$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f8ffd4ba-11b7-4c10-9a14-2850086d1269/ff174cd6-c78a-3a30-9e52-2b423e908691.roa File: ff174cd6-c78a-3a30-9e52-2b423e908691.roa (raw, json) Hash identifier: u/7ussfNP33MXLcvYx0WFcBHsDj1mkfot+X+aIETJAs= Subject key identifier: 4D:66:4D:8D:6C:8D:F0:0B:99:38:2D:7A:4E:46:E9:96:FD:5D:75:28 Certificate issuer: /CN=f8ffd4ba-11b7-4c10-9a14-2850086d1269 Certificate serial: 010D0C9F4328584B76F226F4EAC08C9F64A6C8C0 Authority key identifier: E9:4F:AA:B0:4A:25:49:EF:B7:29:CB:C7:75:2F:28:44:8D:4C:EC:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f8ffd4ba-11b7-4c10-9a14-2850086d1269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f8ffd4ba-11b7-4c10-9a14-2850086d1269/ff174cd6-c78a-3a30-9e52-2b423e908691.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 10546 IP address blocks: 2620:0:1a30::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f8ffd4ba-11b7-4c10-9a14-2850086d1269/f8ffd4ba-11b7-4c10-9a14-2850086d1269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f8ffd4ba-11b7-4c10-9a14-2850086d1269/f8ffd4ba-11b7-4c10-9a14-2850086d1269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f8ffd4ba-11b7-4c10-9a14-2850086d1269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:26:f4:ea:c0:8c:9f:64:a6:c8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8ffd4ba-11b7-4c10-9a14-2850086d1269 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=7a2e9a29-001c-4442-aac4-1713dda52852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:9b:fb:f7:aa:be:3d:4b:55:39:a3:bb:53:ac: 2a:47:d1:65:7f:01:a4:9e:16:2b:79:4c:b5:26:86: 0b:ea:0b:15:2c:43:00:e4:f4:7e:bc:ff:db:f8:c5: 2c:3e:1d:91:6f:35:51:8d:7b:8f:ae:4e:fb:ca:b0: 62:c3:2e:81:7b:5b:36:a0:44:12:30:37:81:31:cb: 40:54:0e:76:e8:b1:46:ef:bc:28:57:e2:56:ef:ba: af:af:d3:61:f3:3e:2a:a5:a5:19:7c:35:b8:93:44: 5e:e0:59:30:2a:3d:2e:b2:b1:78:ac:6e:28:95:25: 53:36:17:d9:c6:fd:c9:99:3d:f1:8c:53:d6:8a:3b: 1d:44:0a:5e:36:78:be:20:98:a0:8e:2e:37:88:41: d6:55:8f:87:5a:e7:4a:34:70:8f:96:c8:1c:3d:5c: 49:64:4d:12:b0:48:f6:ef:6b:d8:2c:4a:ce:b2:50: 98:cf:d8:44:d8:a6:6b:73:3d:fc:0e:52:ac:c2:06: 7a:e2:b1:e9:ed:4c:e7:d9:63:72:3a:43:46:5e:5f: 51:4f:70:cb:d6:a2:5b:53:5f:92:f9:9c:e2:d0:b1: dd:66:06:1c:7a:f6:7e:bf:f5:3b:6f:24:d2:81:2b: a2:f1:39:dc:40:5d:11:06:ca:56:f9:ed:66:86:db: eb:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:66:4D:8D:6C:8D:F0:0B:99:38:2D:7A:4E:46:E9:96:FD:5D:75:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f8ffd4ba-11b7-4c10-9a14-2850086d1269/ff174cd6-c78a-3a30-9e52-2b423e908691.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f8ffd4ba-11b7-4c10-9a14-2850086d1269/f8ffd4ba-11b7-4c10-9a14-2850086d1269.crl X509v3 Authority Key Identifier: keyid:E9:4F:AA:B0:4A:25:49:EF:B7:29:CB:C7:75:2F:28:44:8D:4C:EC:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f8ffd4ba-11b7-4c10-9a14-2850086d1269.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:1a30::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:66:39:b9:21:eb:44:06:32:25:f5:d9:3f:a6:b6:a6:a2:95: 49:ba:a0:e6:b1:62:d0:cb:7d:89:e5:90:92:ef:e6:ce:43:65: 1c:88:46:70:bd:e0:da:dd:6e:79:3d:55:ef:f8:d0:49:a2:aa: d0:b7:ad:0a:71:d0:e3:1e:a2:9f:2c:37:42:06:8a:67:36:d8: 55:b6:02:25:d0:ef:d8:00:f6:7e:80:b5:82:ec:d3:58:05:26: dd:30:eb:46:38:98:ac:d7:18:e2:57:f6:4f:5f:8a:d9:3d:20: d7:f5:0c:3b:62:42:bb:1e:ee:4e:d8:c3:48:04:69:9e:25:dc: 80:80:57:a2:7b:f1:1d:af:01:b4:12:37:e1:98:c6:21:6d:78: e3:d2:b7:5a:0c:63:44:1d:b5:79:64:a7:4a:52:9d:7d:c9:15: 79:f0:65:1f:f4:e4:96:a3:01:46:f1:81:cd:84:59:af:72:ed: 89:9e:47:76:a2:ac:5b:4e:a6:e8:0a:c5:69:62:2f:fe:df:3b: 76:a9:7e:0c:e7:e2:b3:a0:68:84:ce:02:11:9f:fb:20:f3:d0: 90:3c:91:ee:c6:09:71:18:2d:7e:cc:26:2b:21:cf:3e:1a:81: 3f:cf:0b:4a:e3:cd:64:65:0a:d6:73:2a:a9:74:da:d0:a9:1d: 0a:68:5b:ce -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt28ib06sCMn2SmyMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhmZmQ0YmEtMTFiNy00YzEwLTlhMTQtMjg1MDA4NmQx MjY5MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk N2EyZTlhMjktMDAxYy00NDQyLWFhYzQtMTcxM2RkYTUyODUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpv796q+PUtVOaO7U6wqR9FlfwGknhYreUy1 JoYL6gsVLEMA5PR+vP/b+MUsPh2RbzVRjXuPrk77yrBiwy6Be1s2oEQSMDeBMctA VA526LFG77woV+JW77qvr9Nh8z4qpaUZfDW4k0Re4FkwKj0usrF4rG4olSVTNhfZ xv3JmT3xjFPWijsdRApeNni+IJigji43iEHWVY+HWudKNHCPlsgcPVxJZE0SsEj2 72vYLErOslCYz9hE2KZrcz38DlKswgZ64rHp7Uzn2WNyOkNGXl9RT3DL1qJbU1+S +Zzi0LHdZgYcevZ+v/U7byTSgSui8TncQF0RBspW+e1mhtvr6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE1mTY1sjfALmTgtek5G6Zb9XXUoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mOGZm ZDRiYS0xMWI3LTRjMTAtOWExNC0yODUwMDg2ZDEyNjkvZmYxNzRjZDYtYzc4YS0z YTMwLTllNTItMmI0MjNlOTA4NjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjhmZmQ0YmEtMTFiNy00YzEwLTlh MTQtMjg1MDA4NmQxMjY5L2Y4ZmZkNGJhLTExYjctNGMxMC05YTE0LTI4NTAwODZk MTI2OS5jcmwwHwYDVR0jBBgwFoAU6U+qsEolSe+3KcvHdS8oRI1M7IEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mOGZmZDRiYS0xMWI3LTRjMTAtOWExNC0yODUw MDg2ZDEyNjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAABow MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHVmObkh60QGMiX12T+mtqailUm6oOaxYtDLfYnlkJLv5s5DZRyI RnC94Nrdbnk9Ve/40EmiqtC3rQpx0OMeop8sN0IGimc22FW2AiXQ79gA9n6AtYLs 01gFJt0w60Y4mKzXGOJX9k9fitk9INf1DDtiQrse7k7Yw0gEaZ4l3ICAV6J78R2v AbQSN+GYxiFteOPSt1oMY0QdtXlkp0pSnX3JFXnwZR/05JajAUbxgc2EWa9y7Yme R3airFtOpugKxWliL/7fO3apfgzn4rOgaITOAhGf+yDz0JA8ke7GCXEYLX7MJish zz4agT/PC0rjzWRlCtZzKql02tCpHQpoW84= -----END CERTIFICATE-----Generated at Sat Oct 11 11:30:23 2025 by rpki-client