$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/4038b20b-42b0-34fd-ab16-9e3f170db289.roa File: 4038b20b-42b0-34fd-ab16-9e3f170db289.roa (raw, json) Hash identifier: RoC322ELQ2wpCbh6U25wEibQNP/RFMLgVs6dhgECTno= Subject key identifier: 13:6C:52:B3:18:31:B7:B2:5E:1E:8F:57:60:E3:2C:22:49:A8:D2:75 Certificate issuer: /CN=c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f Certificate serial: 010D0C9F4328584B8A7CD270D27BBE848BCA6B00 Authority key identifier: 34:D2:66:90:77:48:44:01:19:74:D3:59:D7:85:15:C6:DA:CC:AC:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/4038b20b-42b0-34fd-ab16-9e3f170db289.roa Signing time: Thu 16 Oct 2025 13:00:38 +0000 ROA not before: Thu 16 Oct 2025 13:00:38 +0000 ROA not after: Wed 14 Jan 2026 14:00:38 +0000 asID: 397301 IP address blocks: 2604:30::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8a:7c:d2:70:d2:7b:be:84:8b:ca:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f Validity Not Before: Oct 16 13:00:38 2025 GMT Not After : Jan 14 14:00:38 2026 GMT Subject: CN=f5b0d374-c1d6-4e72-ad8a-9e4f6c455c42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:df:80:e6:78:14:db:f8:53:5c:b6:51:70:c7: 3e:ec:c9:37:02:6a:35:ef:bf:d9:a5:c7:75:e2:9c: 8d:6d:16:84:ce:4e:bc:26:57:dd:a1:25:26:63:a9: cc:35:6e:28:32:77:9a:79:8f:8c:03:a1:4a:ae:a9: 9d:0d:09:90:68:bc:4f:80:56:bd:c1:91:ac:13:85: 6c:3f:dc:d3:4a:21:cd:84:e0:0e:8c:c8:34:07:4e: a0:a5:96:f9:3d:ed:1b:5e:33:12:94:10:b5:b3:31: dd:d0:bf:b4:52:01:80:63:31:74:6b:90:e5:6f:c3: 6f:ae:51:96:19:98:37:c1:ec:26:f7:1e:d5:8f:01: dd:3e:2d:15:67:44:58:c0:a6:85:b0:a9:29:58:0f: 93:bf:0a:59:72:6c:0c:17:6b:83:14:5a:b5:62:ed: 77:c5:de:93:db:80:50:3e:85:3b:df:4b:76:9e:1b: 2b:b5:2e:13:d2:ce:cf:0d:dd:aa:d9:d1:e1:eb:3e: d5:a7:e3:e8:c6:11:a1:4f:d4:15:c7:df:97:b1:22: 89:c2:16:36:c4:08:82:b3:18:95:81:41:9e:93:52: d1:30:47:38:ec:33:bb:cb:a2:04:60:c2:9a:ef:04: 6e:a0:86:fb:17:70:a4:c3:9c:5c:02:0d:2b:4f:fd: 8c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:6C:52:B3:18:31:B7:B2:5E:1E:8F:57:60:E3:2C:22:49:A8:D2:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/4038b20b-42b0-34fd-ab16-9e3f170db289.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.crl X509v3 Authority Key Identifier: keyid:34:D2:66:90:77:48:44:01:19:74:D3:59:D7:85:15:C6:DA:CC:AC:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.cer sbgp-ipAddrBlock: critical IPv6: 2604:30::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:98:3d:6c:d7:93:27:1b:83:3d:a9:6c:8a:9b:86:be:2b:d0: e6:dd:76:71:01:c1:c7:5e:15:aa:98:f2:03:00:ce:98:42:e1: f7:ad:c1:ae:a7:1e:e9:42:ee:32:ea:31:ed:a7:b4:13:19:6c: dd:8a:f5:7d:3d:64:2a:50:4b:12:73:86:3b:e0:98:88:32:ad: e9:11:99:2d:e7:b2:2f:ae:c3:95:37:93:a5:ac:ae:af:c4:74: 7b:4b:ef:7b:ab:e1:bb:ed:be:f3:0f:4d:d9:fe:4c:57:c8:c0: a4:bf:6c:cc:ad:5f:0b:7c:ba:b9:e5:9b:96:8a:11:ec:ca:06: df:2c:ae:4f:bc:02:2e:39:66:9a:b4:71:92:27:cc:36:69:1a: 6d:57:02:62:02:3c:8b:9d:94:aa:ed:4f:28:c1:62:c5:8d:86: ea:ec:a6:c9:74:53:73:67:41:1c:7e:1c:d4:ad:92:6f:39:3e: 20:b9:f3:cb:1d:3d:7e:14:b7:1b:9b:7e:37:68:ba:21:d4:04: 18:38:c4:f4:80:94:41:97:a0:55:62:8e:1b:d1:1b:0d:20:cd: 77:a6:88:08:34:12:4e:99:ef:09:a2:ee:cf:19:0a:a7:e4:44: b8:6d:5c:ef:d1:a2:41:06:94:8f:e4:70:c3:dc:84:7b:07:8b: af:0d:c6:a4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuKfNJw0nu+hIvKawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFkOWMyYzEtOGZiMy00YjM4LWI2ZDYtOTc5OWI0ZTM3 NzJmMB4XDTI1MTAxNjEzMDAzOFoXDTI2MDExNDE0MDAzOFowLzEtMCsGA1UEAxMk ZjViMGQzNzQtYzFkNi00ZTcyLWFkOGEtOWU0ZjZjNDU1YzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtd+A5ngU2/hTXLZRcMc+7Mk3Amo177/Zpcd1 4pyNbRaEzk68JlfdoSUmY6nMNW4oMneaeY+MA6FKrqmdDQmQaLxPgFa9wZGsE4Vs P9zTSiHNhOAOjMg0B06gpZb5Pe0bXjMSlBC1szHd0L+0UgGAYzF0a5Dlb8NvrlGW GZg3wewm9x7VjwHdPi0VZ0RYwKaFsKkpWA+TvwpZcmwMF2uDFFq1Yu13xd6T24BQ PoU730t2nhsrtS4T0s7PDd2q2dHh6z7Vp+PoxhGhT9QVx9+XsSKJwhY2xAiCsxiV gUGek1LRMEc47DO7y6IEYMKa7wRuoIb7F3Ckw5xcAg0rT/2MlwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBNsUrMYMbeyXh6PV2DjLCJJqNJ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jMWQ5 YzJjMS04ZmIzLTRiMzgtYjZkNi05Nzk5YjRlMzc3MmYvNDAzOGIyMGItNDJiMC0z NGZkLWFiMTYtOWUzZjE3MGRiMjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzFkOWMyYzEtOGZiMy00YjM4LWI2 ZDYtOTc5OWI0ZTM3NzJmL2MxZDljMmMxLThmYjMtNGIzOC1iNmQ2LTk3OTliNGUz NzcyZi5jcmwwHwYDVR0jBBgwFoAUNNJmkHdIRAEZdNNZ14UVxtrMrM4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jMWQ5YzJjMS04ZmIzLTRiMzgtYjZkNi05Nzk5 YjRlMzc3MmYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQAMDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCFmD1s15MnG4M9qWyKm4a+K9Dm3XZxAcHHXhWqmPIDAM6YQuH3rcGu px7pQu4y6jHtp7QTGWzdivV9PWQqUEsSc4Y74JiIMq3pEZkt57IvrsOVN5OlrK6v xHR7S+97q+G77b7zD03Z/kxXyMCkv2zMrV8LfLq55ZuWihHsygbfLK5PvAIuOWaa tHGSJ8w2aRptVwJiAjyLnZSq7U8owWLFjYbq7KbJdFNzZ0EcfhzUrZJvOT4gufPL HT1+FLcbm343aLoh1AQYOMT0gJRBl6BVYo4b0RsNIM13pogINBJOme8Jou7PGQqn 5ES4bVzv0aJBBpSP5HDD3IR7B4uvDcak -----END CERTIFICATE-----Generated at Wed Nov 5 15:13:00 2025 by rpki-client