$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/c6b99a78-29a6-362b-817f-57dd53b2e3b7.roa File: c6b99a78-29a6-362b-817f-57dd53b2e3b7.roa (raw, json) Hash identifier: Vt5Z+kl9PtzU2BSjHfD4cCX7uMbHl/7icaHVqpoSXck= Subject key identifier: 98:92:39:73:9A:14:AD:33:9C:70:DA:D2:26:D6:50:C1:58:2D:42:2D Certificate issuer: /CN=7e4fb68f-edad-45a2-98d4-e937526bfa31 Certificate serial: 010D0C9F4328584BBFA5A49EE9FA86A0B6EA3F80 Authority key identifier: 43:79:8E:C3:30:41:09:01:3D:81:6A:0F:39:2B:8F:AB:7E:9B:B8:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/c6b99a78-29a6-362b-817f-57dd53b2e3b7.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 981 IP address blocks: 2605:ac40:40::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:a4:9e:e9:fa:86:a0:b6:ea:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e4fb68f-edad-45a2-98d4-e937526bfa31 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=e5aa7d1b-b697-44ed-a23f-38968fd594b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:95:71:6f:a0:1f:5c:15:31:3f:93:9e:ca:f6: ae:73:8f:f5:13:a4:4b:7b:da:18:2d:e3:da:9a:60: df:8a:00:6a:35:ed:48:b8:c7:b3:cf:18:13:38:81: 2f:36:ff:27:09:40:fa:1c:83:29:59:7d:27:a8:5a: fb:cb:65:c6:b8:5e:16:1e:8a:a0:b7:16:d4:7b:24: 3f:44:35:2d:5f:0b:27:05:ab:fc:80:e5:15:23:6d: 46:17:ec:a7:77:6a:1f:e3:e3:23:91:34:91:cb:74: b1:c9:5a:d8:29:c9:a2:e1:61:ea:8e:57:a0:17:c7: 3f:11:b5:08:ff:f9:54:c5:61:78:04:44:e4:71:ce: 3c:ba:45:44:8b:35:f8:aa:98:0f:35:35:68:76:68: 46:2b:e7:98:4a:f1:21:d1:c8:75:7d:ec:d9:d5:dc: 30:2d:10:56:6c:ea:ae:9f:3b:2e:30:01:10:0a:c1: 49:b2:42:a7:35:84:c6:06:28:0a:f2:13:3e:f4:d2: f8:50:0a:24:a8:70:71:56:55:7c:c8:df:f3:9c:b7: a7:2a:e4:76:1c:df:49:2a:b4:a0:54:b9:d4:03:9c: 6d:16:4f:28:77:5c:59:32:d4:cb:5e:a2:e9:67:09: f4:6d:1b:6a:bf:1d:8d:e2:58:85:75:94:e8:ec:a5: fb:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:92:39:73:9A:14:AD:33:9C:70:DA:D2:26:D6:50:C1:58:2D:42:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/c6b99a78-29a6-362b-817f-57dd53b2e3b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.crl X509v3 Authority Key Identifier: keyid:43:79:8E:C3:30:41:09:01:3D:81:6A:0F:39:2B:8F:AB:7E:9B:B8:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer sbgp-ipAddrBlock: critical IPv6: 2605:ac40:40::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:2d:cb:8c:73:89:1b:22:f1:bb:92:ab:d5:3c:3f:99:5f:21: ef:16:97:ba:12:cc:10:9a:c1:0f:2b:43:7c:58:d4:86:12:f8: 3a:d9:5f:ab:f9:00:23:e6:0a:e1:18:f0:c5:fa:68:8e:df:53: 81:6b:05:fc:01:3d:d0:9e:c7:d2:c7:6d:4b:84:85:66:e9:fa: d7:98:6b:c3:33:22:4d:9b:4f:86:59:8a:5d:4f:9c:39:b4:1b: d8:04:bd:42:f9:ec:7d:a0:07:56:76:ec:c5:aa:67:46:6a:e5: f2:3a:e6:56:c8:f3:57:8e:1d:c8:0f:7b:55:b0:ea:b9:45:eb: 7f:fd:1a:12:81:14:74:24:e2:af:0b:6f:bb:4d:6b:ff:35:92: e5:94:d5:c2:99:ac:30:0d:37:f5:31:f0:f6:03:71:a2:d7:1b: 29:16:c2:3a:3d:66:a6:89:0c:37:19:e7:c4:48:10:e8:75:a9: d1:07:f6:e1:54:76:a7:eb:e5:fd:f0:30:3a:02:16:bf:81:fb: 1b:24:a9:26:a5:8b:f4:7a:52:95:47:0f:be:93:ed:29:98:a9: 9e:bd:51:54:88:47:8f:61:20:d8:18:42:fe:02:6a:c3:41:87: 2e:88:6a:90:aa:a8:fa:09:05:b1:fd:2d:dd:8f:ca:75:00:e4: 90:99:49:27 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu/paSe6fqGoLbqP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0ZmI2OGYtZWRhZC00NWEyLTk4ZDQtZTkzNzUyNmJm YTMxMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk ZTVhYTdkMWItYjY5Ny00NGVkLWEyM2YtMzg5NjhmZDU5NGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJVxb6AfXBUxP5Oeyvauc4/1E6RLe9oYLePa mmDfigBqNe1IuMezzxgTOIEvNv8nCUD6HIMpWX0nqFr7y2XGuF4WHoqgtxbUeyQ/ RDUtXwsnBav8gOUVI21GF+ynd2of4+MjkTSRy3SxyVrYKcmi4WHqjlegF8c/EbUI //lUxWF4BETkcc48ukVEizX4qpgPNTVodmhGK+eYSvEh0ch1fezZ1dwwLRBWbOqu nzsuMAEQCsFJskKnNYTGBigK8hM+9NL4UAokqHBxVlV8yN/znLenKuR2HN9JKrSg VLnUA5xtFk8od1xZMtTLXqLpZwn0bRtqvx2N4liFdZTo7KX7nwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJiSOXOaFK0znHDa0ibWUMFYLUItMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTRm YjY4Zi1lZGFkLTQ1YTItOThkNC1lOTM3NTI2YmZhMzEvYzZiOTlhNzgtMjlhNi0z NjJiLTgxN2YtNTdkZDUzYjJlM2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0ZmI2OGYtZWRhZC00NWEyLTk4 ZDQtZTkzNzUyNmJmYTMxLzdlNGZiNjhmLWVkYWQtNDVhMi05OGQ0LWU5Mzc1MjZi ZmEzMS5jcmwwHwYDVR0jBBgwFoAUQ3mOwzBBCQE9gWoPOSuPq36buDgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTRmYjY4Zi1lZGFkLTQ1YTItOThkNC1lOTM3 NTI2YmZhMzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgWsQABA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALQty4xziRsi8buSq9U8P5lfIe8Wl7oSzBCawQ8rQ3xY1IYS+DrZ X6v5ACPmCuEY8MX6aI7fU4FrBfwBPdCex9LHbUuEhWbp+teYa8MzIk2bT4ZZil1P nDm0G9gEvUL57H2gB1Z27MWqZ0Zq5fI65lbI81eOHcgPe1Ww6rlF63/9GhKBFHQk 4q8Lb7tNa/81kuWU1cKZrDANN/Ux8PYDcaLXGykWwjo9ZqaJDDcZ58RIEOh1qdEH 9uFUdqfr5f3wMDoCFr+B+xskqSali/R6UpVHD76T7SmYqZ69UVSIR49hINgYQv4C asNBhy6IapCqqPoJBbH9Ld2PynUA5JCZSSc= -----END CERTIFICATE-----Generated at Wed Nov 5 03:33:51 2025 by rpki-client