$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0ff683ee-75b9-4ed9-9e48-e74a8e810428/66c81a00-98a5-31d0-9c73-7e2cbd4aa428.roa File: 66c81a00-98a5-31d0-9c73-7e2cbd4aa428.roa (raw, json) Hash identifier: 3gtUmV7K4b1dlfQDZzc+45XcGFEXxgniHUrPJnkfCMQ= Subject key identifier: 09:59:67:D1:E3:84:59:AC:E2:D9:15:D6:B3:96:0E:4D:70:37:CE:31 Certificate issuer: /CN=0ff683ee-75b9-4ed9-9e48-e74a8e810428 Certificate serial: 010D0C9F4328584BB88D1829C70975F99D347980 Authority key identifier: F4:B5:1C:88:5E:B7:42:18:B6:70:88:4B:A6:32:76:12:14:5D:9B:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0ff683ee-75b9-4ed9-9e48-e74a8e810428.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0ff683ee-75b9-4ed9-9e48-e74a8e810428/66c81a00-98a5-31d0-9c73-7e2cbd4aa428.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 399914 IP address blocks: 2606:7240::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0ff683ee-75b9-4ed9-9e48-e74a8e810428/0ff683ee-75b9-4ed9-9e48-e74a8e810428.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0ff683ee-75b9-4ed9-9e48-e74a8e810428/0ff683ee-75b9-4ed9-9e48-e74a8e810428.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0ff683ee-75b9-4ed9-9e48-e74a8e810428.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:18:29:c7:09:75:f9:9d:34:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ff683ee-75b9-4ed9-9e48-e74a8e810428 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=ed4efc71-5849-49ae-b44a-44f16d3f5496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:54:d8:4a:53:e6:dc:3a:fd:ef:53:6a:71:47: f2:53:33:7c:f9:df:69:fb:82:e6:5c:58:78:ae:79: ab:7e:51:9a:af:ab:44:62:96:e5:da:3c:a4:11:53: bc:08:19:d0:64:20:b1:f4:b3:56:be:3f:9b:51:9d: 80:5b:a4:07:cc:ce:5d:1f:a6:0a:39:c4:46:f7:86: 73:82:dd:94:fa:0d:90:fe:7c:60:78:d8:58:4f:24: 9d:95:e4:7f:88:ef:b9:28:06:e2:88:a5:25:6f:52: 74:b6:c2:19:03:85:10:5d:aa:ef:65:35:8d:88:d4: f2:8d:4e:55:9a:00:0b:a8:41:60:0b:e1:0f:bb:4e: db:11:aa:d0:8a:79:78:59:99:d2:f5:d9:c2:c1:4a: db:ae:44:52:60:8c:8b:cc:7f:3e:b0:a3:1a:6a:83: 00:ca:44:c9:82:e9:87:0f:9a:61:5c:1a:51:17:00: 9e:52:53:7b:0e:69:4b:00:84:55:b5:74:1d:c2:86: c4:0f:3b:b7:c0:9f:2e:48:ae:23:65:b3:20:f8:fe: 7c:70:ca:e6:7e:e6:a4:25:40:97:f8:e1:54:19:98: 8b:ff:c2:bd:14:c2:27:e2:74:d2:aa:be:fd:3e:e8: a3:32:9e:b6:81:7a:20:c7:bb:2b:74:ba:c6:6c:9f: fc:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:59:67:D1:E3:84:59:AC:E2:D9:15:D6:B3:96:0E:4D:70:37:CE:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0ff683ee-75b9-4ed9-9e48-e74a8e810428/66c81a00-98a5-31d0-9c73-7e2cbd4aa428.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0ff683ee-75b9-4ed9-9e48-e74a8e810428/0ff683ee-75b9-4ed9-9e48-e74a8e810428.crl X509v3 Authority Key Identifier: keyid:F4:B5:1C:88:5E:B7:42:18:B6:70:88:4B:A6:32:76:12:14:5D:9B:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0ff683ee-75b9-4ed9-9e48-e74a8e810428.cer sbgp-ipAddrBlock: critical IPv6: 2606:7240::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:cf:ee:ae:7a:72:48:5c:f2:d7:1c:b6:ff:47:7a:53:b8:32: 15:9e:8a:b1:57:79:c6:15:8c:5f:7f:55:ea:18:e6:e5:98:10: 02:9e:f3:b1:dd:88:18:17:d0:75:37:8f:0a:a9:f4:8b:41:e2: c9:d7:00:df:4d:3d:99:3c:7a:b0:a4:60:3b:98:65:f9:52:89: f0:47:8d:5f:1d:31:91:db:2f:a2:31:dd:0c:84:6a:57:20:08: 65:9d:2e:58:c7:ae:20:42:48:0b:25:56:aa:e8:e7:ba:f0:bf: 01:66:eb:ed:f9:69:bd:05:79:66:2e:ea:39:f5:bb:c0:e7:5b: 97:aa:26:6e:c7:25:f5:69:02:70:79:f1:0a:55:db:4d:c8:6e: 21:bf:3d:0b:35:3d:96:d5:c7:f9:59:75:53:c0:58:2a:cd:d0: b8:63:52:80:89:0d:a9:e5:a9:1e:c3:48:ba:e0:64:46:49:a1: ef:36:45:e5:42:5c:74:09:fe:a0:4e:e6:00:b3:c9:a9:42:7b: a5:8f:96:db:b1:55:d2:3b:c1:bc:1d:c5:a1:83:fc:b3:41:90: 8c:55:2c:a3:8e:de:06:87:df:33:3d:1d:cc:36:ed:da:26:25: a4:44:c5:16:a2:90:9c:fd:dc:26:5e:05:44:06:73:f9:96:2c: 03:ce:e3:3c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEu4jRgpxwl1+Z00eYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGZmNjgzZWUtNzViOS00ZWQ5LTllNDgtZTc0YThlODEw NDI4MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZWQ0ZWZjNzEtNTg0OS00OWFlLWI0NGEtNDRmMTZkM2Y1NDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1TYSlPm3Dr971NqcUfyUzN8+d9p+4LmXFh4 rnmrflGar6tEYpbl2jykEVO8CBnQZCCx9LNWvj+bUZ2AW6QHzM5dH6YKOcRG94Zz gt2U+g2Q/nxgeNhYTySdleR/iO+5KAbiiKUlb1J0tsIZA4UQXarvZTWNiNTyjU5V mgALqEFgC+EPu07bEarQinl4WZnS9dnCwUrbrkRSYIyLzH8+sKMaaoMAykTJgumH D5phXBpRFwCeUlN7DmlLAIRVtXQdwobEDzu3wJ8uSK4jZbMg+P58cMrmfuakJUCX +OFUGZiL/8K9FMIn4nTSqr79PuijMp62gXogx7srdLrGbJ/8bQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAlZZ9HjhFms4tkV1rOWDk1wN84xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wZmY2 ODNlZS03NWI5LTRlZDktOWU0OC1lNzRhOGU4MTA0MjgvNjZjODFhMDAtOThhNS0z MWQwLTljNzMtN2UyY2JkNGFhNDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGZmNjgzZWUtNzViOS00ZWQ5LTll NDgtZTc0YThlODEwNDI4LzBmZjY4M2VlLTc1YjktNGVkOS05ZTQ4LWU3NGE4ZTgx MDQyOC5jcmwwHwYDVR0jBBgwFoAU9LUciF63Qhi2cIhLpjJ2EhRdm3owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wZmY2ODNlZS03NWI5LTRlZDktOWU0OC1lNzRh OGU4MTA0MjguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgZyQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBnz+6uenJIXPLXHLb/R3pTuDIVnoqxV3nGFYxff1XqGOblmBACnvOx 3YgYF9B1N48KqfSLQeLJ1wDfTT2ZPHqwpGA7mGX5UonwR41fHTGR2y+iMd0MhGpX IAhlnS5Yx64gQkgLJVaq6Oe68L8BZuvt+Wm9BXlmLuo59bvA51uXqiZuxyX1aQJw efEKVdtNyG4hvz0LNT2W1cf5WXVTwFgqzdC4Y1KAiQ2p5akew0i64GRGSaHvNkXl Qlx0Cf6gTuYAs8mpQnulj5bbsVXSO8G8HcWhg/yzQZCMVSyjjt4Gh98zPR3MNu3a JiWkRMUWopCc/dwmXgVEBnP5liwDzuM8 -----END CERTIFICATE-----Generated at Wed Nov 5 16:07:33 2025 by rpki-client