$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/2219a5dd-d685-3e5f-ada3-a3e7a05f2835.roa File: 2219a5dd-d685-3e5f-ada3-a3e7a05f2835.roa (raw, json) Hash identifier: dift3bCya9tS0h/VXBnlTNTzu7QRRcGGnQMK5A81K+U= Subject key identifier: 9A:25:E1:A4:4C:5E:35:4B:00:19:A3:A1:13:B1:3B:2C:DB:40:2B:30 Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F4328584B821CD7CBAA1F1B92D1DA7480 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/2219a5dd-d685-3e5f-ada3-a3e7a05f2835.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 46687 IP address blocks: 2606:e280::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:d7:cb:aa:1f:1b:92:d1:da:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=270a12a9-ad7b-4373-adc9-038eff75b052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8f:99:0d:70:89:cc:ec:af:dd:5a:f6:29:c9: 04:75:35:d9:63:63:01:77:60:33:6e:d4:82:a8:6e: f2:4a:0c:29:02:4b:40:e8:74:90:5b:63:41:39:b0: 8f:14:ea:67:51:d2:09:ee:9a:e0:25:e7:c0:4c:c6: 20:ca:e4:49:b1:c6:24:8d:e3:17:1f:11:75:ff:8c: f2:69:1e:d9:ce:88:1c:61:50:ca:1a:8b:01:70:f7: 1b:c6:b3:28:ed:89:7b:56:26:4c:28:82:02:c6:55: 9e:f9:3d:ef:63:4e:60:21:ce:69:c3:14:39:65:a4: 67:1a:d6:f4:4d:fe:ec:00:66:47:e8:57:46:60:a1: a8:98:3c:ae:9e:88:b4:ac:ac:47:05:91:31:ab:19: 32:a9:13:11:8c:e3:0b:b1:f0:c2:00:96:d6:de:60: 5e:ac:73:3d:8b:da:b3:2d:69:ce:be:a3:d0:17:2c: d4:b4:8c:63:10:19:76:e4:7e:dd:69:29:0e:ff:86: 7c:60:03:7e:b2:50:a4:9a:46:0f:7a:1f:d6:3f:dd: fe:7d:8e:c0:97:f3:1c:2d:10:3a:bd:31:b7:e2:c8: 2d:97:5c:ce:be:38:a6:28:29:ac:3a:c5:f8:d6:4e: bc:74:f1:84:b5:8c:2c:26:08:16:1d:73:5b:e5:9c: 97:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:25:E1:A4:4C:5E:35:4B:00:19:A3:A1:13:B1:3B:2C:DB:40:2B:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/2219a5dd-d685-3e5f-ada3-a3e7a05f2835.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv6: 2606:e280::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:e8:94:21:23:10:3c:34:3a:50:08:a6:c3:a0:06:8b:ce:c9: f8:4f:35:91:5e:7c:9a:63:8f:2f:ec:bf:16:34:30:58:55:08: fe:5c:39:d2:01:54:d3:5c:13:69:ca:12:6b:00:5a:2f:2a:58: 03:7c:5e:5f:21:4d:61:fe:92:36:10:66:a8:96:b5:be:89:86: fe:48:43:6c:26:b0:86:f3:7f:35:3d:d3:29:1f:9b:46:f1:18: f7:3c:e1:e4:f1:f9:ca:ca:64:50:f8:a3:4c:e0:db:fb:95:3a: a6:9a:f6:ba:42:ee:e3:3f:f1:f7:4b:4b:24:64:29:61:e5:c3: 25:90:17:a1:28:f6:80:ea:55:3c:d4:75:c3:19:19:d5:78:49: 28:69:26:84:b3:1e:ef:58:3a:e0:ab:c4:9b:fa:eb:7e:30:37: e5:61:06:42:a0:ff:65:8f:46:e5:ff:f6:85:53:5c:66:94:f6: fb:51:e4:12:13:94:f0:96:c5:c5:01:67:d2:32:a7:a8:a9:34: 22:da:c5:c4:ed:43:ba:46:6c:f5:2c:0a:80:b0:9b:07:09:87: 36:96:63:65:04:48:86:5d:b2:56:12:7e:ad:82:5c:b0:f7:7a: 3a:7c:fe:33:59:79:21:e6:72:a8:74:53:dd:f1:9a:ff:dc:34: 9e:14:ec:06 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuCHNfLqh8bktHadIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk MjcwYTEyYTktYWQ3Yi00MzczLWFkYzktMDM4ZWZmNzViMDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4+ZDXCJzOyv3Vr2KckEdTXZY2MBd2AzbtSC qG7ySgwpAktA6HSQW2NBObCPFOpnUdIJ7prgJefATMYgyuRJscYkjeMXHxF1/4zy aR7ZzogcYVDKGosBcPcbxrMo7Yl7ViZMKIICxlWe+T3vY05gIc5pwxQ5ZaRnGtb0 Tf7sAGZH6FdGYKGomDyunoi0rKxHBZExqxkyqRMRjOMLsfDCAJbW3mBerHM9i9qz LWnOvqPQFyzUtIxjEBl25H7daSkO/4Z8YAN+slCkmkYPeh/WP93+fY7Al/McLRA6 vTG34sgtl1zOvjimKCmsOsX41k68dPGEtYwsJggWHXNb5ZyXdwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJol4aRMXjVLABmjoROxOyzbQCswMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvMjIxOWE1ZGQtZDY4NS0z ZTVmLWFkYTMtYTNlN2EwNWYyODM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbigDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBx6JQhIxA8NDpQCKbDoAaLzsn4TzWRXnyaY48v7L8WNDBYVQj+XDnS AVTTXBNpyhJrAFovKlgDfF5fIU1h/pI2EGaolrW+iYb+SENsJrCG8381PdMpH5tG 8Rj3POHk8fnKymRQ+KNM4Nv7lTqmmva6Qu7jP/H3S0skZClh5cMlkBehKPaA6lU8 1HXDGRnVeEkoaSaEsx7vWDrgq8Sb+ut+MDflYQZCoP9lj0bl//aFU1xmlPb7UeQS E5TwlsXFAWfSMqeoqTQi2sXE7UO6Rmz1LAqAsJsHCYc2lmNlBEiGXbJWEn6tglyw 93o6fP4zWXkh5nKodFPd8Zr/3DSeFOwG -----END CERTIFICATE-----Generated at Wed Nov 5 19:46:24 2025 by rpki-client