$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5f37851-5580-4893-8a07-8693f2521f18/af2c879e-4022-317d-9513-1841b13159c0.roa File: af2c879e-4022-317d-9513-1841b13159c0.roa (raw, json) Hash identifier: N2ZiZaENYUrgK/rKU7Y6UeeyN589HeNmBOV0KhEQ14Y= Subject key identifier: 2B:14:47:16:E8:27:58:74:ED:A0:BC:72:E9:40:2A:C2:96:C6:29:FE Certificate issuer: /CN=f5f37851-5580-4893-8a07-8693f2521f18 Certificate serial: 010D0C9F4328584B970D054C23F066D768F215E0 Authority key identifier: 67:1F:8C:A5:35:19:41:56:92:F6:96:DF:FA:31:37:A8:8C:0B:DB:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5f37851-5580-4893-8a07-8693f2521f18.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5f37851-5580-4893-8a07-8693f2521f18/af2c879e-4022-317d-9513-1841b13159c0.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 401897 IP address blocks: 2604:19e0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5f37851-5580-4893-8a07-8693f2521f18/f5f37851-5580-4893-8a07-8693f2521f18.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5f37851-5580-4893-8a07-8693f2521f18/f5f37851-5580-4893-8a07-8693f2521f18.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5f37851-5580-4893-8a07-8693f2521f18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0d:05:4c:23:f0:66:d7:68:f2:15:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5f37851-5580-4893-8a07-8693f2521f18 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=8b2870b2-8063-406d-91c8-92d16b94a888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:62:7b:dc:ed:d8:d5:7a:6a:af:e1:87:e4:af: bd:a4:57:4b:8a:ff:44:5f:6d:68:0f:5c:a0:dd:3d: e5:3e:bd:82:55:34:6f:19:ec:be:c2:0a:af:6c:60: d8:f6:c3:bb:1a:b0:41:8c:35:c9:12:7f:d6:31:c6: 45:23:76:eb:a3:d8:45:b1:e7:2e:e6:a2:51:4e:0f: 46:a1:ea:90:b9:85:90:eb:46:45:25:d5:83:17:ed: 48:c1:74:38:e1:ba:0d:b1:b4:c5:d1:ab:b0:0a:fc: e1:87:b9:ce:aa:53:c3:6b:87:df:1a:58:03:55:b8: 0d:92:55:e6:32:4b:db:65:55:81:ea:2a:46:e6:ca: 3e:6e:64:04:30:ff:67:0c:a5:b0:33:e2:55:ef:5f: b0:a1:36:55:da:01:f7:3f:1d:56:4f:be:3d:05:2e: bf:b9:94:f6:26:45:ac:26:59:41:1c:96:7f:e0:62: 5c:b4:b1:76:34:6d:fb:23:4a:70:6e:35:10:92:4a: 29:e5:bf:0e:7f:fe:e8:64:e2:7b:d0:37:a4:b0:ea: 56:02:e5:24:de:95:33:c2:29:63:82:91:12:02:25: f8:10:df:b1:a8:3b:68:ae:fa:d0:51:f6:cd:cf:9f: 2a:79:af:2f:45:57:1a:be:ed:8c:5b:35:e5:e0:64: 4a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:14:47:16:E8:27:58:74:ED:A0:BC:72:E9:40:2A:C2:96:C6:29:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5f37851-5580-4893-8a07-8693f2521f18/af2c879e-4022-317d-9513-1841b13159c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5f37851-5580-4893-8a07-8693f2521f18/f5f37851-5580-4893-8a07-8693f2521f18.crl X509v3 Authority Key Identifier: keyid:67:1F:8C:A5:35:19:41:56:92:F6:96:DF:FA:31:37:A8:8C:0B:DB:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5f37851-5580-4893-8a07-8693f2521f18.cer sbgp-ipAddrBlock: critical IPv6: 2604:19e0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:65:9b:29:8a:d6:de:dd:9c:92:11:7e:6f:f5:10:06:20:6b: 2b:f5:c5:67:58:41:28:fc:5f:d8:85:dc:40:bf:49:df:bc:fd: 52:18:3b:7b:2e:34:b8:ad:fe:c0:b0:80:af:5b:28:1e:94:30: c5:b7:4c:a2:1a:84:72:8f:86:9b:3b:a6:29:2a:e2:30:56:16: 06:aa:56:98:ee:64:fb:90:07:d9:77:00:27:97:23:42:b7:98: 11:68:b5:b8:0b:89:11:1f:26:2a:1c:71:d0:15:af:15:5e:1a: 3f:c3:d9:67:3c:be:52:8d:d8:6c:b3:5f:27:df:3e:ff:3d:40: b2:83:a7:9d:6a:59:56:ea:a8:bb:5e:9e:06:7e:c7:64:a1:83: 10:03:67:3d:59:18:fd:3a:41:c0:94:6c:91:c4:14:15:09:e5: fb:a9:94:06:39:d1:4b:38:a7:36:0e:06:54:ec:c5:c8:3a:bb: 8d:04:42:b7:39:67:00:6a:fa:3f:21:73:81:7b:96:68:2a:5b: fb:03:40:fa:f1:02:a4:c7:da:4a:09:a9:c7:6f:f0:49:e2:92: de:b3:13:67:7b:ca:10:f6:c7:a8:c8:25:0d:39:bd:88:f1:5c: af:1f:4e:4a:1d:70:e2:1c:96:f4:5d:ec:e7:61:34:5e:d7:c2: fa:a9:f6:14 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuXDQVMI/Bm12jyFeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjVmMzc4NTEtNTU4MC00ODkzLThhMDctODY5M2YyNTIx ZjE4MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk OGIyODcwYjItODA2My00MDZkLTkxYzgtOTJkMTZiOTRhODg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GJ73O3Y1Xpqr+GH5K+9pFdLiv9EX21oD1yg 3T3lPr2CVTRvGey+wgqvbGDY9sO7GrBBjDXJEn/WMcZFI3bro9hFsecu5qJRTg9G oeqQuYWQ60ZFJdWDF+1IwXQ44boNsbTF0auwCvzhh7nOqlPDa4ffGlgDVbgNklXm MkvbZVWB6ipG5so+bmQEMP9nDKWwM+JV71+woTZV2gH3Px1WT749BS6/uZT2JkWs JllBHJZ/4GJctLF2NG37I0pwbjUQkkop5b8Of/7oZOJ70DeksOpWAuUk3pUzwilj gpESAiX4EN+xqDtorvrQUfbNz58qea8vRVcavu2MWzXl4GRKewIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCsURxboJ1h07aC8culAKsKWxin+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mNWYz Nzg1MS01NTgwLTQ4OTMtOGEwNy04NjkzZjI1MjFmMTgvYWYyYzg3OWUtNDAyMi0z MTdkLTk1MTMtMTg0MWIxMzE1OWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZjVmMzc4NTEtNTU4MC00ODkzLThh MDctODY5M2YyNTIxZjE4L2Y1ZjM3ODUxLTU1ODAtNDg5My04YTA3LTg2OTNmMjUy MWYxOC5jcmwwHwYDVR0jBBgwFoAUZx+MpTUZQVaS9pbf+jE3qIwL2zgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9mNWYzNzg1MS01NTgwLTQ4OTMtOGEwNy04Njkz ZjI1MjFmMTguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQZ4DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAAZZspitbe3ZySEX5v9RAGIGsr9cVnWEEo/F/YhdxAv0nfvP1SGDt7 LjS4rf7AsICvWygelDDFt0yiGoRyj4abO6YpKuIwVhYGqlaY7mT7kAfZdwAnlyNC t5gRaLW4C4kRHyYqHHHQFa8VXho/w9lnPL5Sjdhss18n3z7/PUCyg6edallW6qi7 Xp4GfsdkoYMQA2c9WRj9OkHAlGyRxBQVCeX7qZQGOdFLOKc2DgZU7MXIOruNBEK3 OWcAavo/IXOBe5ZoKlv7A0D68QKkx9pKCanHb/BJ4pLesxNne8oQ9seoyCUNOb2I 8VyvH05KHXDiHJb0XeznYTRe18L6qfYU -----END CERTIFICATE-----Generated at Wed Nov 5 19:17:35 2025 by rpki-client