$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/dc1611d4-5fe1-34ca-af7c-6247ffebb706.roa File: dc1611d4-5fe1-34ca-af7c-6247ffebb706.roa (raw, json) Hash identifier: Aw4f6WeMCEqUBWAdDITp3vDbFgzzqHRs+Mxg0rqbG6c= Subject key identifier: CF:8C:BA:F3:15:E2:39:C0:92:D0:6C:D3:45:26:29:2A:FF:F8:C6:A4 Certificate issuer: /CN=7a2be303-4525-4433-b220-b1c6b5052945 Certificate serial: 010D0C9F4328584BAA979D640CC8BDFCE5E18C80 Authority key identifier: 70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/dc1611d4-5fe1-34ca-af7c-6247ffebb706.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 43181 IP address blocks: 2604:28c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:9d:64:0c:c8:bd:fc:e5:e1:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a2be303-4525-4433-b220-b1c6b5052945 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=254dc6c5-70ae-43ea-88ac-4f7f2f172ce8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:df:c0:0c:0c:b4:93:f5:d7:44:91:16:f5:2b: ea:b0:04:9f:ef:2e:80:0f:77:30:18:08:19:af:35: 8e:a0:91:a7:c0:36:a7:be:20:28:5e:0c:cb:08:4a: 8f:2d:6d:14:fb:b7:a8:d4:4b:d4:55:47:01:62:dd: 67:bf:fb:07:cb:77:4f:98:53:b3:97:ca:68:1c:e5: 27:b5:33:80:b7:e9:94:d8:e4:85:c9:d9:94:10:15: 24:e5:aa:b4:05:66:7c:f1:a6:81:9a:0d:91:04:a1: 44:bd:19:3b:71:78:de:51:82:f6:5f:a7:f4:70:d0: b6:54:bb:e7:58:04:fc:68:97:f7:f8:78:2e:72:1c: 07:8c:fb:00:85:63:28:1e:33:0b:79:a7:4e:12:8d: 2e:d8:90:be:b2:ce:ca:95:0b:d8:a1:ed:f2:10:9c: 68:ae:6e:a2:08:d5:c6:70:a2:f2:d9:89:86:3d:07: 26:0a:bc:94:8a:e9:d7:55:8e:e8:2f:63:18:ef:de: 1a:bd:8b:38:31:7a:8e:07:02:e3:43:88:7e:e8:55: 20:f7:3e:e3:aa:98:69:49:2a:bb:e9:ca:3f:a2:be: 08:7c:61:a0:49:9e:60:b3:06:a3:44:90:16:e1:f8: a3:46:eb:ea:f8:cf:15:ba:ae:8b:51:0d:e4:12:d8: f4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:8C:BA:F3:15:E2:39:C0:92:D0:6C:D3:45:26:29:2A:FF:F8:C6:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/dc1611d4-5fe1-34ca-af7c-6247ffebb706.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl X509v3 Authority Key Identifier: keyid:70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer sbgp-ipAddrBlock: critical IPv6: 2604:28c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:c6:ac:54:28:fc:75:4f:d6:c1:d5:a4:28:75:83:e7:7f:9d: 0d:3c:9e:22:c0:88:38:28:42:ec:cd:69:33:de:8c:a6:fa:89: 81:5b:ba:6c:f2:24:fd:0b:f7:c0:bb:62:a9:7c:ee:be:af:8a: 4d:d9:e8:54:2e:33:e3:19:a8:24:cd:8a:b7:fb:30:65:02:b2: da:e6:3a:0d:1a:b4:da:f6:9d:c9:dc:d0:ef:60:28:e5:d1:1e: 18:91:f6:a0:e8:5d:46:e7:9f:fa:a7:a6:a9:a5:30:7a:fd:80: eb:3c:a0:df:9b:20:5e:72:73:e1:46:11:61:17:50:54:98:a4: c9:78:37:d0:61:e7:19:71:72:75:9a:cf:5a:c9:2a:86:4b:82: 82:5e:3c:f9:46:ed:a0:cc:48:98:88:13:02:e2:ae:8a:cd:cb: ef:f1:c8:8d:d1:dd:5a:bc:67:9b:1d:78:36:6c:9a:6f:e1:41: e9:bb:49:44:05:23:65:ea:5a:64:ac:fc:48:4d:49:21:68:28: 0d:88:70:27:33:2d:8f:4e:5f:45:6d:97:04:63:ff:7b:16:c7: 80:ac:ef:70:56:e5:ad:18:1a:93:d0:29:c3:ea:ef:1f:c8:10: 4a:f6:69:23:da:1b:f3:72:b1:27:c8:7d:13:7c:ef:01:f5:79: 4e:74:8b:32 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuql51kDMi9/OXhjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EyYmUzMDMtNDUyNS00NDMzLWIyMjAtYjFjNmI1MDUy OTQ1MB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk MjU0ZGM2YzUtNzBhZS00M2VhLTg4YWMtNGY3ZjJmMTcyY2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3t/ADAy0k/XXRJEW9SvqsASf7y6AD3cwGAgZ rzWOoJGnwDanviAoXgzLCEqPLW0U+7eo1EvUVUcBYt1nv/sHy3dPmFOzl8poHOUn tTOAt+mU2OSFydmUEBUk5aq0BWZ88aaBmg2RBKFEvRk7cXjeUYL2X6f0cNC2VLvn WAT8aJf3+HguchwHjPsAhWMoHjMLeadOEo0u2JC+ss7KlQvYoe3yEJxorm6iCNXG cKLy2YmGPQcmCryUiunXVY7oL2MY794avYs4MXqOBwLjQ4h+6FUg9z7jqphpSSq7 6co/or4IfGGgSZ5gswajRJAW4fijRuvq+M8Vuq6LUQ3kEtj0qQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFM+MuvMV4jnAktBs00UmKSr/+MakMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJi ZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2YjUwNTI5NDUvZGMxNjExZDQtNWZlMS0z NGNhLWFmN2MtNjI0N2ZmZWJiNzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2EyYmUzMDMtNDUyNS00NDMzLWIy MjAtYjFjNmI1MDUyOTQ1LzdhMmJlMzAzLTQ1MjUtNDQzMy1iMjIwLWIxYzZiNTA1 Mjk0NS5jcmwwHwYDVR0jBBgwFoAUcB/v7q15UMvEYiozrSRlUmV13rIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJiZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2 YjUwNTI5NDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQowDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB/xqxUKPx1T9bB1aQodYPnf50NPJ4iwIg4KELszWkz3oym+omBW7ps 8iT9C/fAu2KpfO6+r4pN2ehULjPjGagkzYq3+zBlArLa5joNGrTa9p3J3NDvYCjl 0R4Ykfag6F1G55/6p6appTB6/YDrPKDfmyBecnPhRhFhF1BUmKTJeDfQYecZcXJ1 ms9aySqGS4KCXjz5Ru2gzEiYiBMC4q6Kzcvv8ciN0d1avGebHXg2bJpv4UHpu0lE BSNl6lpkrPxITUkhaCgNiHAnMy2PTl9FbZcEY/97FseArO9wVuWtGBqT0CnD6u8f yBBK9mkj2hvzcrEnyH0TfO8B9XlOdIsy -----END CERTIFICATE-----Generated at Wed Nov 5 11:11:34 2025 by rpki-client