$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/1403cc38-4b3c-3929-8983-3db05b1f9e3e.roa File: 1403cc38-4b3c-3929-8983-3db05b1f9e3e.roa (raw, json) Hash identifier: nQ+MHolZKBpz1OJ2kBQ0QcMa7THIFJiXWKjmURpgkQM= Subject key identifier: 68:73:75:27:07:89:6D:59:73:C3:21:50:68:90:BF:2C:75:69:D6:9A Certificate issuer: /CN=26dda032-79f9-423e-9994-33fdb1cd44db Certificate serial: 010D0C9F4328584B99D78B720016BC6C6AAA6E00 Authority key identifier: 94:EC:47:35:2C:31:EC:44:41:FF:E1:E1:D7:7A:71:05:4F:15:1D:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/1403cc38-4b3c-3929-8983-3db05b1f9e3e.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 16509 IP address blocks: 2620:104:6003::/48 maxlen: 48 2620:104:6004::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/26dda032-79f9-423e-9994-33fdb1cd44db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/26dda032-79f9-423e-9994-33fdb1cd44db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:8b:72:00:16:bc:6c:6a:aa:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26dda032-79f9-423e-9994-33fdb1cd44db Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=f05e1df3-5b04-4864-b82a-4bf22291ccf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:23:c4:85:25:0f:76:ec:65:cb:5c:18:e5:89: 16:e7:a6:11:12:48:0a:81:88:01:f1:40:3e:cd:db: 56:ee:c4:73:35:9f:f2:a3:71:46:05:25:e2:13:4b: 7c:de:bd:d9:54:cd:8f:0c:3d:66:0f:95:51:e1:11: d4:a1:b1:b4:eb:b3:50:64:3c:33:c8:cc:f3:c0:10: a0:0b:d1:fc:fa:ef:41:64:11:ff:04:cd:d6:a6:9b: 79:0f:22:0f:e0:7c:37:97:e6:93:d7:13:8b:b3:e9: 57:6d:16:85:c7:8b:ec:45:b2:5f:6c:3a:eb:9b:ce: fa:cd:8f:45:be:48:10:5d:99:ee:60:73:e3:e1:c7: 89:eb:bc:a3:94:f7:1f:a7:4d:ad:67:5f:4c:47:36: e8:fe:9b:8d:8b:46:95:42:36:c2:15:61:49:42:1e: 3e:b2:c1:a1:e7:29:87:bb:91:a5:7d:fa:35:b1:2a: 4c:08:4f:74:5c:46:42:b6:f1:4a:a5:7b:05:57:e1: 94:de:ed:61:c0:dd:c9:50:4f:f5:e0:3f:60:5e:ac: d5:a5:a2:a4:0d:3a:0d:1c:9d:df:4a:32:d0:4f:cf: 33:63:1f:d5:55:2f:7d:24:c1:ee:d0:95:dd:62:7c: 7d:20:a9:5a:7e:09:a2:58:da:e3:ea:8b:14:d7:7e: 7e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:73:75:27:07:89:6D:59:73:C3:21:50:68:90:BF:2C:75:69:D6:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/1403cc38-4b3c-3929-8983-3db05b1f9e3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/26dda032-79f9-423e-9994-33fdb1cd44db.crl X509v3 Authority Key Identifier: keyid:94:EC:47:35:2C:31:EC:44:41:FF:E1:E1:D7:7A:71:05:4F:15:1D:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db.cer sbgp-ipAddrBlock: critical IPv6: 2620:104:6003::-2620:104:6004:ffff:ffff:ffff:ffff:ffff X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:ea:b2:c5:fc:1b:05:7e:a9:40:69:39:1c:a8:9d:b7:dd:9b: 0b:f2:1d:d3:16:8c:1f:fd:39:36:4f:9e:36:f0:a4:c0:38:7a: 81:30:a1:90:2e:b5:96:fb:c0:7b:a6:48:a8:ad:ae:7d:4b:ea: b1:24:a8:b1:1b:2f:f7:9b:1a:54:5e:70:68:d3:33:11:3d:63: f3:63:60:17:8f:ba:56:b5:b7:6d:09:40:9b:27:fc:04:68:78: 42:95:19:af:a4:9b:e2:91:16:54:1c:1f:80:f6:4f:ee:b4:2c: e2:32:f1:ce:03:67:dd:24:4b:4d:ed:ef:b6:c0:c5:db:da:ca: a9:1e:7f:d1:13:77:87:dd:de:a5:9f:de:ab:cc:8f:dd:00:43: 81:67:c9:24:bd:5f:ce:27:be:27:53:fe:e8:57:95:9a:a1:67: b2:78:6c:1f:7f:83:ab:8d:52:43:97:ec:34:4a:c9:95:87:f4: 67:b6:3c:eb:57:11:99:98:80:52:e0:b5:8b:30:52:03:58:56: 04:de:b4:ad:65:c7:aa:48:4f:48:64:e2:b2:24:3c:a9:f7:1c: 1e:18:d4:c9:04:d8:1a:8a:b8:38:21:69:ea:f3:c1:0f:0f:2a: db:44:68:1e:85:12:f8:23:db:6e:90:c3:f6:2a:ba:d4:80:16: 11:98:99:44 -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEuZ14tyABa8bGqqbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjZkZGEwMzItNzlmOS00MjNlLTk5OTQtMzNmZGIxY2Q0 NGRiMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZjA1ZTFkZjMtNWIwNC00ODY0LWI4MmEtNGJmMjIyOTFjY2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSPEhSUPduxly1wY5YkW56YREkgKgYgB8UA+ zdtW7sRzNZ/yo3FGBSXiE0t83r3ZVM2PDD1mD5VR4RHUobG067NQZDwzyMzzwBCg C9H8+u9BZBH/BM3Wppt5DyIP4Hw3l+aT1xOLs+lXbRaFx4vsRbJfbDrrm876zY9F vkgQXZnuYHPj4ceJ67yjlPcfp02tZ19MRzbo/puNi0aVQjbCFWFJQh4+ssGh5ymH u5Glffo1sSpMCE90XEZCtvFKpXsFV+GU3u1hwN3JUE/14D9gXqzVpaKkDToNHJ3f SjLQT88zYx/VVS99JMHu0JXdYnx9IKlafgmiWNrj6osU135+7QIDAQABo4IDYzCC A18wHQYDVR0OBBYEFGhzdScHiW1Zc8MhUGiQvyx1adaaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yNmRk YTAzMi03OWY5LTQyM2UtOTk5NC0zM2ZkYjFjZDQ0ZGIvMTQwM2NjMzgtNGIzYy0z OTI5LTg5ODMtM2RiMDViMWY5ZTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjZkZGEwMzItNzlmOS00MjNlLTk5 OTQtMzNmZGIxY2Q0NGRiLzI2ZGRhMDMyLTc5ZjktNDIzZS05OTk0LTMzZmRiMWNk NDRkYi5jcmwwHwYDVR0jBBgwFoAUlOxHNSwx7ERB/+Hh13pxBU8VHbQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yNmRkYTAzMi03OWY5LTQyM2UtOTk5NC0zM2Zk YjFjZDQ0ZGIuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAmIAEE YAMDBwAmIAEEYAQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAC+qyxfwbBX6pQGk5HKidt92bC/Id0xaMH/05 Nk+eNvCkwDh6gTChkC61lvvAe6ZIqK2ufUvqsSSosRsv95saVF5waNMzET1j82Ng F4+6VrW3bQlAmyf8BGh4QpUZr6Sb4pEWVBwfgPZP7rQs4jLxzgNn3SRLTe3vtsDF 29rKqR5/0RN3h93epZ/eq8yP3QBDgWfJJL1fzie+J1P+6FeVmqFnsnhsH3+Dq41S Q5fsNErJlYf0Z7Y861cRmZiAUuC1izBSA1hWBN60rWXHqkhPSGTisiQ8qfccHhjU yQTYGoq4OCFp6vPBDw8q20RoHoUS+CPbbpDD9iq61IAWEZiZRA== -----END CERTIFICATE-----Generated at Wed Nov 5 05:45:26 2025 by rpki-client