$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/6ccdf820-69dc-3ad4-8e96-6aec7ff0c4a7.roa File: 6ccdf820-69dc-3ad4-8e96-6aec7ff0c4a7.roa (raw, json) Hash identifier: PfS7pqaAhUEUlpf+4c+Q6zyZoZLksrH5oNCcZ9dBbz0= Subject key identifier: 09:6D:29:82:FA:1B:64:AE:AF:79:14:93:FD:27:76:F0:13:E8:DF:46 Certificate issuer: /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311 Certificate serial: 010D0C9F4328584B2CF6E419114EE55B4CB90C00 Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/6ccdf820-69dc-3ad4-8e96-6aec7ff0c4a7.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 25697 IP address blocks: 2604:ed40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:e4:19:11:4e:e5:5b:4c:b9:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=8343dcc1-bab7-45d4-9ce0-407bdbb034a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:df:cc:fe:b9:7e:29:1c:2b:48:06:3d:69:e6: ea:b6:5b:65:8a:c7:47:f0:5d:33:cc:69:56:fe:ec: ac:a1:da:16:7f:8a:1e:c5:28:4f:4d:19:61:97:a2: 56:6c:4c:91:b9:4e:ab:be:39:41:da:84:28:20:6e: e1:14:e5:46:3c:f4:f5:50:3d:4e:d2:c9:9c:b5:4b: b9:43:1f:4c:26:9f:2a:7b:c9:90:6d:31:1a:95:c6: fa:23:b9:0a:51:82:61:2f:7f:9e:63:57:20:bf:8b: a7:0d:f9:b8:06:51:dd:56:3b:73:e9:5c:bb:a6:17: f3:aa:e0:0a:05:91:ef:f2:b1:97:dc:e1:40:77:07: 20:f9:f4:03:14:59:3f:28:d5:fa:c9:5b:79:12:74: 83:96:4d:d7:15:fd:73:de:75:78:8d:b8:33:7f:5e: ef:4b:24:f2:53:1d:19:ad:71:1b:8f:b3:c2:bc:bd: 39:81:20:6d:2a:d2:8c:2a:42:0f:b9:64:41:e9:54: 71:2f:3b:24:4e:68:44:88:5a:a4:0e:f1:87:78:77: 67:30:92:fe:7e:5d:52:70:f4:77:99:25:8f:8b:92: fc:7d:69:e2:b2:6b:85:02:89:61:3d:91:b8:87:6d: fb:c5:62:4e:b2:51:48:ef:fa:dc:a0:6f:c2:83:73: b2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:6D:29:82:FA:1B:64:AE:AF:79:14:93:FD:27:76:F0:13:E8:DF:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/6ccdf820-69dc-3ad4-8e96-6aec7ff0c4a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl X509v3 Authority Key Identifier: keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer sbgp-ipAddrBlock: critical IPv6: 2604:ed40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:98:d3:d2:fb:86:b0:6f:9c:10:d1:df:f8:1b:85:75:c5:d0: 7e:a2:c4:d7:7c:df:3c:6a:be:97:2d:8b:5b:a9:0e:39:fc:54: f6:11:3e:ac:23:e3:94:61:cb:f8:39:1c:8c:b1:3e:d5:fc:b3: 44:89:48:a1:66:9e:4b:70:08:79:33:05:26:c1:ab:39:89:5f: 77:99:8c:cf:20:b4:ab:84:27:b6:08:98:f1:9f:b5:49:35:b8: 8f:74:d4:00:8b:24:58:31:11:d2:0d:99:4e:4e:20:a3:8f:fc: 70:aa:cf:c3:b9:3a:ad:1b:47:54:c2:0e:23:bb:5e:24:b6:9c: 20:c3:e4:5c:f0:ae:95:94:22:20:98:32:bb:ce:95:62:92:00: 1b:be:f2:a2:aa:4c:31:9f:5c:df:74:54:26:5a:67:b4:f2:1e: 60:18:d4:c2:1f:15:74:10:0e:1c:29:a7:40:02:10:aa:91:f0: d8:d9:00:81:4d:69:94:ae:7a:14:ad:82:96:33:06:fa:8d:d9: d6:20:74:74:26:6d:20:4f:c7:51:59:f9:dd:23:66:4d:11:79: bb:4e:99:28:69:b7:45:26:f2:e4:5a:fa:e6:c7:a3:c2:88:1b: 7e:41:a0:3e:c4:ae:72:8c:a6:b3:11:57:86:b4:d5:2d:18:a8: f6:56:23:1a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEss9uQZEU7lW0y5DAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVlYmFkYmItYjYzYy00ZTk1LThlNzYtZmQyMmNjODYx MzExMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk ODM0M2RjYzEtYmFiNy00NWQ0LTljZTAtNDA3YmRiYjAzNGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9/M/rl+KRwrSAY9aebqtltlisdH8F0zzGlW /uysodoWf4oexShPTRlhl6JWbEyRuU6rvjlB2oQoIG7hFOVGPPT1UD1O0smctUu5 Qx9MJp8qe8mQbTEalcb6I7kKUYJhL3+eY1cgv4unDfm4BlHdVjtz6Vy7phfzquAK BZHv8rGX3OFAdwcg+fQDFFk/KNX6yVt5EnSDlk3XFf1z3nV4jbgzf17vSyTyUx0Z rXEbj7PCvL05gSBtKtKMKkIPuWRB6VRxLzskTmhEiFqkDvGHeHdnMJL+fl1ScPR3 mSWPi5L8fWnismuFAolhPZG4h237xWJOslFI7/rcoG/Cg3OyTwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAltKYL6G2Sur3kUk/0ndvAT6N9GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kNWVi YWRiYi1iNjNjLTRlOTUtOGU3Ni1mZDIyY2M4NjEzMTEvNmNjZGY4MjAtNjlkYy0z YWQ0LThlOTYtNmFlYzdmZjBjNGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDVlYmFkYmItYjYzYy00ZTk1LThl NzYtZmQyMmNjODYxMzExL2Q1ZWJhZGJiLWI2M2MtNGU5NS04ZTc2LWZkMjJjYzg2 MTMxMS5jcmwwHwYDVR0jBBgwFoAUCl3nOppYysWd9gW84/IezCP415QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kNWViYWRiYi1iNjNjLTRlOTUtOGU3Ni1mZDIy Y2M4NjEzMTEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTtQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCnmNPS+4awb5wQ0d/4G4V1xdB+osTXfN88ar6XLYtbqQ45/FT2ET6s I+OUYcv4ORyMsT7V/LNEiUihZp5LcAh5MwUmwas5iV93mYzPILSrhCe2CJjxn7VJ NbiPdNQAiyRYMRHSDZlOTiCjj/xwqs/DuTqtG0dUwg4ju14ktpwgw+Rc8K6VlCIg mDK7zpVikgAbvvKiqkwxn1zfdFQmWme08h5gGNTCHxV0EA4cKadAAhCqkfDY2QCB TWmUrnoUrYKWMwb6jdnWIHR0Jm0gT8dRWfndI2ZNEXm7TpkoabdFJvLkWvrmx6PC iBt+QaA+xK5yjKazEVeGtNUtGKj2ViMa -----END CERTIFICATE-----Generated at Wed Nov 5 19:12:40 2025 by rpki-client