$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/c9f8d48a-c9f1-3ad8-a2b9-48e540a2f909.roa File: c9f8d48a-c9f1-3ad8-a2b9-48e540a2f909.roa (raw, json) Hash identifier: uySth1E2o2VIfzdqEES8P0ZCS0d09xnGx4Z1xi2B/Q0= Subject key identifier: 1C:E0:88:A9:E7:59:99:5F:32:4D:3A:54:44:97:B4:D2:88:53:FE:EC Certificate issuer: /CN=311f19cc-344e-48c5-a1f1-47593aa56b0d Certificate serial: 010D0C9F4328584BBE402B3AD069582B8D017BC0 Authority key identifier: 4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/c9f8d48a-c9f1-3ad8-a2b9-48e540a2f909.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 6939 IP address blocks: 2604:ebc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:2b:3a:d0:69:58:2b:8d:01:7b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=311f19cc-344e-48c5-a1f1-47593aa56b0d Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=769bb357-59d4-4ccc-9112-eed51bb16458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d7:f5:37:16:98:8d:ff:cc:bd:39:06:08:26: d6:e9:a2:28:ef:0a:9c:b6:a5:cf:cc:50:16:fc:92: c3:9c:de:b0:eb:e5:be:a4:7f:3f:28:27:77:ff:8e: d8:6e:0c:53:1a:3c:69:00:be:97:b3:7d:ca:70:56: 3e:ab:e4:be:1f:6c:17:1e:67:4e:01:31:05:35:5f: a9:e7:25:c6:fe:c2:45:8c:d7:55:20:5d:87:b3:b5: 59:12:20:e9:89:18:cd:f9:30:9e:c4:5b:fa:38:91: b2:92:a6:21:bb:9a:fd:a7:fe:aa:55:ce:8c:54:5f: 6f:6b:db:ac:d0:9d:46:73:d4:fa:a3:32:0f:ac:ef: d8:dd:53:65:ac:2c:c6:1a:b0:b8:a0:0d:c1:38:83: e8:72:a2:2a:42:24:ef:25:52:b5:0d:60:83:30:94: aa:bd:9c:37:66:d4:d1:d7:99:8c:61:e3:81:13:d7: 1f:38:96:a8:91:48:2f:87:ee:35:2e:8a:f5:c3:c6: d1:b8:b7:64:02:f3:4a:3a:c8:4b:e2:08:00:91:46: ba:68:a6:bd:1f:ff:d0:c5:a4:24:f5:2d:3e:90:3f: 18:9e:a4:14:61:d9:1d:16:c1:c4:8d:66:88:4d:6c: 76:b2:0a:5e:fb:24:af:72:5c:85:fa:18:b0:e2:66: c0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:E0:88:A9:E7:59:99:5F:32:4D:3A:54:44:97:B4:D2:88:53:FE:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/c9f8d48a-c9f1-3ad8-a2b9-48e540a2f909.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl X509v3 Authority Key Identifier: keyid:4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer sbgp-ipAddrBlock: critical IPv6: 2604:ebc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:e4:12:1d:50:b9:08:2c:cd:9a:6a:49:d8:b7:45:78:31:6a: 9a:96:2d:9d:3c:95:f3:21:c0:34:b0:57:49:1b:4c:6a:d4:91: ed:47:de:c2:f3:b1:83:cb:fd:5b:7e:47:46:2f:a2:c3:aa:2a: 7d:8e:f9:5c:11:68:99:38:28:c5:07:e1:f3:07:20:eb:47:b0: 69:4d:ae:45:a8:89:8a:c6:93:fc:5f:23:2d:6d:3f:81:eb:41: f3:0b:74:6e:0f:02:e3:2f:7c:05:fa:7c:a6:b8:17:f3:a2:87: 9d:9c:09:0e:c6:45:8d:6c:a5:63:e1:07:b7:70:ef:36:5c:4c: 88:ae:c1:90:cf:55:dd:83:2d:61:1a:80:85:59:7f:e1:41:ad: 21:74:1d:5b:2f:f8:d1:ff:00:5c:5f:3c:48:9b:e1:bf:9f:06: 62:84:7b:25:46:0d:ba:4a:04:09:bd:6f:78:7a:b2:6d:c4:82: cc:9a:9e:18:79:2e:1b:75:ce:ca:d4:e2:4c:1f:06:83:89:1a: 46:c3:a7:ba:c7:18:aa:7a:7e:1c:2a:d6:5e:3f:02:eb:ba:2c: fa:a2:46:60:34:5b:3f:59:51:7c:00:d4:c0:5c:cb:72:9f:14: 13:ba:92:b2:32:68:4f:99:06:07:f0:6d:d2:94:9c:75:13:cf: fc:8c:91:ac -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEu+QCs60GlYK40Be8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzExZjE5Y2MtMzQ0ZS00OGM1LWExZjEtNDc1OTNhYTU2 YjBkMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk NzY5YmIzNTctNTlkNC00Y2NjLTkxMTItZWVkNTFiYjE2NDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttf1NxaYjf/MvTkGCCbW6aIo7wqctqXPzFAW /JLDnN6w6+W+pH8/KCd3/47YbgxTGjxpAL6Xs33KcFY+q+S+H2wXHmdOATEFNV+p 5yXG/sJFjNdVIF2Hs7VZEiDpiRjN+TCexFv6OJGykqYhu5r9p/6qVc6MVF9va9us 0J1Gc9T6ozIPrO/Y3VNlrCzGGrC4oA3BOIPocqIqQiTvJVK1DWCDMJSqvZw3ZtTR 15mMYeOBE9cfOJaokUgvh+41Lor1w8bRuLdkAvNKOshL4ggAkUa6aKa9H//QxaQk 9S0+kD8YnqQUYdkdFsHEjWaITWx2sgpe+ySvclyF+hiw4mbAuwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBzgiKnnWZlfMk06VESXtNKIU/7sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMTFm MTljYy0zNDRlLTQ4YzUtYTFmMS00NzU5M2FhNTZiMGQvYzlmOGQ0OGEtYzlmMS0z YWQ4LWEyYjktNDhlNTQwYTJmOTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzExZjE5Y2MtMzQ0ZS00OGM1LWEx ZjEtNDc1OTNhYTU2YjBkLzMxMWYxOWNjLTM0NGUtNDhjNS1hMWYxLTQ3NTkzYWE1 NmIwZC5jcmwwHwYDVR0jBBgwFoAUTdZg5uF1ESmUCvKCwba2rQLZYH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMTFmMTljYy0zNDRlLTQ4YzUtYTFmMS00NzU5 M2FhNTZiMGQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTrwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAh5BIdULkILM2aaknYt0V4MWqali2dPJXzIcA0sFdJG0xq1JHtR97C 87GDy/1bfkdGL6LDqip9jvlcEWiZOCjFB+HzByDrR7BpTa5FqImKxpP8XyMtbT+B 60HzC3RuDwLjL3wF+nymuBfzooednAkOxkWNbKVj4Qe3cO82XEyIrsGQz1Xdgy1h GoCFWX/hQa0hdB1bL/jR/wBcXzxIm+G/nwZihHslRg26SgQJvW94erJtxILMmp4Y eS4bdc7K1OJMHwaDiRpGw6e6xxiqen4cKtZePwLruiz6okZgNFs/WVF8ANTAXMty nxQTupKyMmhPmQYH8G3SlJx1E8/8jJGs -----END CERTIFICATE-----Generated at Tue Nov 4 23:24:25 2025 by rpki-client