$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61d234b0-9ab0-449d-88ec-f11a00956a39/c3c1a8ce-55f1-3f4a-8ead-e068a83a5118.roa File: c3c1a8ce-55f1-3f4a-8ead-e068a83a5118.roa (raw, json) Hash identifier: O2bRERd1xpnVTQVUnd6fJ9oOlZ7gGpOraWMX2XdQcJM= Subject key identifier: F6:54:30:77:BC:FF:CD:A5:67:40:5E:5F:31:32:A6:BB:43:EF:ED:56 Certificate issuer: /CN=61d234b0-9ab0-449d-88ec-f11a00956a39 Certificate serial: 010D0C9F4328584B84E76BDE5523E2875A8B2600 Authority key identifier: D4:6E:14:D6:CA:9F:6B:26:96:64:FE:38:21:09:CD:3C:D0:8D:E4:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61d234b0-9ab0-449d-88ec-f11a00956a39.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61d234b0-9ab0-449d-88ec-f11a00956a39/c3c1a8ce-55f1-3f4a-8ead-e068a83a5118.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 13823 IP address blocks: 2605:d600::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61d234b0-9ab0-449d-88ec-f11a00956a39/61d234b0-9ab0-449d-88ec-f11a00956a39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61d234b0-9ab0-449d-88ec-f11a00956a39/61d234b0-9ab0-449d-88ec-f11a00956a39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61d234b0-9ab0-449d-88ec-f11a00956a39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:6b:de:55:23:e2:87:5a:8b:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61d234b0-9ab0-449d-88ec-f11a00956a39 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=cfdcdd46-8929-403b-8c27-cd0fd3d6d5b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6c:76:9e:7f:27:64:96:70:df:52:50:da:6c: e2:f0:7b:ef:41:b6:0b:10:03:bd:f2:7c:af:77:6d: 9c:ea:3e:6f:1a:97:a0:e9:ee:3c:42:a0:39:da:31: 0c:ee:b1:c9:82:ab:fa:55:82:a8:33:61:c7:5c:b0: c1:1d:0e:16:89:cc:65:9f:86:6d:8a:39:a3:a8:40: f2:ba:f5:b0:e8:a0:1b:16:94:80:47:b1:b7:20:75: 37:25:9e:6b:09:82:b0:d3:cf:ae:84:52:83:bc:75: 51:aa:31:23:58:5e:51:54:ef:ff:fb:15:29:8f:bb: 9f:63:67:a8:0f:ac:fb:58:ee:16:86:41:8e:87:23: be:e9:8f:47:73:c9:90:dd:ba:ac:be:b3:30:1d:fe: 11:90:79:02:d2:16:33:2f:ef:cc:f0:6e:aa:43:22: 98:7e:91:19:ad:8a:bf:bc:82:04:d1:49:dd:e5:4c: b7:7f:2f:97:60:68:d3:2f:1b:4c:9f:23:2c:83:f6: 32:d8:55:c3:81:59:dd:54:44:d3:3c:4e:0a:be:2b: 10:10:b9:b2:9f:95:5f:54:e6:91:a7:6e:a3:86:1b: 1d:c0:14:cf:34:ea:b5:58:8b:50:58:a3:a2:9d:62: 39:be:a0:fd:27:4e:82:fe:8e:64:dd:a0:b1:f7:a9: 7f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:54:30:77:BC:FF:CD:A5:67:40:5E:5F:31:32:A6:BB:43:EF:ED:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61d234b0-9ab0-449d-88ec-f11a00956a39/c3c1a8ce-55f1-3f4a-8ead-e068a83a5118.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61d234b0-9ab0-449d-88ec-f11a00956a39/61d234b0-9ab0-449d-88ec-f11a00956a39.crl X509v3 Authority Key Identifier: keyid:D4:6E:14:D6:CA:9F:6B:26:96:64:FE:38:21:09:CD:3C:D0:8D:E4:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61d234b0-9ab0-449d-88ec-f11a00956a39.cer sbgp-ipAddrBlock: critical IPv6: 2605:d600::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:0a:eb:4a:34:45:6c:37:e8:01:ee:fc:f5:87:44:1f:94:9c: 7a:44:3a:ea:a8:f8:3e:66:97:ee:49:d4:8b:99:51:bb:79:7f: 01:14:41:83:f9:88:4a:d9:70:ad:8f:db:21:d8:ef:72:db:56: 86:fa:fb:9a:54:9e:d7:05:4a:01:d4:cc:7f:4c:82:67:dd:bb: 9b:82:4b:4f:15:11:5a:d7:3d:76:b5:c1:17:49:b3:d8:1b:c7: 2d:f7:98:2e:d3:2e:49:e7:ac:0a:80:e4:7e:83:09:10:6b:ea: 8f:42:45:ba:82:ac:9c:93:26:56:9e:41:97:2d:88:f8:80:4c: 0c:0a:de:6a:2a:69:9b:f5:d1:35:31:c7:36:21:a4:73:84:99: 06:66:56:3e:6e:54:bf:f2:17:99:e0:24:89:ac:c7:13:09:4d: 0a:ce:0a:a6:04:db:ea:62:1b:9f:bb:41:8c:76:85:71:66:40: 2f:fd:a5:41:db:c1:7c:df:b1:5e:f1:79:f4:85:6f:26:f5:20: c3:b0:03:22:26:06:33:bc:99:39:68:66:c6:4a:f6:17:ca:f1: e4:81:30:fc:ea:fc:29:d0:f2:5a:ce:38:ca:29:d0:fc:aa:97: 09:65:78:bb:f1:53:f1:76:27:dc:8f:11:92:2c:d6:64:27:79: bf:3f:91:79 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuE52veVSPih1qLJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjFkMjM0YjAtOWFiMC00NDlkLTg4ZWMtZjExYTAwOTU2 YTM5MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk Y2ZkY2RkNDYtODkyOS00MDNiLThjMjctY2QwZmQzZDZkNWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWx2nn8nZJZw31JQ2mzi8HvvQbYLEAO98nyv d22c6j5vGpeg6e48QqA52jEM7rHJgqv6VYKoM2HHXLDBHQ4Wicxln4ZtijmjqEDy uvWw6KAbFpSAR7G3IHU3JZ5rCYKw08+uhFKDvHVRqjEjWF5RVO//+xUpj7ufY2eo D6z7WO4WhkGOhyO+6Y9Hc8mQ3bqsvrMwHf4RkHkC0hYzL+/M8G6qQyKYfpEZrYq/ vIIE0Und5Uy3fy+XYGjTLxtMnyMsg/Yy2FXDgVndVETTPE4KvisQELmyn5VfVOaR p26jhhsdwBTPNOq1WItQWKOinWI5vqD9J06C/o5k3aCx96l/twIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPZUMHe8/82lZ0BeXzEyprtD7+1WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82MWQy MzRiMC05YWIwLTQ0OWQtODhlYy1mMTFhMDA5NTZhMzkvYzNjMWE4Y2UtNTVmMS0z ZjRhLThlYWQtZTA2OGE4M2E1MTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjFkMjM0YjAtOWFiMC00NDlkLTg4 ZWMtZjExYTAwOTU2YTM5LzYxZDIzNGIwLTlhYjAtNDQ5ZC04OGVjLWYxMWEwMDk1 NmEzOS5jcmwwHwYDVR0jBBgwFoAU1G4U1sqfayaWZP44IQnNPNCN5J0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82MWQyMzRiMC05YWIwLTQ0OWQtODhlYy1mMTFh MDA5NTZhMzkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXWADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBvCutKNEVsN+gB7vz1h0QflJx6RDrqqPg+ZpfuSdSLmVG7eX8BFEGD +YhK2XCtj9sh2O9y21aG+vuaVJ7XBUoB1Mx/TIJn3bubgktPFRFa1z12tcEXSbPY G8ct95gu0y5J56wKgOR+gwkQa+qPQkW6gqyckyZWnkGXLYj4gEwMCt5qKmmb9dE1 Mcc2IaRzhJkGZlY+blS/8heZ4CSJrMcTCU0KzgqmBNvqYhufu0GMdoVxZkAv/aVB 28F837Fe8Xn0hW8m9SDDsAMiJgYzvJk5aGbGSvYXyvHkgTD86vwp0PJazjjKKdD8 qpcJZXi78VPxdifcjxGSLNZkJ3m/P5F5 -----END CERTIFICATE-----Generated at Wed Nov 5 16:07:43 2025 by rpki-client