$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/de6c9681-7f04-385f-80d1-e86f0f8a4bc2.roa File: de6c9681-7f04-385f-80d1-e86f0f8a4bc2.roa (raw, json) Hash identifier: eD+ODfhBGa/nJVF8lyOhQu+Nt3vpkD4x7OKZRsAEvpw= Subject key identifier: 86:55:93:0A:69:22:CA:79:2C:D2:F0:73:FA:25:27:3B:94:2B:0C:13 Certificate issuer: /CN=706d4f00-fa89-4b22-8684-b968d577fab7 Certificate serial: 010D0C9F4328584B78574D3845D9BD41F49771C0 Authority key identifier: 28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/de6c9681-7f04-385f-80d1-e86f0f8a4bc2.roa Signing time: Fri 10 Oct 2025 01:00:30 +0000 ROA not before: Fri 10 Oct 2025 01:00:30 +0000 ROA not after: Thu 08 Jan 2026 02:00:30 +0000 asID: 5744 IP address blocks: 2610:20:5120::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:78:57:4d:38:45:d9:bd:41:f4:97:71:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706d4f00-fa89-4b22-8684-b968d577fab7 Validity Not Before: Oct 10 01:00:30 2025 GMT Not After : Jan 8 02:00:30 2026 GMT Subject: CN=acd66efe-5541-4f82-907e-2373cbe768cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2f:51:71:f8:9c:71:26:a3:46:4e:52:c5:dc: a2:0e:28:06:5b:3c:3b:26:fd:4d:e1:cd:e0:f3:c2: 8d:25:86:23:c7:bc:ae:9c:ac:6e:77:1c:f3:b0:b3: 3b:0c:bf:87:f2:f4:e2:ef:b5:2c:0a:d5:88:ec:c5: bc:0b:08:e0:bf:e0:c3:86:c5:37:28:e8:f7:4f:f2: 54:92:e1:1a:40:96:ec:df:69:20:00:6a:ac:c9:30: 5e:2d:0c:9b:92:6c:19:76:09:cb:0f:6b:be:a9:64: e6:aa:ad:ce:32:4e:1f:91:b5:f2:09:27:0f:0b:b9: 71:64:bb:4d:eb:bf:74:8c:06:ac:24:43:79:72:37: f0:b1:bc:4a:df:c4:3b:81:be:2f:60:c9:96:f1:b3: e0:45:f6:a4:b7:3d:32:ef:24:84:69:3d:b7:59:a6: ba:1b:74:35:71:6f:07:02:cd:a5:cc:be:fe:bd:e0: 3c:03:f7:bd:5b:02:69:7d:66:a8:93:50:50:a0:37: 8c:0b:c3:39:0d:24:c2:2f:5d:a1:e9:a9:a3:1b:5e: 42:1f:1b:d3:44:36:f0:03:42:91:31:50:4e:f2:d4: 4e:54:91:40:4f:eb:e2:30:94:35:d4:f0:e7:4e:9c: 5b:f9:37:99:2f:56:7f:94:e7:52:16:87:29:62:13: e9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:55:93:0A:69:22:CA:79:2C:D2:F0:73:FA:25:27:3B:94:2B:0C:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/de6c9681-7f04-385f-80d1-e86f0f8a4bc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl X509v3 Authority Key Identifier: keyid:28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer sbgp-ipAddrBlock: critical IPv6: 2610:20:5120::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:7f:9c:a1:37:ae:c4:b7:6f:0f:19:45:d2:73:ba:42:f4:3a: 15:91:50:31:20:21:8b:a2:b8:77:da:b1:25:6f:1f:a2:47:21: 0e:02:af:da:16:ed:09:d1:5a:8b:28:20:a1:19:38:dc:7c:1d: d2:72:c0:30:b0:8a:b9:75:74:c5:a6:be:30:86:5b:38:9b:b0: be:49:68:19:d9:76:4b:d2:2a:df:b8:42:31:a5:95:95:19:a8: e7:98:b2:c1:88:5b:c2:5d:10:4b:30:69:30:34:d9:37:93:45: 60:44:72:5b:9c:15:57:3a:a1:bc:e9:ae:d3:4b:81:f0:ae:60: 1c:20:60:d1:00:63:cb:44:9a:0f:23:06:e1:8c:f0:e5:da:04: fc:cf:c9:9f:87:31:17:b0:5f:57:a1:7c:67:27:84:b9:48:86: b1:f8:9b:04:59:72:db:05:d8:95:cc:68:04:cc:1c:46:c9:40: e5:74:3b:b2:10:46:6f:71:75:6f:eb:c0:00:da:b2:76:a6:7a: 6b:7a:e4:be:e7:a1:ef:68:d3:d5:50:38:be:e6:bb:f1:4d:2e: f1:9f:cc:e4:02:51:c0:f4:8a:51:9a:5e:b2:a2:0e:b2:b4:fd: 52:5b:54:d5:88:7b:ef:e9:dd:9d:68:c9:9c:5d:94:a6:52:7e: 9c:22:0d:5f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt4V004Rdm9QfSXccAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzA2ZDRmMDAtZmE4OS00YjIyLTg2ODQtYjk2OGQ1Nzdm YWI3MB4XDTI1MTAxMDAxMDAzMFoXDTI2MDEwODAyMDAzMFowLzEtMCsGA1UEAxMk YWNkNjZlZmUtNTU0MS00ZjgyLTkwN2UtMjM3M2NiZTc2OGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnS9RcficcSajRk5SxdyiDigGWzw7Jv1N4c3g 88KNJYYjx7yunKxudxzzsLM7DL+H8vTi77UsCtWI7MW8Cwjgv+DDhsU3KOj3T/JU kuEaQJbs32kgAGqsyTBeLQybkmwZdgnLD2u+qWTmqq3OMk4fkbXyCScPC7lxZLtN 6790jAasJEN5cjfwsbxK38Q7gb4vYMmW8bPgRfaktz0y7ySEaT23Waa6G3Q1cW8H As2lzL7+veA8A/e9WwJpfWaok1BQoDeMC8M5DSTCL12h6amjG15CHxvTRDbwA0KR MVBO8tROVJFAT+viMJQ11PDnTpxb+TeZL1Z/lOdSFocpYhPpAQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIZVkwppIsp5LNLwc/olJzuUKwwTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MDZk NGYwMC1mYTg5LTRiMjItODY4NC1iOTY4ZDU3N2ZhYjcvZGU2Yzk2ODEtN2YwNC0z ODVmLTgwZDEtZTg2ZjBmOGE0YmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzA2ZDRmMDAtZmE4OS00YjIyLTg2 ODQtYjk2OGQ1NzdmYWI3LzcwNmQ0ZjAwLWZhODktNGIyMi04Njg0LWI5NjhkNTc3 ZmFiNy5jcmwwHwYDVR0jBBgwFoAUKM0iEnwvGdgbZE9UHxIn+yLJ5AUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83MDZkNGYwMC1mYTg5LTRiMjItODY4NC1iOTY4 ZDU3N2ZhYjcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJhAAIFEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACx/nKE3rsS3bw8ZRdJzukL0OhWRUDEgIYuiuHfasSVvH6JHIQ4C r9oW7QnRWosoIKEZONx8HdJywDCwirl1dMWmvjCGWzibsL5JaBnZdkvSKt+4QjGl lZUZqOeYssGIW8JdEEswaTA02TeTRWBEclucFVc6obzprtNLgfCuYBwgYNEAY8tE mg8jBuGM8OXaBPzPyZ+HMRewX1ehfGcnhLlIhrH4mwRZctsF2JXMaATMHEbJQOV0 O7IQRm9xdW/rwADasnamemt65L7noe9o09VQOL7mu/FNLvGfzOQCUcD0ilGaXrKi DrK0/VJbVNWIe+/p3Z1oyZxdlKZSfpwiDV8= -----END CERTIFICATE-----Generated at Sat Oct 11 12:34:24 2025 by rpki-client