$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/d521baba-5d18-3439-8cfc-c5189dded826.roa File: d521baba-5d18-3439-8cfc-c5189dded826.roa (raw, json) Hash identifier: z7SBwjj0ZG6vo3DmXjhEC5gwAPbG2FeLEZZjay8tCZ0= Subject key identifier: 54:6C:52:6A:F6:D6:75:09:17:D8:05:57:D5:A6:0A:F6:40:5A:F0:02 Certificate issuer: /CN=b194a9ed-65e1-4df1-85aa-9a35c571253b Certificate serial: 010D0C9F4328584BAA97A67D726E42C6D5DD2040 Authority key identifier: 89:14:EA:E2:30:BC:CF:0D:65:06:C0:1E:7C:34:93:B1:A3:5D:CD:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/d521baba-5d18-3439-8cfc-c5189dded826.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 11472 IP address blocks: 2605:8480::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/b194a9ed-65e1-4df1-85aa-9a35c571253b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/b194a9ed-65e1-4df1-85aa-9a35c571253b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:a6:7d:72:6e:42:c6:d5:dd:20:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b194a9ed-65e1-4df1-85aa-9a35c571253b Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=4b4b1d46-4ef3-4b39-9da2-3ebe2c769115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:26:1d:f8:0c:5d:81:64:1b:f9:92:80:c2:0d: 7e:2a:db:ac:89:74:c9:63:d7:5d:16:02:a1:38:91: 7e:55:7e:56:d9:15:52:61:81:3f:34:26:4f:f0:8c: 37:c6:06:1a:25:ec:86:f7:e9:31:45:5e:f9:71:b2: 14:72:22:13:fa:b9:ae:26:31:7b:51:1f:7c:ab:0a: a6:2d:42:ad:18:b6:24:6a:57:94:d0:f7:3d:ee:4b: 04:95:7d:21:c9:24:3c:d3:c0:66:e7:98:30:76:ad: 44:23:ab:ac:ad:a8:5e:e5:48:83:d7:22:7d:1f:7c: 1a:16:2c:1e:d0:99:08:5a:11:0f:47:6c:2d:43:1b: 1d:88:3a:19:77:2a:a7:8a:30:31:35:38:16:dd:ff: 3b:82:24:d7:0c:ef:2e:e3:91:bd:21:48:e1:df:7d: d1:3a:09:63:ed:15:bc:3c:ab:f7:04:05:2a:6b:ff: e2:8e:1e:29:b1:54:c0:08:67:13:2d:28:19:4e:4e: b2:e0:08:2d:6d:dd:2c:1a:8c:02:8d:57:78:bc:59: 85:c1:19:1f:e9:65:d0:a1:2a:42:dc:bd:a8:d1:c8: e7:e9:41:fc:22:00:b8:09:ed:51:bb:a8:c9:80:e5: 48:41:74:70:b7:62:76:80:90:ed:ef:ea:59:82:44: 18:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:6C:52:6A:F6:D6:75:09:17:D8:05:57:D5:A6:0A:F6:40:5A:F0:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/d521baba-5d18-3439-8cfc-c5189dded826.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/b194a9ed-65e1-4df1-85aa-9a35c571253b.crl X509v3 Authority Key Identifier: keyid:89:14:EA:E2:30:BC:CF:0D:65:06:C0:1E:7C:34:93:B1:A3:5D:CD:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b.cer sbgp-ipAddrBlock: critical IPv6: 2605:8480::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:a5:39:b4:e0:65:f2:35:0b:95:31:fb:97:ff:5e:c3:a6:94: ec:b8:75:a2:9a:70:da:4d:f4:7e:48:6b:0a:e1:e6:e6:9a:e3: 2a:a4:3e:61:7a:5d:30:88:d7:91:97:87:d2:a7:bc:9d:95:f6: 33:bc:84:b8:6d:4e:fa:cf:a4:f3:50:d5:bf:1a:e6:9c:93:00: 55:90:d9:17:c7:30:73:17:34:d7:7a:b1:ec:cd:76:e9:47:c6: b3:cf:32:ee:b4:92:a9:83:21:bc:74:2c:04:01:f3:28:3e:12: a2:23:14:f0:da:fe:9f:be:3d:f7:b8:1e:7f:2b:f4:6e:26:59: ed:0a:6b:c5:a4:6e:7c:6d:0b:11:8f:22:cb:a3:7b:4a:29:42: 47:d2:30:f6:4c:ee:97:12:15:98:94:a4:2a:e1:a1:c2:ab:3e: 31:06:fb:8a:f1:60:77:04:23:5c:8b:8a:fa:65:c9:39:68:08: fe:62:f6:f9:c3:1d:7d:f4:72:eb:f6:62:30:e9:ab:e6:34:e9: d8:08:75:ab:7e:43:f1:b3:13:88:03:96:f9:a1:d0:00:5c:7c: ec:03:c7:6b:48:f1:44:6d:40:32:b1:51:fd:9a:b3:ea:d0:55: 83:aa:5f:a9:95:9b:23:75:93:56:69:13:a2:8d:6d:bf:f8:10: 04:43:3d:1c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuql6Z9cm5CxtXdIEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjE5NGE5ZWQtNjVlMS00ZGYxLTg1YWEtOWEzNWM1NzEy NTNiMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk NGI0YjFkNDYtNGVmMy00YjM5LTlkYTItM2ViZTJjNzY5MTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCYd+AxdgWQb+ZKAwg1+KtusiXTJY9ddFgKh OJF+VX5W2RVSYYE/NCZP8Iw3xgYaJeyG9+kxRV75cbIUciIT+rmuJjF7UR98qwqm LUKtGLYkaleU0Pc97ksElX0hySQ808Bm55gwdq1EI6usrahe5UiD1yJ9H3waFiwe 0JkIWhEPR2wtQxsdiDoZdyqnijAxNTgW3f87giTXDO8u45G9IUjh333ROglj7RW8 PKv3BAUqa//ijh4psVTACGcTLSgZTk6y4Agtbd0sGowCjVd4vFmFwRkf6WXQoSpC 3L2o0cjn6UH8IgC4Ce1Ru6jJgOVIQXRwt2J2gJDt7+pZgkQYowIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFRsUmr21nUJF9gFV9WmCvZAWvACMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMTk0 YTllZC02NWUxLTRkZjEtODVhYS05YTM1YzU3MTI1M2IvZDUyMWJhYmEtNWQxOC0z NDM5LThjZmMtYzUxODlkZGVkODI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjE5NGE5ZWQtNjVlMS00ZGYxLTg1 YWEtOWEzNWM1NzEyNTNiL2IxOTRhOWVkLTY1ZTEtNGRmMS04NWFhLTlhMzVjNTcx MjUzYi5jcmwwHwYDVR0jBBgwFoAUiRTq4jC8zw1lBsAefDSTsaNdzYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMTk0YTllZC02NWUxLTRkZjEtODVhYS05YTM1 YzU3MTI1M2IuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgWEgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQANpTm04GXyNQuVMfuX/17DppTsuHWimnDaTfR+SGsK4ebmmuMqpD5h el0wiNeRl4fSp7ydlfYzvIS4bU76z6TzUNW/GuackwBVkNkXxzBzFzTXerHszXbp R8azzzLutJKpgyG8dCwEAfMoPhKiIxTw2v6fvj33uB5/K/RuJlntCmvFpG58bQsR jyLLo3tKKUJH0jD2TO6XEhWYlKQq4aHCqz4xBvuK8WB3BCNci4r6Zck5aAj+Yvb5 wx199HLr9mIw6avmNOnYCHWrfkPxsxOIA5b5odAAXHzsA8drSPFEbUAysVH9mrPq 0FWDql+plZsjdZNWaROijW2/+BAEQz0c -----END CERTIFICATE-----Generated at Wed Nov 5 12:45:06 2025 by rpki-client