$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bd61746-13db-450a-8df3-636a3fa01e59/72621090-4571-32e6-8cc3-9bf028533b78.roa File: 72621090-4571-32e6-8cc3-9bf028533b78.roa (raw, json) Hash identifier: 1X5XtpjmXaBFiaAS3GGHS05mWak08VeoS3dlyYquwGA= Subject key identifier: 18:37:55:8E:63:06:DA:B6:D6:F2:93:20:27:8E:E3:5B:EC:DD:89:D5 Certificate issuer: /CN=2bd61746-13db-450a-8df3-636a3fa01e59 Certificate serial: 010D0C9F4328584BA0D252A904AB126C30162500 Authority key identifier: C9:CF:68:36:AA:83:15:BC:79:97:80:C4:38:E9:C1:FF:00:62:F1:E3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bd61746-13db-450a-8df3-636a3fa01e59.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bd61746-13db-450a-8df3-636a3fa01e59/72621090-4571-32e6-8cc3-9bf028533b78.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 393719 IP address blocks: 2605:4340::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bd61746-13db-450a-8df3-636a3fa01e59/2bd61746-13db-450a-8df3-636a3fa01e59.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bd61746-13db-450a-8df3-636a3fa01e59/2bd61746-13db-450a-8df3-636a3fa01e59.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bd61746-13db-450a-8df3-636a3fa01e59.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:52:a9:04:ab:12:6c:30:16:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bd61746-13db-450a-8df3-636a3fa01e59 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=948a5cc4-89a3-478f-acf2-85f9b037ea7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0b:ac:27:ff:bb:9f:3c:8c:18:8d:7c:d4:0c: 86:d6:5a:97:f4:21:6a:6f:9f:50:f6:f6:e3:6b:92: b2:20:cd:ac:9f:66:a7:f5:75:c5:14:24:d2:0e:c9: dd:37:4d:9f:38:65:cf:00:28:f5:d3:50:29:ab:af: 3e:e5:99:75:39:18:f8:03:6c:bf:69:26:c0:25:e7: ff:74:b6:a5:1f:e2:9f:ba:76:11:0f:5c:1f:6f:07: cb:b3:5b:99:e0:fc:ff:57:d8:1a:95:35:c2:da:b7: 57:17:6d:4d:cf:80:24:6b:c3:4c:10:46:bb:4a:0f: b1:29:15:a3:11:70:ed:7e:82:06:90:9b:57:d6:b1: e8:35:44:78:ae:49:b5:26:0b:a3:82:a3:96:b7:30: 50:c6:bb:f0:ff:30:ce:7a:92:f8:32:0d:81:c7:a0: 49:bf:65:93:5d:38:28:48:69:af:43:fe:d8:96:3f: 42:ee:a6:32:9a:71:1c:85:7e:2f:c3:9f:c3:27:da: dd:04:5c:83:71:70:70:06:64:09:b1:da:a5:ad:ef: 42:04:40:8c:2a:30:cd:07:e5:2d:d6:79:ea:65:22: a7:e6:b2:93:fc:cd:d8:e4:50:c9:9e:a6:ce:b5:e6: 12:22:ce:f7:0e:b8:d3:a2:21:be:b6:23:4f:82:c5: 35:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:37:55:8E:63:06:DA:B6:D6:F2:93:20:27:8E:E3:5B:EC:DD:89:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bd61746-13db-450a-8df3-636a3fa01e59/72621090-4571-32e6-8cc3-9bf028533b78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bd61746-13db-450a-8df3-636a3fa01e59/2bd61746-13db-450a-8df3-636a3fa01e59.crl X509v3 Authority Key Identifier: keyid:C9:CF:68:36:AA:83:15:BC:79:97:80:C4:38:E9:C1:FF:00:62:F1:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bd61746-13db-450a-8df3-636a3fa01e59.cer sbgp-ipAddrBlock: critical IPv6: 2605:4340::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:5c:e8:bd:65:94:3c:6c:f8:83:7e:84:20:92:49:0f:6b:24: 81:c9:62:38:c7:2c:7c:54:ee:11:32:ea:7c:26:0e:ba:d5:c7: ee:fc:d9:fc:d2:8e:b8:67:8a:ee:4e:d8:7a:8d:15:49:fa:68: 5e:a4:2c:04:fb:dc:c3:98:ad:91:52:a5:75:6b:69:bd:11:56: 5c:33:bb:4b:58:ee:58:8b:b5:43:4c:1b:2e:8f:7b:20:cf:1c: 6f:75:2d:20:de:c1:01:f8:c0:0b:e2:6e:7c:7a:51:31:b2:87: 90:91:e5:dd:c2:a0:dc:e1:34:f6:8c:67:80:9b:ed:ab:f3:fc: 0a:b1:30:45:a2:94:56:1d:2f:c1:39:ae:7f:a2:3c:ec:5e:2a: 6c:9c:8e:b4:0f:2b:4f:d3:35:4b:ec:44:15:54:fd:77:d8:5c: 9b:99:5c:14:55:41:4d:07:db:1e:c2:97:cf:d6:61:82:51:0d: 83:51:c8:60:d8:34:69:06:45:04:fb:69:19:65:b1:df:28:60: 86:5d:55:b6:a3:35:e1:a6:1c:e6:79:eb:f8:16:20:f8:93:1e: a6:b1:ae:a4:42:eb:55:49:34:39:bf:91:76:8b:25:3c:cf:3b: 78:49:e8:2e:40:b1:ec:35:e0:01:36:76:d0:6a:78:2c:d8:a8: 28:8b:83:eb -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEug0lKpBKsSbDAWJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJkNjE3NDYtMTNkYi00NTBhLThkZjMtNjM2YTNmYTAx ZTU5MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk OTQ4YTVjYzQtODlhMy00NzhmLWFjZjItODVmOWIwMzdlYTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigusJ/+7nzyMGI181AyG1lqX9CFqb59Q9vbj a5KyIM2sn2an9XXFFCTSDsndN02fOGXPACj101Apq68+5Zl1ORj4A2y/aSbAJef/ dLalH+KfunYRD1wfbwfLs1uZ4Pz/V9galTXC2rdXF21Nz4Aka8NMEEa7Sg+xKRWj EXDtfoIGkJtX1rHoNUR4rkm1JgujgqOWtzBQxrvw/zDOepL4Mg2Bx6BJv2WTXTgo SGmvQ/7Ylj9C7qYymnEchX4vw5/DJ9rdBFyDcXBwBmQJsdqlre9CBECMKjDNB+Ut 1nnqZSKn5rKT/M3Y5FDJnqbOteYSIs73DrjToiG+tiNPgsU1TwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBg3VY5jBtq21vKTICeO41vs3YnVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yYmQ2 MTc0Ni0xM2RiLTQ1MGEtOGRmMy02MzZhM2ZhMDFlNTkvNzI2MjEwOTAtNDU3MS0z MmU2LThjYzMtOWJmMDI4NTMzYjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMmJkNjE3NDYtMTNkYi00NTBhLThk ZjMtNjM2YTNmYTAxZTU5LzJiZDYxNzQ2LTEzZGItNDUwYS04ZGYzLTYzNmEzZmEw MWU1OS5jcmwwHwYDVR0jBBgwFoAUyc9oNqqDFbx5l4DEOOnB/wBi8eMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yYmQ2MTc0Ni0xM2RiLTQ1MGEtOGRmMy02MzZh M2ZhMDFlNTkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgVDQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQACXOi9ZZQ8bPiDfoQgkkkPaySByWI4xyx8VO4RMup8Jg661cfu/Nn8 0o64Z4ruTth6jRVJ+mhepCwE+9zDmK2RUqV1a2m9EVZcM7tLWO5Yi7VDTBsuj3sg zxxvdS0g3sEB+MAL4m58elExsoeQkeXdwqDc4TT2jGeAm+2r8/wKsTBFopRWHS/B Oa5/ojzsXipsnI60DytP0zVL7EQVVP132FybmVwUVUFNB9sewpfP1mGCUQ2DUchg 2DRpBkUE+2kZZbHfKGCGXVW2ozXhphzmeev4FiD4kx6msa6kQutVSTQ5v5F2iyU8 zzt4SeguQLHsNeABNnbQangs2Kgoi4Pr -----END CERTIFICATE-----Generated at Wed Nov 5 14:30:20 2025 by rpki-client