$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/275ddba4-64f3-3e1c-8798-63f43743a9c7.roa File: 275ddba4-64f3-3e1c-8798-63f43743a9c7.roa (raw, json) Hash identifier: 5Tgv+2iT7/sFlZFSUh4NG+zcnJ/0VbbP7AJDT4Toluo= Subject key identifier: BC:34:3D:8A:A6:FA:11:9C:59:03:58:B6:A4:DE:46:E1:C6:56:05:4D Certificate issuer: /CN=d23910be-77e9-4381-87eb-cb12cfc9b676 Certificate serial: 010D0C9F4328584BA932527A8E345460D6101E00 Authority key identifier: F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/275ddba4-64f3-3e1c-8798-63f43743a9c7.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 53766 IP address blocks: 2605:a7c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:52:7a:8e:34:54:60:d6:10:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d23910be-77e9-4381-87eb-cb12cfc9b676 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=d41052a3-c7d9-420e-bcaf-b2cd66a3008f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:da:30:e2:b5:17:3a:01:47:11:68:53:7e:36: c4:bf:d6:8a:a4:b1:b8:d8:f7:e2:02:4b:93:98:94: 4e:f9:2b:d8:ce:35:c4:db:04:9a:af:f7:dc:b0:05: b6:35:6e:6e:4c:31:2c:70:fe:82:11:06:d8:2b:4b: db:83:d8:4e:2d:e3:6d:f2:fc:80:8e:24:3c:fe:e4: 2e:03:c2:34:7f:4a:c7:41:83:c9:04:a0:2b:be:67: 9d:d9:03:07:78:cd:18:aa:47:a4:a1:a1:8e:81:34: 35:14:2d:04:e0:a6:9c:f0:bc:53:7d:99:c1:fe:01: d3:76:f7:d3:4b:21:5c:0b:a5:0c:b7:44:df:67:66: c1:fb:61:d5:8a:cb:79:b9:8e:04:9b:0b:63:d3:9d: 18:34:b0:7f:99:47:68:af:62:91:b5:9b:75:b9:3b: a7:07:21:1b:40:3d:71:76:31:d9:89:e8:99:12:cc: 8d:18:74:7c:80:b8:dc:33:6e:05:0a:6c:36:0f:db: 9f:9e:b0:1f:a7:ff:fd:d3:37:ac:1b:a4:29:8c:69: ee:a5:2e:f8:cc:b8:76:84:de:07:9a:a3:0f:5c:3f: ed:d3:97:82:30:51:ea:38:e0:05:5e:6e:90:4b:e1: ac:c8:31:62:63:30:e7:49:ef:b9:d6:24:9b:52:41: cc:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:34:3D:8A:A6:FA:11:9C:59:03:58:B6:A4:DE:46:E1:C6:56:05:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/275ddba4-64f3-3e1c-8798-63f43743a9c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl X509v3 Authority Key Identifier: keyid:F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer sbgp-ipAddrBlock: critical IPv6: 2605:a7c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:18:d2:00:b4:99:47:f2:5a:4f:54:01:a2:cb:d4:60:84:c9: 2a:8c:69:14:6e:7b:c9:fd:11:da:c4:2e:9a:b9:4a:85:9c:7c: 30:bd:81:bc:3d:08:05:2f:b8:f7:7c:25:85:32:13:a6:cf:df: df:4b:b5:ae:a3:d6:16:1f:fc:9d:1f:e5:20:a3:20:58:6d:bf: e5:37:14:a8:4d:c8:6e:e9:23:20:64:d7:7e:ad:25:61:b6:c3: 03:d2:93:da:c0:da:7d:a7:cd:c0:0c:21:22:aa:35:f0:60:02: 82:6d:b9:25:11:9f:46:e6:ac:4e:bb:a6:aa:08:c9:39:fe:6a: 87:d0:96:df:4e:3c:c5:c5:5c:48:47:ab:84:30:4e:54:f4:83: 4e:8e:31:7c:1b:2c:af:ee:5d:fa:5c:28:e3:42:8e:75:f5:77: 10:4f:a1:f6:77:5c:15:5f:24:2c:93:d8:75:19:47:d3:96:28: d0:dc:b4:0a:92:86:75:91:d7:67:38:c5:f1:d4:22:f9:7e:ac: 5f:c7:89:ff:81:6b:e2:f1:64:ec:33:9c:c9:04:89:17:8c:09: e3:9d:c1:81:9c:89:5c:58:de:54:fa:50:6d:63:ab:90:85:37: 77:4c:cc:0f:04:48:a9:fa:dc:93:11:8b:1e:8b:62:81:f6:e3: 28:2a:e6:dc -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEupMlJ6jjRUYNYQHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIzOTEwYmUtNzdlOS00MzgxLTg3ZWItY2IxMmNmYzli Njc2MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk ZDQxMDUyYTMtYzdkOS00MjBlLWJjYWYtYjJjZDY2YTMwMDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdow4rUXOgFHEWhTfjbEv9aKpLG42PfiAkuT mJRO+SvYzjXE2wSar/fcsAW2NW5uTDEscP6CEQbYK0vbg9hOLeNt8vyAjiQ8/uQu A8I0f0rHQYPJBKArvmed2QMHeM0YqkekoaGOgTQ1FC0E4Kac8LxTfZnB/gHTdvfT SyFcC6UMt0TfZ2bB+2HVist5uY4Emwtj050YNLB/mUdor2KRtZt1uTunByEbQD1x djHZieiZEsyNGHR8gLjcM24FCmw2D9ufnrAfp//90zesG6QpjGnupS74zLh2hN4H mqMPXD/t05eCMFHqOOAFXm6QS+GsyDFiYzDnSe+51iSbUkHMOwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLw0PYqm+hGcWQNYtqTeRuHGVgVNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMjM5 MTBiZS03N2U5LTQzODEtODdlYi1jYjEyY2ZjOWI2NzYvMjc1ZGRiYTQtNjRmMy0z ZTFjLTg3OTgtNjNmNDM3NDNhOWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDIzOTEwYmUtNzdlOS00MzgxLTg3 ZWItY2IxMmNmYzliNjc2L2QyMzkxMGJlLTc3ZTktNDM4MS04N2ViLWNiMTJjZmM5 YjY3Ni5jcmwwHwYDVR0jBBgwFoAU8u8UTSWnxBh7mYJba+AKrUJIapgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kMjM5MTBiZS03N2U5LTQzODEtODdlYi1jYjEy Y2ZjOWI2NzYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgWnwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAfGNIAtJlH8lpPVAGiy9RghMkqjGkUbnvJ/RHaxC6auUqFnHwwvYG8 PQgFL7j3fCWFMhOmz9/fS7Wuo9YWH/ydH+UgoyBYbb/lNxSoTchu6SMgZNd+rSVh tsMD0pPawNp9p83ADCEiqjXwYAKCbbklEZ9G5qxOu6aqCMk5/mqH0JbfTjzFxVxI R6uEME5U9INOjjF8Gyyv7l36XCjjQo519XcQT6H2d1wVXyQsk9h1GUfTlijQ3LQK koZ1kddnOMXx1CL5fqxfx4n/gWvi8WTsM5zJBIkXjAnjncGBnIlcWN5U+lBtY6uQ hTd3TMwPBEip+tyTEYsei2KB9uMoKubc -----END CERTIFICATE-----Generated at Wed Nov 5 05:02:27 2025 by rpki-client