:66:51:8F:18:44:9E:F4:C2:2F:46:AD:73:E1:74:E8:6D:A2:B1:98 Certificate issuer: /CN=d31a463c-a0cd-410a-8aab-0fadfe97c69f Certificate serial: 010D0C9F4328584B9442296681E0C3AAFDDAAB00 Authority key identifier: 13:76:8A:28:97:A6:DD:B7:51:AA:5A:58:D3:DE:DA:76:AC:DA:66:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/f433861e-ef73-3c5a-a3a5-e7ba5578687c.roa Signing time: Mon 20 Oct 2025 01:00:31 +0000 ROA not before: Mon 20 Oct 2025 01:00:31 +0000 ROA not after: Sun 18 Jan 2026 02:00:31 +0000 asID: 25635 IP address blocks: 2605:5640::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/d31a463c-a0cd-410a-8aab-0fadfe97c69f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/d31a463c-a0cd-410a-8aab-0fadfe97c69f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:42:29:66:81:e0:c3:aa:fd:da:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d31a463c-a0cd-410a-8aab-0fadfe97c69f Validity Not Before: Oct 20 01:00:31 2025 GMT Not After : Jan 18 02:00:31 2026 GMT Subject: CN=5b57e53b-1b0e-4a69-bcef-d0096dd36de7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:92:ea:db:87:b7:b5:7e:c7:9b:41:1b:e0:4d: 0d:4e:82:4a:09:c5:74:10:af:3f:29:44:2d:05:00: 2f:30:32:8b:60:d7:bc:ce:13:0c:5f:c2:1b:51:60: 33:58:df:d7:73:8d:d8:3e:25:3e:f0:2a:50:51:a7: 09:df:f8:28:2e:e1:55:72:4b:6a:e0:04:2d:94:a9: ef:a2:22:ce:ba:ad:c8:87:24:20:18:f0:3a:03:35: 0a:28:8e:84:38:96:69:74:51:da:6d:cc:b3:b0:10: c4:1a:b1:c9:71:e0:41:ef:09:28:a5:58:71:ea:16: 82:97:9e:51:07:28:9b:bc:e6:69:18:9e:af:f2:cb: a2:20:59:10:16:ab:3b:d5:18:fd:d9:36:f9:67:bd: 97:ca:03:d5:cc:a0:67:89:61:3b:48:21:c0:56:06: cd:f6:66:f6:4e:f1:b4:8d:d4:d5:1e:7b:f3:0d:f3: 42:6b:fd:e1:f9:2e:0d:d5:21:73:c2:a1:31:84:28: d0:0b:66:45:23:cc:ff:4e:c6:4e:65:a5:ec:fc:4e: f4:92:46:07:16:21:62:5e:eb:8d:aa:07:c4:2c:40: f8:82:38:0f:55:07:77:30:29:17:c2:22:c6:c6:e9: e2:43:60:a0:ff:ec:32:92:3f:59:24:b1:fe:20:5c: 04:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:66:51:8F:18:44:9E:F4:C2:2F:46:AD:73:E1:74:E8:6D:A2:B1:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/f433861e-ef73-3c5a-a3a5-e7ba5578687c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/d31a463c-a0cd-410a-8aab-0fadfe97c69f.crl X509v3 Authority Key Identifier: keyid:13:76:8A:28:97:A6:DD:B7:51:AA:5A:58:D3:DE:DA:76:AC:DA:66:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f.cer sbgp-ipAddrBlock: critical IPv6: 2605:5640::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:4e:03:9b:9a:c8:8a:97:da:91:b4:3d:2f:29:b5:01:83:a4: a9:4b:de:83:eb:c9:bd:7a:e4:59:72:b2:c9:51:d9:78:3d:c2: ce:9c:af:6b:30:2d:de:fc:b6:0a:d2:02:e9:a6:11:87:0b:9e: 3d:3f:49:91:07:ab:98:e6:71:2c:fe:65:62:71:92:7c:cb:f0: 5e:d1:45:ce:e6:d0:80:4a:2f:8f:9a:95:f3:0f:de:fd:b1:5c: aa:7f:a7:60:f3:ad:e1:81:63:7a:4d:18:d4:63:2b:c1:6c:53: 9c:a1:d8:de:d9:5e:16:17:23:25:6b:c5:e7:63:90:15:66:88: 32:be:a8:27:9b:00:19:08:5d:3b:1d:68:4a:62:6c:8e:36:06: 4a:8a:a9:2e:a4:6b:be:54:8f:30:c8:ae:f4:f7:b2:c6:e7:4d: a3:e4:a8:cb:13:dd:ea:e5:df:eb:8a:ac:50:2b:48:95:ec:8c: 29:ff:d5:d9:f9:ad:28:97:08:19:31:fa:57:1f:ac:ff:43:8e: 14:05:13:65:7f:26:8c:21:0a:f1:26:5e:07:c5:a8:0e:cb:60: 5d:8f:2c:c4:d0:d8:e6:b5:67:83:7e:3b:28:38:9d:c2:70:5c: 8f:7a:5a:2e:b9:e7:5c:66:f2:16:b0:56:a6:9f:6b:24:07:f8: 13:88:fb:58 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuUQilmgeDDqv3aqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDMxYTQ2M2MtYTBjZC00MTBhLThhYWItMGZhZGZlOTdj NjlmMB4XDTI1MTAyMDAxMDAzMVoXDTI2MDExODAyMDAzMVowLzEtMCsGA1UEAxMk NWI1N2U1M2ItMWIwZS00YTY5LWJjZWYtZDAwOTZkZDM2ZGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJLq24e3tX7Hm0Eb4E0NToJKCcV0EK8/KUQt BQAvMDKLYNe8zhMMX8IbUWAzWN/Xc43YPiU+8CpQUacJ3/goLuFVcktq4AQtlKnv oiLOuq3IhyQgGPA6AzUKKI6EOJZpdFHabcyzsBDEGrHJceBB7wkopVhx6haCl55R ByibvOZpGJ6v8suiIFkQFqs71Rj92Tb5Z72XygPVzKBniWE7SCHAVgbN9mb2TvG0 jdTVHnvzDfNCa/3h+S4N1SFzwqExhCjQC2ZFI8z/TsZOZaXs/E70kkYHFiFiXuuN qgfELED4gjgPVQd3MCkXwiLGxuniQ2Cg/+wykj9ZJLH+IFwEzQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGdmUY8YRJ70wi9GrXPhdOhtorGYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kMzFh NDYzYy1hMGNkLTQxMGEtOGFhYi0wZmFkZmU5N2M2OWYvZjQzMzg2MWUtZWY3My0z YzVhLWEzYTUtZTdiYTU1Nzg2ODdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDMxYTQ2M2MtYTBjZC00MTBhLThh YWItMGZhZGZlOTdjNjlmL2QzMWE0NjNjLWEwY2QtNDEwYS04YWFiLTBmYWRmZTk3 YzY5Zi5jcmwwHwYDVR0jBBgwFoAUE3aKKJem3bdRqlpY097adqzaZmMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kMzFhNDYzYy1hMGNkLTQxMGEtOGFhYi0wZmFk ZmU5N2M2OWYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgVWQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBCTgObmsiKl9qRtD0vKbUBg6SpS96D68m9euRZcrLJUdl4PcLOnK9r MC3e/LYK0gLpphGHC549P0mRB6uY5nEs/mVicZJ8y/Be0UXO5tCASi+PmpXzD979 sVyqf6dg863hgWN6TRjUYyvBbFOcodje2V4WFyMla8XnY5AVZogyvqgnmwAZCF07 HWhKYmyONgZKiqkupGu+VI8wyK7097LG502j5KjLE93q5d/riqxQK0iV7Iwp/9XZ +a0olwgZMfpXH6z/Q44UBRNlfyaMIQrxJl4HxagOy2BdjyzE0NjmtWeDfjsoOJ3C cFyPelouuedcZvIWsFamn2skB/gTiPtY -----END CERTIFICATE-----Generated at Mon Oct 20 21:03:10 2025 by rpki-client