$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601/d486f244-4174-3949-968e-1b131340b5fc.roa File: d486f244-4174-3949-968e-1b131340b5fc.roa (raw, json) Hash identifier: 3PceFIPRVclgO2BTwNqENjuYFpvnsw2D8IYZ6BvHsPU= Subject key identifier: 24:5B:5C:02:DC:34:29:E8:53:19:63:A2:7D:E6:E7:E6:18:91:7D:2C Certificate issuer: /CN=675593d5-5ec7-4ba7-9134-6761cde6b601 Certificate serial: 010D0C9F4328584BAD628B2DEE5CDCDE737D4600 Authority key identifier: 5A:29:B6:77:6F:8B:88:CB:8D:E2:0D:DA:80:10:D0:2F:E2:44:DA:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601/d486f244-4174-3949-968e-1b131340b5fc.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 198949 IP address blocks: 2604:b200::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601/675593d5-5ec7-4ba7-9134-6761cde6b601.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601/675593d5-5ec7-4ba7-9134-6761cde6b601.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:8b:2d:ee:5c:dc:de:73:7d:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=675593d5-5ec7-4ba7-9134-6761cde6b601 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=9f6daa99-344c-4009-96da-14e8bc3f6169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:18:0a:f1:9b:c1:5c:1a:d2:47:b2:a7:73:ad: d8:c3:58:07:24:ff:66:96:77:65:08:61:9e:f8:fa: 79:56:7f:2e:39:58:0a:22:90:1d:23:3b:44:21:0e: ae:1d:ea:03:91:03:f9:6e:74:54:f8:5a:22:54:3c: d7:12:a9:4f:1b:f0:6d:ec:4a:77:8c:07:cc:e1:79: b3:75:b1:2f:6b:c9:95:13:f9:a7:aa:cc:43:8b:55: 4c:06:6e:04:84:ef:c0:db:4e:2c:d7:9f:c6:45:f5: b3:05:dc:03:ea:f1:c2:23:39:10:9e:18:48:f0:9d: e9:35:37:00:f8:8c:6a:ea:d7:c7:ac:1b:90:f5:51: a1:c5:3f:b1:91:07:5f:0b:5e:24:8c:54:a4:f2:0b: a2:4f:80:07:6a:d2:fd:0d:96:0d:16:86:20:89:dc: 34:f3:7c:8a:04:05:01:07:28:eb:44:4a:50:14:f6: 4a:69:8f:72:e6:16:e0:4e:85:f4:0d:df:46:6f:2b: 50:f8:0a:7c:c4:ab:38:c2:20:e5:48:bf:57:9f:4e: 1b:24:8b:38:df:02:7a:c8:b9:d9:ed:e6:ca:68:99: bc:80:f0:c7:4c:34:0e:0f:ac:68:91:63:f7:4c:6e: 7d:a0:a6:f1:02:fd:8a:fc:bd:e3:3f:09:9f:f6:91: b6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:5B:5C:02:DC:34:29:E8:53:19:63:A2:7D:E6:E7:E6:18:91:7D:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601/d486f244-4174-3949-968e-1b131340b5fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601/675593d5-5ec7-4ba7-9134-6761cde6b601.crl X509v3 Authority Key Identifier: keyid:5A:29:B6:77:6F:8B:88:CB:8D:E2:0D:DA:80:10:D0:2F:E2:44:DA:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601.cer sbgp-ipAddrBlock: critical IPv6: 2604:b200::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:9b:5e:36:d6:42:98:71:e0:50:19:ed:b5:bd:b8:98:37:80: b1:7a:b1:3f:99:04:a9:0c:fb:62:93:f2:69:78:15:94:14:9f: d8:e2:0f:92:76:8a:96:10:b5:ac:db:79:34:bc:f5:fb:b2:7b: ac:3c:8d:03:a5:97:4e:8c:40:ac:87:80:f4:05:4b:0b:20:10: a6:17:aa:fd:e9:8a:99:bd:f2:80:61:5a:1e:17:09:ec:4b:44: 8c:2d:35:1f:a7:b0:55:9b:a0:bd:83:47:20:19:a1:c0:50:66: df:3e:1f:31:2c:c5:32:2c:73:39:41:34:38:d2:09:b5:cb:07: 9b:52:a1:a8:97:ed:5a:f6:37:1d:da:53:5f:eb:23:17:34:e3: b8:92:3d:22:e9:53:16:a4:54:31:b7:4b:2e:ac:a4:96:ed:4c: 17:e7:24:33:3c:53:02:89:12:08:ea:25:d0:ec:fe:0f:5d:87: 7d:5d:96:c4:f5:27:46:b7:a7:c7:0d:20:cd:31:b4:86:3c:6c: 29:34:00:eb:f7:bd:f1:40:bd:c0:e1:b6:b6:e1:ca:6e:5d:fc: d7:2a:07:6d:d0:a4:9a:e2:be:c3:08:3c:a0:cb:ef:87:ce:f4: 30:fb:1c:3c:4b:7a:53:97:dc:6f:c0:f7:2a:43:c8:db:9d:7e: 68:5b:76:5b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEutYost7lzc3nN9RgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc1NTkzZDUtNWVjNy00YmE3LTkxMzQtNjc2MWNkZTZi NjAxMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk OWY2ZGFhOTktMzQ0Yy00MDA5LTk2ZGEtMTRlOGJjM2Y2MTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBgK8ZvBXBrSR7Knc63Yw1gHJP9mlndlCGGe +Pp5Vn8uOVgKIpAdIztEIQ6uHeoDkQP5bnRU+FoiVDzXEqlPG/Bt7Ep3jAfM4Xmz dbEva8mVE/mnqsxDi1VMBm4EhO/A204s15/GRfWzBdwD6vHCIzkQnhhI8J3pNTcA +Ixq6tfHrBuQ9VGhxT+xkQdfC14kjFSk8guiT4AHatL9DZYNFoYgidw083yKBAUB ByjrREpQFPZKaY9y5hbgToX0Dd9GbytQ+Ap8xKs4wiDlSL9Xn04bJIs43wJ6yLnZ 7ebKaJm8gPDHTDQOD6xokWP3TG59oKbxAv2K/L3jPwmf9pG2TwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCRbXALcNCnoUxljon3m5+YYkX0sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82NzU1 OTNkNS01ZWM3LTRiYTctOTEzNC02NzYxY2RlNmI2MDEvZDQ4NmYyNDQtNDE3NC0z OTQ5LTk2OGUtMWIxMzEzNDBiNWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjc1NTkzZDUtNWVjNy00YmE3LTkx MzQtNjc2MWNkZTZiNjAxLzY3NTU5M2Q1LTVlYzctNGJhNy05MTM0LTY3NjFjZGU2 YjYwMS5jcmwwHwYDVR0jBBgwFoAUWim2d2+LiMuN4g3agBDQL+JE2sMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82NzU1OTNkNS01ZWM3LTRiYTctOTEzNC02NzYx Y2RlNmI2MDEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSyADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAEm1421kKYceBQGe21vbiYN4CxerE/mQSpDPtik/JpeBWUFJ/Y4g+S doqWELWs23k0vPX7snusPI0DpZdOjECsh4D0BUsLIBCmF6r96YqZvfKAYVoeFwns S0SMLTUfp7BVm6C9g0cgGaHAUGbfPh8xLMUyLHM5QTQ40gm1ywebUqGol+1a9jcd 2lNf6yMXNOO4kj0i6VMWpFQxt0surKSW7UwX5yQzPFMCiRII6iXQ7P4PXYd9XZbE 9SdGt6fHDSDNMbSGPGwpNADr973xQL3A4ba24cpuXfzXKgdt0KSa4r7DCDygy++H zvQw+xw8S3pTl9xvwPcqQ8jbnX5oW3Zb -----END CERTIFICATE-----Generated at Wed Nov 5 16:27:32 2025 by rpki-client