$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/a22dfcea-20c8-34b5-8096-4e317fabb3e9.roa File: a22dfcea-20c8-34b5-8096-4e317fabb3e9.roa (raw, json) Hash identifier: xGibZClWYNYqwkoFmI29d/S7x2Q7D5jL2YidIMNyDv8= Subject key identifier: 3C:15:03:9A:70:BE:CB:AC:99:DE:3D:29:DE:F7:84:0E:C8:84:BF:03 Certificate issuer: /CN=00423c2c-0dc2-4b33-b865-92ccbfdb07dd Certificate serial: 010D0C9F4328584B9E0792F710E5C5D5AC5FF100 Authority key identifier: F3:C0:69:D2:47:79:65:94:E1:58:B5:2D:72:D5:DA:AA:39:6C:97:3E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/a22dfcea-20c8-34b5-8096-4e317fabb3e9.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 16527 IP address blocks: 2604:2900::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:92:f7:10:e5:c5:d5:ac:5f:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00423c2c-0dc2-4b33-b865-92ccbfdb07dd Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=76cfeeae-f1b4-477f-8b61-1f7987fbe15f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:43:ca:c5:ed:db:29:07:db:3c:9a:7e:a0:93: d5:0a:3c:a5:53:41:58:32:d8:8f:09:2b:42:c4:91: 8b:61:05:35:57:ff:db:b1:12:5e:19:42:1a:5a:ae: b9:60:b2:a0:9d:a6:ee:81:2f:f5:f5:db:46:21:4a: 66:01:ef:43:6c:f7:82:8c:4e:63:55:c8:fd:d1:2e: e7:09:34:e3:d4:5c:86:fc:54:64:58:9a:a5:3e:5a: 1a:61:b6:c2:0b:47:0a:0f:60:55:f8:68:3a:29:8d: cf:4d:d7:35:a9:a5:bd:f7:30:8f:b0:5b:a5:17:0d: 40:ea:eb:6a:64:68:b5:c7:28:06:36:54:55:6b:a1: 62:0d:d3:22:ba:b6:40:70:e4:f9:eb:75:cf:21:c3: 32:e7:4d:8d:45:cb:e8:d7:f9:5b:15:18:2d:a6:99: 50:18:b3:a5:12:09:77:4d:75:ed:bf:57:8f:b1:85: 36:66:d7:6e:8b:ae:19:49:a2:48:46:f1:42:59:cf: 70:e6:1c:70:b5:8a:e7:a8:c4:56:a4:d0:7c:0a:a0: fa:98:c3:d2:16:b8:03:48:21:6a:54:32:0d:37:34: e6:af:a5:b4:7b:9a:5b:94:b2:45:39:04:27:0a:1a: cb:a6:b4:b9:6f:7d:09:9a:0e:ac:9f:92:34:7b:f9: 14:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:15:03:9A:70:BE:CB:AC:99:DE:3D:29:DE:F7:84:0E:C8:84:BF:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/a22dfcea-20c8-34b5-8096-4e317fabb3e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.crl X509v3 Authority Key Identifier: keyid:F3:C0:69:D2:47:79:65:94:E1:58:B5:2D:72:D5:DA:AA:39:6C:97:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.cer sbgp-ipAddrBlock: critical IPv6: 2604:2900::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:2e:4c:ae:f1:2f:fd:59:e6:c1:4e:8e:8b:99:e2:50:43:5f: ea:4a:e8:3e:b5:6c:1c:e4:1b:88:8d:d4:c0:a5:b2:e6:2e:38: 36:a7:ab:e4:7f:24:fc:23:dc:bb:51:9a:55:0d:c0:4c:9a:b9: 90:89:d6:86:04:7d:23:66:73:38:10:16:85:f1:66:66:72:d2: 96:81:72:f2:d2:15:d7:f6:0b:c7:e7:2f:42:8b:ad:42:b0:4b: 64:2c:59:f6:a4:9f:94:35:7d:5c:db:9c:f2:91:87:72:f7:00: b9:a3:9d:ac:ce:bf:e6:a4:55:79:84:df:89:f7:43:da:d9:c6: 52:b5:2b:95:cf:35:42:84:0a:95:bb:b5:29:10:47:82:f1:cc: f3:21:aa:38:3b:b6:cd:6b:68:2c:da:97:f5:4c:b1:92:f7:33: 82:de:2f:fd:66:d1:98:ab:0e:93:3d:b5:95:b9:c1:44:11:3a: b8:31:ae:91:ac:ee:61:45:30:93:45:ee:7a:32:f5:d9:63:38: 0b:51:d3:d8:d1:42:30:0e:63:be:2e:99:98:9c:8b:5f:35:a1: 5b:15:d0:5a:06:ab:84:a5:7d:e7:32:51:7a:4e:47:00:06:3b: 3e:4c:8b:a4:35:b0:84:7c:df:89:26:eb:44:12:a9:6c:30:0b: a3:ab:1d:2a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEueB5L3EOXF1axf8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA0MjNjMmMtMGRjMi00YjMzLWI4NjUtOTJjY2JmZGIw N2RkMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk NzZjZmVlYWUtZjFiNC00NzdmLThiNjEtMWY3OTg3ZmJlMTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkPKxe3bKQfbPJp+oJPVCjylU0FYMtiPCStC xJGLYQU1V//bsRJeGUIaWq65YLKgnabugS/19dtGIUpmAe9DbPeCjE5jVcj90S7n CTTj1FyG/FRkWJqlPloaYbbCC0cKD2BV+Gg6KY3PTdc1qaW99zCPsFulFw1A6utq ZGi1xygGNlRVa6FiDdMiurZAcOT563XPIcMy502NRcvo1/lbFRgtpplQGLOlEgl3 TXXtv1ePsYU2Ztdui64ZSaJIRvFCWc9w5hxwtYrnqMRWpNB8CqD6mMPSFrgDSCFq VDINNzTmr6W0e5pblLJFOQQnChrLprS5b30Jmg6sn5I0e/kUwQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDwVA5pwvsusmd49Kd73hA7IhL8DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wMDQy M2MyYy0wZGMyLTRiMzMtYjg2NS05MmNjYmZkYjA3ZGQvYTIyZGZjZWEtMjBjOC0z NGI1LTgwOTYtNGUzMTdmYWJiM2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDA0MjNjMmMtMGRjMi00YjMzLWI4 NjUtOTJjY2JmZGIwN2RkLzAwNDIzYzJjLTBkYzItNGIzMy1iODY1LTkyY2NiZmRi MDdkZC5jcmwwHwYDVR0jBBgwFoAU88Bp0kd5ZZThWLUtctXaqjlslz4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wMDQyM2MyYy0wZGMyLTRiMzMtYjg2NS05MmNj YmZkYjA3ZGQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQpADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAGLkyu8S/9WebBTo6LmeJQQ1/qSug+tWwc5BuIjdTApbLmLjg2p6vk fyT8I9y7UZpVDcBMmrmQidaGBH0jZnM4EBaF8WZmctKWgXLy0hXX9gvH5y9Ci61C sEtkLFn2pJ+UNX1c25zykYdy9wC5o52szr/mpFV5hN+J90Pa2cZStSuVzzVChAqV u7UpEEeC8czzIao4O7bNa2gs2pf1TLGS9zOC3i/9ZtGYqw6TPbWVucFEETq4Ma6R rO5hRTCTRe56MvXZYzgLUdPY0UIwDmO+LpmYnItfNaFbFdBaBquEpX3nMlF6TkcA Bjs+TIukNbCEfN+JJutEEqlsMAujqx0q -----END CERTIFICATE-----Generated at Wed Nov 5 01:17:53 2025 by rpki-client