$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/cd12a9d7-4e3a-3052-bc1c-869e27da883f.roa File: cd12a9d7-4e3a-3052-bc1c-869e27da883f.roa (raw, json) Hash identifier: BNdsucOOJ78rJwmo2lZND1Iw0WzKZH3YBIrGk7vrAbM= Subject key identifier: 28:87:0B:BF:E7:29:C6:ED:D6:28:6A:4B:8F:8C:C6:27:78:BD:90:0A Certificate issuer: /CN=d31a463c-a0cd-410a-8aab-0fadfe97c69f Certificate serial: 010D0C9F4328584BA5023ECE5F1DCC0F40A70380 Authority key identifier: 13:76:8A:28:97:A6:DD:B7:51:AA:5A:58:D3:DE:DA:76:AC:DA:66:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/cd12a9d7-4e3a-3052-bc1c-869e27da883f.roa Signing time: Sun 26 Oct 2025 01:00:31 +0000 ROA not before: Sun 26 Oct 2025 01:00:31 +0000 ROA not after: Sat 24 Jan 2026 02:00:31 +0000 asID: 25635 IP address blocks: 2605:5640::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/d31a463c-a0cd-410a-8aab-0fadfe97c69f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/d31a463c-a0cd-410a-8aab-0fadfe97c69f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a5:02:3e:ce:5f:1d:cc:0f:40:a7:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d31a463c-a0cd-410a-8aab-0fadfe97c69f Validity Not Before: Oct 26 01:00:31 2025 GMT Not After : Jan 24 02:00:31 2026 GMT Subject: CN=826a8cb4-c6bd-4173-8e85-046e68074bf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c4:5f:28:ad:45:15:62:46:4e:cc:c9:9a:b5: 95:74:5c:56:42:4d:2c:5b:eb:71:9e:5e:19:c4:63: cf:ed:0e:68:91:2f:0a:68:42:4e:b9:23:33:5a:77: 67:2e:b5:a7:e4:a3:06:03:e6:95:bd:78:f1:8d:ff: 82:e9:e4:b9:61:a6:57:7a:18:af:da:8d:e0:ca:1f: 06:ed:b2:e3:6f:b0:b8:0e:9a:3b:18:fa:e3:55:9a: f4:da:c9:76:4f:bf:91:1a:16:68:62:0e:61:f1:35: b0:5b:f5:fa:e0:36:2b:f6:f6:01:97:34:8e:7f:f0: be:63:43:27:60:f6:0f:2d:60:a4:c2:bb:dd:c0:4c: 32:16:77:42:d0:ff:de:56:e2:e9:42:c2:19:e1:1f: c5:81:80:87:8a:91:63:ab:98:8f:10:f0:35:67:d3: 01:74:e0:12:b3:2e:b9:6e:d0:bf:cc:65:24:88:8d: df:5b:89:eb:15:b7:92:bc:d4:c8:72:a4:e9:76:29: 27:e9:16:e7:c7:88:82:83:60:13:cd:e8:ad:92:97: c5:1a:fe:6d:e7:1a:ad:40:f6:a7:b6:75:0d:1b:2e: 4c:dd:e6:22:87:de:37:09:53:7c:0e:2f:b6:7d:13: e2:cc:ba:e1:ff:09:90:67:3f:3c:ea:60:3c:7e:28: 40:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:87:0B:BF:E7:29:C6:ED:D6:28:6A:4B:8F:8C:C6:27:78:BD:90:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/cd12a9d7-4e3a-3052-bc1c-869e27da883f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/d31a463c-a0cd-410a-8aab-0fadfe97c69f.crl X509v3 Authority Key Identifier: keyid:13:76:8A:28:97:A6:DD:B7:51:AA:5A:58:D3:DE:DA:76:AC:DA:66:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f.cer sbgp-ipAddrBlock: critical IPv6: 2605:5640::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:1d:74:d1:b0:0e:60:e0:6d:f7:ff:81:a7:24:b0:32:52:cd: da:8a:c2:c7:3c:37:d0:c3:c4:a7:71:4d:84:11:f8:1c:23:c2: 3b:fe:5b:c7:59:36:84:b4:4b:01:6a:9b:e6:d9:22:17:89:ee: 2c:f8:4c:dc:e4:51:fc:cc:1e:c2:af:f2:4f:85:52:81:60:03: 3b:8e:8d:59:c2:7b:27:14:4f:c2:0b:1f:e5:6f:f0:b3:1a:d8: 30:95:91:3c:3a:a9:7c:d9:a0:83:c1:17:c7:98:60:86:9d:28: 99:96:ee:09:48:5a:c6:09:df:2e:c3:62:93:b1:d2:39:23:e5: a2:29:e9:d2:6e:1c:72:1e:0a:71:be:9e:64:aa:0a:b2:6a:4f: 62:91:67:b5:e8:97:83:8a:0e:f8:ca:6f:c4:e4:83:a1:77:1e: 0a:3d:10:39:68:da:f7:1b:97:ae:c4:02:97:65:1c:0f:88:b8: e9:70:d2:f3:46:cd:2b:ca:5f:78:c7:29:2a:1b:d5:e9:44:20: c4:c2:aa:06:12:97:31:e7:fa:2e:da:41:75:9a:92:c6:62:03: 33:db:4b:68:3d:16:81:36:ca:9e:b5:52:e0:a0:9b:f7:4b:21: 46:d6:03:65:93:e4:0d:c9:fc:ee:4a:42:d8:d9:f3:4e:a2:e8: 93:f4:00:a6 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEulAj7OXx3MD0CnA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDMxYTQ2M2MtYTBjZC00MTBhLThhYWItMGZhZGZlOTdj NjlmMB4XDTI1MTAyNjAxMDAzMVoXDTI2MDEyNDAyMDAzMVowLzEtMCsGA1UEAxMk ODI2YThjYjQtYzZiZC00MTczLThlODUtMDQ2ZTY4MDc0YmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcRfKK1FFWJGTszJmrWVdFxWQk0sW+txnl4Z xGPP7Q5okS8KaEJOuSMzWndnLrWn5KMGA+aVvXjxjf+C6eS5YaZXehiv2o3gyh8G 7bLjb7C4Dpo7GPrjVZr02sl2T7+RGhZoYg5h8TWwW/X64DYr9vYBlzSOf/C+Y0Mn YPYPLWCkwrvdwEwyFndC0P/eVuLpQsIZ4R/FgYCHipFjq5iPEPA1Z9MBdOASsy65 btC/zGUkiI3fW4nrFbeSvNTIcqTpdikn6Rbnx4iCg2ATzeitkpfFGv5t5xqtQPan tnUNGy5M3eYih943CVN8Di+2fRPizLrh/wmQZz886mA8fihAdwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCiHC7/nKcbt1ihqS4+Mxid4vZAKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kMzFh NDYzYy1hMGNkLTQxMGEtOGFhYi0wZmFkZmU5N2M2OWYvY2QxMmE5ZDctNGUzYS0z MDUyLWJjMWMtODY5ZTI3ZGE4ODNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDMxYTQ2M2MtYTBjZC00MTBhLThh YWItMGZhZGZlOTdjNjlmL2QzMWE0NjNjLWEwY2QtNDEwYS04YWFiLTBmYWRmZTk3 YzY5Zi5jcmwwHwYDVR0jBBgwFoAUE3aKKJem3bdRqlpY097adqzaZmMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kMzFhNDYzYy1hMGNkLTQxMGEtOGFhYi0wZmFk ZmU5N2M2OWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgVWQAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAWx100bAOYOBt9/+BpySwMlLN2orCxzw30MPEp3FNhBH4HCPCO/5b x1k2hLRLAWqb5tkiF4nuLPhM3ORR/Mwewq/yT4VSgWADO46NWcJ7JxRPwgsf5W/w sxrYMJWRPDqpfNmgg8EXx5hghp0omZbuCUhaxgnfLsNik7HSOSPloinp0m4cch4K cb6eZKoKsmpPYpFnteiXg4oO+MpvxOSDoXceCj0QOWja9xuXrsQCl2UcD4i46XDS 80bNK8pfeMcpKhvV6UQgxMKqBhKXMef6LtpBdZqSxmIDM9tLaD0WgTbKnrVS4KCb 90shRtYDZZPkDcn87kpC2NnzTqLok/QApg== -----END CERTIFICATE-----Generated at Fri Nov 7 12:59:05 2025 by rpki-client