$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/454064dd-9b1f-3e1b-abd1-ad6b4d020021.roa File: 454064dd-9b1f-3e1b-abd1-ad6b4d020021.roa (raw, json) Hash identifier: NVQJG+ebMQmtiCkZbN0AGizCeR4klGKcZhK2C1N+uJg= Subject key identifier: FA:06:F2:B0:23:FC:4B:51:04:4E:6B:EF:B1:9C:C1:BC:62:AB:9B:1D Certificate issuer: /CN=f13c298e-3179-4f35-9e7d-886ee3f9be0b Certificate serial: 010D0C9F4328584BB88D14D62265FE8A31A4A280 Authority key identifier: 56:56:CF:C5:B4:E3:45:16:37:F9:19:FA:67:97:3D:2E:48:27:E7:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/454064dd-9b1f-3e1b-abd1-ad6b4d020021.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 14618 IP address blocks: 2606:7740:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:14:d6:22:65:fe:8a:31:a4:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f13c298e-3179-4f35-9e7d-886ee3f9be0b Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=58693a64-f6ea-4735-9fc5-d3094af4f2ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6b:36:0c:34:f9:23:ce:3d:1e:d3:92:ff:51: 5d:58:6a:70:d0:5b:d7:3b:b7:78:44:fe:66:1d:8a: ca:66:a3:31:77:bf:46:68:73:e4:f7:cf:4a:fd:47: 25:db:4e:f9:98:1b:16:3f:b8:0f:51:1d:be:04:a2: 41:50:c7:90:52:33:96:79:4d:c5:29:e7:b8:e3:36: d5:9f:77:15:6b:53:f9:d2:08:b0:37:ea:5d:db:44: 95:61:d5:6c:fa:7f:da:f5:02:73:ba:f7:d6:e7:c9: 01:bf:a5:e7:17:0c:16:b6:c5:80:16:de:ab:75:7a: 56:92:a7:44:27:43:d3:dc:dd:da:41:3c:81:74:88: 20:77:e7:55:7f:f9:05:24:72:f4:e0:40:84:b3:55: ea:ee:45:0e:f1:7e:db:58:9e:2f:ef:19:7b:d6:a3: 6b:72:a7:4c:2a:3e:d4:73:4b:34:ec:47:e5:fa:f3: 44:b8:16:06:1d:19:d0:e2:61:56:8e:95:9b:23:87: ad:dd:3b:e0:a9:54:0f:91:82:36:d9:18:a2:0f:79: dc:ad:f1:56:0e:34:23:50:7c:95:15:c4:f9:ca:2a: 85:e3:b7:0b:3a:21:97:a1:66:a9:21:b3:ca:66:0d: 3b:dd:0e:fd:f1:9f:e6:f4:df:30:39:0a:5d:88:37: 3b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:06:F2:B0:23:FC:4B:51:04:4E:6B:EF:B1:9C:C1:BC:62:AB:9B:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/454064dd-9b1f-3e1b-abd1-ad6b4d020021.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.crl X509v3 Authority Key Identifier: keyid:56:56:CF:C5:B4:E3:45:16:37:F9:19:FA:67:97:3D:2E:48:27:E7:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer sbgp-ipAddrBlock: critical IPv6: 2606:7740:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:e5:15:c4:28:c2:19:02:e1:a5:97:b9:3d:35:95:c3:9e:d6: 94:7c:20:3d:a6:73:2c:27:13:b7:24:5b:aa:c6:e0:53:fa:96: 25:f3:87:c5:f4:13:b7:e7:e1:07:a7:27:0b:46:17:2c:4f:0e: e5:12:4e:56:af:8b:fe:8c:0e:f8:33:f3:4a:e7:ae:73:8f:0a: 5a:ab:2b:86:a7:22:06:c4:08:5f:4d:23:48:48:e0:18:64:4a: 6d:b4:fc:6a:77:4a:f6:f3:10:25:fb:9e:9d:96:9e:6f:c2:8b: e0:0a:18:fd:c2:dd:2f:f6:f5:99:15:2e:54:b9:e8:68:d7:77: 0e:38:89:c6:82:71:93:27:f1:bb:90:10:9b:d5:8c:fb:c8:25: 0b:4d:86:3d:83:1e:2e:19:c6:7b:d3:9e:01:7d:c8:6f:b3:ab: 4d:f2:5c:cc:40:89:7b:6d:2a:e2:5f:b4:51:6c:65:a0:40:7e: 32:59:9f:fe:22:06:c6:4b:5f:c9:5c:6b:29:4a:f2:09:61:af: 72:fe:b0:cc:9a:94:54:64:61:5d:de:a8:e2:28:76:c1:7d:9c: 43:55:56:41:c9:bd:69:df:e9:86:5e:e0:1f:85:d3:6c:2c:0d: b4:35:de:c6:bf:63:16:8f:34:ee:1b:ad:bd:00:03:90:97:63: 3b:71:e4:81 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu4jRTWImX+ijGkooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjEzYzI5OGUtMzE3OS00ZjM1LTllN2QtODg2ZWUzZjli ZTBiMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk NTg2OTNhNjQtZjZlYS00NzM1LTlmYzUtZDMwOTRhZjRmMmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWs2DDT5I849HtOS/1FdWGpw0FvXO7d4RP5m HYrKZqMxd79GaHPk989K/Ucl2075mBsWP7gPUR2+BKJBUMeQUjOWeU3FKee44zbV n3cVa1P50giwN+pd20SVYdVs+n/a9QJzuvfW58kBv6XnFwwWtsWAFt6rdXpWkqdE J0PT3N3aQTyBdIggd+dVf/kFJHL04ECEs1Xq7kUO8X7bWJ4v7xl71qNrcqdMKj7U c0s07Efl+vNEuBYGHRnQ4mFWjpWbI4et3TvgqVQPkYI22RiiD3ncrfFWDjQjUHyV FcT5yiqF47cLOiGXoWapIbPKZg073Q798Z/m9N8wOQpdiDc7owIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPoG8rAj/EtRBE5r77Gcwbxiq5sdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mMTNj Mjk4ZS0zMTc5LTRmMzUtOWU3ZC04ODZlZTNmOWJlMGIvNDU0MDY0ZGQtOWIxZi0z ZTFiLWFiZDEtYWQ2YjRkMDIwMDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjEzYzI5OGUtMzE3OS00ZjM1LTll N2QtODg2ZWUzZjliZTBiL2YxM2MyOThlLTMxNzktNGYzNS05ZTdkLTg4NmVlM2Y5 YmUwYi5jcmwwHwYDVR0jBBgwFoAUVlbPxbTjRRY3+Rn6Z5c9Lkgn50IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mMTNjMjk4ZS0zMTc5LTRmMzUtOWU3ZC04ODZl ZTNmOWJlMGIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZ3QAAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEflFcQowhkC4aWXuT01lcOe1pR8ID2mcywnE7ckW6rG4FP6liXz h8X0E7fn4QenJwtGFyxPDuUSTlavi/6MDvgz80rnrnOPClqrK4anIgbECF9NI0hI 4BhkSm20/Gp3SvbzECX7np2Wnm/Ci+AKGP3C3S/29ZkVLlS56GjXdw44icaCcZMn 8buQEJvVjPvIJQtNhj2DHi4ZxnvTngF9yG+zq03yXMxAiXttKuJftFFsZaBAfjJZ n/4iBsZLX8lcaylK8glhr3L+sMyalFRkYV3eqOIodsF9nENVVkHJvWnf6YZe4B+F 02wsDbQ13sa/YxaPNO4brb0AA5CXYztx5IE= -----END CERTIFICATE-----Generated at Wed Nov 5 05:45:29 2025 by rpki-client