$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/25dfc76c-b579-36f8-95b3-a1b22bcff809.roa File: 25dfc76c-b579-36f8-95b3-a1b22bcff809.roa (raw, json) Hash identifier: RWpVPIIMLDioBF6RZA9PAhCpH8wpMCYoRHchwjarTR8= Subject key identifier: CA:E7:15:D9:9F:67:D0:7A:70:09:EB:EB:F4:49:38:6E:4A:14:73:3C Certificate issuer: /CN=2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f Certificate serial: 010D0C9F4328584AF95144CC72EFD74C520D6560 Authority key identifier: E7:C3:4D:92:13:BD:90:DE:BE:98:53:B6:75:61:97:86:5B:27:46:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/25dfc76c-b579-36f8-95b3-a1b22bcff809.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 0 IP address blocks: 2001:504:100::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:44:cc:72:ef:d7:4c:52:0d:65:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=d03e5a33-e9fc-4d02-8524-658cbbea7d6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e3:75:cc:8c:1a:c6:cc:70:92:4c:8d:8a:a5: 4e:ca:e7:4d:89:44:f2:c5:65:57:1d:b4:be:ba:cd: a0:54:cd:de:e3:ee:f6:07:53:9a:8d:b9:56:7d:29: a2:82:64:4b:c0:6c:b3:30:48:34:90:2d:fd:43:b8: 48:f0:9b:7e:fe:f2:e2:1d:36:4a:99:6c:a6:31:5f: 47:f9:a1:09:e7:28:cb:8b:94:d8:09:f3:b5:9b:0f: a2:15:5a:6a:de:35:28:cb:6f:23:97:5a:65:71:6f: 0d:e6:aa:7d:d6:c6:be:12:98:c5:12:f2:ff:01:01: 19:b6:76:72:9a:69:52:60:39:2b:f8:e4:6c:df:fe: a6:f1:d1:15:4c:72:3d:a9:11:cd:2d:59:e0:a6:c6: c3:c4:6b:8f:6d:b1:25:64:bc:65:70:ce:b0:a0:7c: 48:85:b0:c5:ac:1d:a8:9a:e2:99:da:6e:fb:af:eb: e0:f0:1e:01:20:30:f6:c6:f7:9e:2e:46:4c:08:80: 00:a5:a8:07:12:6c:d0:42:ac:f3:08:f3:e6:7c:3e: 28:9f:a4:0a:c9:28:0e:69:22:27:de:f3:74:b4:ea: e9:d7:a4:19:9b:d1:60:73:86:e2:6b:c7:fc:e5:ad: c7:fa:6f:15:34:8a:0f:88:53:94:23:ae:2a:37:e0: 6f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E7:15:D9:9F:67:D0:7A:70:09:EB:EB:F4:49:38:6E:4A:14:73:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/25dfc76c-b579-36f8-95b3-a1b22bcff809.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.crl X509v3 Authority Key Identifier: keyid:E7:C3:4D:92:13:BD:90:DE:BE:98:53:B6:75:61:97:86:5B:27:46:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:100::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:f3:ed:86:3a:c9:b6:32:13:ba:15:7e:a7:03:ac:fe:1f:48: 3f:75:df:ba:fd:09:ab:49:36:35:06:71:9f:89:c1:66:86:c7: cc:e0:f1:ca:bc:fc:12:ac:d5:50:f5:6e:73:a7:40:37:03:c8: f3:e0:61:e6:e6:d1:ec:12:87:46:6d:5c:fc:40:91:01:a0:e9: fa:71:1a:89:de:7d:b8:bd:4c:99:6a:6e:dd:e3:67:e5:43:f1: 67:c7:bf:c1:79:5a:71:ad:25:cc:d9:a5:65:34:60:32:3d:2a: 2f:7f:a3:bd:a5:dd:15:02:fb:75:ad:8b:3e:aa:81:eb:ac:67: 89:dd:06:ce:6a:64:ad:60:89:4d:ae:19:f8:7d:0f:f7:c5:45: bb:5a:1d:f1:6b:25:c9:ce:69:4c:ef:d9:ae:ba:d2:c6:35:af: 79:6d:61:7c:b1:f0:01:0a:3a:fd:ac:fb:1b:32:1b:dc:bd:f1: c7:9e:5b:a5:32:26:c6:6d:dc:ce:aa:8c:44:68:ef:cc:9a:bd: 90:e9:77:18:d6:d5:c5:67:d7:3e:7d:e1:d1:b3:d2:0f:9e:7b: d5:6a:5c:d3:60:9b:58:51:36:7c:fc:f3:12:cd:8b:5c:0c:10: e8:b6:d1:80:98:07:7e:9a:20:fd:4b:db:3f:1f:62:d6:73:99: 85:c7:39:38 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr5UUTMcu/XTFINZWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE2MTFlZjEtMTk1ZS00OTU4LWE2YWMtZjRhMWQyY2Q4 YzhmMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ZDAzZTVhMzMtZTlmYy00ZDAyLTg1MjQtNjU4Y2JiZWE3ZDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlON1zIwaxsxwkkyNiqVOyudNiUTyxWVXHbS+ us2gVM3e4+72B1OajblWfSmigmRLwGyzMEg0kC39Q7hI8Jt+/vLiHTZKmWymMV9H +aEJ5yjLi5TYCfO1mw+iFVpq3jUoy28jl1plcW8N5qp91sa+EpjFEvL/AQEZtnZy mmlSYDkr+ORs3/6m8dEVTHI9qRHNLVngpsbDxGuPbbElZLxlcM6woHxIhbDFrB2o muKZ2m77r+vg8B4BIDD2xveeLkZMCIAApagHEmzQQqzzCPPmfD4on6QKySgOaSIn 3vN0tOrp16QZm9Fgc4bia8f85a3H+m8VNIoPiFOUI64qN+Bv1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMrnFdmfZ9B6cAnr6/RJOG5KFHM8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yYTYx MWVmMS0xOTVlLTQ5NTgtYTZhYy1mNGExZDJjZDhjOGYvMjVkZmM3NmMtYjU3OS0z NmY4LTk1YjMtYTFiMjJiY2ZmODA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmE2MTFlZjEtMTk1ZS00OTU4LWE2 YWMtZjRhMWQyY2Q4YzhmLzJhNjExZWYxLTE5NWUtNDk1OC1hNmFjLWY0YTFkMmNk OGM4Zi5jcmwwHwYDVR0jBBgwFoAU58NNkhO9kN6+mFO2dWGXhlsnRk0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yYTYxMWVmMS0xOTVlLTQ5NTgtYTZhYy1mNGEx ZDJjZDhjOGYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBAEA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAETz7YY6ybYyE7oVfqcDrP4fSD9137r9CatJNjUGcZ+JwWaGx8zg 8cq8/BKs1VD1bnOnQDcDyPPgYebm0ewSh0ZtXPxAkQGg6fpxGonefbi9TJlqbt3j Z+VD8WfHv8F5WnGtJczZpWU0YDI9Ki9/o72l3RUC+3Wtiz6qgeusZ4ndBs5qZK1g iU2uGfh9D/fFRbtaHfFrJcnOaUzv2a660sY1r3ltYXyx8AEKOv2s+xsyG9y98cee W6UyJsZt3M6qjERo78yavZDpdxjW1cVn1z594dGz0g+ee9VqXNNgm1hRNnz88xLN i1wMEOi20YCYB36aIP1L2z8fYtZzmYXHOTg= -----END CERTIFICATE-----Generated at Wed Nov 5 00:08:50 2025 by rpki-client