$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a06ab81f-a6c8-462a-b3e0-52f829f8f687/61cd5006-eb96-38f0-ae08-70b29623b9ec.roa File: 61cd5006-eb96-38f0-ae08-70b29623b9ec.roa (raw, json) Hash identifier: g0Xnj8gygw7Ur9CNkHqjOBixHP5pZ8Y66qGw6NPJ8lQ= Subject key identifier: 97:0F:B6:46:01:D0:05:C9:5B:42:A5:FB:0C:1E:2D:0F:92:5C:D0:12 Certificate issuer: /CN=a06ab81f-a6c8-462a-b3e0-52f829f8f687 Certificate serial: 010D0C9F4328584B68FC983C98ABD1844D251C80 Authority key identifier: BB:E4:F8:D9:20:DD:C2:23:75:FB:B4:A0:FD:34:2F:65:04:BC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a06ab81f-a6c8-462a-b3e0-52f829f8f687.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a06ab81f-a6c8-462a-b3e0-52f829f8f687/61cd5006-eb96-38f0-ae08-70b29623b9ec.roa Signing time: Sat 04 Oct 2025 13:00:40 +0000 ROA not before: Sat 04 Oct 2025 13:00:40 +0000 ROA not after: Fri 02 Jan 2026 14:00:40 +0000 asID: 398992 IP address blocks: 169.197.182.0/24 maxlen: 24 2602:fced::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a06ab81f-a6c8-462a-b3e0-52f829f8f687/a06ab81f-a6c8-462a-b3e0-52f829f8f687.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a06ab81f-a6c8-462a-b3e0-52f829f8f687/a06ab81f-a6c8-462a-b3e0-52f829f8f687.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a06ab81f-a6c8-462a-b3e0-52f829f8f687.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:68:fc:98:3c:98:ab:d1:84:4d:25:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a06ab81f-a6c8-462a-b3e0-52f829f8f687 Validity Not Before: Oct 4 13:00:40 2025 GMT Not After : Jan 2 14:00:40 2026 GMT Subject: CN=5fea3361-dffa-41b9-b9ef-c22d28446791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:be:c7:d9:d7:ee:93:b8:03:e8:f8:74:ea:4e: fa:a9:c6:0d:8f:f2:60:dc:26:86:2c:5a:9b:be:56: 58:c6:2f:4a:16:44:05:5b:d0:7b:60:0f:31:53:72: 38:18:a6:62:79:86:ff:ef:09:db:2b:3f:87:42:fd: ef:39:f5:36:75:67:85:1f:f9:69:8a:aa:21:55:a3: 99:75:c1:3c:50:74:de:24:b2:d2:63:33:6c:c6:27: 67:f2:e4:0d:2c:04:d2:fe:ca:24:aa:73:5d:2c:d6: 60:9a:a2:4f:9d:fe:56:45:a3:10:4a:8e:24:c5:08: af:d4:13:d6:b8:8b:e1:76:93:7f:fa:2d:45:0a:5a: 02:89:56:79:c1:5e:c3:08:33:75:cb:77:17:de:1f: ee:ca:d5:53:4a:23:f3:a0:62:c5:79:ce:e9:5c:d0: 61:03:6c:ad:06:52:58:e5:83:98:82:e5:20:57:57: 41:9c:59:ff:78:4a:0e:f0:db:50:d9:5c:1e:e9:83: d4:51:89:45:e7:f9:b6:d7:db:ff:22:82:b9:c2:bf: 62:58:4a:90:69:bc:ed:dc:c0:85:54:9f:ac:fa:d4: 94:7d:d7:76:30:17:d2:60:56:35:31:3e:e9:51:7b: 4f:85:96:75:1c:22:d2:0d:9d:d3:1f:67:b8:2a:ea: d3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:0F:B6:46:01:D0:05:C9:5B:42:A5:FB:0C:1E:2D:0F:92:5C:D0:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a06ab81f-a6c8-462a-b3e0-52f829f8f687/61cd5006-eb96-38f0-ae08-70b29623b9ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a06ab81f-a6c8-462a-b3e0-52f829f8f687/a06ab81f-a6c8-462a-b3e0-52f829f8f687.crl X509v3 Authority Key Identifier: keyid:BB:E4:F8:D9:20:DD:C2:23:75:FB:B4:A0:FD:34:2F:65:04:BC:D0:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a06ab81f-a6c8-462a-b3e0-52f829f8f687.cer sbgp-ipAddrBlock: critical IPv4: 169.197.182.0/24 IPv6: 2602:fced::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:2e:9d:b1:19:8c:5b:78:95:49:e3:f0:5f:20:95:1f:7b:a8: 1a:87:cf:a8:e3:49:10:65:a6:ef:c0:ab:84:2f:19:a9:31:2f: cc:8a:c4:17:e0:bd:0c:fb:c8:95:f0:88:a6:64:ef:36:6f:5a: 94:fc:31:f5:00:80:0c:e1:d8:1f:a8:28:db:27:96:f4:9d:46: ff:d5:df:e1:b1:51:b2:d3:82:5f:d2:df:33:3c:05:72:8c:e0: 93:d9:19:4a:15:66:3a:a3:d8:11:4f:5b:5f:2e:bc:74:d0:65: 80:28:f6:98:93:5a:2c:35:bb:7c:e3:86:b5:6e:ed:38:43:5a: b9:2e:80:e0:6a:fc:dc:3b:e1:a8:e3:4e:31:c0:86:03:97:4e: 1d:25:c4:02:cc:a5:37:7e:92:bc:f7:c3:64:45:e6:68:16:d1: e0:c2:2a:e7:60:45:6b:a9:b7:df:99:b5:64:73:2b:24:cb:52: 25:38:18:7e:67:c0:8b:72:4a:aa:32:b4:b1:c4:70:36:04:8f: cb:fe:ca:13:a0:78:5e:0b:a1:f0:7d:bd:4c:a8:62:2f:ff:e1: 85:b2:31:33:9e:2d:08:84:ee:f7:c2:ce:28:8c:f5:ae:83:63: fa:5c:80:4f:00:85:3d:b3:c3:45:f8:c8:8d:58:b6:26:e1:88: c7:61:bf:7c -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEto/Jg8mKvRhE0lHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTA2YWI4MWYtYTZjOC00NjJhLWIzZTAtNTJmODI5Zjhm Njg3MB4XDTI1MTAwNDEzMDA0MFoXDTI2MDEwMjE0MDA0MFowLzEtMCsGA1UEAxMk NWZlYTMzNjEtZGZmYS00MWI5LWI5ZWYtYzIyZDI4NDQ2NzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwL7H2dfuk7gD6Ph06k76qcYNj/Jg3CaGLFqb vlZYxi9KFkQFW9B7YA8xU3I4GKZieYb/7wnbKz+HQv3vOfU2dWeFH/lpiqohVaOZ dcE8UHTeJLLSYzNsxidn8uQNLATS/sokqnNdLNZgmqJPnf5WRaMQSo4kxQiv1BPW uIvhdpN/+i1FCloCiVZ5wV7DCDN1y3cX3h/uytVTSiPzoGLFec7pXNBhA2ytBlJY 5YOYguUgV1dBnFn/eEoO8NtQ2Vwe6YPUUYlF5/m219v/IoK5wr9iWEqQabzt3MCF VJ+s+tSUfdd2MBfSYFY1MT7pUXtPhZZ1HCLSDZ3TH2e4KurT2wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFJcPtkYB0AXJW0Kl+wweLQ+SXNASMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMDZh YjgxZi1hNmM4LTQ2MmEtYjNlMC01MmY4MjlmOGY2ODcvNjFjZDUwMDYtZWI5Ni0z OGYwLWFlMDgtNzBiMjk2MjNiOWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTA2YWI4MWYtYTZjOC00NjJhLWIz ZTAtNTJmODI5ZjhmNjg3L2EwNmFiODFmLWE2YzgtNDYyYS1iM2UwLTUyZjgyOWY4 ZjY4Ny5jcmwwHwYDVR0jBBgwFoAUu+T42SDdwiN1+7Sg/TQvZQS80GswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hMDZhYjgxZi1hNmM4LTQ2MmEtYjNlMC01MmY4 MjlmOGY2ODcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAqcW2MA4E AgACMAgDBgQmAvztADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAXLp2xGYxbeJVJ4/BfIJUfe6gah8+o40kQ ZabvwKuELxmpMS/MisQX4L0M+8iV8IimZO82b1qU/DH1AIAM4dgfqCjbJ5b0nUb/ 1d/hsVGy04Jf0t8zPAVyjOCT2RlKFWY6o9gRT1tfLrx00GWAKPaYk1osNbt844a1 bu04Q1q5LoDgavzcO+Go404xwIYDl04dJcQCzKU3fpK898NkReZoFtHgwirnYEVr qbffmbVkcysky1IlOBh+Z8CLckqqMrSxxHA2BI/L/soToHheC6Hwfb1MqGIv/+GF sjEzni0IhO73ws4ojPWug2P6XIBPAIU9s8NF+MiNWLYm4YjHYb98 -----END CERTIFICATE-----Generated at Wed Nov 5 15:12:07 2025 by rpki-client