$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/01d0f9c0-735d-31f3-ab7e-2fe439f2f276.roa File: 01d0f9c0-735d-31f3-ab7e-2fe439f2f276.roa (raw, json) Hash identifier: vdNnVz0bkWHbZN95mwa4VXHMUoj2tUUVrX/b4TnTuqM= Subject key identifier: C8:A0:40:79:F5:4C:8B:4F:1C:B3:4D:3C:1E:40:90:A2:BD:C0:A1:BB Certificate issuer: /CN=adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4 Certificate serial: 010D0C9F4328584BB88D2AC98E95BFA379DA97C0 Authority key identifier: BF:C2:9B:C0:5B:B5:EC:2F:7F:D9:9D:2E:8E:8F:76:88:57:6C:1E:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/01d0f9c0-735d-31f3-ab7e-2fe439f2f276.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 25830 IP address blocks: 2604:a40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:2a:c9:8e:95:bf:a3:79:da:97:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=a4848051-b50a-49ff-be34-96e8b3c921d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:2f:c0:b5:82:30:3a:b5:83:24:e1:fe:52:bf: 61:7f:c6:f3:15:c9:81:8d:4a:fa:23:30:a1:c7:ed: e1:e6:4f:0f:ee:26:18:ef:c8:ef:16:d2:de:7d:3d: 03:a8:21:aa:73:98:7d:7c:c5:92:30:aa:f8:0b:bb: b3:37:a9:76:37:4e:17:da:2d:63:49:7a:d5:88:27: 73:9e:bd:d5:cc:d6:23:64:05:9d:08:3d:e3:d9:7b: be:a9:fd:3c:a0:93:10:dc:10:d9:d3:35:3d:62:93: 00:96:11:8a:f7:93:57:a3:5b:35:a5:da:e4:7a:33: bc:cb:ea:b9:86:69:9c:5f:7b:04:b1:24:10:d1:5c: bd:f7:13:75:23:ca:b1:0e:2e:cd:dd:39:06:2f:97: 22:1f:07:e7:31:45:7e:42:bc:aa:29:da:5e:47:ae: 63:a5:01:a2:4a:e0:dd:35:b7:98:47:e0:0b:62:79: 58:11:aa:3b:35:48:70:95:18:e9:9f:ee:2a:45:8f: dd:9f:ce:bf:a5:1b:8f:df:9a:57:62:11:d1:a0:1a: 0f:0a:91:a2:85:d4:d6:3b:4b:33:e0:e1:ae:80:0d: 21:7e:91:64:1c:29:dc:9d:61:a7:2e:f4:b6:7d:d3: de:52:0f:94:4c:c8:3a:1e:03:e2:37:b4:ca:3f:18: 0d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A0:40:79:F5:4C:8B:4F:1C:B3:4D:3C:1E:40:90:A2:BD:C0:A1:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/01d0f9c0-735d-31f3-ab7e-2fe439f2f276.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.crl X509v3 Authority Key Identifier: keyid:BF:C2:9B:C0:5B:B5:EC:2F:7F:D9:9D:2E:8E:8F:76:88:57:6C:1E:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.cer sbgp-ipAddrBlock: critical IPv6: 2604:a40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:7b:03:74:e0:eb:60:17:45:b6:e0:aa:a3:f8:6c:88:1e:01: 8b:02:a7:d5:23:73:9e:18:90:8b:4e:57:0b:32:b0:67:8c:b4: 64:49:df:7b:a1:55:da:20:b8:65:0f:e9:e2:29:aa:57:34:85: 3f:ee:3e:b9:de:aa:4c:d0:0a:4b:c0:92:ea:f3:e1:10:bc:5a: 6f:40:9c:51:b8:f3:75:24:1b:46:6a:0b:65:15:e2:9b:2b:b3: 5c:c4:e2:af:b2:a6:c4:1f:23:45:88:81:fd:a0:e3:4c:82:19: 7d:36:6f:f6:56:26:d0:3b:58:c8:ed:20:3e:53:06:51:a6:94: 35:e7:4f:d9:d4:a8:75:bd:c3:8f:a8:c9:01:84:01:5f:d9:51: a7:57:13:e8:4e:b5:bc:bc:dd:55:ff:73:f9:73:00:35:ff:fe: dd:c8:fd:05:10:59:d9:80:ec:10:4c:b1:ca:ec:ae:0b:a5:d1: da:22:92:78:c7:02:be:a6:a2:72:58:16:c7:65:e1:84:ac:ae: 88:f3:4d:bd:8c:ef:e5:6e:56:fd:66:48:70:29:dc:bf:f8:9c: 33:f9:3d:90:b5:08:35:25:e0:d4:0e:36:47:d8:92:17:9c:c5: 49:28:c5:66:db:0f:82:83:d4:b8:be:28:d1:f1:c9:4c:3c:83: 2f:c1:8f:4a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEu4jSrJjpW/o3nal8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWRjY2QzYjMtZGRhNS00NTNmLWI1MGQtMGExZTllNGQ0 ZWY0MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk YTQ4NDgwNTEtYjUwYS00OWZmLWJlMzQtOTZlOGIzYzkyMWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjC/AtYIwOrWDJOH+Ur9hf8bzFcmBjUr6IzCh x+3h5k8P7iYY78jvFtLefT0DqCGqc5h9fMWSMKr4C7uzN6l2N04X2i1jSXrViCdz nr3VzNYjZAWdCD3j2Xu+qf08oJMQ3BDZ0zU9YpMAlhGK95NXo1s1pdrkejO8y+q5 hmmcX3sEsSQQ0Vy99xN1I8qxDi7N3TkGL5ciHwfnMUV+QryqKdpeR65jpQGiSuDd NbeYR+ALYnlYEao7NUhwlRjpn+4qRY/dn86/pRuP35pXYhHRoBoPCpGihdTWO0sz 4OGugA0hfpFkHCncnWGnLvS2fdPeUg+UTMg6HgPiN7TKPxgNGwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMigQHn1TItPHLNNPB5AkKK9wKG7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hZGNj ZDNiMy1kZGE1LTQ1M2YtYjUwZC0wYTFlOWU0ZDRlZjQvMDFkMGY5YzAtNzM1ZC0z MWYzLWFiN2UtMmZlNDM5ZjJmMjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWRjY2QzYjMtZGRhNS00NTNmLWI1 MGQtMGExZTllNGQ0ZWY0L2FkY2NkM2IzLWRkYTUtNDUzZi1iNTBkLTBhMWU5ZTRk NGVmNC5jcmwwHwYDVR0jBBgwFoAUv8KbwFu17C9/2Z0ujo92iFdsHpEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hZGNjZDNiMy1kZGE1LTQ1M2YtYjUwZC0wYTFl OWU0ZDRlZjQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQKQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBTewN04OtgF0W24Kqj+GyIHgGLAqfVI3OeGJCLTlcLMrBnjLRkSd97 oVXaILhlD+niKapXNIU/7j653qpM0ApLwJLq8+EQvFpvQJxRuPN1JBtGagtlFeKb K7NcxOKvsqbEHyNFiIH9oONMghl9Nm/2VibQO1jI7SA+UwZRppQ150/Z1Kh1vcOP qMkBhAFf2VGnVxPoTrW8vN1V/3P5cwA1//7dyP0FEFnZgOwQTLHK7K4LpdHaIpJ4 xwK+pqJyWBbHZeGErK6I8029jO/lblb9ZkhwKdy/+Jwz+T2QtQg1JeDUDjZH2JIX nMVJKMVm2w+Cg9S4vijR8clMPIMvwY9K -----END CERTIFICATE-----Generated at Wed Nov 5 08:18:49 2025 by rpki-client