$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/68be3c50-4093-3e0b-aa1b-e8f06f849002.roa File: 68be3c50-4093-3e0b-aa1b-e8f06f849002.roa (raw, json) Hash identifier: pFX+uXH7Soo+emDjXyXGp8FKfByTns6/PFlkDCrxry0= Subject key identifier: 4E:14:6A:6C:23:C0:8C:CF:97:C3:3C:44:15:20:59:56:DA:C5:CF:84 Certificate issuer: /CN=5553566f-cbda-48fe-ba4a-9ce4cb36a6c5 Certificate serial: 010D0C9F4328584BA0D261B9857D0BA937B46EC0 Authority key identifier: 72:9E:02:D1:42:AA:4B:6A:97:7E:8C:D8:BB:26:FE:0F:5F:41:94:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/68be3c50-4093-3e0b-aa1b-e8f06f849002.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 6649 IP address blocks: 2606:5240:bacb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:61:b9:85:7d:0b:a9:37:b4:6e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5553566f-cbda-48fe-ba4a-9ce4cb36a6c5 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=065ec58d-57a6-4c38-bb90-b0677fed5d8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:0c:9f:92:0c:79:ae:f5:f0:9c:8d:ad:d3:72: 74:ab:59:d7:d5:7e:00:00:f4:b7:3b:e5:07:ec:85: e2:a9:29:a1:fc:28:57:46:64:60:dd:a9:91:f0:7c: fb:72:e4:8d:ce:b7:02:74:77:1f:26:21:3d:48:13: 0d:d1:37:51:14:5a:8f:d0:43:7e:66:46:dd:85:da: 65:e3:9a:83:72:11:f0:eb:b5:08:c2:9c:72:4a:bf: 86:3c:89:b3:73:51:3d:39:3e:4e:99:be:de:38:fd: 35:19:13:79:77:9c:bd:23:4e:4e:fb:b2:b0:bf:d7: c4:b1:b4:4a:34:4a:ca:df:48:98:6b:ea:f4:d7:a1: 27:ac:fb:3a:d0:ca:d0:34:4e:fe:4d:98:52:1c:af: 16:85:06:bc:d6:0a:1e:f0:3b:fa:66:43:8c:de:77: a1:22:f4:99:d3:7a:0a:cc:59:69:b4:86:36:6c:bb: 92:a4:99:eb:07:db:5e:59:d2:09:0d:3b:80:0d:26: ca:f6:95:5b:3e:10:d9:bd:f0:39:09:c9:07:59:6c: 1f:48:c9:42:94:f3:78:91:1a:14:be:90:e9:43:f6: bd:5a:1f:28:00:bf:e4:93:34:a9:b8:a5:f3:b1:17: 96:eb:da:e9:25:53:ff:99:67:c6:5f:6e:5d:0b:78: 30:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:14:6A:6C:23:C0:8C:CF:97:C3:3C:44:15:20:59:56:DA:C5:CF:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/68be3c50-4093-3e0b-aa1b-e8f06f849002.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5.crl X509v3 Authority Key Identifier: keyid:72:9E:02:D1:42:AA:4B:6A:97:7E:8C:D8:BB:26:FE:0F:5F:41:94:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5.cer sbgp-ipAddrBlock: critical IPv6: 2606:5240:bacb::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:80:b5:0c:c2:9f:aa:02:cf:74:6d:74:b7:56:7b:fc:4b:ef: 4d:52:a3:42:66:15:a0:c8:54:97:e8:21:71:87:5a:63:be:55: 30:77:f6:69:8e:49:d9:7d:f1:71:a0:47:3b:c5:d5:fc:a1:14: aa:b8:ec:a0:8c:e7:cb:28:85:8f:8d:b9:39:9d:d2:2c:d9:ff: 0b:1a:b1:cf:0a:a3:fb:7e:37:ff:32:56:f6:db:fb:01:75:4d: eb:1a:03:32:75:16:0e:6b:f4:99:79:2f:f1:6c:58:ac:8c:ae: 15:31:3a:e1:3c:06:c4:bd:ae:7e:74:25:3a:dc:f9:1d:6b:cf: f0:b8:d0:dc:fd:20:bf:31:6e:be:42:27:7c:23:2f:49:dc:6f: cc:ac:4b:19:32:4c:4a:3f:b6:e2:2b:33:d1:ed:93:3d:21:90: 14:e7:fc:99:9e:43:eb:34:1f:a8:43:2c:a2:79:42:24:52:da: 9d:aa:7a:22:11:0f:36:3e:99:52:a6:30:5d:59:27:77:2b:ac: 97:09:df:f0:cd:08:4f:3a:c5:5e:6e:78:6e:86:3e:0d:80:25: 8a:42:b1:32:84:91:0e:87:62:95:f5:b4:45:bb:b0:20:df:37: 3a:a6:47:23:bf:3f:50:66:4b:5a:27:ec:31:d6:12:6e:61:cf: 73:f9:8b:11 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEug0mG5hX0LqTe0bsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU1MzU2NmYtY2JkYS00OGZlLWJhNGEtOWNlNGNiMzZh NmM1MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk MDY1ZWM1OGQtNTdhNi00YzM4LWJiOTAtYjA2NzdmZWQ1ZDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAyfkgx5rvXwnI2t03J0q1nX1X4AAPS3O+UH 7IXiqSmh/ChXRmRg3amR8Hz7cuSNzrcCdHcfJiE9SBMN0TdRFFqP0EN+Zkbdhdpl 45qDchHw67UIwpxySr+GPImzc1E9OT5Omb7eOP01GRN5d5y9I05O+7Kwv9fEsbRK NErK30iYa+r016EnrPs60MrQNE7+TZhSHK8WhQa81goe8Dv6ZkOM3nehIvSZ03oK zFlptIY2bLuSpJnrB9teWdIJDTuADSbK9pVbPhDZvfA5CckHWWwfSMlClPN4kRoU vpDpQ/a9Wh8oAL/kkzSpuKXzsReW69rpJVP/mWfGX25dC3gwmwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE4UamwjwIzPl8M8RBUgWVbaxc+EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTUz NTY2Zi1jYmRhLTQ4ZmUtYmE0YS05Y2U0Y2IzNmE2YzUvNjhiZTNjNTAtNDA5My0z ZTBiLWFhMWItZThmMDZmODQ5MDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU1MzU2NmYtY2JkYS00OGZlLWJh NGEtOWNlNGNiMzZhNmM1LzU1NTM1NjZmLWNiZGEtNDhmZS1iYTRhLTljZTRjYjM2 YTZjNS5jcmwwHwYDVR0jBBgwFoAUcp4C0UKqS2qXfozYuyb+D19BlCEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTUzNTY2Zi1jYmRhLTQ4ZmUtYmE0YS05Y2U0 Y2IzNmE2YzUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZSQLrL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGiAtQzCn6oCz3RtdLdWe/xL701So0JmFaDIVJfoIXGHWmO+VTB3 9mmOSdl98XGgRzvF1fyhFKq47KCM58sohY+NuTmd0izZ/wsasc8Ko/t+N/8yVvbb +wF1TesaAzJ1Fg5r9Jl5L/FsWKyMrhUxOuE8BsS9rn50JTrc+R1rz/C40Nz9IL8x br5CJ3wjL0ncb8ysSxkyTEo/tuIrM9Htkz0hkBTn/JmeQ+s0H6hDLKJ5QiRS2p2q eiIRDzY+mVKmMF1ZJ3crrJcJ3/DNCE86xV5ueG6GPg2AJYpCsTKEkQ6HYpX1tEW7 sCDfNzqmRyO/P1BmS1on7DHWEm5hz3P5ixE= -----END CERTIFICATE-----Generated at Wed Nov 5 16:59:36 2025 by rpki-client