$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/ccc01a9a-613a-39d0-9585-0e61958db9f6.roa File: ccc01a9a-613a-39d0-9585-0e61958db9f6.roa (raw, json) Hash identifier: /sFQBwvYICPLxaw5D/JTIX8HoRFBxjzZKfP11Z+R5YY= Subject key identifier: AB:61:BE:A4:88:C3:7C:22:47:99:C2:8E:75:DA:CA:4E:E7:F7:AC:1E Certificate issuer: /CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49 Certificate serial: 010D0C9F4328584BA0D2476ECE54D9BF702FC580 Authority key identifier: 5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/ccc01a9a-613a-39d0-9585-0e61958db9f6.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 30698 IP address blocks: 2620:11c:4000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:47:6e:ce:54:d9:bf:70:2f:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=c325bd7e-020c-4218-892f-9b587bf88f79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:70:be:c4:4d:f2:9b:43:f1:ec:07:fa:f8:07: 46:8e:cc:5e:8b:ec:f4:80:21:2d:c3:71:f2:52:74: 2d:43:ad:66:65:c2:f6:26:12:55:86:0e:5f:98:b6: 9f:74:30:d6:13:96:07:00:54:74:85:87:e2:77:52: c3:f8:72:64:a6:72:ff:66:7d:eb:c1:07:a3:69:be: 9f:c8:96:53:3f:20:ae:3c:d4:60:6e:8c:32:c1:04: 5a:17:82:f9:d8:d7:31:ab:a9:aa:3a:d5:7a:75:9d: 2f:78:8d:19:f1:94:73:0a:e5:d7:7c:a5:a7:a3:ed: 50:b0:f7:12:63:81:94:0a:cf:f5:e6:85:21:de:5d: 1c:20:6b:76:fe:89:d2:b4:9a:fd:62:b8:22:84:a5: be:b2:7e:ec:9a:eb:e6:72:55:ee:59:e7:fc:84:c2: d1:f7:72:b8:9d:62:5b:59:e5:2a:9b:4e:27:39:cb: d0:53:63:26:71:98:99:7f:15:97:9f:a5:24:03:b4: 3d:d9:1f:15:16:fb:96:0f:dd:2d:54:b2:0c:4d:87: 57:84:d6:e5:3d:9c:36:94:91:2c:10:18:9a:7d:03: 52:95:90:74:fe:03:a5:86:db:25:10:dc:56:f1:e4: 87:60:f3:58:ed:e9:20:1a:48:06:5d:55:bd:dc:73: fc:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:61:BE:A4:88:C3:7C:22:47:99:C2:8E:75:DA:CA:4E:E7:F7:AC:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/ccc01a9a-613a-39d0-9585-0e61958db9f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl X509v3 Authority Key Identifier: keyid:5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer sbgp-ipAddrBlock: critical IPv6: 2620:11c:4000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:71:f4:5a:87:ae:a2:8d:5d:9b:3d:3b:0a:bf:fe:dd:de:e1: 20:93:da:8c:e7:17:c6:a6:d0:e8:a1:71:cd:c2:aa:d4:68:ee: 6b:0b:c2:c2:3b:c7:19:27:7b:43:be:24:a9:45:b4:fe:88:eb: 0d:c0:01:e8:f7:4c:c5:04:06:8b:d7:cc:28:35:03:ad:23:d6: 3a:97:16:bb:75:d9:87:95:13:f4:25:77:46:81:38:d5:c1:15: 54:8a:8a:fd:c0:ed:fe:d1:6a:9d:7d:ee:03:74:0e:b9:d9:50: b9:c5:f7:af:c8:85:13:0c:2e:83:da:5b:b6:b0:60:92:ed:41: ee:7b:d0:72:9e:74:d3:5b:fe:3a:b9:71:7c:f2:fa:82:bb:ce: 59:45:20:98:07:42:d9:3d:9f:e5:31:b6:5a:42:f8:7d:ce:38: cb:ba:6d:6c:ee:b9:ac:4c:41:91:fd:e7:7e:61:40:1e:c4:fd: ea:a7:6b:b7:29:64:b5:a3:e3:3f:fc:4a:65:8a:91:9e:1e:55: 42:ef:96:72:3e:fb:56:3f:87:23:b9:80:fd:8c:82:26:27:37: 42:b5:ca:bd:cd:55:cd:50:cc:ce:6a:eb:8f:cd:28:31:92:d7: ce:01:58:ba:6a:d3:d5:e6:8e:33:47:db:f5:6b:14:9a:52:f2: a1:02:f0:20 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEug0kduzlTZv3AvxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQ1NDkxZmUtM2MxMS00ZWEzLThlYTgtN2U0MDNhNmVl YjQ5MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk YzMyNWJkN2UtMDIwYy00MjE4LTg5MmYtOWI1ODdiZjg4Zjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHC+xE3ym0Px7Af6+AdGjsxei+z0gCEtw3Hy UnQtQ61mZcL2JhJVhg5fmLafdDDWE5YHAFR0hYfid1LD+HJkpnL/Zn3rwQejab6f yJZTPyCuPNRgbowywQRaF4L52Ncxq6mqOtV6dZ0veI0Z8ZRzCuXXfKWno+1QsPcS Y4GUCs/15oUh3l0cIGt2/onStJr9YrgihKW+sn7smuvmclXuWef8hMLR93K4nWJb WeUqm04nOcvQU2MmcZiZfxWXn6UkA7Q92R8VFvuWD90tVLIMTYdXhNblPZw2lJEs EBiafQNSlZB0/gOlhtslENxW8eSHYPNY7ekgGkgGXVW93HP8aQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKthvqSIw3wiR5nCjnXayk7n96weMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDU0 OTFmZS0zYzExLTRlYTMtOGVhOC03ZTQwM2E2ZWViNDkvY2NjMDFhOWEtNjEzYS0z OWQwLTk1ODUtMGU2MTk1OGRiOWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmQ1NDkxZmUtM2MxMS00ZWEzLThl YTgtN2U0MDNhNmVlYjQ5L2ZkNTQ5MWZlLTNjMTEtNGVhMy04ZWE4LTdlNDAzYTZl ZWI0OS5jcmwwHwYDVR0jBBgwFoAUW/p9bVG8ca1+tu35CIL3rF9SK3YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDU0OTFmZS0zYzExLTRlYTMtOGVhOC03ZTQw M2E2ZWViNDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABHEAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAJnH0Woeuoo1dmz07Cr/+3d7hIJPajOcXxqbQ6KFxzcKq1GjuawvC wjvHGSd7Q74kqUW0/ojrDcAB6PdMxQQGi9fMKDUDrSPWOpcWu3XZh5UT9CV3RoE4 1cEVVIqK/cDt/tFqnX3uA3QOudlQucX3r8iFEwwug9pbtrBgku1B7nvQcp5001v+ OrlxfPL6grvOWUUgmAdC2T2f5TG2WkL4fc44y7ptbO65rExBkf3nfmFAHsT96qdr tylktaPjP/xKZYqRnh5VQu+Wcj77Vj+HI7mA/YyCJic3QrXKvc1VzVDMzmrrj80o MZLXzgFYumrT1eaOM0fb9WsUmlLyoQLwIA== -----END CERTIFICATE-----Generated at Fri Nov 7 11:24:34 2025 by rpki-client