$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/5fe237b2-f5a5-3dfd-b09a-589bda76baca.roa File: 5fe237b2-f5a5-3dfd-b09a-589bda76baca.roa (raw, json) Hash identifier: xiUq6jQX/8oM4KaFN9BJVd9w/Jah9AV6er5EJUSGGvs= Subject key identifier: EB:FB:B9:96:8D:3D:53:26:F3:DA:96:58:EE:46:F7:47:CB:20:DC:61 Certificate issuer: /CN=ac870f3e-b014-4387-bb59-63f4192b5665 Certificate serial: 010D0C9F4328584BA667A59D7D5E4D877C99F400 Authority key identifier: AF:EC:1A:43:17:16:55:FD:C0:A8:F8:4B:A8:5C:40:F8:E5:1E:89:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/5fe237b2-f5a5-3dfd-b09a-589bda76baca.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 395400 IP address blocks: 2604:49c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/ac870f3e-b014-4387-bb59-63f4192b5665.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/ac870f3e-b014-4387-bb59-63f4192b5665.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:a5:9d:7d:5e:4d:87:7c:99:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac870f3e-b014-4387-bb59-63f4192b5665 Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=a0980e1f-1435-4fa0-aca7-9c1d40ab7248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d1:26:82:07:6e:b8:63:5d:04:0a:e6:13:20: fa:16:26:54:cb:ca:75:54:b6:f8:6e:c0:b5:5f:93: d9:b1:75:61:b3:13:5c:53:14:fe:54:25:ce:6c:34: ac:8b:61:99:0a:36:c2:9a:bc:62:39:48:1f:83:46: f3:57:b4:27:6a:6c:50:1d:da:11:b6:3c:ef:e6:fb: 86:2d:48:49:e7:b7:e8:28:9b:35:93:a8:b8:dc:6a: c1:a2:dd:3e:ba:10:34:51:21:67:5c:17:ec:93:ce: 56:be:d1:ec:cb:a0:7d:ae:c3:17:9d:c4:04:a9:1e: d9:64:66:a6:44:8d:80:7a:21:f5:0b:23:4e:c9:31: 87:09:82:b4:76:da:7e:41:ba:93:58:08:01:a5:5c: 37:69:3c:6b:98:3e:8e:93:b1:2b:26:af:46:76:f6: f1:f7:3c:15:7b:13:1a:09:6f:e2:ba:46:ef:6a:59: ab:69:b6:25:81:71:75:4e:93:41:f3:ca:ef:f1:3a: 09:74:41:1c:1f:2a:68:60:15:78:ae:11:e2:f7:1f: 0f:0a:a4:0f:f9:60:1e:c6:c7:06:89:3f:63:c0:e1: 61:fa:ac:c3:2e:6f:d7:0a:27:f5:d8:9a:ec:1f:62: 78:bd:bb:3d:b4:d1:19:a2:eb:cf:71:91:d1:99:12: 82:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:FB:B9:96:8D:3D:53:26:F3:DA:96:58:EE:46:F7:47:CB:20:DC:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/5fe237b2-f5a5-3dfd-b09a-589bda76baca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/ac870f3e-b014-4387-bb59-63f4192b5665.crl X509v3 Authority Key Identifier: keyid:AF:EC:1A:43:17:16:55:FD:C0:A8:F8:4B:A8:5C:40:F8:E5:1E:89:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665.cer sbgp-ipAddrBlock: critical IPv6: 2604:49c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:b6:39:57:3a:b6:7a:89:f1:58:56:8f:8f:ef:e1:02:8c:06: a5:21:c5:6a:43:fc:a9:89:1e:d2:08:2a:f4:2f:2e:0e:da:f7: 23:87:c7:9a:72:03:4b:ba:e3:5f:4c:1b:2a:72:ac:54:56:40: 5a:88:db:94:43:32:e7:39:75:c8:c0:8c:5e:55:ba:76:d5:64: cd:c5:f3:2c:78:89:3d:47:6d:e8:55:c9:cf:5e:19:47:f8:f4: 00:f8:ec:b0:51:c1:5b:31:0a:49:f7:b5:af:82:00:47:5d:05: 24:70:44:d7:9f:63:ed:97:dd:74:95:e3:1e:11:5f:81:0f:27: 10:64:2a:51:1c:25:18:7e:04:44:af:45:7b:71:59:93:af:63: da:01:d5:df:8b:90:84:32:93:21:d4:94:a7:3f:ab:4a:b7:78: a0:f3:e4:77:69:d3:b0:17:3d:5b:4b:eb:c6:92:7a:df:36:d2: ce:9d:a4:0e:81:91:19:4f:ec:18:9f:d2:b5:59:14:bf:44:25: a2:dc:9e:c3:01:02:4b:b3:a6:dd:43:11:bd:3b:1e:34:6f:62: 00:d1:31:64:29:f5:87:4d:bd:e4:ca:cf:16:b5:6f:79:c9:88: 64:de:21:f3:ba:37:ad:8e:59:a8:ae:3c:7c:a4:74:59:79:c0: b2:e2:31:53 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEumZ6WdfV5Nh3yZ9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM4NzBmM2UtYjAxNC00Mzg3LWJiNTktNjNmNDE5MmI1 NjY1MB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk YTA5ODBlMWYtMTQzNS00ZmEwLWFjYTctOWMxZDQwYWI3MjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNEmggduuGNdBArmEyD6FiZUy8p1VLb4bsC1 X5PZsXVhsxNcUxT+VCXObDSsi2GZCjbCmrxiOUgfg0bzV7QnamxQHdoRtjzv5vuG LUhJ57foKJs1k6i43GrBot0+uhA0USFnXBfsk85WvtHsy6B9rsMXncQEqR7ZZGam RI2AeiH1CyNOyTGHCYK0dtp+QbqTWAgBpVw3aTxrmD6Ok7ErJq9Gdvbx9zwVexMa CW/iukbvalmrabYlgXF1TpNB88rv8ToJdEEcHypoYBV4rhHi9x8PCqQP+WAexscG iT9jwOFh+qzDLm/XCif12JrsH2J4vbs9tNEZouvPcZHRmRKCbQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOv7uZaNPVMm89qWWO5G90fLINxhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hYzg3 MGYzZS1iMDE0LTQzODctYmI1OS02M2Y0MTkyYjU2NjUvNWZlMjM3YjItZjVhNS0z ZGZkLWIwOWEtNTg5YmRhNzZiYWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYWM4NzBmM2UtYjAxNC00Mzg3LWJi NTktNjNmNDE5MmI1NjY1L2FjODcwZjNlLWIwMTQtNDM4Ny1iYjU5LTYzZjQxOTJi NTY2NS5jcmwwHwYDVR0jBBgwFoAUr+waQxcWVf3AqPhLqFxA+OUeicYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hYzg3MGYzZS1iMDE0LTQzODctYmI1OS02M2Y0 MTkyYjU2NjUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRJwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQATtjlXOrZ6ifFYVo+P7+ECjAalIcVqQ/ypiR7SCCr0Ly4O2vcjh8ea cgNLuuNfTBsqcqxUVkBaiNuUQzLnOXXIwIxeVbp21WTNxfMseIk9R23oVcnPXhlH +PQA+OywUcFbMQpJ97WvggBHXQUkcETXn2Ptl910leMeEV+BDycQZCpRHCUYfgRE r0V7cVmTr2PaAdXfi5CEMpMh1JSnP6tKt3ig8+R3adOwFz1bS+vGknrfNtLOnaQO gZEZT+wYn9K1WRS/RCWi3J7DAQJLs6bdQxG9Ox40b2IA0TFkKfWHTb3kys8WtW95 yYhk3iHzujetjlmorjx8pHRZecCy4jFT -----END CERTIFICATE-----Generated at Wed Nov 5 05:05:11 2025 by rpki-client