$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5260160f-964a-33ec-bfb0-da544e679e3a.roa File: 5260160f-964a-33ec-bfb0-da544e679e3a.roa (raw, json) Hash identifier: 7AaOhVVDN2LQM4EIluTdRXU5EG41JM5qyamzOXs0Er0= Subject key identifier: C6:80:14:4F:4D:57:B9:9C:3E:9F:7C:79:7E:A9:27:4E:91:6B:14:37 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584B7F5227B01F75836D3652B700 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5260160f-964a-33ec-bfb0-da544e679e3a.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 33363 IP address blocks: 2605:a401:8028::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:27:b0:1f:75:83:6d:36:52:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=c9e8c616-de63-409a-80a7-f1290f99a2b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:88:d7:16:05:5b:f6:da:f7:02:b4:77:61:66: 83:4c:ed:bb:37:19:5f:95:93:29:20:d3:af:a5:71: 75:e8:fa:f6:4c:ca:a8:b6:f8:66:40:9b:d0:81:4a: ae:34:91:66:fa:86:74:fc:a1:84:df:71:39:be:40: 31:05:e8:c8:2c:3d:60:46:ad:54:bf:ff:78:d4:f7: 68:3d:94:27:b7:ee:d9:a6:95:c7:b6:35:dc:86:15: 1c:92:1d:d0:34:c3:6b:4b:a1:90:f7:ba:11:71:49: 91:19:1a:37:4d:6e:ae:c7:c8:cd:cb:f0:a3:84:11: 75:29:b2:e3:8d:3b:b0:ae:70:1d:eb:24:36:cc:0d: 29:f7:0f:bd:9a:31:eb:f7:cc:c8:3b:00:97:9a:77: 9f:27:34:b1:d7:4e:fe:a3:b9:13:63:d9:41:07:54: ee:bb:f2:7d:ca:5c:1f:51:98:71:45:f8:ae:e6:db: 46:60:d2:5e:cc:15:bb:60:64:02:0c:78:fd:6b:ef: 71:55:44:4d:47:91:d1:2a:7d:f4:a9:72:8a:94:76: 42:35:a4:6e:3a:59:dc:46:95:b4:6a:78:b7:63:24: 99:4d:ed:b4:bb:c5:7c:84:8b:69:43:0d:8c:cb:69: 35:a8:5f:eb:f4:7a:b7:46:c2:9c:d1:38:e0:f9:45: e3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:80:14:4F:4D:57:B9:9C:3E:9F:7C:79:7E:A9:27:4E:91:6B:14:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5260160f-964a-33ec-bfb0-da544e679e3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv6: 2605:a401:8028::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:6c:73:c5:e0:03:f6:80:6b:80:e9:de:17:fd:01:97:f1:e3: e6:d5:3b:a4:f3:12:97:49:83:49:b5:24:87:39:a1:ee:be:b6: e0:e4:d7:30:c4:29:22:9b:f7:4c:45:be:b5:15:12:f9:d7:2d: e3:70:f2:11:9c:2b:1e:a2:28:a6:0d:4e:c7:12:ec:76:28:13: 41:36:00:dd:6b:7e:ca:17:d0:b9:32:29:eb:a1:7e:cc:50:63: e4:8b:02:b1:f7:84:91:ba:7a:6e:ba:6e:ad:c8:91:a0:7a:11: 13:da:0b:a3:52:32:c4:e6:de:ec:59:e6:4c:de:97:48:00:c2: e8:e9:4c:ac:21:4b:73:31:3b:0b:ff:9e:1d:de:86:5b:e5:4d: 6c:d3:f5:82:c7:cb:6d:20:4e:85:27:52:bc:6d:67:fa:03:81: c4:c2:b1:46:a4:6b:11:a0:d1:59:47:dd:9b:5d:ac:c1:ff:1f: 99:0b:de:e4:2d:c8:22:bb:17:a1:98:27:1a:89:48:81:e1:2e: 42:45:68:29:41:e8:7b:82:75:04:75:fe:e7:55:d8:39:a0:a1: 65:7e:18:8e:18:ea:47:81:ea:57:0b:b2:af:b6:c7:58:f8:46: b7:e2:a0:7f:1e:71:4b:e0:e4:42:1f:7b:76:40:1a:68:7c:22: 07:9c:ee:94 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt/UiewH3WDbTZStwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk YzllOGM2MTYtZGU2My00MDlhLTgwYTctZjEyOTBmOTlhMmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYjXFgVb9tr3ArR3YWaDTO27NxlflZMpINOv pXF16Pr2TMqotvhmQJvQgUquNJFm+oZ0/KGE33E5vkAxBejILD1gRq1Uv/941Pdo PZQnt+7ZppXHtjXchhUckh3QNMNrS6GQ97oRcUmRGRo3TW6ux8jNy/CjhBF1KbLj jTuwrnAd6yQ2zA0p9w+9mjHr98zIOwCXmnefJzSx107+o7kTY9lBB1Tuu/J9ylwf UZhxRfiu5ttGYNJezBW7YGQCDHj9a+9xVURNR5HRKn30qXKKlHZCNaRuOlncRpW0 ani3YySZTe20u8V8hItpQw2My2k1qF/r9Hq3RsKc0Tjg+UXjuwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMaAFE9NV7mcPp98eX6pJ06RaxQ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNTI2MDE2MGYtOTY0YS0z M2VjLWJmYjAtZGE1NDRlNjc5ZTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYAo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJRsc8XgA/aAa4Dp3hf9AZfx4+bVO6TzEpdJg0m1JIc5oe6+tuDk 1zDEKSKb90xFvrUVEvnXLeNw8hGcKx6iKKYNTscS7HYoE0E2AN1rfsoX0LkyKeuh fsxQY+SLArH3hJG6em66bq3IkaB6ERPaC6NSMsTm3uxZ5kzel0gAwujpTKwhS3Mx Owv/nh3ehlvlTWzT9YLHy20gToUnUrxtZ/oDgcTCsUakaxGg0VlH3ZtdrMH/H5kL 3uQtyCK7F6GYJxqJSIHhLkJFaClB6HuCdQR1/udV2DmgoWV+GI4Y6keB6lcLsq+2 x1j4RrfioH8ecUvg5EIfe3ZAGmh8Igec7pQ= -----END CERTIFICATE-----Generated at Wed Nov 5 01:01:10 2025 by rpki-client