$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/022dd074-afdd-3083-9ebd-637a44081763.roa File: 022dd074-afdd-3083-9ebd-637a44081763.roa (raw, json) Hash identifier: zeYXppI3ydrp6XSLiSS5ce4SxcLnCWzrNOkbMXQPzNU= Subject key identifier: 6C:CE:AD:42:81:74:78:7B:40:AF:BE:09:E7:F6:46:20:CE:FA:C5:E6 Certificate issuer: /CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Certificate serial: 010D0C9F4328584BBFA5978ADA06D7EDDB91C548 Authority key identifier: BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/022dd074-afdd-3083-9ebd-637a44081763.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 397373 IP address blocks: 2604:f440:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:97:8a:da:06:d7:ed:db:91:c5:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=e0a3d9ba-2902-47ed-9548-11e252164d9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e2:ef:3c:a4:6e:a4:82:ba:1f:8e:3f:c2:74: 5c:e9:d1:12:0f:20:af:53:1e:36:4e:56:2a:da:d5: 94:be:8a:7a:31:96:76:e3:86:b1:25:16:55:51:91: 73:7b:46:5c:52:24:b4:03:ec:72:73:18:f7:9a:25: f6:cd:08:20:9c:96:d4:00:57:f1:60:ea:dd:33:1c: 43:ec:85:70:cf:e2:7d:31:0a:92:22:31:8c:2f:e7: 18:f2:62:2f:64:f2:33:02:7e:1e:0e:cb:c8:89:ed: d5:14:3f:52:f3:49:2f:4d:1e:32:06:8c:b8:86:06: 6c:e8:8f:c9:ff:2a:7b:c2:29:42:52:e9:fd:23:92: ed:fd:d4:fb:3d:fa:ef:66:16:3d:15:b6:8c:c2:bb: 24:46:6c:26:9f:22:b7:b0:11:5d:f1:5c:54:65:3c: b8:5a:3f:4c:c7:83:78:cb:f9:6d:da:98:c8:bf:d1: 82:8c:f0:2c:46:ba:19:8a:0e:6f:ff:0b:43:ae:03: a1:a3:1b:ac:37:23:e4:fe:40:67:39:3b:4f:20:17: d8:41:0d:34:c8:08:a7:86:48:a8:1b:fe:8c:c2:f5: f9:74:d2:99:3d:af:79:b0:b5:35:de:cc:cd:6b:a6: 46:0f:3a:17:09:c6:f6:61:20:ca:ce:63:a1:75:b4: 9c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:CE:AD:42:81:74:78:7B:40:AF:BE:09:E7:F6:46:20:CE:FA:C5:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/022dd074-afdd-3083-9ebd-637a44081763.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl X509v3 Authority Key Identifier: keyid:BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer sbgp-ipAddrBlock: critical IPv6: 2604:f440:6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:0f:22:88:78:bc:f0:7b:5f:60:f3:f3:47:54:12:9c:d2:41: 4f:e0:52:13:3b:1c:e5:7e:86:23:4f:ec:3c:7d:21:fd:40:2d: 34:28:20:14:d8:dc:50:38:21:54:d1:0a:1d:3c:a2:8a:43:cf: 2a:e2:12:33:ed:07:c1:ab:6e:7c:07:72:a0:63:96:81:39:fe: 2c:90:a2:e8:56:ec:13:9c:87:3a:c9:99:4f:7b:3a:17:4b:e1: 92:be:12:cb:a7:c8:7f:3c:27:33:14:b0:de:1a:d3:51:69:d9: ad:a0:32:30:1f:3a:43:95:61:87:52:95:6b:9e:ed:2a:7d:73: 56:8d:4a:09:c4:51:33:1b:0f:a7:96:20:fb:fe:58:ea:f9:5f: d1:cb:53:c3:d0:23:76:93:f6:20:a5:94:23:40:2b:b3:0a:eb: 54:b1:e9:41:62:a0:77:77:e8:46:b3:0b:ef:e4:f2:ed:de:29: bb:0d:21:00:bb:1b:24:37:9d:be:b5:59:38:2e:a3:69:db:f8: 1a:07:14:23:9c:07:23:36:a0:82:c4:fe:f3:88:07:84:9e:5f: a6:a1:9a:0f:47:f9:97:87:ca:dd:99:ad:42:72:e3:c8:e7:43: 82:41:91:34:62:2e:30:58:25:e5:ea:09:dd:84:cb:07:c8:57: f2:95:e3:61 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu/pZeK2gbX7duRxUgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YWFmMTEtMWM3NC00OTZlLTk5YzYtNjE1MmNiMjky Yjg2MB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk ZTBhM2Q5YmEtMjkwMi00N2VkLTk1NDgtMTFlMjUyMTY0ZDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieLvPKRupIK6H44/wnRc6dESDyCvUx42TlYq 2tWUvop6MZZ244axJRZVUZFze0ZcUiS0A+xycxj3miX2zQggnJbUAFfxYOrdMxxD 7IVwz+J9MQqSIjGML+cY8mIvZPIzAn4eDsvIie3VFD9S80kvTR4yBoy4hgZs6I/J /yp7wilCUun9I5Lt/dT7PfrvZhY9FbaMwrskRmwmnyK3sBFd8VxUZTy4Wj9Mx4N4 y/lt2pjIv9GCjPAsRroZig5v/wtDrgOhoxusNyPk/kBnOTtPIBfYQQ00yAinhkio G/6MwvX5dNKZPa95sLU13szNa6ZGDzoXCcb2YSDKzmOhdbScDQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGzOrUKBdHh7QK++Cef2RiDO+sXmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlh YWYxMS0xYzc0LTQ5NmUtOTljNi02MTUyY2IyOTJiODYvMDIyZGQwNzQtYWZkZC0z MDgzLTllYmQtNjM3YTQ0MDgxNzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YWFmMTEtMWM3NC00OTZlLTk5 YzYtNjE1MmNiMjkyYjg2LzVkOWFhZjExLTFjNzQtNDk2ZS05OWM2LTYxNTJjYjI5 MmI4Ni5jcmwwHwYDVR0jBBgwFoAUvf1qpElM4JfqWhVE4pRpobkfBIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlhYWYxMS0xYzc0LTQ5NmUtOTljNi02MTUy Y2IyOTJiODYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgT0QAAG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH0PIoh4vPB7X2Dz80dUEpzSQU/gUhM7HOV+hiNP7Dx9If1ALTQo IBTY3FA4IVTRCh08oopDzyriEjPtB8GrbnwHcqBjloE5/iyQouhW7BOchzrJmU97 OhdL4ZK+EsunyH88JzMUsN4a01Fp2a2gMjAfOkOVYYdSlWue7Sp9c1aNSgnEUTMb D6eWIPv+WOr5X9HLU8PQI3aT9iCllCNAK7MK61Sx6UFioHd36EazC+/k8u3eKbsN IQC7GyQ3nb61WTguo2nb+BoHFCOcByM2oILE/vOIB4SeX6ahmg9H+ZeHyt2ZrUJy 48jnQ4JBkTRiLjBYJeXqCd2EywfIV/KV42E= -----END CERTIFICATE-----Generated at Tue Nov 4 19:25:44 2025 by rpki-client