$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3a32456d-70ce-3c7b-bbcb-b10636a9e0a6.roa File: 3a32456d-70ce-3c7b-bbcb-b10636a9e0a6.roa (raw, json) Hash identifier: u1n2H3MjQKQlC0Xt4GxXWg09BY7ebAZrLmDdcz0OyY8= Subject key identifier: 51:A8:93:2E:DE:DE:94:C7:84:72:FE:79:FC:4A:47:EC:F4:B7:B9:24 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584BB2F829E5AC22C85D80A7CCC0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3a32456d-70ce-3c7b-bbcb-b10636a9e0a6.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 397240 IP address blocks: 2620:74:1c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:29:e5:ac:22:c8:5d:80:a7:cc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=dd397d9f-1b1b-4db6-a6ea-bf2888b491fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:03:05:79:90:bd:b5:25:79:2e:9a:f6:39:66: 6a:88:67:11:d0:8d:03:60:fe:65:87:86:3e:05:2d: 44:90:59:53:d4:d3:90:af:0c:3b:52:d7:52:92:a9: 44:12:b9:18:a9:f2:c4:d1:bd:04:34:c2:6a:d8:17: a7:33:34:0b:17:6d:9e:75:db:a8:93:cb:ce:be:25: dc:f2:f3:4a:d4:63:02:3f:27:d0:b7:ac:e9:a6:50: 00:f0:73:e6:90:65:80:28:af:87:39:a5:12:7d:7e: fb:97:cd:c6:a1:a4:3f:53:bb:5a:f2:51:c5:d0:0e: 1a:b3:d3:a8:29:77:70:c8:49:dc:7a:0f:6b:17:d8: 80:56:3a:56:ce:bb:7e:83:3c:e2:8d:c8:9b:45:13: a7:bc:10:cd:19:29:63:62:2e:ee:0d:82:19:e0:17: 08:54:dd:eb:64:64:06:82:2c:45:ec:d2:ee:f1:3e: 31:92:af:56:0e:a1:80:01:5b:33:63:9f:e1:bf:2c: cb:ee:b3:be:ec:33:e0:ce:46:94:ff:18:f2:f6:85: 92:00:2d:a5:f5:ad:31:6c:03:dd:45:c2:0d:be:9d: 9d:ad:5d:09:28:ff:23:f0:ea:d7:eb:a7:4c:76:9a: 7d:bd:5b:ec:5e:12:ef:7f:91:56:e0:2e:87:80:4c: 9f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:A8:93:2E:DE:DE:94:C7:84:72:FE:79:FC:4A:47:EC:F4:B7:B9:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3a32456d-70ce-3c7b-bbcb-b10636a9e0a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:1c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:52:fd:e2:3a:41:b3:6f:5f:54:cc:dd:19:b4:0e:df:5d:77: 52:96:47:cb:ba:92:11:98:84:8e:aa:a8:f4:d9:5c:de:e1:ff: d2:b4:19:b8:08:df:fe:9f:b9:a4:18:c4:63:a4:d2:86:42:36: 66:fe:40:cc:5a:41:aa:28:c9:54:86:ab:c7:aa:ea:f1:0e:79: ee:30:71:61:f7:26:7a:31:67:a1:5b:05:5c:c6:b9:12:63:c7: 25:0d:93:7e:86:45:41:e5:8b:36:ed:b6:d2:8a:83:b5:f8:e2: fb:0d:eb:e6:6e:0e:bb:48:65:e2:5f:16:c6:7f:9e:8f:25:bd: 05:20:db:75:37:c7:7b:6b:11:01:f6:3b:e3:1b:c9:fa:61:ce: f9:ce:db:57:8a:81:fb:58:c8:1c:c5:6c:a5:48:bf:a8:d4:4c: 38:46:dc:5e:9c:5c:4c:05:1e:3e:58:40:38:2d:23:2f:bd:66: dd:02:1d:28:ec:26:70:90:38:2c:2b:2b:26:b0:7c:0d:1b:02: 70:e7:e9:b7:c9:28:63:96:00:55:9d:a4:33:8f:df:da:7f:10: 25:e5:24:cf:29:e6:78:b5:02:e2:3f:c2:fe:de:e6:ae:f3:e5: 3b:08:6d:3b:f3:99:42:5d:20:f3:17:dc:72:90:83:2f:95:88: 2a:58:1c:57 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuy+CnlrCLIXYCnzMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk ZGQzOTdkOWYtMWIxYi00ZGI2LWE2ZWEtYmYyODg4YjQ5MWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggMFeZC9tSV5Lpr2OWZqiGcR0I0DYP5lh4Y+ BS1EkFlT1NOQrww7UtdSkqlEErkYqfLE0b0ENMJq2BenMzQLF22edduok8vOviXc 8vNK1GMCPyfQt6zpplAA8HPmkGWAKK+HOaUSfX77l83GoaQ/U7ta8lHF0A4as9Oo KXdwyEnceg9rF9iAVjpWzrt+gzzijcibRROnvBDNGSljYi7uDYIZ4BcIVN3rZGQG gixF7NLu8T4xkq9WDqGAAVszY5/hvyzL7rO+7DPgzkaU/xjy9oWSAC2l9a0xbAPd RcINvp2drV0JKP8j8OrX66dMdpp9vVvsXhLvf5FW4C6HgEyfPwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFGoky7e3pTHhHL+efxKR+z0t7kkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2EzMjQ1NmQtNzBjZS0z YzdiLWJiY2ItYjEwNjM2YTllMGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAc MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE1S/eI6QbNvX1TM3Rm0Dt9dd1KWR8u6khGYhI6qqPTZXN7h/9K0 GbgI3/6fuaQYxGOk0oZCNmb+QMxaQaooyVSGq8eq6vEOee4wcWH3JnoxZ6FbBVzG uRJjxyUNk36GRUHlizbtttKKg7X44vsN6+ZuDrtIZeJfFsZ/no8lvQUg23U3x3tr EQH2O+MbyfphzvnO21eKgftYyBzFbKVIv6jUTDhG3F6cXEwFHj5YQDgtIy+9Zt0C HSjsJnCQOCwrKyawfA0bAnDn6bfJKGOWAFWdpDOP39p/ECXlJM8p5ni1AuI/wv7e 5q7z5TsIbTvzmUJdIPMX3HKQgy+ViCpYHFc= -----END CERTIFICATE-----Generated at Tue Nov 4 22:05:30 2025 by rpki-client