$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6/0e17f6a1-9f26-38f1-93bc-0c0a6da681a3.roa File: 0e17f6a1-9f26-38f1-93bc-0c0a6da681a3.roa (raw, json) Hash identifier: IOeSPlI8qI1/dlxC//vAsM2+xSj1/VjhnIxKh+7zdME= Subject key identifier: CC:6C:BF:13:C6:18:03:70:B2:1D:D1:25:66:31:5A:72:05:65:F0:C8 Certificate issuer: /CN=cd381626-0b70-4bbc-b2f1-0eac4f0801f6 Certificate serial: 010D0C9F4328584B99D78EB78658A0E4107D5000 Authority key identifier: 95:E0:D3:C0:AA:AA:D8:F5:A6:F2:E1:82:C9:59:72:16:F0:62:51:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6/0e17f6a1-9f26-38f1-93bc-0c0a6da681a3.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 14585 IP address blocks: 2604:65c0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6/cd381626-0b70-4bbc-b2f1-0eac4f0801f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6/cd381626-0b70-4bbc-b2f1-0eac4f0801f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:8e:b7:86:58:a0:e4:10:7d:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd381626-0b70-4bbc-b2f1-0eac4f0801f6 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=b5cdbe0d-1582-4691-91f6-709a9c071f68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:ea:77:cd:c1:3b:90:cd:88:89:e7:54:4e:9b: f9:53:57:0b:99:df:73:2b:a5:86:5b:0b:44:a8:cf: 38:40:b7:4c:9d:1c:e2:68:68:f6:11:3e:d9:74:4d: 73:bb:10:b4:0a:31:46:1f:54:0a:7c:36:5a:3e:ae: 1a:7b:3d:68:63:af:3b:76:b7:96:c0:29:ca:aa:3d: 83:c1:ab:5d:2d:80:0e:2c:76:aa:c0:30:21:b1:b3: 7b:b2:91:65:81:43:07:bf:71:13:be:02:2f:54:8c: d1:26:5d:37:20:77:19:f7:c3:39:ff:d6:40:de:ef: 15:00:97:56:10:82:35:1b:06:1e:48:50:11:64:16: d7:1b:19:20:86:9f:8f:c0:16:4a:29:a5:7f:37:d1: 45:7c:ea:4c:90:c3:ff:12:1a:3f:1f:de:65:90:32: 61:6f:93:f6:f7:b9:85:5b:5e:8d:bc:ed:48:61:b5: 0c:b4:ad:0e:62:3e:08:15:d8:9f:60:0c:0d:99:ec: 51:9f:42:8e:0d:01:e3:b8:55:a5:15:75:d5:d2:76: c4:1e:fc:7f:7c:f2:3d:5a:7d:d2:df:95:f3:55:fc: a8:3f:55:06:eb:6e:e1:cb:cb:3d:b3:a0:6e:a8:74: ea:b9:79:78:b3:b0:8d:91:27:8b:f4:a5:a3:59:6e: 4e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:6C:BF:13:C6:18:03:70:B2:1D:D1:25:66:31:5A:72:05:65:F0:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6/0e17f6a1-9f26-38f1-93bc-0c0a6da681a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6/cd381626-0b70-4bbc-b2f1-0eac4f0801f6.crl X509v3 Authority Key Identifier: keyid:95:E0:D3:C0:AA:AA:D8:F5:A6:F2:E1:82:C9:59:72:16:F0:62:51:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6.cer sbgp-ipAddrBlock: critical IPv6: 2604:65c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:8b:08:99:58:fa:25:98:c7:19:9b:76:eb:b7:df:02:fd:c5: ff:72:24:6c:c5:19:ac:92:92:1d:4d:a6:88:c4:4c:e7:4f:00: 0e:ac:cb:d0:97:a7:91:9a:e9:2a:ef:5e:aa:d7:75:43:40:0e: 4c:08:54:de:23:20:53:90:80:db:42:30:d9:04:f8:5a:ac:d3: 62:5f:3f:cb:bf:37:43:e3:b2:21:d3:55:24:b7:47:48:2d:67: 18:23:60:7a:0b:5f:c1:bc:20:8c:87:57:5e:3e:1c:9a:7d:ba: dc:4b:90:86:e4:ef:83:f8:ee:ff:e7:f4:f4:7f:5b:8a:36:60: f7:b9:6f:52:85:5c:0f:2e:7e:9b:9e:31:97:89:c4:81:3b:b7: 36:be:e6:af:c4:bd:3e:fe:29:3e:2c:5e:e8:00:dd:3e:90:5d: ea:d3:62:25:73:c1:f5:50:bb:f9:f4:6b:86:22:52:ff:15:3d: 81:44:23:99:da:2e:59:7d:0d:84:5b:29:1e:8b:e6:96:b8:85: 1b:86:10:43:ac:c3:14:1c:ed:0e:42:52:ec:8f:37:e8:12:41: b3:a4:31:75:30:02:3d:95:dd:fc:45:f7:78:a1:97:cf:33:36: 23:94:83:d0:47:0a:f8:c5:3b:8f:b4:10:7c:fa:5f:2b:de:0d: 28:26:26:51 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuZ1463hlig5BB9UAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QzODE2MjYtMGI3MC00YmJjLWIyZjEtMGVhYzRmMDgw MWY2MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk YjVjZGJlMGQtMTU4Mi00NjkxLTkxZjYtNzA5YTljMDcxZjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7up3zcE7kM2IiedUTpv5U1cLmd9zK6WGWwtE qM84QLdMnRziaGj2ET7ZdE1zuxC0CjFGH1QKfDZaPq4aez1oY687dreWwCnKqj2D watdLYAOLHaqwDAhsbN7spFlgUMHv3ETvgIvVIzRJl03IHcZ98M5/9ZA3u8VAJdW EII1GwYeSFARZBbXGxkghp+PwBZKKaV/N9FFfOpMkMP/Eho/H95lkDJhb5P297mF W16NvO1IYbUMtK0OYj4IFdifYAwNmexRn0KODQHjuFWlFXXV0nbEHvx/fPI9Wn3S 35XzVfyoP1UG627hy8s9s6BuqHTquXl4s7CNkSeL9KWjWW5O2wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMxsvxPGGANwsh3RJWYxWnIFZfDIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jZDM4 MTYyNi0wYjcwLTRiYmMtYjJmMS0wZWFjNGYwODAxZjYvMGUxN2Y2YTEtOWYyNi0z OGYxLTkzYmMtMGMwYTZkYTY4MWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2QzODE2MjYtMGI3MC00YmJjLWIy ZjEtMGVhYzRmMDgwMWY2L2NkMzgxNjI2LTBiNzAtNGJiYy1iMmYxLTBlYWM0ZjA4 MDFmNi5jcmwwHwYDVR0jBBgwFoAUleDTwKqq2PWm8uGCyVlyFvBiUfcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jZDM4MTYyNi0wYjcwLTRiYmMtYjJmMS0wZWFj NGYwODAxZjYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRlwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBZiwiZWPolmMcZm3brt98C/cX/ciRsxRmskpIdTaaIxEznTwAOrMvQ l6eRmukq716q13VDQA5MCFTeIyBTkIDbQjDZBPharNNiXz/LvzdD47Ih01Ukt0dI LWcYI2B6C1/BvCCMh1dePhyafbrcS5CG5O+D+O7/5/T0f1uKNmD3uW9ShVwPLn6b njGXicSBO7c2vuavxL0+/ik+LF7oAN0+kF3q02Ilc8H1ULv59GuGIlL/FT2BRCOZ 2i5ZfQ2EWykei+aWuIUbhhBDrMMUHO0OQlLsjzfoEkGzpDF1MAI9ld38Rfd4oZfP MzYjlIPQRwr4xTuPtBB8+l8r3g0oJiZR -----END CERTIFICATE-----Generated at Wed Nov 5 16:08:07 2025 by rpki-client