$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/27d876b9-8aed-36f6-9c6a-1c14bd3b0427.roa File: 27d876b9-8aed-36f6-9c6a-1c14bd3b0427.roa (raw, json) Hash identifier: Q3xOTSPeOFsdUTp8eQSx9hMxzFEJ5bq2okbUhJhAYF0= Subject key identifier: 6B:B9:7B:22:34:A3:D5:96:82:8D:93:2F:F8:41:81:15:7B:D9:07:F7 Certificate issuer: /CN=ab3688e8-3425-4e58-a239-949508a9f6dd Certificate serial: 010D0C9F4328584BAEC7C40C2E32AFAB38CAA780 Authority key identifier: 48:68:72:45:64:2E:EE:B7:D1:4C:89:AA:BF:91:87:19:4D:93:99:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/27d876b9-8aed-36f6-9c6a-1c14bd3b0427.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 3573 IP address blocks: 2610:b0:41d9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:c4:0c:2e:32:af:ab:38:ca:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab3688e8-3425-4e58-a239-949508a9f6dd Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=fe6e9942-04b7-4b69-ac76-3bae87b5d989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7a:a3:85:a7:39:1a:41:91:4b:7e:fc:57:e7: c5:db:10:78:7a:9f:87:5a:ac:5d:f7:d9:e6:06:df: f8:47:11:52:88:aa:bb:c8:ef:6a:23:3b:32:f3:4c: cb:31:2d:a4:15:08:5b:cc:14:81:c1:4a:ca:41:c9: dd:04:28:d0:4a:da:26:e8:23:e5:98:2b:63:5d:bc: 6f:87:70:97:40:05:42:37:cd:ce:25:eb:75:dd:79: a4:51:72:62:22:54:af:65:72:86:37:e3:4e:50:1e: 5f:15:d4:aa:07:97:3a:20:0f:db:2c:26:2a:a0:07: 6e:96:79:ef:c1:3c:e6:ba:8d:ed:6d:66:45:01:5e: 72:46:56:db:da:c3:f7:d3:a2:17:eb:90:39:3b:25: 2c:5c:c1:6e:90:1d:1d:6b:27:ec:d4:3f:eb:cb:8d: 9f:0c:ba:22:d7:87:c6:35:ac:f6:a9:28:ca:92:86: 39:67:90:0a:da:0c:5a:15:c8:cd:25:8a:cd:21:5c: 55:42:c7:e0:34:80:53:65:88:bb:24:1e:0b:0f:04: 62:8f:8a:e4:c9:db:c0:90:3f:0e:76:d1:d3:ee:3f: fc:a3:73:ac:bd:30:bc:4c:30:9a:11:42:4d:ed:2b: 70:63:52:5c:e4:1a:23:9f:30:38:47:1a:f3:52:db: cf:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:B9:7B:22:34:A3:D5:96:82:8D:93:2F:F8:41:81:15:7B:D9:07:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/27d876b9-8aed-36f6-9c6a-1c14bd3b0427.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.crl X509v3 Authority Key Identifier: keyid:48:68:72:45:64:2E:EE:B7:D1:4C:89:AA:BF:91:87:19:4D:93:99:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd.cer sbgp-ipAddrBlock: critical IPv6: 2610:b0:41d9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:c9:e4:0a:aa:5e:d6:f8:43:ea:2c:8c:5a:0c:ec:4a:87:6e: 93:8f:70:64:be:ca:2b:c1:ea:93:b3:41:04:ca:cb:64:34:c7: 79:51:b2:38:ec:44:64:08:23:7c:61:4b:d7:ad:bd:6a:20:1c: b6:3a:4b:d4:ba:42:0d:27:f5:95:78:e2:d8:80:49:59:18:ea: b1:61:73:e7:e0:b5:fc:a9:d4:cc:f3:f3:07:2e:2b:51:b9:4f: cd:1b:5d:0c:c9:4b:6c:af:40:aa:88:48:53:61:43:88:0f:54: f5:74:93:e9:70:5e:d2:8c:a4:d5:c8:61:47:0b:d8:08:01:78: 67:89:22:03:b6:5a:ff:e0:93:bf:91:93:16:6b:82:db:9b:e0: 75:01:34:e0:80:e0:65:24:3f:41:f9:3a:d5:93:5e:9c:01:d4: 93:ab:f1:79:a3:9b:1f:0c:6c:24:ed:2c:20:d4:47:e7:29:75: 58:d8:e5:cf:fd:fa:4f:36:ea:b3:6b:94:b8:d0:ac:c2:54:d7: fc:5c:d9:ac:bc:77:c7:ff:32:36:72:50:0a:0e:0c:e2:6a:0a: c9:00:71:82:70:b9:d5:55:0e:33:53:d8:03:50:42:1b:5f:d7: 4f:45:d5:db:d1:cf:c2:5f:1c:08:fd:cb:7e:0e:7e:d3:85:98: 0c:24:7a:b1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuux8QMLjKvqzjKp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIzNjg4ZTgtMzQyNS00ZTU4LWEyMzktOTQ5NTA4YTlm NmRkMB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk ZmU2ZTk5NDItMDRiNy00YjY5LWFjNzYtM2JhZTg3YjVkOTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Hqjhac5GkGRS378V+fF2xB4ep+HWqxd99nm Bt/4RxFSiKq7yO9qIzsy80zLMS2kFQhbzBSBwUrKQcndBCjQStom6CPlmCtjXbxv h3CXQAVCN83OJet13XmkUXJiIlSvZXKGN+NOUB5fFdSqB5c6IA/bLCYqoAdulnnv wTzmuo3tbWZFAV5yRlbb2sP306IX65A5OyUsXMFukB0dayfs1D/ry42fDLoi14fG Naz2qSjKkoY5Z5AK2gxaFcjNJYrNIVxVQsfgNIBTZYi7JB4LDwRij4rkydvAkD8O dtHT7j/8o3OsvTC8TDCaEUJN7StwY1Jc5BojnzA4RxrzUtvPAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGu5eyI0o9WWgo2TL/hBgRV72Qf3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYjM2 ODhlOC0zNDI1LTRlNTgtYTIzOS05NDk1MDhhOWY2ZGQvMjdkODc2YjktOGFlZC0z NmY2LTljNmEtMWMxNGJkM2IwNDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWIzNjg4ZTgtMzQyNS00ZTU4LWEy MzktOTQ5NTA4YTlmNmRkL2FiMzY4OGU4LTM0MjUtNGU1OC1hMjM5LTk0OTUwOGE5 ZjZkZC5jcmwwHwYDVR0jBBgwFoAUSGhyRWQu7rfRTImqv5GHGU2TmdswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYjM2ODhlOC0zNDI1LTRlNTgtYTIzOS05NDk1 MDhhOWY2ZGQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJhAAsEHZ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD3J5AqqXtb4Q+osjFoM7EqHbpOPcGS+yivB6pOzQQTKy2Q0x3lR sjjsRGQII3xhS9etvWogHLY6S9S6Qg0n9ZV44tiASVkY6rFhc+fgtfyp1Mzz8wcu K1G5T80bXQzJS2yvQKqISFNhQ4gPVPV0k+lwXtKMpNXIYUcL2AgBeGeJIgO2Wv/g k7+RkxZrgtub4HUBNOCA4GUkP0H5OtWTXpwB1JOr8Xmjmx8MbCTtLCDUR+cpdVjY 5c/9+k826rNrlLjQrMJU1/xc2ay8d8f/MjZyUAoODOJqCskAcYJwudVVDjNT2ANQ Qhtf109F1dvRz8JfHAj9y34OftOFmAwkerE= -----END CERTIFICATE-----Generated at Wed Nov 5 19:21:16 2025 by rpki-client