$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/dfb9926d-6216-3b2e-836f-c99868aba2de.roa File: dfb9926d-6216-3b2e-836f-c99868aba2de.roa (raw, json) Hash identifier: jqO2THClINvayB1v14PZ3VakgjEQebsHg6qnWnLCl8w= Subject key identifier: 0A:19:B7:9E:F9:20:63:8E:77:C9:79:28:6B:12:54:F5:B6:1A:85:CF Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584B7DECCB97F8D26F34AC0A7020 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/dfb9926d-6216-3b2e-836f-c99868aba2de.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 36137 IP address blocks: 2600:bc04::/32 maxlen: 100 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:cb:97:f8:d2:6f:34:ac:0a:70:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=6e650ae2-93d8-49b7-a551-348e80b3e9ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ca:7b:c1:0b:3c:f5:27:13:4b:44:bb:86:17: 7c:0e:e9:6f:e4:df:bb:a5:0d:79:5e:6d:a5:39:38: 6f:1d:78:03:e7:b7:e5:14:79:db:1a:40:7b:4e:17: d4:fc:54:c7:89:1f:69:95:78:90:42:65:35:bb:9b: 8e:1f:98:f9:0c:79:62:4e:4c:c6:63:a0:54:7f:2e: 83:b2:fe:4a:a9:99:80:e2:d0:b1:c0:21:cb:f1:5a: a0:b1:c7:2a:b7:f1:b4:02:c3:46:a4:98:45:f7:4d: 71:08:85:71:38:24:25:d3:3a:5a:00:a8:28:7d:67: f0:67:ce:cf:45:ea:68:20:4f:ee:40:cb:d6:f0:e2: 26:ed:9d:41:ec:96:b6:00:fa:4f:2d:ba:f9:a4:31: 80:ed:03:d2:f9:a2:94:48:77:a2:5f:6d:08:71:9c: a0:bf:e9:20:6b:1f:f0:62:9e:1f:e7:8a:c8:7c:70: 48:78:86:ce:d8:51:62:95:b8:76:1e:47:a3:65:7a: a7:28:e0:4a:fc:4f:74:25:35:e8:cd:7c:22:a8:3e: f6:37:7b:f9:f8:b1:5c:b2:c5:a2:bf:0b:cd:aa:b4: 92:72:5e:e9:ac:94:e6:3d:75:90:47:76:2c:4c:fe: 89:84:6c:bd:38:4a:2a:d2:a7:2d:be:ca:a9:02:e9: 35:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:19:B7:9E:F9:20:63:8E:77:C9:79:28:6B:12:54:F5:B6:1A:85:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/dfb9926d-6216-3b2e-836f-c99868aba2de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv6: 2600:bc04::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:b5:50:95:22:a1:ba:e7:03:bd:ca:a3:91:4d:57:42:26:36: 4f:95:42:4e:66:e7:c6:fc:14:85:b0:43:6a:79:84:ec:18:a2: 74:d7:f5:57:70:d1:90:af:19:2b:49:17:86:99:ac:69:ea:56: ed:70:83:fe:dd:c8:7e:37:d7:6f:66:99:59:4f:51:fc:a5:99: 93:ec:78:88:5a:4b:10:13:b2:66:78:32:d6:35:2b:54:94:8c: 9a:62:43:43:95:15:74:98:99:0a:79:59:d1:89:45:6b:12:f8: 5c:43:f0:3f:0b:56:bd:9a:1f:5c:73:64:e6:52:39:51:73:af: 2e:bf:73:1a:d2:b2:1c:06:9d:a7:1b:a0:1e:b0:dd:68:13:6f: f8:30:82:1d:56:76:70:79:9c:d9:d7:1a:0d:44:07:50:59:63: e6:cd:4d:a2:5b:d8:89:7a:23:54:23:07:3b:5c:39:09:b3:54: bc:e2:df:0f:56:22:b0:30:81:4d:6b:b5:60:9e:7e:e1:1e:6e: 17:db:55:87:75:4c:3b:92:b3:38:30:1f:0f:c5:69:3c:e5:a7: 28:dc:9d:77:5d:74:62:9b:16:0f:dd:24:bf:8c:aa:3e:05:93: e0:e8:c5:19:72:a3:5c:4f:aa:ec:95:17:12:7c:d1:b1:e6:d2: 6f:06:e3:22 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt97MuX+NJvNKwKcCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk NmU2NTBhZTItOTNkOC00OWI3LWE1NTEtMzQ4ZTgwYjNlOWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosp7wQs89ScTS0S7hhd8Dulv5N+7pQ15Xm2l OThvHXgD57flFHnbGkB7ThfU/FTHiR9plXiQQmU1u5uOH5j5DHliTkzGY6BUfy6D sv5KqZmA4tCxwCHL8Vqgsccqt/G0AsNGpJhF901xCIVxOCQl0zpaAKgofWfwZ87P RepoIE/uQMvW8OIm7Z1B7Ja2APpPLbr5pDGA7QPS+aKUSHeiX20IcZygv+kgax/w Yp4f54rIfHBIeIbO2FFilbh2HkejZXqnKOBK/E90JTXozXwiqD72N3v5+LFcssWi vwvNqrSScl7prJTmPXWQR3YsTP6JhGy9OEoq0qctvsqpAuk1twIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAoZt575IGOOd8l5KGsSVPW2GoXPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvZGZiOTkyNmQtNjIxNi0z YjJlLTgzNmYtYzk5ODY4YWJhMmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgC8BDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAPtVCVIqG65wO9yqORTVdCJjZPlUJOZufG/BSFsENqeYTsGKJ01/VX cNGQrxkrSReGmaxp6lbtcIP+3ch+N9dvZplZT1H8pZmT7HiIWksQE7JmeDLWNStU lIyaYkNDlRV0mJkKeVnRiUVrEvhcQ/A/C1a9mh9cc2TmUjlRc68uv3Ma0rIcBp2n G6AesN1oE2/4MIIdVnZweZzZ1xoNRAdQWWPmzU2iW9iJeiNUIwc7XDkJs1S84t8P ViKwMIFNa7Vgnn7hHm4X21WHdUw7krM4MB8PxWk85aco3J13XXRimxYP3SS/jKo+ BZPg6MUZcqNcT6rslRcSfNGx5tJvBuMi -----END CERTIFICATE-----Generated at Tue Nov 4 22:04:56 2025 by rpki-client