$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/e8f4510c-5de6-3f1e-8e6c-8a4f890a242d.roa File: e8f4510c-5de6-3f1e-8e6c-8a4f890a242d.roa (raw, json) Hash identifier: 4Nr4r6AWb17yWx6rYAceoBCsFbOi+rYO8K0t3Qr5KxY= Subject key identifier: 56:07:52:A1:65:2F:78:23:6D:20:AC:50:B7:A3:15:C2:07:40:0E:26 Certificate issuer: /CN=b32217e1-2473-49a5-919e-08e1896c5019 Certificate serial: 010D0C9F4328584B821CBB8AEBEACAD1C6347990 Authority key identifier: 48:AE:0D:F8:A0:D7:74:90:58:A4:5A:B5:23:A6:6E:B7:B1:C0:77:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/e8f4510c-5de6-3f1e-8e6c-8a4f890a242d.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 22191 IP address blocks: 2604:1dc0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:bb:8a:eb:ea:ca:d1:c6:34:79:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b32217e1-2473-49a5-919e-08e1896c5019 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=cc98189b-6cf6-4287-ae0f-091505336d74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:69:31:b8:b7:ad:b4:05:6c:d7:4d:1b:43:2c: 56:78:b3:7e:89:6c:b8:43:17:e3:ac:ea:c6:b2:b1: 62:9d:6a:36:dd:5b:b0:30:b9:08:e0:d2:b7:fb:80: 4b:7e:43:f5:17:f9:e2:47:28:6e:c6:a0:3b:9d:17: 8a:d6:c0:9a:18:cf:68:c8:dd:ef:1e:c9:e1:15:f9: 83:ca:ae:c3:13:1d:59:bf:02:c5:bf:6a:16:1e:68: 6b:4f:a9:1c:37:8d:e2:08:f7:a8:4b:94:39:b9:59: 60:90:bd:b4:3c:d8:8b:f8:32:73:71:a0:73:25:53: 9b:3b:90:29:fa:67:d4:c6:c8:ee:6f:d1:46:b1:ab: b9:d2:61:46:99:02:91:05:61:dd:0a:32:ad:b8:49: 36:c3:32:0b:18:53:0e:7c:8d:02:7a:e0:d2:63:99: 62:b8:d6:04:60:fb:d1:56:6f:2b:ff:1e:97:b5:91: be:54:cb:70:7c:76:e7:a9:de:ee:09:80:8a:7b:42: 6e:27:fe:3a:03:66:6e:c4:90:ba:35:93:95:53:5c: f9:62:21:4e:b2:f4:94:8f:85:50:49:45:a6:33:11: 5c:0f:f7:6c:bb:a8:41:d5:90:e4:5b:39:d1:52:1c: 0c:a4:c2:3d:48:aa:0e:c5:c3:19:e5:51:d9:b5:79: 51:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:07:52:A1:65:2F:78:23:6D:20:AC:50:B7:A3:15:C2:07:40:0E:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/e8f4510c-5de6-3f1e-8e6c-8a4f890a242d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.crl X509v3 Authority Key Identifier: keyid:48:AE:0D:F8:A0:D7:74:90:58:A4:5A:B5:23:A6:6E:B7:B1:C0:77:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer sbgp-ipAddrBlock: critical IPv6: 2604:1dc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:10:e2:6f:56:02:19:bc:35:d1:49:6c:08:2f:be:3f:70:d4: d8:81:b3:90:23:a4:65:9d:f6:2a:fa:e4:02:89:a7:86:36:d0: b7:8a:03:a7:94:3c:6a:8c:22:35:0f:f8:8a:c4:f9:5a:98:1f: 0f:6e:12:91:04:fa:2a:60:04:b8:a5:17:5a:91:4d:6b:d5:25: c6:6e:ab:5f:16:c8:ae:f0:d4:3f:95:18:34:ee:54:20:cb:d4: 6c:ea:cc:10:36:3d:c0:88:42:7b:b0:e0:93:1f:4b:a2:d8:e7: 37:6b:42:25:b5:2f:fb:4e:ab:00:94:18:2b:bd:df:69:88:ea: 63:9d:c0:98:d9:a9:13:e5:c9:6a:a5:08:44:9e:c1:09:dc:4c: 0e:da:05:fd:71:b5:f7:74:5b:81:87:ac:9c:56:31:08:b5:02: 9a:d7:4c:0e:32:85:08:a9:bc:22:d9:cb:6d:99:b0:0b:bf:b8: 9c:38:d3:ff:b3:d2:4b:fc:1a:1b:22:23:8d:92:30:66:10:80: ab:47:75:2a:6b:a7:5c:ce:c1:29:87:5e:46:0f:40:f6:ad:ba: be:b8:95:7f:a5:9b:78:35:4b:bc:57:47:ae:26:10:d4:6f:76: c8:c2:8a:66:66:bd:8d:18:02:aa:f7:86:e3:75:c6:e8:c3:51: 3f:06:51:fb -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuCHLuK6+rK0cY0eZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjMyMjE3ZTEtMjQ3My00OWE1LTkxOWUtMDhlMTg5NmM1 MDE5MB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk Y2M5ODE4OWItNmNmNi00Mjg3LWFlMGYtMDkxNTA1MzM2ZDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmkxuLettAVs100bQyxWeLN+iWy4QxfjrOrG srFinWo23VuwMLkI4NK3+4BLfkP1F/niRyhuxqA7nReK1sCaGM9oyN3vHsnhFfmD yq7DEx1ZvwLFv2oWHmhrT6kcN43iCPeoS5Q5uVlgkL20PNiL+DJzcaBzJVObO5Ap +mfUxsjub9FGsau50mFGmQKRBWHdCjKtuEk2wzILGFMOfI0CeuDSY5liuNYEYPvR Vm8r/x6XtZG+VMtwfHbnqd7uCYCKe0JuJ/46A2ZuxJC6NZOVU1z5YiFOsvSUj4VQ SUWmMxFcD/dsu6hB1ZDkWznRUhwMpMI9SKoOxcMZ5VHZtXlRHQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFYHUqFlL3gjbSCsULejFcIHQA4mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMzIy MTdlMS0yNDczLTQ5YTUtOTE5ZS0wOGUxODk2YzUwMTkvZThmNDUxMGMtNWRlNi0z ZjFlLThlNmMtOGE0Zjg5MGEyNDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjMyMjE3ZTEtMjQ3My00OWE1LTkx OWUtMDhlMTg5NmM1MDE5L2IzMjIxN2UxLTI0NzMtNDlhNS05MTllLTA4ZTE4OTZj NTAxOS5jcmwwHwYDVR0jBBgwFoAUSK4N+KDXdJBYpFq1I6Zut7HAd7YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iMzIyMTdlMS0yNDczLTQ5YTUtOTE5ZS0wOGUx ODk2YzUwMTkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQdwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCAEOJvVgIZvDXRSWwIL74/cNTYgbOQI6RlnfYq+uQCiaeGNtC3igOn lDxqjCI1D/iKxPlamB8PbhKRBPoqYAS4pRdakU1r1SXGbqtfFsiu8NQ/lRg07lQg y9Rs6swQNj3AiEJ7sOCTH0ui2Oc3a0IltS/7TqsAlBgrvd9piOpjncCY2akT5clq pQhEnsEJ3EwO2gX9cbX3dFuBh6ycVjEItQKa10wOMoUIqbwi2cttmbALv7icONP/ s9JL/BobIiONkjBmEICrR3Uqa6dczsEph15GD0D2rbq+uJV/pZt4NUu8V0euJhDU b3bIwopmZr2NGAKq94bjdcbow1E/BlH7 -----END CERTIFICATE-----Generated at Wed Nov 5 23:34:27 2025 by rpki-client