$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d59d93e7-5c7e-424e-960f-2edf15fa5db0/a8d2529d-849a-3f85-b75b-3c96a760ef2c.roa File: a8d2529d-849a-3f85-b75b-3c96a760ef2c.roa (raw, json) Hash identifier: wXFt9Tt9gHjtde4e8cgA/Ms4oITd/3jvKF3Bx1E3f6E= Subject key identifier: 65:99:C5:7E:A3:80:5F:DF:67:4D:5A:81:8E:0E:5B:96:83:25:04:BF Certificate issuer: /CN=d59d93e7-5c7e-424e-960f-2edf15fa5db0 Certificate serial: 010D0C9F4328584AF9DBEB9D65D27E517FEEF340 Authority key identifier: 8B:4B:FF:B3:1B:84:06:63:B6:F8:46:E4:98:54:04:B6:A3:F5:1B:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d59d93e7-5c7e-424e-960f-2edf15fa5db0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d59d93e7-5c7e-424e-960f-2edf15fa5db0/a8d2529d-849a-3f85-b75b-3c96a760ef2c.roa Signing time: Mon 25 Aug 2025 17:40:09 +0000 ROA not before: Mon 25 Aug 2025 17:40:09 +0000 ROA not after: Sun 23 Nov 2025 18:40:09 +0000 asID: 399599 IP address blocks: 2606:5940::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d59d93e7-5c7e-424e-960f-2edf15fa5db0/d59d93e7-5c7e-424e-960f-2edf15fa5db0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d59d93e7-5c7e-424e-960f-2edf15fa5db0/d59d93e7-5c7e-424e-960f-2edf15fa5db0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d59d93e7-5c7e-424e-960f-2edf15fa5db0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:db:eb:9d:65:d2:7e:51:7f:ee:f3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d59d93e7-5c7e-424e-960f-2edf15fa5db0 Validity Not Before: Aug 25 17:40:09 2025 GMT Not After : Nov 23 18:40:09 2025 GMT Subject: CN=ed298eb1-0426-4f9f-afd9-329fbd234d83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:fa:9d:96:8f:7c:ad:0f:da:95:ef:e3:ef:d4: 96:3c:81:49:62:05:27:ac:78:e3:f2:ee:cc:b0:9e: c3:9b:77:6e:37:c9:24:68:41:92:35:f2:48:84:f1: 6c:bf:67:f3:e3:a4:aa:70:86:a5:95:9b:6d:55:f4: a3:cf:00:e8:4a:40:64:67:3a:97:80:f8:1d:1d:c5: b9:47:5a:4a:53:37:83:eb:3e:48:e7:57:20:9b:6e: 8a:20:7c:ef:ab:24:1d:23:63:08:00:a9:d8:c5:86: a8:b5:c8:70:67:f5:4d:2d:b5:68:09:95:39:54:eb: 27:55:4a:bf:df:fa:fc:47:16:3b:42:d5:a3:36:fb: e7:eb:cb:7d:9e:b6:11:13:06:54:e9:bf:e8:86:3a: 4d:68:2a:d0:7d:e7:cc:69:2f:28:c9:23:8e:f9:85: b5:f1:f9:4f:bc:f6:f0:34:15:22:5b:27:30:fd:b0: 38:d8:fb:ba:de:56:14:8f:83:d3:be:5d:bc:05:32: 7b:3a:5c:ce:b8:3b:97:17:5b:76:74:38:a4:1f:48: 15:7f:b5:53:5a:4f:45:f0:9a:b2:11:df:29:4e:3b: 31:50:bb:6c:92:5f:c4:c4:89:a7:b1:2d:15:f2:3b: de:c1:d6:e1:b5:d0:b7:78:5f:d2:20:f0:fb:b1:a3: 95:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:99:C5:7E:A3:80:5F:DF:67:4D:5A:81:8E:0E:5B:96:83:25:04:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d59d93e7-5c7e-424e-960f-2edf15fa5db0/a8d2529d-849a-3f85-b75b-3c96a760ef2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d59d93e7-5c7e-424e-960f-2edf15fa5db0/d59d93e7-5c7e-424e-960f-2edf15fa5db0.crl X509v3 Authority Key Identifier: keyid:8B:4B:FF:B3:1B:84:06:63:B6:F8:46:E4:98:54:04:B6:A3:F5:1B:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d59d93e7-5c7e-424e-960f-2edf15fa5db0.cer sbgp-ipAddrBlock: critical IPv6: 2606:5940::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:c1:ea:28:7e:77:2d:a1:8c:3a:bd:75:41:d2:61:9e:31:22: eb:03:52:cd:ed:ee:e7:62:1b:9b:40:ad:4e:8b:20:94:b1:22: 70:33:73:02:94:55:0f:08:b3:cc:cf:4b:71:27:55:c8:35:43: 1a:60:98:8b:03:95:d3:c8:a0:74:29:e8:9d:03:1c:59:12:2e: 39:47:df:f8:b8:0a:90:28:a8:a4:93:39:4a:be:c4:45:d7:76: e1:87:cd:5d:91:05:13:52:6f:23:04:e2:7c:f7:24:93:ab:8f: d7:06:e5:12:36:1d:de:31:4b:a1:f7:88:9f:75:f4:07:65:56: 52:44:77:38:65:19:9d:bc:48:6b:41:4a:ba:97:9f:e1:a9:5e: a7:10:bb:32:18:cc:ae:20:52:27:38:be:47:0f:4b:f0:86:e3: a3:e0:6a:78:f5:af:16:aa:da:a0:61:cd:fd:6a:cd:a2:59:d0: 2a:04:59:10:2c:8b:5b:1b:b0:81:cd:f1:48:82:1a:19:f2:c3: 62:2b:8f:cd:81:76:3e:5e:a2:39:36:ea:36:64:ed:bb:24:90: a9:96:ac:1c:d9:29:69:55:3f:91:a6:d2:25:1c:2d:13:64:c5: e3:67:48:7d:fd:3a:ff:f7:f1:2c:9a:7d:7b:ef:42:be:7e:26: 13:69:d8:0b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEr52+udZdJ+UX/u80AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU5ZDkzZTctNWM3ZS00MjRlLTk2MGYtMmVkZjE1ZmE1 ZGIwMB4XDTI1MDgyNTE3NDAwOVoXDTI1MTEyMzE4NDAwOVowLzEtMCsGA1UEAxMk ZWQyOThlYjEtMDQyNi00ZjlmLWFmZDktMzI5ZmJkMjM0ZDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/qdlo98rQ/ale/j79SWPIFJYgUnrHjj8u7M sJ7Dm3duN8kkaEGSNfJIhPFsv2fz46SqcIallZttVfSjzwDoSkBkZzqXgPgdHcW5 R1pKUzeD6z5I51cgm26KIHzvqyQdI2MIAKnYxYaotchwZ/VNLbVoCZU5VOsnVUq/ 3/r8RxY7QtWjNvvn68t9nrYREwZU6b/ohjpNaCrQfefMaS8oySOO+YW18flPvPbw NBUiWycw/bA42Pu63lYUj4PTvl28BTJ7OlzOuDuXF1t2dDikH0gVf7VTWk9F8Jqy Ed8pTjsxULtskl/ExImnsS0V8jvewdbhtdC3eF/SIPD7saOVUQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGWZxX6jgF/fZ01agY4OW5aDJQS/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kNTlk OTNlNy01YzdlLTQyNGUtOTYwZi0yZWRmMTVmYTVkYjAvYThkMjUyOWQtODQ5YS0z Zjg1LWI3NWItM2M5NmE3NjBlZjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDU5ZDkzZTctNWM3ZS00MjRlLTk2 MGYtMmVkZjE1ZmE1ZGIwL2Q1OWQ5M2U3LTVjN2UtNDI0ZS05NjBmLTJlZGYxNWZh NWRiMC5jcmwwHwYDVR0jBBgwFoAUi0v/sxuEBmO2+EbkmFQEtqP1G8kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kNTlkOTNlNy01YzdlLTQyNGUtOTYwZi0yZWRm MTVmYTVkYjAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgZZQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBwweoofnctoYw6vXVB0mGeMSLrA1LN7e7nYhubQK1OiyCUsSJwM3MC lFUPCLPMz0txJ1XINUMaYJiLA5XTyKB0KeidAxxZEi45R9/4uAqQKKikkzlKvsRF 13bhh81dkQUTUm8jBOJ89ySTq4/XBuUSNh3eMUuh94ifdfQHZVZSRHc4ZRmdvEhr QUq6l5/hqV6nELsyGMyuIFInOL5HD0vwhuOj4Gp49a8WqtqgYc39as2iWdAqBFkQ LItbG7CBzfFIghoZ8sNiK4/NgXY+XqI5Nuo2ZO27JJCplqwc2SlpVT+RptIlHC0T ZMXjZ0h9/Tr/9/Esmn1770K+fiYTadgL -----END CERTIFICATE-----Generated at Wed Nov 5 16:52:49 2025 by rpki-client