$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/9dd3a97c-9d6b-3e7f-a1f4-4204fce9e02a.roa File: 9dd3a97c-9d6b-3e7f-a1f4-4204fce9e02a.roa (raw, json) Hash identifier: lRQ8GAtSm3j/HTcKmnYMmfHDZ7S7fX/FROCjjpxGjSY= Subject key identifier: D6:BB:C0:B3:B3:0D:1D:85:F1:7F:41:B0:95:39:BC:8A:88:79:66:05 Certificate issuer: /CN=5aba4b7a-de7b-4e84-b913-a1bedbe58f9a Certificate serial: 010D0C9F4328584BB02CFC7785D42FBF575DF580 Authority key identifier: 96:54:64:3A:B0:1D:88:A5:4E:80:EF:54:9E:33:2E:CF:5B:A3:59:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/9dd3a97c-9d6b-3e7f-a1f4-4204fce9e02a.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 22413 IP address blocks: 2604:f140::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2c:fc:77:85:d4:2f:bf:57:5d:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5aba4b7a-de7b-4e84-b913-a1bedbe58f9a Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=24df082d-818d-4077-aad7-adee55092899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a1:c4:61:06:6c:c6:fa:32:1e:d3:60:b0:28: 72:13:c4:09:39:e1:0f:35:f2:cb:1c:8a:da:51:c0: 31:4b:1c:ee:2c:60:53:c7:1d:86:6c:56:8f:41:ca: 60:82:bf:d8:e9:a0:84:3e:69:55:d7:3b:a6:58:a0: 37:5d:4c:ff:5a:00:a1:62:cc:23:94:05:af:b9:e6: b4:92:74:7e:0b:81:a6:95:ec:a2:b6:76:6b:8d:bc: 50:ed:56:50:0f:f0:83:db:be:ee:d6:0d:4e:02:ac: 4a:12:7e:a9:3b:d6:3d:d3:8c:e4:0c:79:e7:4a:e6: 8b:0b:76:60:bf:93:f5:e6:50:4d:5f:cb:71:7e:78: 78:3f:72:12:87:73:f9:3e:92:f9:01:ca:0d:9d:0d: 5c:46:57:63:99:14:e7:ba:87:a3:69:a7:fd:c9:39: d9:05:9c:15:a7:9d:52:94:2b:75:1e:50:6f:de:d6: 2a:8a:58:45:86:a0:14:fd:c8:ea:f9:60:ae:a6:31: 7e:5c:b6:17:55:27:51:a2:8b:0f:d0:fc:f0:34:db: 1e:11:2d:6e:bd:13:e4:51:5b:f2:2d:c1:1c:69:d9: 47:ab:d2:6a:ca:b2:16:6f:98:fa:8d:b4:67:0e:65: 07:5c:3f:74:73:24:6d:3c:05:df:fd:60:fa:8c:f0: 5f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:BB:C0:B3:B3:0D:1D:85:F1:7F:41:B0:95:39:BC:8A:88:79:66:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/9dd3a97c-9d6b-3e7f-a1f4-4204fce9e02a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.crl X509v3 Authority Key Identifier: keyid:96:54:64:3A:B0:1D:88:A5:4E:80:EF:54:9E:33:2E:CF:5B:A3:59:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.cer sbgp-ipAddrBlock: critical IPv6: 2604:f140::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:71:0a:b0:91:38:59:ae:25:41:1e:ab:5c:af:87:3d:5c:f0: b5:1d:82:66:0f:99:e2:b2:48:71:7e:68:73:49:03:6d:6b:0b: a8:01:c3:b1:31:11:83:55:07:90:65:09:94:ff:c6:91:e3:44: 44:6d:18:4b:b9:5e:9c:1b:23:37:b2:59:b1:9a:59:0c:44:a6: 75:a4:9f:09:94:6d:75:6a:78:d6:86:b8:fa:8a:85:c9:3f:6a: db:e1:6e:84:25:f4:b0:22:14:3f:8e:23:a2:82:c0:0f:4b:25: 23:ac:82:1f:d5:c3:37:49:49:e1:27:47:0d:e6:12:4e:df:cf: 65:42:7b:5d:f9:d8:e7:0c:1e:2e:e6:06:9b:7b:7c:4b:03:68: 0f:c5:28:74:75:f9:ff:20:22:91:8e:0c:7b:98:d7:1c:32:84: d1:21:42:46:d3:ae:41:4a:b1:ba:c8:fc:ab:9f:02:5a:dc:ef: ae:95:b9:44:e9:ab:78:c2:d9:75:c5:40:69:19:34:74:db:03: b5:6c:71:19:96:d1:f7:97:5c:e8:e5:cf:32:f2:c9:6d:e5:79: 12:76:45:3c:68:ce:93:a9:79:0f:e3:ed:07:38:fd:96:a9:2b: 9e:c8:ea:0d:00:94:bb:5e:81:4f:73:77:e4:a7:b2:23:dc:aa: b8:43:5a:e9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuwLPx3hdQvv1dd9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYTRiN2EtZGU3Yi00ZTg0LWI5MTMtYTFiZWRiZTU4 ZjlhMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk MjRkZjA4MmQtODE4ZC00MDc3LWFhZDctYWRlZTU1MDkyODk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaHEYQZsxvoyHtNgsChyE8QJOeEPNfLLHIra UcAxSxzuLGBTxx2GbFaPQcpggr/Y6aCEPmlV1zumWKA3XUz/WgChYswjlAWvuea0 knR+C4GmleyitnZrjbxQ7VZQD/CD277u1g1OAqxKEn6pO9Y904zkDHnnSuaLC3Zg v5P15lBNX8txfnh4P3ISh3P5PpL5AcoNnQ1cRldjmRTnuoejaaf9yTnZBZwVp51S lCt1HlBv3tYqilhFhqAU/cjq+WCupjF+XLYXVSdRoosP0PzwNNseES1uvRPkUVvy LcEcadlHq9JqyrIWb5j6jbRnDmUHXD90cyRtPAXf/WD6jPBfZwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNa7wLOzDR2F8X9BsJU5vIqIeWYFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJh NGI3YS1kZTdiLTRlODQtYjkxMy1hMWJlZGJlNThmOWEvOWRkM2E5N2MtOWQ2Yi0z ZTdmLWExZjQtNDIwNGZjZTllMDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYTRiN2EtZGU3Yi00ZTg0LWI5 MTMtYTFiZWRiZTU4ZjlhLzVhYmE0YjdhLWRlN2ItNGU4NC1iOTEzLWExYmVkYmU1 OGY5YS5jcmwwHwYDVR0jBBgwFoAUllRkOrAdiKVOgO9UnjMuz1ujWekwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJhNGI3YS1kZTdiLTRlODQtYjkxMy1hMWJl ZGJlNThmOWEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTxQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBRcQqwkThZriVBHqtcr4c9XPC1HYJmD5niskhxfmhzSQNtawuoAcOx MRGDVQeQZQmU/8aR40REbRhLuV6cGyM3slmxmlkMRKZ1pJ8JlG11anjWhrj6ioXJ P2rb4W6EJfSwIhQ/jiOigsAPSyUjrIIf1cM3SUnhJ0cN5hJO389lQntd+djnDB4u 5gabe3xLA2gPxSh0dfn/ICKRjgx7mNccMoTRIUJG065BSrG6yPyrnwJa3O+ulblE 6at4wtl1xUBpGTR02wO1bHEZltH3l1zo5c8y8slt5XkSdkU8aM6TqXkP4+0HOP2W qSueyOoNAJS7XoFPc3fkp7Ij3Kq4Q1rp -----END CERTIFICATE-----Generated at Wed Nov 5 10:40:14 2025 by rpki-client