$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/8b2f032e-f8d1-3a0a-b515-26a36d68f928.roa File: 8b2f032e-f8d1-3a0a-b515-26a36d68f928.roa (raw, json) Hash identifier: ZqIC54qpgwd1gagpB1XflQFy2jE1Uz4YKaGa73iCyrw= Subject key identifier: 9F:F2:BB:95:50:DC:06:03:20:DB:20:59:4F:9E:8B:45:21:F3:B8:75 Certificate issuer: /CN=efc68aa3-abc5-4d34-8f1c-17bb11d92ba3 Certificate serial: 010D0C9F4328584BBCDADF1AB73AA75C9935D380 Authority key identifier: 1A:35:74:FA:E0:D3:CE:39:83:44:81:6B:E8:22:EE:27:25:8E:17:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/8b2f032e-f8d1-3a0a-b515-26a36d68f928.roa Signing time: Mon 03 Nov 2025 14:00:38 +0000 ROA not before: Mon 03 Nov 2025 14:00:38 +0000 ROA not after: Sun 01 Feb 2026 14:00:38 +0000 asID: 30083 IP address blocks: 2605:de00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bc:da:df:1a:b7:3a:a7:5c:99:35:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efc68aa3-abc5-4d34-8f1c-17bb11d92ba3 Validity Not Before: Nov 3 14:00:38 2025 GMT Not After : Feb 1 14:00:38 2026 GMT Subject: CN=6b873cf7-26ce-41fb-b597-9714005f7a1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ef:6d:84:be:2a:b8:e6:a0:50:27:73:e9:00: 7d:7d:f1:27:ff:8b:c9:18:3b:f0:35:71:a7:4a:af: 2d:ce:45:a2:06:d6:9f:7a:4d:25:9d:91:a1:4b:03: c8:e8:ea:9e:f7:fb:c1:ba:48:df:df:9e:a6:54:ca: 56:46:a9:b6:b1:ef:56:00:93:4d:e7:3d:e8:25:36: cd:73:c1:c2:2e:3d:0a:e1:83:cd:46:5a:ec:66:c2: 3a:09:05:4a:88:4c:79:b6:63:32:5e:9f:04:23:48: be:0e:0b:4b:ac:6b:90:c5:15:f5:dd:df:6a:8a:d7: 39:52:17:9f:57:2a:e4:6c:fe:73:c8:f3:7b:d1:ef: e8:1f:95:b2:8c:63:c5:5d:5d:af:b8:1e:af:f1:fa: 4c:32:ce:db:b8:bf:57:e9:ac:17:01:cb:15:4b:95: cf:a5:27:aa:df:0d:8a:70:0c:a4:e7:03:0b:e2:95: ac:d6:35:97:52:f6:da:fb:c7:78:16:a7:8f:e2:13: b8:db:22:0a:47:87:9e:ea:2c:c1:fe:a2:9f:61:f7: 36:7f:15:83:75:ae:fd:c1:da:7a:d2:ba:b4:2b:a2: 57:1f:21:61:28:c0:33:95:e4:fc:3c:fa:06:af:de: 6c:82:90:14:23:c0:3f:1b:26:2f:6b:f6:fe:20:09: c8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F2:BB:95:50:DC:06:03:20:DB:20:59:4F:9E:8B:45:21:F3:B8:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/8b2f032e-f8d1-3a0a-b515-26a36d68f928.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.crl X509v3 Authority Key Identifier: keyid:1A:35:74:FA:E0:D3:CE:39:83:44:81:6B:E8:22:EE:27:25:8E:17:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.cer sbgp-ipAddrBlock: critical IPv6: 2605:de00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:12:dc:8e:9c:f5:bb:c4:2e:c2:25:1e:05:64:d5:b3:d7:21: bf:d8:53:a4:e3:c7:61:b3:c9:ee:bd:92:d3:d0:bf:f4:f0:5c: b4:ac:c6:4a:7d:37:d7:27:b6:eb:aa:57:0c:12:23:e2:91:39: 44:a4:0e:4a:eb:51:6e:24:8b:8c:ba:04:0b:26:94:94:78:9a: 5d:61:c7:38:55:bd:2d:4a:6f:5e:84:97:4d:a8:22:5e:3d:72: 5b:e9:c4:a2:ee:a7:36:48:c9:80:94:66:d8:b6:06:1d:76:64: f4:e3:aa:3c:c4:17:6d:fc:be:53:13:27:60:da:3a:95:a8:39: f8:95:b8:6e:2b:26:c4:f5:35:62:91:48:19:de:96:62:03:64: 43:42:9b:45:ec:b8:20:6d:21:e2:c8:2a:ff:c6:de:46:03:60: e0:9e:22:ed:13:be:93:de:06:44:4a:f4:76:29:5c:8d:89:b7: 6a:82:ba:45:7e:f4:1e:5d:99:fc:21:dc:1a:8b:30:18:94:c6: 2f:8d:6a:cd:97:1a:5e:2a:fd:be:c3:da:4a:e1:83:39:d9:6a: a0:6c:00:42:2c:47:72:7f:b9:e4:bf:12:d1:18:42:24:d3:7e: 7a:7a:78:be:49:85:8e:b3:c7:72:ad:03:da:bf:eb:23:51:f0: 68:b9:46:53 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEu82t8atzqnXJk104AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWZjNjhhYTMtYWJjNS00ZDM0LThmMWMtMTdiYjExZDky YmEzMB4XDTI1MTEwMzE0MDAzOFoXDTI2MDIwMTE0MDAzOFowLzEtMCsGA1UEAxMk NmI4NzNjZjctMjZjZS00MWZiLWI1OTctOTcxNDAwNWY3YTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiO9thL4quOagUCdz6QB9ffEn/4vJGDvwNXGn Sq8tzkWiBtafek0lnZGhSwPI6Oqe9/vBukjf356mVMpWRqm2se9WAJNN5z3oJTbN c8HCLj0K4YPNRlrsZsI6CQVKiEx5tmMyXp8EI0i+DgtLrGuQxRX13d9qitc5Uhef VyrkbP5zyPN70e/oH5WyjGPFXV2vuB6v8fpMMs7buL9X6awXAcsVS5XPpSeq3w2K cAyk5wML4pWs1jWXUvba+8d4FqeP4hO42yIKR4ee6izB/qKfYfc2fxWDda79wdp6 0rq0K6JXHyFhKMAzleT8PPoGr95sgpAUI8A/GyYva/b+IAnI7wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJ/yu5VQ3AYDINsgWU+ei0Uh87h1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lZmM2 OGFhMy1hYmM1LTRkMzQtOGYxYy0xN2JiMTFkOTJiYTMvOGIyZjAzMmUtZjhkMS0z YTBhLWI1MTUtMjZhMzZkNjhmOTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZWZjNjhhYTMtYWJjNS00ZDM0LThm MWMtMTdiYjExZDkyYmEzL2VmYzY4YWEzLWFiYzUtNGQzNC04ZjFjLTE3YmIxMWQ5 MmJhMy5jcmwwHwYDVR0jBBgwFoAUGjV0+uDTzjmDRIFr6CLuJyWOF6wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9lZmM2OGFhMy1hYmM1LTRkMzQtOGYxYy0xN2Ji MTFkOTJiYTMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXeADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBYEtyOnPW7xC7CJR4FZNWz1yG/2FOk48dhs8nuvZLT0L/08Fy0rMZK fTfXJ7brqlcMEiPikTlEpA5K61FuJIuMugQLJpSUeJpdYcc4Vb0tSm9ehJdNqCJe PXJb6cSi7qc2SMmAlGbYtgYddmT046o8xBdt/L5TEydg2jqVqDn4lbhuKybE9TVi kUgZ3pZiA2RDQptF7LggbSHiyCr/xt5GA2DgniLtE76T3gZESvR2KVyNibdqgrpF fvQeXZn8IdwaizAYlMYvjWrNlxpeKv2+w9pK4YM52WqgbABCLEdyf7nkvxLRGEIk 0356eni+SYWOs8dyrQPav+sjUfBouUZT -----END CERTIFICATE-----Generated at Wed Nov 5 11:33:22 2025 by rpki-client