$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/da961be0-5ca6-3f34-bfd8-fd807fa8d53e.roa File: da961be0-5ca6-3f34-bfd8-fd807fa8d53e.roa (raw, json) Hash identifier: kAdTMCDelbCX7DhqQ7Bj8oL0Do0dlbC9rBMyfnDgxHc= Subject key identifier: 32:11:66:09:ED:48:25:07:F6:11:93:9E:FC:79:05:84:8B:09:E5:B7 Certificate issuer: /CN=6bf65f5a-6dd3-4c5d-9a94-33050d9022d6 Certificate serial: 010D0C9F4328584B6631FE5C02B8A4EE87D85040 Authority key identifier: F2:A4:2B:DE:FA:FE:77:93:4E:14:AF:9C:ED:16:EC:DD:01:9F:E4:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/da961be0-5ca6-3f34-bfd8-fd807fa8d53e.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 0 IP address blocks: 2001:504:40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:31:fe:5c:02:b8:a4:ee:87:d8:50:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bf65f5a-6dd3-4c5d-9a94-33050d9022d6 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=44d1d819-a8af-44e9-b228-03a979a25338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:9a:5f:23:12:39:d7:4b:61:50:b3:04:bb:d5: 40:68:b3:b5:2f:12:8b:71:7a:c1:10:30:fa:3a:8a: 3c:2e:41:de:19:3c:75:c5:a6:03:d0:ba:1f:57:c9: 9b:94:3c:27:bc:9a:29:99:01:28:e9:00:cd:28:85: 69:61:b8:f6:8f:65:ad:ce:19:8a:60:3d:a4:2d:71: 2d:ea:34:43:b1:b5:73:ff:a6:4a:26:9d:74:06:a5: 53:01:91:d5:1a:7b:3e:f2:62:4f:1d:8f:06:05:80: 6e:bf:9e:5e:ba:e3:3e:83:1c:45:10:df:4d:a0:16: 58:a4:ff:96:b5:f3:53:19:00:28:95:39:43:11:2d: c2:6d:7c:db:99:13:65:e4:70:36:50:85:32:93:0c: d2:e2:70:06:d3:6b:21:0e:8f:66:fa:34:01:d3:d7: 6f:71:11:4d:37:fd:2c:0b:7b:6c:4e:48:30:93:b7: 8c:ff:d4:b4:72:c8:63:70:00:c7:db:3b:17:1b:a0: b3:30:d7:48:1f:11:c9:f6:92:2d:e6:ef:36:bf:2f: cb:dd:e8:e6:3c:4e:6a:6c:79:c7:78:47:d5:e0:be: 74:ac:a5:32:d1:f0:36:78:28:09:a7:45:ad:ef:d1: b0:a4:17:79:b9:de:5f:1c:b8:84:22:e8:c1:10:b8: 5d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:11:66:09:ED:48:25:07:F6:11:93:9E:FC:79:05:84:8B:09:E5:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/da961be0-5ca6-3f34-bfd8-fd807fa8d53e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.crl X509v3 Authority Key Identifier: keyid:F2:A4:2B:DE:FA:FE:77:93:4E:14:AF:9C:ED:16:EC:DD:01:9F:E4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:40::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:65:5e:ed:f3:a2:41:ea:90:49:e0:ec:6a:a9:c6:44:8d:21: 4f:00:d8:a0:bb:66:aa:20:15:6f:b1:b7:7c:09:df:58:14:4c: cf:b4:c6:59:f1:9c:a3:7b:a2:3e:7a:03:48:3e:eb:67:71:a5: cf:d3:84:b5:5b:2e:29:78:1f:8a:af:53:f0:f4:f9:d4:d9:2f: 16:f9:ab:7e:5b:4b:3d:cb:be:48:2f:ee:7c:5e:55:b1:3b:18: 71:6f:b2:99:5b:c9:d1:9a:05:c8:ea:4b:cc:df:38:5b:4e:5a: 4b:99:c6:02:cb:71:78:9b:d4:fa:c0:80:4a:dd:24:8c:c2:80: 5b:da:46:5a:94:3a:19:c4:a4:8b:ed:93:e7:17:33:7f:6e:99: 33:cb:6d:e2:64:03:be:57:71:39:2a:6f:87:cd:ad:b0:82:d3: 93:05:54:f7:e3:39:62:99:88:a0:a4:32:f4:74:40:c0:1b:81: b7:48:5d:bc:0d:de:96:10:ce:2c:4c:8d:e7:2d:0b:de:c3:1d: 50:9e:ac:d2:b5:4d:4c:8a:65:3f:b2:07:ed:b3:68:19:60:09: 6e:e8:90:b7:1e:34:df:16:99:c1:93:c0:b0:75:9f:b4:08:f6: ee:f6:63:cf:2c:48:9d:34:c8:33:b5:26:b8:b4:0a:84:44:05: 88:73:da:8e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtmMf5cArik7ofYUEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJmNjVmNWEtNmRkMy00YzVkLTlhOTQtMzMwNTBkOTAy MmQ2MB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk NDRkMWQ4MTktYThhZi00NGU5LWIyMjgtMDNhOTc5YTI1MzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5pfIxI510thULMEu9VAaLO1LxKLcXrBEDD6 Ooo8LkHeGTx1xaYD0LofV8mblDwnvJopmQEo6QDNKIVpYbj2j2WtzhmKYD2kLXEt 6jRDsbVz/6ZKJp10BqVTAZHVGns+8mJPHY8GBYBuv55euuM+gxxFEN9NoBZYpP+W tfNTGQAolTlDES3CbXzbmRNl5HA2UIUykwzS4nAG02shDo9m+jQB09dvcRFNN/0s C3tsTkgwk7eM/9S0cshjcADH2zsXG6CzMNdIHxHJ9pIt5u82vy/L3ejmPE5qbHnH eEfV4L50rKUy0fA2eCgJp0Wt79GwpBd5ud5fHLiEIujBELhdcQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDIRZgntSCUH9hGTnvx5BYSLCeW3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82YmY2 NWY1YS02ZGQzLTRjNWQtOWE5NC0zMzA1MGQ5MDIyZDYvZGE5NjFiZTAtNWNhNi0z ZjM0LWJmZDgtZmQ4MDdmYThkNTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmJmNjVmNWEtNmRkMy00YzVkLTlh OTQtMzMwNTBkOTAyMmQ2LzZiZjY1ZjVhLTZkZDMtNGM1ZC05YTk0LTMzMDUwZDkw MjJkNi5jcmwwHwYDVR0jBBgwFoAU8qQr3vr+d5NOFK+c7Rbs3QGf5MQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82YmY2NWY1YS02ZGQzLTRjNWQtOWE5NC0zMzA1 MGQ5MDIyZDYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBABA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIRlXu3zokHqkEng7GqpxkSNIU8A2KC7ZqogFW+xt3wJ31gUTM+0 xlnxnKN7oj56A0g+62dxpc/ThLVbLil4H4qvU/D0+dTZLxb5q35bSz3Lvkgv7nxe VbE7GHFvsplbydGaBcjqS8zfOFtOWkuZxgLLcXib1PrAgErdJIzCgFvaRlqUOhnE pIvtk+cXM39umTPLbeJkA75XcTkqb4fNrbCC05MFVPfjOWKZiKCkMvR0QMAbgbdI XbwN3pYQzixMjectC97DHVCerNK1TUyKZT+yB+2zaBlgCW7okLceNN8WmcGTwLB1 n7QI9u72Y88sSJ00yDO1Jri0CoREBYhz2o4= -----END CERTIFICATE-----Generated at Fri Oct 10 21:33:50 2025 by rpki-client