$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/d829b003-3d7f-36c9-a287-f6e66f824c8d.roa File: d829b003-3d7f-36c9-a287-f6e66f824c8d.roa (raw, json) Hash identifier: EG6QHqmu2NqPrWALYH3iHLaOfgjxd6mQdWOwrkHSvk8= Subject key identifier: EA:C0:CF:78:B6:A7:5B:A1:FE:6F:0C:EC:61:71:C5:6B:B8:A9:9E:9B Certificate issuer: /CN=1c5b9809-1c38-4760-b9bf-096829114292 Certificate serial: 010D0C9F4328584B2E5C4C631BEFD3B565A05140 Authority key identifier: D6:43:1E:5E:EA:50:DB:7F:7F:D5:3B:12:3F:7C:9A:05:E5:DC:49:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/d829b003-3d7f-36c9-a287-f6e66f824c8d.roa Signing time: Sat 13 Sep 2025 13:00:41 +0000 ROA not before: Sat 13 Sep 2025 13:00:41 +0000 ROA not after: Fri 12 Dec 2025 14:00:41 +0000 asID: 32524 IP address blocks: 2604:dc80::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/1c5b9809-1c38-4760-b9bf-096829114292.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/1c5b9809-1c38-4760-b9bf-096829114292.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2e:5c:4c:63:1b:ef:d3:b5:65:a0:51:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c5b9809-1c38-4760-b9bf-096829114292 Validity Not Before: Sep 13 13:00:41 2025 GMT Not After : Dec 12 14:00:41 2025 GMT Subject: CN=b1b45293-4afe-4ce6-9fcb-a5f69e2e94a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f0:9f:4f:07:08:78:cb:1a:b2:26:1e:41:9a: 90:e4:f0:0d:29:5f:95:9a:c2:98:cb:01:30:01:b8: 6d:92:16:39:e1:75:0e:20:5d:7a:05:45:87:3a:a4: 78:f1:e6:90:f0:df:90:85:a2:40:5d:ee:f5:5b:00: 7b:19:c9:17:4c:56:b2:b7:64:c8:61:90:53:bb:cb: d0:51:19:4f:84:fb:db:0d:bd:a8:49:cd:c0:69:49: d9:57:ce:7b:cb:3f:3b:9f:08:cc:bc:de:25:9d:c8: 91:91:cc:76:5b:76:38:54:1c:dd:90:c6:34:3a:fa: 47:b6:76:7d:68:cd:3d:c6:11:72:14:1c:d7:03:dc: 33:65:42:db:1a:01:1c:67:cd:be:aa:63:94:f2:0c: f9:76:c2:68:e1:7a:2f:41:8f:8a:e2:7c:bb:cb:d2: 31:2f:da:33:6d:7f:e7:6d:17:41:2f:c0:b4:59:08: 40:38:9c:ef:58:97:3c:45:a5:2f:11:5b:65:b1:e3: c5:7a:88:25:71:63:18:c5:f5:e1:0e:cf:ca:d9:1b: 32:d6:44:e9:14:37:af:9f:73:a5:c2:2f:9c:f9:40: 2b:9c:ef:1a:dc:af:45:73:e5:b5:c5:1f:2c:40:1f: 65:8e:b5:10:70:07:d3:2c:00:06:2c:64:6f:1e:8e: 2a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C0:CF:78:B6:A7:5B:A1:FE:6F:0C:EC:61:71:C5:6B:B8:A9:9E:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/d829b003-3d7f-36c9-a287-f6e66f824c8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/1c5b9809-1c38-4760-b9bf-096829114292.crl X509v3 Authority Key Identifier: keyid:D6:43:1E:5E:EA:50:DB:7F:7F:D5:3B:12:3F:7C:9A:05:E5:DC:49:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292.cer sbgp-ipAddrBlock: critical IPv6: 2604:dc80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:00:16:15:23:98:2b:28:4d:4f:51:34:a2:c4:d4:f7:fd:aa: 37:bc:e3:2b:06:7c:a7:39:1a:ad:da:d7:c9:8e:31:8b:f1:2c: 0a:c0:10:c8:0c:d0:b0:f0:63:34:1f:db:9f:c1:79:32:11:aa: be:3c:0a:c7:81:79:86:02:db:be:75:d7:e5:80:ca:dd:6a:ed: 6c:af:3e:3e:a9:38:3a:fe:b4:1c:3a:4a:3a:ad:a4:86:90:cf: 4b:88:00:2f:5a:0d:09:90:0a:67:74:02:e6:e3:07:3c:f5:fd: 21:09:cf:56:75:06:48:7e:48:d6:20:05:14:68:77:23:12:2c: d7:1e:c2:42:fc:5d:7f:6f:4e:f6:0a:ef:14:fa:eb:a9:38:f1: 43:f9:aa:52:60:1f:45:71:3f:a6:42:14:96:10:2f:81:25:c1: b0:63:fc:aa:08:f2:15:8a:4a:c8:ef:d9:53:2b:88:87:34:4b: 5c:63:5f:a0:15:a5:eb:1f:3d:ba:41:da:a3:39:3d:d5:b1:4c: 90:5e:dd:f7:d7:5d:c8:14:ab:86:e4:4a:df:77:e0:26:dd:2a: 92:e2:f6:0b:0d:9f:f0:59:5d:81:59:4e:1f:b8:91:02:15:85: e8:32:ad:5b:2a:df:e9:cb:93:23:7d:a0:6c:4d:00:2b:17:46: 80:40:98:7f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsuXExjG+/TtWWgUUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM1Yjk4MDktMWMzOC00NzYwLWI5YmYtMDk2ODI5MTE0 MjkyMB4XDTI1MDkxMzEzMDA0MVoXDTI1MTIxMjE0MDA0MVowLzEtMCsGA1UEAxMk YjFiNDUyOTMtNGFmZS00Y2U2LTlmY2ItYTVmNjllMmU5NGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvCfTwcIeMsasiYeQZqQ5PANKV+VmsKYywEw AbhtkhY54XUOIF16BUWHOqR48eaQ8N+QhaJAXe71WwB7GckXTFayt2TIYZBTu8vQ URlPhPvbDb2oSc3AaUnZV857yz87nwjMvN4lnciRkcx2W3Y4VBzdkMY0OvpHtnZ9 aM09xhFyFBzXA9wzZULbGgEcZ82+qmOU8gz5dsJo4XovQY+K4ny7y9IxL9ozbX/n bRdBL8C0WQhAOJzvWJc8RaUvEVtlsePFeoglcWMYxfXhDs/K2Rsy1kTpFDevn3Ol wi+c+UArnO8a3K9Fc+W1xR8sQB9ljrUQcAfTLAAGLGRvHo4q+QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOrAz3i2p1uh/m8M7GFxxWu4qZ6bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYzVi OTgwOS0xYzM4LTQ3NjAtYjliZi0wOTY4MjkxMTQyOTIvZDgyOWIwMDMtM2Q3Zi0z NmM5LWEyODctZjZlNjZmODI0YzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWM1Yjk4MDktMWMzOC00NzYwLWI5 YmYtMDk2ODI5MTE0MjkyLzFjNWI5ODA5LTFjMzgtNDc2MC1iOWJmLTA5NjgyOTEx NDI5Mi5jcmwwHwYDVR0jBBgwFoAU1kMeXupQ239/1TsSP3yaBeXcSekwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYzViOTgwOS0xYzM4LTQ3NjAtYjliZi0wOTY4 MjkxMTQyOTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTcgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBPABYVI5grKE1PUTSixNT3/ao3vOMrBnynORqt2tfJjjGL8SwKwBDI DNCw8GM0H9ufwXkyEaq+PArHgXmGAtu+ddflgMrdau1srz4+qTg6/rQcOko6raSG kM9LiAAvWg0JkApndALm4wc89f0hCc9WdQZIfkjWIAUUaHcjEizXHsJC/F1/b072 Cu8U+uupOPFD+apSYB9FcT+mQhSWEC+BJcGwY/yqCPIVikrI79lTK4iHNEtcY1+g FaXrHz26QdqjOT3VsUyQXt33113IFKuG5Erfd+Am3SqS4vYLDZ/wWV2BWU4fuJEC FYXoMq1bKt/py5MjfaBsTQArF0aAQJh/ -----END CERTIFICATE-----Generated at Wed Nov 5 12:37:44 2025 by rpki-client