$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601/d7af7fbc-69d1-3d52-9c1d-40c968ff258e.roa File: d7af7fbc-69d1-3d52-9c1d-40c968ff258e.roa (raw, json) Hash identifier: S9fpShViTfr0h5O09dR02OAPgYLQq33BD9SJJ10WoxE= Subject key identifier: 84:3B:79:83:F0:12:8E:A8:5D:BC:64:77:71:32:9A:B2:B0:C9:EC:F2 Certificate issuer: /CN=675593d5-5ec7-4ba7-9134-6761cde6b601 Certificate serial: 010D0C9F4328584B987248EE6F24DD27E1397FA0 Authority key identifier: 5A:29:B6:77:6F:8B:88:CB:8D:E2:0D:DA:80:10:D0:2F:E2:44:DA:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601/d7af7fbc-69d1-3d52-9c1d-40c968ff258e.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 29 IP address blocks: 2604:b200::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601/675593d5-5ec7-4ba7-9134-6761cde6b601.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601/675593d5-5ec7-4ba7-9134-6761cde6b601.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:48:ee:6f:24:dd:27:e1:39:7f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=675593d5-5ec7-4ba7-9134-6761cde6b601 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=a36d9092-0467-4fbc-a8be-0ba2173baba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d2:1a:ed:2e:59:1c:b3:9b:f4:73:d7:ff:66: 0a:8b:8c:be:a6:51:db:95:64:c9:d2:f8:3c:bc:2a: 63:d9:9b:ed:51:a8:79:b3:ee:31:b8:40:b8:3b:dc: 42:5c:f4:e8:86:87:5c:c2:03:e9:e4:2b:c0:d4:36: 2b:8f:91:b2:b6:e7:72:19:cf:18:5d:df:d6:7e:ee: 5d:ef:9d:83:47:f1:2e:3f:75:d8:6a:91:60:b1:60: 21:94:2d:a0:bd:e4:12:fd:87:e5:d9:10:c9:b9:b1: 57:74:83:d1:e9:0a:04:ad:81:4a:8c:72:a1:9a:75: e4:72:9a:76:b9:cd:c2:74:a1:19:64:7d:c3:ad:7c: 9c:39:87:9f:5d:6a:86:24:51:c8:1b:d7:58:ee:be: 06:20:9f:88:4d:87:2e:e8:13:09:91:dc:35:96:ad: 43:7b:a0:9e:45:c2:32:ab:4d:80:ab:4b:2a:80:44: 4c:af:a2:47:a0:d6:5d:20:a2:25:14:74:53:2e:cb: af:83:3d:49:08:b2:d2:e4:fe:63:5c:c4:e3:45:5a: 33:07:32:2b:73:bf:f1:97:49:d1:64:fb:9b:de:82: 6d:5b:fc:9e:84:b9:34:bd:50:e9:c2:01:51:9d:ec: a7:2a:1c:e5:5d:5c:26:71:d8:c2:26:35:c5:3e:b6: 11:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:3B:79:83:F0:12:8E:A8:5D:BC:64:77:71:32:9A:B2:B0:C9:EC:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601/d7af7fbc-69d1-3d52-9c1d-40c968ff258e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601/675593d5-5ec7-4ba7-9134-6761cde6b601.crl X509v3 Authority Key Identifier: keyid:5A:29:B6:77:6F:8B:88:CB:8D:E2:0D:DA:80:10:D0:2F:E2:44:DA:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601.cer sbgp-ipAddrBlock: critical IPv6: 2604:b200::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:65:49:ca:fb:f6:ca:78:02:07:51:13:29:7f:b0:92:cd:c5: ef:b7:c4:cc:21:d5:0a:77:97:37:4c:62:0d:f5:a9:f0:0c:c2: f7:0b:21:a5:7b:11:b9:bd:ab:90:de:6d:09:02:c7:29:c7:dc: 6e:e7:54:f1:f3:9a:d1:e8:c4:e4:f7:82:bd:0c:5e:22:57:59: 92:b4:c3:2e:27:a6:1a:b4:3d:0f:8f:b9:38:20:4e:0a:2a:8f: b5:3a:93:79:cd:4b:af:9f:82:96:5f:b0:53:a0:52:6e:4c:91: 8b:60:aa:89:f6:7e:85:6d:90:21:fe:25:a6:a9:c9:27:51:fa: b4:75:6d:5f:2b:ff:55:bc:de:21:6f:eb:5b:ca:d3:19:50:02: d8:54:e4:39:d8:29:7a:a8:cd:bd:c4:73:15:0b:f7:3b:b6:37: 23:e0:44:34:2a:59:5f:b3:ce:0b:27:37:ac:78:e0:5a:0e:69: 6e:0c:9d:02:12:29:ae:91:14:c8:77:e8:2c:7c:d5:a8:f9:fb: f0:99:de:5c:d1:c6:82:ab:77:a7:bc:37:37:4c:e0:17:9a:bf: 44:d5:85:58:51:3b:17:4a:c4:d1:2a:fe:13:07:53:db:bb:b8: ff:f5:7b:92:30:7a:bd:c7:0a:c6:8e:ac:ff:5f:cf:9a:02:ca: 4a:cd:3d:6d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuYckjubyTdJ+E5f6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc1NTkzZDUtNWVjNy00YmE3LTkxMzQtNjc2MWNkZTZi NjAxMB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk YTM2ZDkwOTItMDQ2Ny00ZmJjLWE4YmUtMGJhMjE3M2JhYmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutIa7S5ZHLOb9HPX/2YKi4y+plHblWTJ0vg8 vCpj2ZvtUah5s+4xuEC4O9xCXPTohodcwgPp5CvA1DYrj5GytudyGc8YXd/Wfu5d 752DR/EuP3XYapFgsWAhlC2gveQS/Yfl2RDJubFXdIPR6QoErYFKjHKhmnXkcpp2 uc3CdKEZZH3DrXycOYefXWqGJFHIG9dY7r4GIJ+ITYcu6BMJkdw1lq1De6CeRcIy q02Aq0sqgERMr6JHoNZdIKIlFHRTLsuvgz1JCLLS5P5jXMTjRVozBzIrc7/xl0nR ZPub3oJtW/yehLk0vVDpwgFRneynKhzlXVwmcdjCJjXFPrYR9QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIQ7eYPwEo6oXbxkd3EymrKwyezyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82NzU1 OTNkNS01ZWM3LTRiYTctOTEzNC02NzYxY2RlNmI2MDEvZDdhZjdmYmMtNjlkMS0z ZDUyLTljMWQtNDBjOTY4ZmYyNThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjc1NTkzZDUtNWVjNy00YmE3LTkx MzQtNjc2MWNkZTZiNjAxLzY3NTU5M2Q1LTVlYzctNGJhNy05MTM0LTY3NjFjZGU2 YjYwMS5jcmwwHwYDVR0jBBgwFoAUWim2d2+LiMuN4g3agBDQL+JE2sMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82NzU1OTNkNS01ZWM3LTRiYTctOTEzNC02NzYx Y2RlNmI2MDEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSyADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA+ZUnK+/bKeAIHURMpf7CSzcXvt8TMIdUKd5c3TGIN9anwDML3CyGl exG5vauQ3m0JAscpx9xu51Tx85rR6MTk94K9DF4iV1mStMMuJ6YatD0Pj7k4IE4K Ko+1OpN5zUuvn4KWX7BToFJuTJGLYKqJ9n6FbZAh/iWmqcknUfq0dW1fK/9VvN4h b+tbytMZUALYVOQ52Cl6qM29xHMVC/c7tjcj4EQ0Kllfs84LJzeseOBaDmluDJ0C EimukRTId+gsfNWo+fvwmd5c0caCq3envDc3TOAXmr9E1YVYUTsXSsTRKv4TB1Pb u7j/9XuSMHq9xwrGjqz/X8+aAspKzT1t -----END CERTIFICATE-----Generated at Wed Nov 5 16:31:38 2025 by rpki-client