$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/84c608c5-ec08-3ffa-a8b6-111b04e19418.roa File: 84c608c5-ec08-3ffa-a8b6-111b04e19418.roa (raw, json) Hash identifier: VMw4tIZRQzc/VWjY5Bz4Rdw0LLb2OTzKbglQIiTYRSk= Subject key identifier: D2:F6:9A:7B:6F:42:07:2D:B6:B4:32:D6:AE:48:12:59:D2:EE:4D:8D Certificate issuer: /CN=9822150f-2e6f-4fc9-b0d3-5a8e0903b333 Certificate serial: 010D0C9F4328584B987244A0EAC56D3F8E432D80 Authority key identifier: E8:FB:53:43:63:09:90:50:5B:E8:A4:C4:4A:09:BC:46:9B:50:73:E3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/84c608c5-ec08-3ffa-a8b6-111b04e19418.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 198949 IP address blocks: 2605:9a00::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:44:a0:ea:c5:6d:3f:8e:43:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9822150f-2e6f-4fc9-b0d3-5a8e0903b333 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=1e82788e-faf5-4ef4-982c-7a42431fc3af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7e:86:c0:cd:0a:99:42:92:f6:d8:b2:3b:b0: b4:ff:06:d2:fb:db:c6:d1:ce:e6:ed:03:d0:3a:c3: 3c:4d:6a:9f:c7:40:8c:39:69:30:53:29:99:2f:f8: a0:b0:9a:88:df:10:2e:c5:aa:a8:75:7f:d1:0b:25: ad:e4:0b:55:5f:4d:b7:9c:ea:9a:41:51:df:66:40: 4a:d5:4c:e2:97:b0:41:8a:5a:88:eb:4d:86:9d:ae: 5a:d9:a2:74:5a:f0:7b:77:ec:98:61:dd:ce:09:95: 6b:e8:c3:54:a1:1a:fa:be:12:d3:60:ad:dc:c8:dc: 15:9e:df:12:9c:f5:1d:84:20:80:04:5c:00:d0:ae: 21:88:b8:91:b2:ca:f7:fa:6b:aa:f8:80:0d:cd:33: f6:bc:78:00:4b:77:33:00:29:56:4e:9c:3b:a0:cc: 0f:15:e2:84:3c:7d:eb:06:d8:3d:de:37:f9:9d:66: 83:d9:57:98:79:a7:12:b5:89:a4:25:31:98:f5:c7: 3a:b6:9f:e2:3b:e5:3c:86:d8:54:cb:5e:a4:e3:4d: 9b:9d:43:30:57:0c:ea:ea:5a:1a:e9:97:26:f9:34: af:2c:f6:d0:9f:9c:c2:f6:32:5a:16:63:8e:33:fb: d9:5c:5f:df:34:40:0c:66:09:93:16:53:1b:d7:5e: 56:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F6:9A:7B:6F:42:07:2D:B6:B4:32:D6:AE:48:12:59:D2:EE:4D:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/84c608c5-ec08-3ffa-a8b6-111b04e19418.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.crl X509v3 Authority Key Identifier: keyid:E8:FB:53:43:63:09:90:50:5B:E8:A4:C4:4A:09:BC:46:9B:50:73:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer sbgp-ipAddrBlock: critical IPv6: 2605:9a00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:5e:09:35:c2:42:81:0e:be:ef:fc:3c:33:63:35:80:de:ac: 5a:b8:a3:1e:ef:9a:cd:d8:a3:50:7a:49:66:47:38:65:54:e3: 35:97:e6:65:b2:29:62:03:41:0b:85:f8:d2:ee:97:b9:99:b5: f5:2e:7f:c6:89:b5:37:35:37:f7:23:1b:ac:ea:c9:07:13:35: 19:b5:13:ea:48:46:8b:53:c3:c5:2a:78:84:c4:9e:9c:76:e0: ba:12:96:3e:67:05:fd:39:f1:9f:dc:b8:a2:89:11:e0:e9:b1: fb:26:18:09:d2:1f:1f:75:3b:80:0a:4d:63:32:00:71:4d:30: a2:cf:ab:18:17:0a:8d:8f:b4:14:a9:e1:33:75:18:06:4a:20: a7:49:0f:32:a0:c6:06:29:ac:ad:fe:db:1b:44:8f:7e:5a:1c: 12:aa:ba:98:1c:10:d9:8b:81:43:8b:7f:d8:59:d3:71:c3:3d: 29:a3:22:80:72:25:a0:d2:e4:9e:a2:62:19:59:87:10:f6:86: a6:60:02:65:45:7b:ba:02:74:2f:7e:6c:e4:26:b7:db:0e:f9: 88:5e:af:13:ff:68:39:13:c1:29:95:0b:47:fb:8b:19:b6:59: eb:b4:32:b0:13:fb:5a:a3:63:c1:ff:e1:92:06:b6:b7:1a:84: 0c:ee:b9:f0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuYckSg6sVtP45DLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgyMjE1MGYtMmU2Zi00ZmM5LWIwZDMtNWE4ZTA5MDNi MzMzMB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk MWU4Mjc4OGUtZmFmNS00ZWY0LTk4MmMtN2E0MjQzMWZjM2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqH6GwM0KmUKS9tiyO7C0/wbS+9vG0c7m7QPQ OsM8TWqfx0CMOWkwUymZL/igsJqI3xAuxaqodX/RCyWt5AtVX023nOqaQVHfZkBK 1Uzil7BBilqI602Gna5a2aJ0WvB7d+yYYd3OCZVr6MNUoRr6vhLTYK3cyNwVnt8S nPUdhCCABFwA0K4hiLiRssr3+muq+IANzTP2vHgAS3czAClWTpw7oMwPFeKEPH3r Btg93jf5nWaD2VeYeacStYmkJTGY9cc6tp/iO+U8hthUy16k402bnUMwVwzq6loa 6Zcm+TSvLPbQn5zC9jJaFmOOM/vZXF/fNEAMZgmTFlMb115WowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNL2mntvQgcttrQy1q5IElnS7k2NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85ODIy MTUwZi0yZTZmLTRmYzktYjBkMy01YThlMDkwM2IzMzMvODRjNjA4YzUtZWMwOC0z ZmZhLWE4YjYtMTExYjA0ZTE5NDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTgyMjE1MGYtMmU2Zi00ZmM5LWIw ZDMtNWE4ZTA5MDNiMzMzLzk4MjIxNTBmLTJlNmYtNGZjOS1iMGQzLTVhOGUwOTAz YjMzMy5jcmwwHwYDVR0jBBgwFoAU6PtTQ2MJkFBb6KTESgm8RptQc+MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85ODIyMTUwZi0yZTZmLTRmYzktYjBkMy01YThl MDkwM2IzMzMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWaAAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG9eCTXCQoEOvu/8PDNjNYDerFq4ox7vms3Yo1B6SWZHOGVU4zWX 5mWyKWIDQQuF+NLul7mZtfUuf8aJtTc1N/cjG6zqyQcTNRm1E+pIRotTw8UqeITE npx24LoSlj5nBf058Z/cuKKJEeDpsfsmGAnSHx91O4AKTWMyAHFNMKLPqxgXCo2P tBSp4TN1GAZKIKdJDzKgxgYprK3+2xtEj35aHBKqupgcENmLgUOLf9hZ03HDPSmj IoByJaDS5J6iYhlZhxD2hqZgAmVFe7oCdC9+bOQmt9sO+YherxP/aDkTwSmVC0f7 ixm2Weu0MrAT+1qjY8H/4ZIGtrcahAzuufA= -----END CERTIFICATE-----Generated at Wed Nov 5 08:49:15 2025 by rpki-client