$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/877cbd6a-c79d-3376-a778-d722f52fa5e3.roa File: 877cbd6a-c79d-3376-a778-d722f52fa5e3.roa (raw, json) Hash identifier: 1RHfdN7DoLm75bd1D4YLOgxCSp4UyImTWEn1BvX4P+c= Subject key identifier: C3:B4:92:4F:2C:B7:C5:D4:10:34:98:49:F1:64:2F:77:BC:80:02:86 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A9034ADD71F75AD4987240 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/877cbd6a-c79d-3376-a778-d722f52fa5e3.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 2601:2c6:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:03:4a:dd:71:f7:5a:d4:98:72:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=4feb9e72-f729-437a-a7c8-6c6a30c5e5fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a4:55:c0:ef:d7:0c:15:eb:ca:b5:61:ad:50: 1d:17:34:8d:0c:66:d8:36:ab:53:1b:0d:92:33:4a: e1:79:da:93:da:d1:7c:2b:87:5a:74:4f:6c:80:d3: c7:c4:ff:b9:15:89:56:83:0c:f2:c9:3d:23:d2:35: ea:8f:01:81:37:ed:e0:7c:96:a7:c8:6d:8d:6c:77: b9:bc:a8:4d:bd:1a:4a:7e:6b:bb:11:f0:cd:01:95: b2:27:48:a4:86:b4:b5:12:eb:81:23:cc:85:45:26: 40:b3:64:4b:46:81:35:3a:8d:ef:8f:de:d6:ec:06: 45:a7:3a:15:3f:fb:a1:fa:49:de:88:a7:7d:56:39: 5d:8c:63:a2:bd:f1:db:5e:f5:5b:bb:ea:33:4f:54: cb:b0:dc:cb:83:e0:23:af:51:0e:98:fd:d2:c2:f4: 45:23:aa:89:21:bf:79:ac:72:df:f4:9e:d1:6f:28: b4:41:5a:0b:a6:fc:9f:aa:f6:b9:5c:e8:d7:a2:00: fa:84:21:c0:46:bf:19:45:29:09:c2:9d:4e:97:62: ee:e0:fe:9b:b7:40:63:5f:80:64:1b:74:2f:f8:96: a9:09:82:e2:7a:0e:77:ca:2e:a4:a6:e9:9d:71:72: 59:ba:3c:40:0a:50:90:0b:b7:f6:aa:cb:19:68:df: 5c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B4:92:4F:2C:B7:C5:D4:10:34:98:49:F1:64:2F:77:BC:80:02:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/877cbd6a-c79d-3376-a778-d722f52fa5e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2601:2c6:4000::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d9:44:33:12:46:91:d2:a1:85:b9:1a:9a:1a:b7:88:e4:4e:ac: 1c:cc:6c:61:85:51:ae:4d:11:30:cf:d8:de:6d:f5:1e:72:17: a0:0d:33:15:a4:7d:67:be:9c:b1:da:b7:07:4d:b7:2b:1c:90: ad:f3:3d:cc:9e:4b:aa:26:a6:63:4d:4c:b8:bd:7f:8b:19:42: 00:11:83:2f:be:be:10:42:aa:31:26:7c:eb:a7:9e:19:11:d4: 48:8a:c2:f0:65:df:93:de:65:4e:15:57:a7:28:15:d6:de:af: c1:c3:14:ec:2e:2b:ca:bb:23:54:a2:cd:9f:07:08:db:07:42: 3b:12:68:03:f4:52:66:f6:a2:3d:a1:7e:c7:03:9d:6f:e0:88: 8d:e6:a2:48:6d:0c:ae:9d:df:da:85:23:35:97:20:e1:1a:f6: 94:2e:2c:02:0b:e2:3a:9b:f9:3a:62:ab:7d:0e:05:ac:2b:38: 14:81:8d:db:9b:ef:45:4e:99:8a:1c:25:68:b3:cd:18:60:e7: 7f:84:a6:ad:69:0b:94:46:2c:a7:20:04:6e:58:9d:c7:83:16: 63:a6:ba:22:57:17:85:6a:49:b7:31:fb:9b:87:71:86:04:df: b5:e8:43:f0:85:bc:40:ae:5a:41:71:f9:89:67:2b:76:c6:09: d5:e7:10:49 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuVqQNK3XH3WtSYckAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NGZlYjllNzItZjcyOS00MzdhLWE3YzgtNmM2YTMwYzVlNWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqRVwO/XDBXryrVhrVAdFzSNDGbYNqtTGw2S M0rhedqT2tF8K4dadE9sgNPHxP+5FYlWgwzyyT0j0jXqjwGBN+3gfJanyG2NbHe5 vKhNvRpKfmu7EfDNAZWyJ0ikhrS1EuuBI8yFRSZAs2RLRoE1Oo3vj97W7AZFpzoV P/uh+kneiKd9VjldjGOivfHbXvVbu+ozT1TLsNzLg+Ajr1EOmP3SwvRFI6qJIb95 rHLf9J7Rbyi0QVoLpvyfqva5XOjXogD6hCHARr8ZRSkJwp1Ol2Lu4P6bt0BjX4Bk G3Qv+JapCYLieg53yi6kpumdcXJZujxAClCQC7f2qssZaN9cKwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMO0kk8st8XUEDSYSfFkL3e8gAKGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODc3Y2JkNmEtYzc5ZC0z Mzc2LWE3NzgtZDcyMmY1MmZhNWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgECxkAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEA2UQzEkaR0qGFuRqaGreI5E6sHMxsYYVRrk0RMM/Y3m31HnIXoA0z FaR9Z76csdq3B023KxyQrfM9zJ5LqiamY01MuL1/ixlCABGDL76+EEKqMSZ866ee GRHUSIrC8GXfk95lThVXpygV1t6vwcMU7C4ryrsjVKLNnwcI2wdCOxJoA/RSZvai PaF+xwOdb+CIjeaiSG0Mrp3f2oUjNZcg4Rr2lC4sAgviOpv5OmKrfQ4FrCs4FIGN 25vvRU6ZihwlaLPNGGDnf4SmrWkLlEYspyAEblidx4MWY6a6IlcXhWpJtzH7m4dx hgTftehD8IW8QK5aQXH5iWcrdsYJ1ecQSQ== -----END CERTIFICATE-----Generated at Wed Oct 22 05:13:58 2025 by rpki-client