$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/c817fd58-6b2c-3c53-a82b-9d09d09bb684.roa File: c817fd58-6b2c-3c53-a82b-9d09d09bb684.roa (raw, json) Hash identifier: YOkBAEwchspAVOJdQjkuSYvGVVVxBjAdjl5/IipSIh4= Subject key identifier: C2:EB:16:A1:3C:3F:7D:A5:D9:D9:3D:CC:94:CF:7A:14:24:AA:09:65 Certificate issuer: /CN=d23910be-77e9-4381-87eb-cb12cfc9b676 Certificate serial: 010D0C9F4328584BBFA59916112B4EA09D4A5800 Authority key identifier: F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/c817fd58-6b2c-3c53-a82b-9d09d09bb684.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 14618 IP address blocks: 2620:df:4000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:99:16:11:2b:4e:a0:9d:4a:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d23910be-77e9-4381-87eb-cb12cfc9b676 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=df59ea75-bf44-4422-8111-c5a85e84b304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:68:96:bd:40:40:3a:af:1b:cc:dd:4f:e0:be: c6:79:6d:f1:90:07:59:88:30:9c:e8:41:67:fb:c5: 4f:b8:52:cd:e2:5c:40:ab:41:fb:e7:10:61:98:2d: a7:cb:87:3a:b1:72:16:b6:30:2c:bb:77:3f:06:89: 27:c2:d3:34:b3:ab:92:f7:01:a0:49:ff:c8:82:73: 84:2f:fe:22:48:bc:2c:f1:59:2e:2d:62:0d:57:98: a6:3a:5f:74:3d:69:fb:fd:05:08:aa:9c:26:f4:6a: 25:7a:b8:91:9c:84:a2:53:b5:55:a6:41:e7:33:2a: 37:de:2e:74:61:e9:86:9b:79:f4:63:07:40:b0:92: 1f:e1:50:92:00:00:bc:aa:7a:ba:6b:98:f2:22:b0: d5:19:6f:32:41:2a:be:e8:3a:25:50:8a:e0:f9:0d: 0c:ff:d4:20:c6:ef:03:7b:ea:08:79:82:3a:86:50: c4:87:81:66:53:4c:f6:19:4f:3c:a3:e4:63:7a:15: 76:c8:55:f3:0e:f1:8e:9b:28:28:62:fd:c6:a8:3f: af:33:3b:01:fd:6c:1f:10:9a:b3:32:66:c4:6e:12: c3:72:17:94:10:54:23:54:72:bd:51:d7:a0:39:a5: 00:02:e9:d4:bd:59:76:d6:4b:aa:c1:8c:4c:d1:87: e5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:EB:16:A1:3C:3F:7D:A5:D9:D9:3D:CC:94:CF:7A:14:24:AA:09:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/c817fd58-6b2c-3c53-a82b-9d09d09bb684.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl X509v3 Authority Key Identifier: keyid:F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer sbgp-ipAddrBlock: critical IPv6: 2620:df:4000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:1f:58:65:9c:a6:f9:e4:56:0a:75:8f:a8:23:a0:92:a2:8c: f6:f0:1c:61:59:fa:1b:1b:fa:96:8a:9c:69:d3:32:02:5f:22: 40:a4:7b:cf:31:89:5c:2f:da:e8:dc:fe:a3:29:7b:61:af:2f: af:73:a0:63:d4:03:e6:f6:73:3f:79:64:25:46:82:fa:5b:8c: e7:8f:4b:ba:dc:ec:61:e1:e7:8b:d4:ae:fc:96:30:97:c9:53: 4b:24:f2:69:f6:93:38:67:56:78:a9:25:4b:12:84:9b:1a:84: e9:04:11:12:30:1a:a6:92:b3:ea:a8:44:d1:02:9c:19:80:6d: 25:11:2a:ec:0f:d5:da:27:7f:da:49:8d:af:47:12:77:5d:a5: a3:f9:9b:2e:3e:42:e5:b7:68:e7:44:a7:02:34:6e:54:ce:c0: 26:83:69:ae:a9:23:e9:e1:4e:7c:d1:dc:3f:41:cb:a6:15:54: b6:37:80:bd:39:0f:d7:82:ad:11:7f:92:93:d1:0d:76:18:f9: 98:a5:f8:4e:3c:f9:2d:af:77:f3:5d:3d:b0:2b:6e:3e:66:8d: 47:22:8c:0e:8c:02:ed:75:18:24:c6:fa:7e:d4:f5:56:74:0a: b4:1f:29:d7:08:a3:62:ec:3d:eb:0a:cf:7c:03:13:c7:52:c5: 20:fc:45:32 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu/pZkWEStOoJ1KWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIzOTEwYmUtNzdlOS00MzgxLTg3ZWItY2IxMmNmYzli Njc2MB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk ZGY1OWVhNzUtYmY0NC00NDIyLTgxMTEtYzVhODVlODRiMzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2iWvUBAOq8bzN1P4L7GeW3xkAdZiDCc6EFn +8VPuFLN4lxAq0H75xBhmC2ny4c6sXIWtjAsu3c/BoknwtM0s6uS9wGgSf/IgnOE L/4iSLws8VkuLWINV5imOl90PWn7/QUIqpwm9GoleriRnISiU7VVpkHnMyo33i50 YemGm3n0YwdAsJIf4VCSAAC8qnq6a5jyIrDVGW8yQSq+6DolUIrg+Q0M/9Qgxu8D e+oIeYI6hlDEh4FmU0z2GU88o+RjehV2yFXzDvGOmygoYv3GqD+vMzsB/WwfEJqz MmbEbhLDcheUEFQjVHK9UdegOaUAAunUvVl21kuqwYxM0YflfQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMLrFqE8P32l2dk9zJTPehQkqgllMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMjM5 MTBiZS03N2U5LTQzODEtODdlYi1jYjEyY2ZjOWI2NzYvYzgxN2ZkNTgtNmIyYy0z YzUzLWE4MmItOWQwOWQwOWJiNjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDIzOTEwYmUtNzdlOS00MzgxLTg3 ZWItY2IxMmNmYzliNjc2L2QyMzkxMGJlLTc3ZTktNDM4MS04N2ViLWNiMTJjZmM5 YjY3Ni5jcmwwHwYDVR0jBBgwFoAU8u8UTSWnxBh7mYJba+AKrUJIapgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kMjM5MTBiZS03N2U5LTQzODEtODdlYi1jYjEy Y2ZjOWI2NzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAA30AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAsfWGWcpvnkVgp1j6gjoJKijPbwHGFZ+hsb+paKnGnTMgJfIkCk e88xiVwv2ujc/qMpe2GvL69zoGPUA+b2cz95ZCVGgvpbjOePS7rc7GHh54vUrvyW MJfJU0sk8mn2kzhnVnipJUsShJsahOkEERIwGqaSs+qoRNECnBmAbSURKuwP1don f9pJja9HEnddpaP5my4+QuW3aOdEpwI0blTOwCaDaa6pI+nhTnzR3D9By6YVVLY3 gL05D9eCrRF/kpPRDXYY+Zil+E48+S2vd/NdPbArbj5mjUcijA6MAu11GCTG+n7U 9VZ0CrQfKdcIo2LsPesKz3wDE8dSxSD8RTI= -----END CERTIFICATE-----Generated at Wed Nov 5 08:00:22 2025 by rpki-client