$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/f6fd7853-7003-3286-b87e-8ff625f2ba2e.roa File: f6fd7853-7003-3286-b87e-8ff625f2ba2e.roa (raw, json) Hash identifier: 0Q1ZXi9mEXR+yyDv9B2bJUpzZUsbLgkJuDNEeRRzNuk= Subject key identifier: B5:CA:CE:67:A8:D4:EC:E7:47:FB:71:5C:30:97:20:C3:46:9E:56:A7 Certificate issuer: /CN=3c655aaf-76f4-4bab-b4f7-8fb23c3d4011 Certificate serial: 010D0C9F4328584BBE40343AC2542464F7F43280 Authority key identifier: 88:73:89:5B:D7:48:07:9E:32:C3:7E:DE:E7:B8:93:C8:98:EC:2C:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/f6fd7853-7003-3286-b87e-8ff625f2ba2e.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 395927 IP address blocks: 2604:f040::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:34:3a:c2:54:24:64:f7:f4:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c655aaf-76f4-4bab-b4f7-8fb23c3d4011 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=60ecf56d-3e50-4fe2-9ed2-e464734d7962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:34:03:c4:59:98:c7:e3:11:66:14:1d:9b:7c: 3e:fa:96:fd:4e:c0:92:98:27:73:ec:4c:02:c1:70: 0f:98:b1:f6:e4:2b:2b:50:fb:e7:ae:ad:a1:7d:a5: 54:41:1b:23:13:ad:47:c2:4a:52:83:72:49:87:47: e4:7e:61:42:17:30:9c:6f:20:d2:2d:61:4a:98:a2: f5:15:22:61:71:92:87:ea:bc:2a:35:e9:14:4b:c9: d8:df:bb:0c:85:59:1a:1c:14:15:fc:83:24:ce:e5: 7a:89:49:f4:36:3d:2e:ea:76:32:a4:a9:3a:ee:61: a6:4b:a9:f8:63:2c:34:b2:c5:6e:ec:9c:e3:37:3c: b3:b5:15:6d:96:f5:f8:02:da:71:3c:a6:14:53:34: 1e:24:3c:fb:dc:a2:73:97:42:f4:66:c1:19:97:a9: ae:2e:a5:ba:43:41:5f:ec:52:43:66:ae:5d:8f:8e: 3b:73:84:d8:af:35:5c:a5:3a:89:82:7b:5c:a6:86: 3a:e5:e0:39:a7:25:46:b7:b9:e6:7c:5a:23:18:6e: ed:a5:50:ef:b8:03:f8:9e:cb:2b:ed:e4:bd:8d:54: f2:1e:70:78:ec:1d:e2:8d:8e:c8:41:7c:63:8f:e9: 39:5c:94:88:68:e7:67:02:b1:4f:31:2a:6e:d8:58: 7e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:CA:CE:67:A8:D4:EC:E7:47:FB:71:5C:30:97:20:C3:46:9E:56:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/f6fd7853-7003-3286-b87e-8ff625f2ba2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.crl X509v3 Authority Key Identifier: keyid:88:73:89:5B:D7:48:07:9E:32:C3:7E:DE:E7:B8:93:C8:98:EC:2C:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer sbgp-ipAddrBlock: critical IPv6: 2604:f040::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:ad:64:a4:39:f8:cf:a4:48:cd:a4:63:92:f8:5a:b9:63:0b: f9:a5:da:6b:ee:ed:ec:31:06:02:e4:6b:52:4a:43:a0:e3:44: c8:d9:a6:2b:bd:aa:8d:4f:2b:bb:0d:00:52:83:a0:1e:ea:75: 7b:6d:10:58:a6:68:85:bd:04:c3:09:5b:7d:4b:8b:26:aa:9f: 7b:8e:0a:be:8f:79:bc:87:80:41:45:1c:d3:1d:1d:3a:a1:7a: 0f:32:59:95:d6:ec:7c:2e:c4:3d:ef:0f:81:cc:3a:a2:2b:db: b2:99:a5:fc:c4:38:1b:10:b0:06:c5:71:0f:9c:aa:8c:6a:0d: 60:fb:9c:13:e3:f6:2d:42:56:fb:2d:76:85:01:d0:79:51:6f: 1d:33:21:f4:5e:df:11:86:a1:6a:92:08:96:f6:1e:95:84:49: 1a:9b:96:da:bd:73:04:20:36:d3:0a:4b:aa:77:fd:74:0b:c1: 57:68:4a:83:65:65:e3:fd:c6:44:91:64:95:74:4a:94:a2:79: 9c:06:2f:62:9c:37:c4:27:76:25:b2:e4:c3:76:2d:fd:2b:5c: 8c:3a:63:12:ca:df:fb:e5:db:cd:1b:40:1b:f3:9f:17:3c:0c: 6e:16:22:c4:36:8c:58:de:80:29:25:79:03:ad:4b:c2:0a:67: c2:24:c2:94 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEu+QDQ6wlQkZPf0MoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M2NTVhYWYtNzZmNC00YmFiLWI0ZjctOGZiMjNjM2Q0 MDExMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk NjBlY2Y1NmQtM2U1MC00ZmUyLTllZDItZTQ2NDczNGQ3OTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTQDxFmYx+MRZhQdm3w++pb9TsCSmCdz7EwC wXAPmLH25CsrUPvnrq2hfaVUQRsjE61HwkpSg3JJh0fkfmFCFzCcbyDSLWFKmKL1 FSJhcZKH6rwqNekUS8nY37sMhVkaHBQV/IMkzuV6iUn0Nj0u6nYypKk67mGmS6n4 Yyw0ssVu7JzjNzyztRVtlvX4AtpxPKYUUzQeJDz73KJzl0L0ZsEZl6muLqW6Q0Ff 7FJDZq5dj447c4TYrzVcpTqJgntcpoY65eA5pyVGt7nmfFojGG7tpVDvuAP4nssr 7eS9jVTyHnB47B3ijY7IQXxjj+k5XJSIaOdnArFPMSpu2Fh+PQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLXKzmeo1OznR/txXDCXIMNGnlanMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zYzY1 NWFhZi03NmY0LTRiYWItYjRmNy04ZmIyM2MzZDQwMTEvZjZmZDc4NTMtNzAwMy0z Mjg2LWI4N2UtOGZmNjI1ZjJiYTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2M2NTVhYWYtNzZmNC00YmFiLWI0 ZjctOGZiMjNjM2Q0MDExLzNjNjU1YWFmLTc2ZjQtNGJhYi1iNGY3LThmYjIzYzNk NDAxMS5jcmwwHwYDVR0jBBgwFoAUiHOJW9dIB54yw37e57iTyJjsLBIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zYzY1NWFhZi03NmY0LTRiYWItYjRmNy04ZmIy M2MzZDQwMTEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTwQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB4rWSkOfjPpEjNpGOS+Fq5Ywv5pdpr7u3sMQYC5GtSSkOg40TI2aYr vaqNTyu7DQBSg6Ae6nV7bRBYpmiFvQTDCVt9S4smqp97jgq+j3m8h4BBRRzTHR06 oXoPMlmV1ux8LsQ97w+BzDqiK9uymaX8xDgbELAGxXEPnKqMag1g+5wT4/YtQlb7 LXaFAdB5UW8dMyH0Xt8RhqFqkgiW9h6VhEkam5bavXMEIDbTCkuqd/10C8FXaEqD ZWXj/cZEkWSVdEqUonmcBi9inDfEJ3YlsuTDdi39K1yMOmMSyt/75dvNG0Ab858X PAxuFiLENoxY3oApJXkDrUvCCmfCJMKU -----END CERTIFICATE-----Generated at Wed Nov 5 04:52:56 2025 by rpki-client