$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/a0755f26-e416-37e6-985e-75ad1864948a.roa File: a0755f26-e416-37e6-985e-75ad1864948a.roa (raw, json) Hash identifier: 8H/nS2j3zQwXLf/z7bm+7/OaQx7mbWgZNvggehxolZs= Subject key identifier: 5C:2E:03:52:3B:5B:C9:EC:99:67:F4:C1:01:77:C5:B6:E7:79:E5:8D Certificate issuer: /CN=06758d63-ebc2-49b2-b82c-063e47fb7a0f Certificate serial: 010D0C9F4328584BABFD04CEC3CDCB4B2445EF80 Authority key identifier: 11:FE:D6:68:34:3C:F9:A3:DE:8F:AD:F3:20:09:E6:2A:66:47:4E:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/a0755f26-e416-37e6-985e-75ad1864948a.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 36263 IP address blocks: 2606:5cc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/06758d63-ebc2-49b2-b82c-063e47fb7a0f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/06758d63-ebc2-49b2-b82c-063e47fb7a0f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:04:ce:c3:cd:cb:4b:24:45:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06758d63-ebc2-49b2-b82c-063e47fb7a0f Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=47a66da0-e6ee-4c67-8d76-952e1cb0e0e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:da:c7:93:7e:27:46:f9:2c:e2:a2:a5:c5:76: c9:19:c1:05:08:29:a0:11:19:7a:8b:6c:23:46:17: a4:1c:02:e0:84:92:87:e5:b7:9c:cb:32:41:ca:44: 1b:a8:a5:89:cd:fc:b7:08:ec:d8:f4:0e:a4:93:0d: ba:a6:1f:ce:68:11:e5:5d:2c:f1:f0:1c:93:fe:0e: bc:dc:4a:ad:36:0e:37:48:f1:2b:3e:47:eb:36:a0: e9:6e:04:7e:71:a4:1b:32:ff:2c:38:ee:c2:ea:22: b5:6e:28:29:2f:f6:10:c6:0d:4a:6e:4f:a9:c6:90: 38:31:da:7b:8f:59:ae:ba:17:ac:bd:0c:fe:8e:f9: 17:27:ce:18:51:74:90:c3:a0:b3:39:5e:1d:6c:46: 79:27:f8:80:e3:cc:ad:b4:18:9f:c4:83:62:82:9b: 61:f4:73:2b:d6:d7:b3:79:50:57:5c:83:64:50:8e: 69:3b:95:54:ba:a0:d5:8c:a9:08:9e:7a:fb:09:e3: 5e:d0:58:0e:7c:d7:38:3c:aa:6e:0b:05:4f:6b:be: 3f:48:18:f5:cb:e0:64:2a:cc:20:ee:43:79:a6:de: 01:b0:9a:85:a9:2d:75:0c:bb:ea:97:98:44:79:d6: b9:3d:1a:e0:9d:4e:e4:0a:aa:6f:4c:0e:32:b9:86: 9a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:2E:03:52:3B:5B:C9:EC:99:67:F4:C1:01:77:C5:B6:E7:79:E5:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/a0755f26-e416-37e6-985e-75ad1864948a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/06758d63-ebc2-49b2-b82c-063e47fb7a0f.crl X509v3 Authority Key Identifier: keyid:11:FE:D6:68:34:3C:F9:A3:DE:8F:AD:F3:20:09:E6:2A:66:47:4E:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f.cer sbgp-ipAddrBlock: critical IPv6: 2606:5cc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:fa:36:e7:6d:58:8f:c7:11:af:f9:8d:7f:b2:c3:38:4d:ad: 86:7b:d0:a5:7c:07:ac:4f:32:ff:84:f7:11:7e:51:1a:bb:e8: ef:b4:97:2e:fd:ad:81:c9:6e:51:a8:3f:79:f3:4e:4e:7b:ec: d0:81:6f:24:d9:8b:46:64:ee:82:54:2d:5a:2c:83:ad:b8:59: 2c:cf:59:69:ec:97:50:b1:ee:44:5b:06:ea:39:7b:1d:55:7e: a5:bc:e8:8a:bd:22:ee:7b:cc:12:6e:6e:70:8c:9d:5a:6c:a7: bb:1f:bc:0c:a2:20:3a:9c:26:77:df:07:3d:90:45:09:3b:f0: 99:cb:58:96:fd:e6:f7:fd:a8:70:f7:f3:c3:1d:5b:14:9d:65: 86:a3:b2:16:36:17:e9:f1:3e:7c:da:5b:a6:9f:8a:33:59:33: 25:a9:33:b3:52:d2:7d:21:ca:02:53:fd:d7:5b:28:fa:76:d9: 11:b3:3a:fc:c2:0a:20:1d:96:86:4c:8e:e4:02:30:52:dd:9e: 4c:a6:55:71:dc:f5:49:71:d1:b0:cd:3b:dc:b7:0a:f3:ce:c4: 02:50:5b:68:fa:13:c9:44:40:ac:65:f7:be:38:7d:e7:13:de: 0f:22:ff:8e:f7:84:74:52:f9:01:de:0a:6c:96:c5:32:72:92: 32:71:8d:bd -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEur/QTOw83LSyRF74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDY3NThkNjMtZWJjMi00OWIyLWI4MmMtMDYzZTQ3ZmI3 YTBmMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk NDdhNjZkYTAtZTZlZS00YzY3LThkNzYtOTUyZTFjYjBlMGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudrHk34nRvks4qKlxXbJGcEFCCmgERl6i2wj RhekHALghJKH5becyzJBykQbqKWJzfy3COzY9A6kkw26ph/OaBHlXSzx8ByT/g68 3EqtNg43SPErPkfrNqDpbgR+caQbMv8sOO7C6iK1bigpL/YQxg1Kbk+pxpA4Mdp7 j1muuhesvQz+jvkXJ84YUXSQw6CzOV4dbEZ5J/iA48yttBifxINigpth9HMr1tez eVBXXINkUI5pO5VUuqDVjKkInnr7CeNe0FgOfNc4PKpuCwVPa74/SBj1y+BkKswg 7kN5pt4BsJqFqS11DLvql5hEeda5PRrgnU7kCqpvTA4yuYaaKQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFwuA1I7W8nsmWf0wQF3xbbneeWNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wNjc1 OGQ2My1lYmMyLTQ5YjItYjgyYy0wNjNlNDdmYjdhMGYvYTA3NTVmMjYtZTQxNi0z N2U2LTk4NWUtNzVhZDE4NjQ5NDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDY3NThkNjMtZWJjMi00OWIyLWI4 MmMtMDYzZTQ3ZmI3YTBmLzA2NzU4ZDYzLWViYzItNDliMi1iODJjLTA2M2U0N2Zi N2EwZi5jcmwwHwYDVR0jBBgwFoAUEf7WaDQ8+aPej63zIAnmKmZHTpIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wNjc1OGQ2My1lYmMyLTQ5YjItYjgyYy0wNjNl NDdmYjdhMGYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgZcwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAN+jbnbViPxxGv+Y1/ssM4Ta2Ge9ClfAesTzL/hPcRflEau+jvtJcu /a2ByW5RqD95805Oe+zQgW8k2YtGZO6CVC1aLIOtuFksz1lp7JdQse5EWwbqOXsd VX6lvOiKvSLue8wSbm5wjJ1abKe7H7wMoiA6nCZ33wc9kEUJO/CZy1iW/eb3/ahw 9/PDHVsUnWWGo7IWNhfp8T582lumn4ozWTMlqTOzUtJ9IcoCU/3XWyj6dtkRszr8 wgogHZaGTI7kAjBS3Z5MplVx3PVJcdGwzTvctwrzzsQCUFto+hPJRECsZfe+OH3n E94PIv+O94R0UvkB3gpslsUycpIycY29 -----END CERTIFICATE-----Generated at Wed Nov 5 17:49:52 2025 by rpki-client