$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/a0728ce3-2ec8-3768-b137-7f1a4ebe5801.roa File: a0728ce3-2ec8-3768-b137-7f1a4ebe5801.roa (raw, json) Hash identifier: HlB0wsEWWOF8saXvl/SVHdheGjz1kYlXwa+BqC2LZos= Subject key identifier: 88:72:98:2A:41:D0:F0:AC:9A:D1:2F:71:3F:90:90:92:0F:E9:FB:0D Certificate issuer: /CN=31a24a22-f8e2-439f-a2d5-d497538d7bcb Certificate serial: 010D0C9F4328584BA2378E7E3AC2D9093165E800 Authority key identifier: 63:62:43:EA:56:DC:90:53:8B:5E:00:F3:58:D8:DE:87:62:93:8A:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/a0728ce3-2ec8-3768-b137-7f1a4ebe5801.roa Signing time: Sat 25 Oct 2025 01:00:31 +0000 ROA not before: Sat 25 Oct 2025 01:00:31 +0000 ROA not after: Fri 23 Jan 2026 02:00:31 +0000 asID: 5400 IP address blocks: 2606:f100:e600::/39 maxlen: 39 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/31a24a22-f8e2-439f-a2d5-d497538d7bcb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/31a24a22-f8e2-439f-a2d5-d497538d7bcb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a2:37:8e:7e:3a:c2:d9:09:31:65:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31a24a22-f8e2-439f-a2d5-d497538d7bcb Validity Not Before: Oct 25 01:00:31 2025 GMT Not After : Jan 23 02:00:31 2026 GMT Subject: CN=17b21eee-f55c-46a5-860a-6d032668c631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e1:52:0f:72:30:ef:31:10:97:fe:47:2d:f0: 8c:a8:1a:f5:24:33:26:e4:ee:8d:e0:43:e5:e4:59: 41:9f:89:21:80:aa:fd:67:05:08:c3:68:db:61:8d: 64:d4:5e:dc:5f:5f:bd:8c:f2:93:9f:e2:39:13:44: 03:dd:00:63:6a:13:df:32:ab:d4:78:13:a6:4c:25: c3:e2:9f:c1:f9:76:46:cb:db:38:ca:23:19:03:bc: 14:21:88:1c:31:2e:30:9a:48:a0:dd:39:57:33:71: 75:e6:e3:f1:d5:5c:f1:34:39:3d:7f:59:47:0f:4c: ab:b6:27:c8:fa:e5:48:ad:97:72:aa:21:4b:df:9f: 3e:73:60:35:97:a4:fa:38:b5:97:8c:c3:38:f9:d0: eb:d6:00:42:c9:b4:bc:9a:f7:80:90:64:4d:2e:ea: 7f:4d:59:1b:f3:8d:bb:18:ac:0e:bc:8d:b7:64:25: d7:04:e6:94:a3:1f:1f:30:1d:da:c9:c1:31:2d:72: 0d:28:c3:c4:c9:2e:02:01:8f:72:28:d3:40:bb:09: 1f:aa:f9:8c:d4:6b:d1:4a:eb:ea:9e:49:8e:e5:43: 57:85:19:ef:42:ba:2b:cb:ca:a4:0b:53:7e:fc:a8: 8b:16:23:d0:08:92:ca:02:80:88:5c:e4:69:20:d1: 51:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:72:98:2A:41:D0:F0:AC:9A:D1:2F:71:3F:90:90:92:0F:E9:FB:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/a0728ce3-2ec8-3768-b137-7f1a4ebe5801.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/31a24a22-f8e2-439f-a2d5-d497538d7bcb.crl X509v3 Authority Key Identifier: keyid:63:62:43:EA:56:DC:90:53:8B:5E:00:F3:58:D8:DE:87:62:93:8A:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb.cer sbgp-ipAddrBlock: critical IPv6: 2606:f100:e600::/39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:90:99:54:ab:09:1b:6f:c0:e6:b9:5d:a3:20:7e:57:3c:fc: 9a:88:93:ec:cf:c4:13:99:6d:89:16:8e:a6:40:7f:b0:69:b4: d0:4d:17:46:54:b5:ff:58:42:35:52:01:a3:a0:90:e6:e6:9d: ed:10:7b:ed:7a:55:d8:65:5d:40:be:62:e2:e9:34:9c:69:c5: 10:46:dd:bb:be:5c:c5:90:4c:42:55:6c:e2:fe:c2:d8:f0:46: ce:1f:07:f2:83:16:54:9e:8c:d5:b6:69:cf:9e:13:72:39:b4: a9:f3:07:06:8e:db:2f:33:08:0f:e3:c8:56:8c:77:e3:8e:4d: 69:76:21:86:1f:e8:0c:5a:ac:1e:ec:bf:8f:80:ef:c8:6b:ca: fa:2e:1e:09:9b:c4:a9:ea:c8:92:44:4d:d2:d6:f5:49:41:08: 03:c9:26:80:b4:85:50:e1:66:e8:c1:0b:ed:a8:03:c5:f0:09: 13:81:50:ff:bc:fa:29:30:cb:22:0c:06:e4:df:d8:59:15:b9: 71:21:33:ec:43:18:d9:ba:35:bf:e2:6f:05:1b:a1:75:75:1c: db:65:35:bf:f5:0f:5f:35:c7:d0:4f:dc:1c:95:18:31:e1:28: 12:52:39:00:9d:67:ca:fd:38:37:9b:3d:b7:d8:ed:d3:54:8d: 9a:b7:2b:bd -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuiN45+OsLZCTFl6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzFhMjRhMjItZjhlMi00MzlmLWEyZDUtZDQ5NzUzOGQ3 YmNiMB4XDTI1MTAyNTAxMDAzMVoXDTI2MDEyMzAyMDAzMVowLzEtMCsGA1UEAxMk MTdiMjFlZWUtZjU1Yy00NmE1LTg2MGEtNmQwMzI2NjhjNjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuFSD3Iw7zEQl/5HLfCMqBr1JDMm5O6N4EPl 5FlBn4khgKr9ZwUIw2jbYY1k1F7cX1+9jPKTn+I5E0QD3QBjahPfMqvUeBOmTCXD 4p/B+XZGy9s4yiMZA7wUIYgcMS4wmkig3TlXM3F15uPx1VzxNDk9f1lHD0yrtifI +uVIrZdyqiFL358+c2A1l6T6OLWXjMM4+dDr1gBCybS8mveAkGRNLup/TVkb8427 GKwOvI23ZCXXBOaUox8fMB3aycExLXINKMPEyS4CAY9yKNNAuwkfqvmM1GvRSuvq nkmO5UNXhRnvQrory8qkC1N+/KiLFiPQCJLKAoCIXORpINFR6wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIhymCpB0PCsmtEvcT+QkJIP6fsNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMWEy NGEyMi1mOGUyLTQzOWYtYTJkNS1kNDk3NTM4ZDdiY2IvYTA3MjhjZTMtMmVjOC0z NzY4LWIxMzctN2YxYTRlYmU1ODAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzFhMjRhMjItZjhlMi00MzlmLWEy ZDUtZDQ5NzUzOGQ3YmNiLzMxYTI0YTIyLWY4ZTItNDM5Zi1hMmQ1LWQ0OTc1Mzhk N2JjYi5jcmwwHwYDVR0jBBgwFoAUY2JD6lbckFOLXgDzWNjeh2KTioswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMWEyNGEyMi1mOGUyLTQzOWYtYTJkNS1kNDk3 NTM4ZDdiY2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBJgbxAOYw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAy5CZVKsJG2/A5rldoyB+Vzz8moiT7M/EE5ltiRaOpkB/sGm00E0X RlS1/1hCNVIBo6CQ5uad7RB77XpV2GVdQL5i4uk0nGnFEEbdu75cxZBMQlVs4v7C 2PBGzh8H8oMWVJ6M1bZpz54Tcjm0qfMHBo7bLzMID+PIVox3445NaXYhhh/oDFqs Huy/j4DvyGvK+i4eCZvEqerIkkRN0tb1SUEIA8kmgLSFUOFm6MEL7agDxfAJE4FQ /7z6KTDLIgwG5N/YWRW5cSEz7EMY2bo1v+JvBRuhdXUc22U1v/UPXzXH0E/cHJUY MeEoElI5AJ1nyv04N5s9t9jt01SNmrcrvQ== -----END CERTIFICATE-----Generated at Mon Oct 27 04:38:43 2025 by rpki-client