$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/0dd1b67f-6f9c-3a93-8f23-530df7b813a8.roa File: 0dd1b67f-6f9c-3a93-8f23-530df7b813a8.roa (raw, json) Hash identifier: 3XLvy6koBnl1sqbEhAW87Sxeck7IH5/CqfQqL7ZOnu8= Subject key identifier: F8:22:B4:B1:AC:45:97:F1:12:28:F2:10:A2:E2:4D:4D:EC:BC:B1:F3 Certificate issuer: /CN=06758d63-ebc2-49b2-b82c-063e47fb7a0f Certificate serial: 010D0C9F4328584BABFD04BBC68B65890CDC0D80 Authority key identifier: 11:FE:D6:68:34:3C:F9:A3:DE:8F:AD:F3:20:09:E6:2A:66:47:4E:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/0dd1b67f-6f9c-3a93-8f23-530df7b813a8.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 3356 IP address blocks: 2606:5cc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/06758d63-ebc2-49b2-b82c-063e47fb7a0f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/06758d63-ebc2-49b2-b82c-063e47fb7a0f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:04:bb:c6:8b:65:89:0c:dc:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06758d63-ebc2-49b2-b82c-063e47fb7a0f Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=0912e3d3-72ce-48f5-a8af-a26acc8a12b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8b:1b:c9:ba:e1:ae:6d:ab:2f:7c:60:47:10: cb:72:2d:13:c4:4e:b8:2e:21:e2:dd:e6:42:78:cc: 05:74:e7:7e:b5:d0:5a:a8:b6:45:e0:1b:6f:8f:72: 6c:8f:0d:de:fc:96:29:31:97:9f:f2:f2:b3:94:8a: 57:eb:2e:03:68:0c:ba:5e:8e:5b:c1:a2:47:f6:ea: 5d:1d:43:e9:28:68:9e:73:37:ab:d1:cb:8b:8a:fa: 9f:dc:0d:74:c8:76:ac:d1:22:a2:3b:be:89:9e:f8: a7:10:33:15:79:25:8e:7b:ce:3d:c2:2d:f2:30:06: bb:4d:de:27:c4:4d:65:3e:10:28:fb:22:79:82:3a: 70:92:c2:82:f3:c7:ea:17:a0:57:6a:dd:b6:30:27: b0:0f:3c:fe:cf:6c:e8:6c:f4:22:e0:c3:33:33:a0: 89:7a:72:46:4a:08:55:a2:59:9c:ce:2d:74:9c:a4: 5c:18:84:66:78:f2:f2:e5:4b:5a:57:dc:9e:78:f7: d6:83:21:b5:aa:73:de:a9:b8:e8:71:16:f4:64:19: e9:8b:64:c7:40:f5:09:44:6d:ed:fe:0f:b2:9d:48: 4a:4d:68:df:15:5f:26:94:68:e3:d9:6a:70:eb:fd: 8a:1e:dd:98:ba:69:09:fc:d6:a1:2c:53:af:5a:b9: 1f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:22:B4:B1:AC:45:97:F1:12:28:F2:10:A2:E2:4D:4D:EC:BC:B1:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/0dd1b67f-6f9c-3a93-8f23-530df7b813a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/06758d63-ebc2-49b2-b82c-063e47fb7a0f.crl X509v3 Authority Key Identifier: keyid:11:FE:D6:68:34:3C:F9:A3:DE:8F:AD:F3:20:09:E6:2A:66:47:4E:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f.cer sbgp-ipAddrBlock: critical IPv6: 2606:5cc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:03:f5:2c:ef:32:70:4c:a5:64:8a:dc:54:ba:22:96:3e:ce: af:66:eb:45:9c:97:0c:94:50:6a:27:0a:bf:6c:48:95:c6:dc: 3f:55:58:ba:bb:29:5b:bd:1c:ad:2d:63:e4:02:38:89:06:bc: 35:75:01:b3:2a:36:0f:46:dd:33:97:f1:1d:e3:64:58:8a:54: 8d:29:3b:65:f0:32:bd:29:a6:85:c8:c2:c9:27:8f:b2:cb:92: 4a:e6:e3:88:94:df:b1:13:a0:e3:3e:42:1e:5b:78:b1:39:1b: 5c:eb:de:3f:94:51:6f:ea:fd:d2:df:39:89:ce:2b:05:dc:39: 28:d4:15:45:14:8f:60:35:f3:74:71:21:ec:e6:db:bf:5e:38: 85:4a:4a:38:57:64:d4:39:a2:4c:6d:52:ab:d6:63:d2:2a:69: a3:4f:6d:c3:ed:e4:bc:6f:fd:10:e7:13:20:f6:2e:ea:15:37: 1b:54:a3:bc:91:0b:fa:7b:72:79:ac:79:a7:16:73:db:a7:4b: 08:2f:1f:51:23:c8:ae:15:ba:69:2f:42:50:00:70:e9:f3:9a: 53:58:33:eb:78:cc:0e:80:ad:46:20:47:1e:ed:76:94:e8:fd: d7:27:c0:cf:e7:a5:af:ec:cd:b3:c0:23:50:fe:e2:94:73:2c: 6e:eb:77:9e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEur/QS7xotliQzcDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDY3NThkNjMtZWJjMi00OWIyLWI4MmMtMDYzZTQ3ZmI3 YTBmMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk MDkxMmUzZDMtNzJjZS00OGY1LWE4YWYtYTI2YWNjOGExMmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4sbybrhrm2rL3xgRxDLci0TxE64LiHi3eZC eMwFdOd+tdBaqLZF4Btvj3Jsjw3e/JYpMZef8vKzlIpX6y4DaAy6Xo5bwaJH9upd HUPpKGieczer0cuLivqf3A10yHas0SKiO76JnvinEDMVeSWOe849wi3yMAa7Td4n xE1lPhAo+yJ5gjpwksKC88fqF6BXat22MCewDzz+z2zobPQi4MMzM6CJenJGSghV olmczi10nKRcGIRmePLy5UtaV9yeePfWgyG1qnPeqbjocRb0ZBnpi2THQPUJRG3t /g+ynUhKTWjfFV8mlGjj2Wpw6/2KHt2YumkJ/NahLFOvWrkf1wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPgitLGsRZfxEijyEKLiTU3svLHzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wNjc1 OGQ2My1lYmMyLTQ5YjItYjgyYy0wNjNlNDdmYjdhMGYvMGRkMWI2N2YtNmY5Yy0z YTkzLThmMjMtNTMwZGY3YjgxM2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDY3NThkNjMtZWJjMi00OWIyLWI4 MmMtMDYzZTQ3ZmI3YTBmLzA2NzU4ZDYzLWViYzItNDliMi1iODJjLTA2M2U0N2Zi N2EwZi5jcmwwHwYDVR0jBBgwFoAUEf7WaDQ8+aPej63zIAnmKmZHTpIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wNjc1OGQ2My1lYmMyLTQ5YjItYjgyYy0wNjNl NDdmYjdhMGYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgZcwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBaA/Us7zJwTKVkitxUuiKWPs6vZutFnJcMlFBqJwq/bEiVxtw/VVi6 uylbvRytLWPkAjiJBrw1dQGzKjYPRt0zl/Ed42RYilSNKTtl8DK9KaaFyMLJJ4+y y5JK5uOIlN+xE6DjPkIeW3ixORtc694/lFFv6v3S3zmJzisF3Dko1BVFFI9gNfN0 cSHs5tu/XjiFSko4V2TUOaJMbVKr1mPSKmmjT23D7eS8b/0Q5xMg9i7qFTcbVKO8 kQv6e3J5rHmnFnPbp0sILx9RI8iuFbppL0JQAHDp85pTWDPreMwOgK1GIEce7XaU 6P3XJ8DP56Wv7M2zwCNQ/uKUcyxu63ee -----END CERTIFICATE-----Generated at Tue Nov 4 23:01:37 2025 by rpki-client