$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/175ad2b2-07c2-3132-bd39-ad9050a1af8f.roa File: 175ad2b2-07c2-3132-bd39-ad9050a1af8f.roa (raw, json) Hash identifier: QveDkB28a8v9H3ex8aRTZNH7JpPwoSWTAIOvWvmDi5U= Subject key identifier: 47:A1:F8:F5:33:A7:AB:A8:B4:DF:0A:DE:D6:14:C4:F5:6B:A1:0A:5C Certificate issuer: /CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168 Certificate serial: 010D0C9F4328584B1C36D1D7D18A798E3E620CA0 Authority key identifier: 31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/175ad2b2-07c2-3132-bd39-ad9050a1af8f.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 14511 IP address blocks: 2610:188::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:d1:d7:d1:8a:79:8e:3e:62:0c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=cad15aa2-7877-4156-94ee-656b0ff1afba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:67:5f:e0:6c:b9:ee:f7:ca:d7:94:74:15:08: 49:85:1e:6a:31:28:85:a6:a8:a9:4b:b2:5f:de:d8: dd:25:2b:8b:c4:58:60:73:b6:db:bf:e4:f2:5a:e6: 9e:9c:7d:93:2f:fe:0d:93:33:75:44:24:30:ad:9a: 07:ed:18:35:d5:db:e0:98:2d:b5:ba:c7:1f:21:4d: d3:e7:b0:9e:0e:d7:a8:76:9c:bf:78:8b:7b:b1:0d: 83:0b:df:f2:08:d0:c1:fe:40:f6:30:20:5d:57:0e: 8c:fb:fa:14:3d:af:c9:30:59:15:ee:9a:bf:98:0e: 2b:31:43:3e:19:0b:67:bb:a4:2c:cc:94:41:57:e7: 64:98:fa:d0:c4:5f:5c:fe:ab:57:35:56:10:94:66: e3:57:a0:ea:09:6d:11:3f:2a:e2:80:79:59:2b:21: f8:c9:0b:d5:5a:5f:7f:dd:61:05:a5:19:82:92:85: a9:4a:29:55:0e:4d:c8:ff:7f:d1:20:55:e2:7f:23: c5:23:4b:a1:f1:4a:9a:ff:b9:94:86:8b:e9:cc:24: 84:18:46:8c:00:00:a8:40:d1:ae:07:02:10:11:86: b0:99:ec:f8:ab:f1:eb:39:b5:1b:25:75:a3:bb:72: 7d:24:ac:a4:e5:73:e6:ee:0c:18:89:04:7a:18:c9: 19:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A1:F8:F5:33:A7:AB:A8:B4:DF:0A:DE:D6:14:C4:F5:6B:A1:0A:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/175ad2b2-07c2-3132-bd39-ad9050a1af8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl X509v3 Authority Key Identifier: keyid:31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer sbgp-ipAddrBlock: critical IPv6: 2610:188::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:ec:46:08:f3:13:c0:32:52:25:5e:1d:6a:0e:a8:b2:f5:91: 22:55:4e:d5:15:cf:fb:19:62:45:e0:e0:26:4f:ed:e5:df:b0: 45:18:c2:69:45:3f:3d:3f:54:01:5f:9d:4d:30:90:c1:8d:c2: c4:02:75:38:40:13:a7:2c:b0:d9:5b:d8:24:b3:2b:09:90:99: 98:4d:8b:71:91:0b:73:e2:0c:92:60:8b:2f:42:24:7e:2f:19: 60:cc:6b:ad:9c:a1:9b:8d:75:66:ec:57:f9:6a:b7:53:1f:b2: ce:a6:32:1c:5b:99:4a:de:ed:3b:b6:07:c4:2c:26:91:4c:cb: af:6f:cf:c5:23:96:62:1e:44:6d:93:6b:ef:32:5e:b2:97:95: 65:90:1b:84:22:ea:dc:71:b8:c8:a7:31:3d:52:52:39:f8:7e: dd:40:25:3d:8c:6b:37:ae:cb:d3:27:14:1e:3a:66:3f:7a:44: 3a:ca:b3:93:85:df:ab:66:97:e8:d5:ae:aa:55:ed:60:59:93: 91:1f:7b:75:46:1f:15:60:9f:db:51:b5:89:46:aa:92:81:ab: f5:4b:8e:54:c1:c4:42:a6:00:75:a6:cf:fc:aa:62:c9:d7:c6: db:57:58:72:7e:f0:c8:3c:e5:4b:9c:03:43:2f:f4:12:b0:9b: df:fd:2b:97 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEscNtHX0Yp5jj5iDKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVjY2JkN2UtMDg0NC00OGIxLTg4ZDctMGE4ZWY0NmU4 MTY4MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk Y2FkMTVhYTItNzg3Ny00MTU2LTk0ZWUtNjU2YjBmZjFhZmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGdf4Gy57vfK15R0FQhJhR5qMSiFpqipS7Jf 3tjdJSuLxFhgc7bbv+TyWuaenH2TL/4NkzN1RCQwrZoH7Rg11dvgmC21uscfIU3T 57CeDteodpy/eIt7sQ2DC9/yCNDB/kD2MCBdVw6M+/oUPa/JMFkV7pq/mA4rMUM+ GQtnu6QszJRBV+dkmPrQxF9c/qtXNVYQlGbjV6DqCW0RPyrigHlZKyH4yQvVWl9/ 3WEFpRmCkoWpSilVDk3I/3/RIFXifyPFI0uh8Uqa/7mUhovpzCSEGEaMAACoQNGu BwIQEYawmez4q/HrObUbJXWju3J9JKyk5XPm7gwYiQR6GMkZ2QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEeh+PUzp6uotN8K3tYUxPVroQpcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNWNj YmQ3ZS0wODQ0LTQ4YjEtODhkNy0wYThlZjQ2ZTgxNjgvMTc1YWQyYjItMDdjMi0z MTMyLWJkMzktYWQ5MDUwYTFhZjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzVjY2JkN2UtMDg0NC00OGIxLTg4 ZDctMGE4ZWY0NmU4MTY4LzM1Y2NiZDdlLTA4NDQtNDhiMS04OGQ3LTBhOGVmNDZl ODE2OC5jcmwwHwYDVR0jBBgwFoAUMWdUtL8Wfq3x9BDB2dL62qqFPBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zNWNjYmQ3ZS0wODQ0LTQ4YjEtODhkNy0wYThl ZjQ2ZTgxNjguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJhABiDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBi7EYI8xPAMlIlXh1qDqiy9ZEiVU7VFc/7GWJF4OAmT+3l37BFGMJp RT89P1QBX51NMJDBjcLEAnU4QBOnLLDZW9gksysJkJmYTYtxkQtz4gySYIsvQiR+ LxlgzGutnKGbjXVm7Ff5ardTH7LOpjIcW5lK3u07tgfELCaRTMuvb8/FI5ZiHkRt k2vvMl6yl5VlkBuEIurccbjIpzE9UlI5+H7dQCU9jGs3rsvTJxQeOmY/ekQ6yrOT hd+rZpfo1a6qVe1gWZORH3t1Rh8VYJ/bUbWJRqqSgav1S45UwcRCpgB1ps/8qmLJ 18bbV1hyfvDIPOVLnANDL/QSsJvf/SuX -----END CERTIFICATE-----Generated at Wed Nov 5 13:23:15 2025 by rpki-client