$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/553adf4c-94fa-38fb-bce6-21adbbc2bf2c.roa File: 553adf4c-94fa-38fb-bce6-21adbbc2bf2c.roa (raw, json) Hash identifier: xVw95btfY3pfJ3NoCYFWWu7WjhMYNtTN/V1ILluy6VU= Subject key identifier: 52:00:8C:B3:87:A0:AD:9A:3D:90:68:0B:2E:C0:AB:A5:D1:AE:53:6B Certificate issuer: /CN=039cfe68-90bd-49ec-9597-6ac7ebfc0cf9 Certificate serial: 010D0C9F4328584BA9325F65E469EF26D23D74C0 Authority key identifier: 68:4C:8A:9A:C3:36:3B:3A:06:FA:5D:6B:80:2F:49:44:EA:10:01:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/553adf4c-94fa-38fb-bce6-21adbbc2bf2c.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 3663 IP address blocks: 2604:aa00::/32 maxlen: 56 2607:f430::/32 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:5f:65:e4:69:ef:26:d2:3d:74:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=039cfe68-90bd-49ec-9597-6ac7ebfc0cf9 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=6b00bbf4-cac8-444e-a099-b0bce24c6d5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7b:3c:9a:40:20:64:5f:f8:56:e8:dc:fe:5b: 2c:2d:0e:61:31:dd:85:5f:df:f5:f0:d6:de:87:d7: e4:6d:78:c2:53:62:e9:49:11:15:8b:b1:cb:a1:f0: 48:f1:8e:47:90:f3:f5:b6:a3:b9:c7:2f:ad:f9:3f: d4:e4:3a:e5:fc:c3:6c:b8:d4:a0:31:89:3c:e9:ea: 52:c1:93:38:9e:55:8d:af:2b:76:99:cd:21:cd:33: b8:e9:f0:7a:20:1c:f0:c6:52:aa:7f:f0:c2:fe:0f: f3:84:18:44:10:0b:d4:34:f0:49:3b:2b:33:78:d4: 31:19:22:eb:7f:68:09:b1:aa:68:d7:c2:af:36:85: d7:6c:5f:3c:c9:25:4a:75:4a:1a:ed:86:bc:91:01: 36:d2:5e:ca:f7:dc:36:e6:b0:11:dc:0b:61:91:3d: 9b:87:25:67:23:13:15:2f:81:6c:d1:c0:15:8a:c6: 48:13:b3:9c:fa:88:52:ca:53:01:8c:b6:5e:66:f2: 13:1a:5d:f1:34:9f:3e:c6:5f:13:70:54:5d:36:d7: 3f:3f:31:24:6d:16:90:9f:f5:78:21:46:68:9e:cb: 96:be:66:2b:ee:ea:10:83:5e:cd:47:27:0d:47:9a: b5:4e:e4:f7:f7:6e:d0:3e:ce:f3:71:5e:0b:43:28: af:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:00:8C:B3:87:A0:AD:9A:3D:90:68:0B:2E:C0:AB:A5:D1:AE:53:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/553adf4c-94fa-38fb-bce6-21adbbc2bf2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.crl X509v3 Authority Key Identifier: keyid:68:4C:8A:9A:C3:36:3B:3A:06:FA:5D:6B:80:2F:49:44:EA:10:01:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.cer sbgp-ipAddrBlock: critical IPv6: 2604:aa00::/32 2607:f430::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:39:98:64:44:b6:9c:84:b0:48:52:6e:71:da:75:7f:cb:c1: 1d:83:bd:ab:62:22:4b:6a:50:ff:42:b2:f7:46:cf:83:83:56: 1c:91:75:fe:d4:0f:26:96:2f:46:c8:11:73:f1:de:df:72:ed: b0:48:6e:56:23:5b:d4:02:da:f7:1f:f7:2c:ff:9f:59:c0:8f: 13:a7:ae:88:2e:27:56:6d:4d:d8:c9:e9:09:1b:01:3f:dd:08: bf:41:16:4a:b1:16:72:c5:01:3c:83:8d:5f:18:d3:ce:da:61: 59:72:97:af:d9:59:e0:0c:b5:70:c9:e4:7d:97:39:98:9f:bc: d4:38:36:52:28:8d:6c:3a:7e:ac:ae:b6:80:5f:ba:dd:0c:a4: f3:81:a6:3c:a0:98:f2:3d:a2:89:c6:fd:c4:78:9e:1c:b8:6f: 76:86:ac:44:ed:9a:5f:1b:5c:57:3a:98:c3:d1:f1:63:97:40: fa:68:fd:22:22:e4:12:0d:f0:36:3f:56:04:6c:f3:21:0a:0a: 36:90:86:a7:f3:5f:7a:84:38:ca:cc:a0:cc:9a:2e:1e:b6:0e: 86:41:8a:3d:62:fd:68:2c:41:29:98:3e:c6:4c:a7:01:1a:f5: ad:33:8c:71:cd:5d:f0:07:6c:ba:a4:d8:1b:f4:da:3c:7e:1e: 72:e5:4d:28 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEupMl9l5GnvJtI9dMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM5Y2ZlNjgtOTBiZC00OWVjLTk1OTctNmFjN2ViZmMw Y2Y5MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk NmIwMGJiZjQtY2FjOC00NDRlLWEwOTktYjBiY2UyNGM2ZDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXs8mkAgZF/4Vujc/lssLQ5hMd2FX9/18Nbe h9fkbXjCU2LpSREVi7HLofBI8Y5HkPP1tqO5xy+t+T/U5Drl/MNsuNSgMYk86epS wZM4nlWNryt2mc0hzTO46fB6IBzwxlKqf/DC/g/zhBhEEAvUNPBJOyszeNQxGSLr f2gJsapo18KvNoXXbF88ySVKdUoa7Ya8kQE20l7K99w25rAR3AthkT2bhyVnIxMV L4Fs0cAVisZIE7Oc+ohSylMBjLZeZvITGl3xNJ8+xl8TcFRdNtc/PzEkbRaQn/V4 IUZonsuWvmYr7uoQg17NRycNR5q1TuT3927QPs7zcV4LQyivmQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFFIAjLOHoK2aPZBoCy7Aq6XRrlNrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wMzlj ZmU2OC05MGJkLTQ5ZWMtOTU5Ny02YWM3ZWJmYzBjZjkvNTUzYWRmNGMtOTRmYS0z OGZiLWJjZTYtMjFhZGJiYzJiZjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMDM5Y2ZlNjgtOTBiZC00OWVjLTk1 OTctNmFjN2ViZmMwY2Y5LzAzOWNmZTY4LTkwYmQtNDllYy05NTk3LTZhYzdlYmZj MGNmOS5jcmwwHwYDVR0jBBgwFoAUaEyKmsM2OzoG+l1rgC9JROoQAX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wMzljZmU2OC05MGJkLTQ5ZWMtOTU5Ny02YWM3 ZWJmYzBjZjkuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAJgSqAAMF ACYH9DAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAmDmYZES2nISwSFJucdp1f8vBHYO9q2IiS2pQ/0Ky90bP g4NWHJF1/tQPJpYvRsgRc/He33LtsEhuViNb1ALa9x/3LP+fWcCPE6euiC4nVm1N 2MnpCRsBP90Iv0EWSrEWcsUBPIONXxjTztphWXKXr9lZ4Ay1cMnkfZc5mJ+81Dg2 UiiNbDp+rK62gF+63Qyk84GmPKCY8j2iicb9xHieHLhvdoasRO2aXxtcVzqYw9Hx Y5dA+mj9IiLkEg3wNj9WBGzzIQoKNpCGp/NfeoQ4ysygzJouHrYOhkGKPWL9aCxB KZg+xkynARr1rTOMcc1d8AdsuqTYG/TaPH4ecuVNKA== -----END CERTIFICATE-----Generated at Wed Nov 5 23:02:55 2025 by rpki-client