$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/929275f0-3197-4a70-8b27-8fff75b6e7b9/a5734608-f60f-3001-9d9d-4f1eaffa2c67.roa File: a5734608-f60f-3001-9d9d-4f1eaffa2c67.roa (raw, json) Hash identifier: CPgmyhX2gSuvdSQx5V0vTFHUMgUAE3NyF0yJfEqEtDw= Subject key identifier: 00:2D:A7:A2:EE:FA:6B:74:D9:80:43:42:D1:D8:42:D4:BC:76:38:E0 Certificate issuer: /CN=929275f0-3197-4a70-8b27-8fff75b6e7b9 Certificate serial: 010D0C9F4328584B4E770D8159C20C0F11C7A480 Authority key identifier: BB:02:D1:44:F5:91:AC:6D:DC:A7:01:E4:B5:05:4A:6D:69:25:47:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/929275f0-3197-4a70-8b27-8fff75b6e7b9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/929275f0-3197-4a70-8b27-8fff75b6e7b9/a5734608-f60f-3001-9d9d-4f1eaffa2c67.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 400674 IP address blocks: 2606:ccc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/929275f0-3197-4a70-8b27-8fff75b6e7b9/929275f0-3197-4a70-8b27-8fff75b6e7b9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/929275f0-3197-4a70-8b27-8fff75b6e7b9/929275f0-3197-4a70-8b27-8fff75b6e7b9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/929275f0-3197-4a70-8b27-8fff75b6e7b9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:0d:81:59:c2:0c:0f:11:c7:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=929275f0-3197-4a70-8b27-8fff75b6e7b9 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=ea7fe90c-e4cd-452e-b4c5-acd6fea99e07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c1:75:6b:9d:7b:68:b6:c8:d5:97:85:96:31: 81:3b:4f:8a:bb:6f:71:22:07:5b:e9:6e:f0:05:a9: d8:09:42:e7:50:6d:88:62:c0:f1:37:84:57:42:d0: 47:5c:bc:5c:c9:1b:26:2d:8f:48:d3:98:ad:f2:e7: 2d:92:37:7a:8c:e8:3d:bc:e2:3d:c6:73:81:b1:f0: fc:75:2f:72:0c:1e:5f:d8:52:0c:5a:d1:6a:3e:d3: 64:7b:76:e0:31:be:af:9a:30:c4:e7:2e:9d:30:06: 77:12:ed:a2:6c:dc:7d:b7:d7:98:18:0d:d4:ea:86: 35:7f:68:89:ce:b9:28:9c:fa:55:2b:95:1a:9b:90: 50:ee:03:fa:5d:f4:32:10:e5:17:22:e7:31:51:29: 1a:04:e6:b0:79:71:eb:fc:f2:47:5c:91:1e:52:4e: c1:48:17:97:aa:d4:de:11:21:6b:0e:2c:39:11:4d: 16:cb:8b:ac:a7:a9:69:0d:54:5e:b1:ae:41:9b:92: 97:87:5f:6d:80:2f:c0:b3:4c:4a:d6:fb:74:e5:b6: 57:b8:6f:7d:b3:f2:07:e6:a6:8e:2d:06:69:c7:e4: 00:dc:2e:39:3e:a6:6e:98:c8:1b:a0:cc:04:dc:52: 1c:ea:eb:82:28:35:32:1c:50:e7:52:ed:2c:30:0a: f2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:2D:A7:A2:EE:FA:6B:74:D9:80:43:42:D1:D8:42:D4:BC:76:38:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/929275f0-3197-4a70-8b27-8fff75b6e7b9/a5734608-f60f-3001-9d9d-4f1eaffa2c67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/929275f0-3197-4a70-8b27-8fff75b6e7b9/929275f0-3197-4a70-8b27-8fff75b6e7b9.crl X509v3 Authority Key Identifier: keyid:BB:02:D1:44:F5:91:AC:6D:DC:A7:01:E4:B5:05:4A:6D:69:25:47:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/929275f0-3197-4a70-8b27-8fff75b6e7b9.cer sbgp-ipAddrBlock: critical IPv6: 2606:ccc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:c2:c8:50:59:11:bf:36:ec:ee:04:38:72:fe:aa:6b:b2:70: 3f:c8:54:ab:37:a1:3e:b1:97:84:c9:be:b1:f5:58:78:ca:a1: a4:37:90:02:60:03:45:49:6c:5e:23:4f:11:14:32:28:99:c3: 4d:22:21:29:fb:a1:13:84:ee:8a:98:7e:b5:a5:de:8c:94:28: 22:e7:df:d2:a3:e0:54:2c:45:dc:7b:d4:1d:f1:8e:d0:74:75: 70:57:cc:b0:9f:78:17:61:ad:cc:93:93:bd:05:e4:45:94:87: d7:df:80:01:b4:e4:22:e7:3f:94:19:89:26:1e:b4:b9:6d:5a: 1a:e6:81:3e:db:e7:32:fa:f3:19:b0:06:67:19:4b:1c:74:d6: 1a:62:e1:9c:0e:ba:73:6f:b6:df:ff:a4:f0:04:6f:b2:57:26: b1:c5:a2:6c:3f:79:eb:dc:ca:97:5e:48:c2:ed:0d:1e:17:9d: 9a:9c:47:b9:1c:3e:f4:48:43:03:19:94:2a:0e:30:8b:bf:4e: 86:9b:f1:f0:d7:54:e4:91:69:f0:50:22:28:13:fe:2e:72:2c: 6c:a8:69:73:09:a1:f3:fa:91:50:eb:75:29:dd:1a:b7:50:01: d8:52:e1:0a:be:1e:50:55:84:ac:c0:8a:0b:22:6e:29:b8:a0: 39:86:3a:57 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtOdw2BWcIMDxHHpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI5Mjc1ZjAtMzE5Ny00YTcwLThiMjctOGZmZjc1YjZl N2I5MB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk ZWE3ZmU5MGMtZTRjZC00NTJlLWI0YzUtYWNkNmZlYTk5ZTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsF1a517aLbI1ZeFljGBO0+Ku29xIgdb6W7w BanYCULnUG2IYsDxN4RXQtBHXLxcyRsmLY9I05it8uctkjd6jOg9vOI9xnOBsfD8 dS9yDB5f2FIMWtFqPtNke3bgMb6vmjDE5y6dMAZ3Eu2ibNx9t9eYGA3U6oY1f2iJ zrkonPpVK5Uam5BQ7gP6XfQyEOUXIucxUSkaBOaweXHr/PJHXJEeUk7BSBeXqtTe ESFrDiw5EU0Wy4usp6lpDVResa5Bm5KXh19tgC/As0xK1vt05bZXuG99s/IH5qaO LQZpx+QA3C45PqZumMgboMwE3FIc6uuCKDUyHFDnUu0sMAryyQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAAtp6Lu+mt02YBDQtHYQtS8djjgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85Mjky NzVmMC0zMTk3LTRhNzAtOGIyNy04ZmZmNzViNmU3YjkvYTU3MzQ2MDgtZjYwZi0z MDAxLTlkOWQtNGYxZWFmZmEyYzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTI5Mjc1ZjAtMzE5Ny00YTcwLThi MjctOGZmZjc1YjZlN2I5LzkyOTI3NWYwLTMxOTctNGE3MC04YjI3LThmZmY3NWI2 ZTdiOS5jcmwwHwYDVR0jBBgwFoAUuwLRRPWRrG3cpwHktQVKbWklR1MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85MjkyNzVmMC0zMTk3LTRhNzAtOGIyNy04ZmZm NzViNmU3YjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbMwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCTwshQWRG/NuzuBDhy/qprsnA/yFSrN6E+sZeEyb6x9Vh4yqGkN5AC YANFSWxeI08RFDIomcNNIiEp+6EThO6KmH61pd6MlCgi59/So+BULEXce9Qd8Y7Q dHVwV8ywn3gXYa3Mk5O9BeRFlIfX34ABtOQi5z+UGYkmHrS5bVoa5oE+2+cy+vMZ sAZnGUscdNYaYuGcDrpzb7bf/6TwBG+yVyaxxaJsP3nr3MqXXkjC7Q0eF52anEe5 HD70SEMDGZQqDjCLv06Gm/Hw11TkkWnwUCIoE/4ucixsqGlzCaHz+pFQ63Up3Rq3 UAHYUuEKvh5QVYSswIoLIm4puKA5hjpX -----END CERTIFICATE-----Generated at Wed Nov 5 14:23:31 2025 by rpki-client