$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581/17250f54-5119-3396-8248-a8f3e305a3f8.roa File: 17250f54-5119-3396-8248-a8f3e305a3f8.roa (raw, json) Hash identifier: DJnnKbHZKn/Nta5Zw/CGIfrT5PHfEyjD2JQwqRP6VDs= Subject key identifier: B1:A6:68:2A:9B:19:E7:19:65:21:BD:D2:D7:56:10:A5:72:5A:71:C2 Certificate issuer: /CN=3a975a5d-2307-4688-a186-4a355ff45581 Certificate serial: 010D0C9F4328584B25FC414691067B2D54C54380 Authority key identifier: 0C:2D:81:CC:F7:46:F4:16:73:1E:6C:69:B6:5D:95:2B:82:6C:51:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581/17250f54-5119-3396-8248-a8f3e305a3f8.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 32473 IP address blocks: 2605:6740::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581/3a975a5d-2307-4688-a186-4a355ff45581.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581/3a975a5d-2307-4688-a186-4a355ff45581.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:41:46:91:06:7b:2d:54:c5:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a975a5d-2307-4688-a186-4a355ff45581 Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=c4ecfc68-6a1c-43a6-b82f-db19b82ae0ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:73:9d:4c:7e:7a:7b:90:a7:f2:88:a8:13:19: 72:3a:2a:75:28:91:c9:32:8c:cd:e3:fb:20:1f:84: be:07:38:83:33:99:20:cc:f5:00:b3:c5:14:ef:68: 88:cd:03:42:c5:36:1b:3e:51:66:4a:9d:75:1e:93: 4e:d0:8b:e4:5a:16:92:fb:67:a7:ca:5b:b7:38:c9: 08:74:63:27:4a:09:13:12:5e:34:07:4b:7b:2f:35: 57:ea:29:0a:49:4a:01:00:83:96:13:c2:7d:0a:4b: 85:88:c0:90:fd:dd:63:f4:e2:25:be:ae:90:b5:0a: d5:ea:d3:ee:ae:5e:d1:1f:2f:3b:f1:08:84:e7:72: ea:f2:31:96:c5:70:3e:7c:96:9d:e9:e1:67:1e:15: 0e:f1:f8:92:14:e9:96:23:f3:52:20:05:49:de:c0: 32:b4:d5:10:ec:cc:42:6c:2b:a8:4d:79:44:35:8c: 83:d3:23:b9:04:80:b7:28:5e:c6:01:ed:da:c1:89: 9d:03:24:dd:8f:5f:c4:4c:7d:4d:69:1a:cc:f3:07: 69:d5:d4:d4:f5:71:33:35:6a:6d:db:89:53:94:91: c8:80:78:c4:6c:50:b3:b1:03:16:40:62:f8:aa:c2: 75:c0:23:82:d2:52:19:69:38:2c:b4:ca:e0:64:8d: da:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A6:68:2A:9B:19:E7:19:65:21:BD:D2:D7:56:10:A5:72:5A:71:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581/17250f54-5119-3396-8248-a8f3e305a3f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581/3a975a5d-2307-4688-a186-4a355ff45581.crl X509v3 Authority Key Identifier: keyid:0C:2D:81:CC:F7:46:F4:16:73:1E:6C:69:B6:5D:95:2B:82:6C:51:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581.cer sbgp-ipAddrBlock: critical IPv6: 2605:6740::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:1a:20:67:b8:8f:da:fb:a7:f9:ea:5d:a1:21:5d:bc:28:0d: e9:14:0c:48:74:39:06:a7:56:14:ba:5a:0b:51:16:21:21:b9: b1:ff:6e:42:2d:17:6e:d8:f4:66:43:7f:c0:49:ff:21:dd:dc: 2d:18:ea:99:03:65:e9:af:20:1a:11:56:f6:8b:4d:30:3c:ca: 3d:4c:a0:9b:16:9e:79:fa:10:fc:96:74:76:3d:78:f6:52:fe: 15:93:55:cd:91:69:ea:62:e1:6b:60:78:43:57:dc:99:c1:86: 48:53:70:15:e9:69:2a:68:66:92:f4:ca:3c:d1:b3:37:39:3d: e2:26:26:24:94:ed:d2:3e:75:2f:56:3f:22:6a:fa:69:88:f1: 8c:91:bc:79:a6:3a:bc:9e:9e:39:82:a5:5c:1c:27:28:e6:ff: 44:75:78:23:e8:bd:55:30:72:b6:a5:79:5c:38:e7:29:02:b4: 93:24:4c:9d:a2:a4:a5:99:3f:29:e0:b3:e2:6d:e7:f0:9c:f7: fe:d8:10:40:b9:88:b0:71:10:ff:5a:43:06:36:fc:80:c6:40: a8:e1:73:ca:4c:d6:ef:b2:62:00:c1:0f:9d:57:f4:d7:68:b9: f7:45:6b:cd:b6:bc:b7:f1:af:3c:d2:d6:d8:29:e4:50:27:1c: 01:66:4b:8a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsl/EFGkQZ7LVTFQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E5NzVhNWQtMjMwNy00Njg4LWExODYtNGEzNTVmZjQ1 NTgxMB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk YzRlY2ZjNjgtNmExYy00M2E2LWI4MmYtZGIxOWI4MmFlMGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknOdTH56e5Cn8oioExlyOip1KJHJMozN4/sg H4S+BziDM5kgzPUAs8UU72iIzQNCxTYbPlFmSp11HpNO0IvkWhaS+2enylu3OMkI dGMnSgkTEl40B0t7LzVX6ikKSUoBAIOWE8J9CkuFiMCQ/d1j9OIlvq6QtQrV6tPu rl7RHy878QiE53Lq8jGWxXA+fJad6eFnHhUO8fiSFOmWI/NSIAVJ3sAytNUQ7MxC bCuoTXlENYyD0yO5BIC3KF7GAe3awYmdAyTdj1/ETH1NaRrM8wdp1dTU9XEzNWpt 24lTlJHIgHjEbFCzsQMWQGL4qsJ1wCOC0lIZaTgstMrgZI3a4wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLGmaCqbGecZZSG90tdWEKVyWnHCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYTk3 NWE1ZC0yMzA3LTQ2ODgtYTE4Ni00YTM1NWZmNDU1ODEvMTcyNTBmNTQtNTExOS0z Mzk2LTgyNDgtYThmM2UzMDVhM2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2E5NzVhNWQtMjMwNy00Njg4LWEx ODYtNGEzNTVmZjQ1NTgxLzNhOTc1YTVkLTIzMDctNDY4OC1hMTg2LTRhMzU1ZmY0 NTU4MS5jcmwwHwYDVR0jBBgwFoAUDC2BzPdG9BZzHmxptl2VK4JsUUwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYTk3NWE1ZC0yMzA3LTQ2ODgtYTE4Ni00YTM1 NWZmNDU1ODEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgVnQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAHGiBnuI/a+6f56l2hIV28KA3pFAxIdDkGp1YUuloLURYhIbmx/25C LRdu2PRmQ3/ASf8h3dwtGOqZA2XpryAaEVb2i00wPMo9TKCbFp55+hD8lnR2PXj2 Uv4Vk1XNkWnqYuFrYHhDV9yZwYZIU3AV6WkqaGaS9Mo80bM3OT3iJiYklO3SPnUv Vj8iavppiPGMkbx5pjq8np45gqVcHCco5v9EdXgj6L1VMHK2pXlcOOcpArSTJEyd oqSlmT8p4LPibefwnPf+2BBAuYiwcRD/WkMGNvyAxkCo4XPKTNbvsmIAwQ+dV/TX aLn3RWvNtry38a880tbYKeRQJxwBZkuK -----END CERTIFICATE-----Generated at Wed Nov 5 15:18:10 2025 by rpki-client