$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/7711e710-d931-3d65-aa3c-e7e676c7e85e.roa File: 7711e710-d931-3d65-aa3c-e7e676c7e85e.roa (raw, json) Hash identifier: wxhxeV012AS71SkA5j36c3o3l7i/DLa9Cv6hfWypy4I= Subject key identifier: FE:D2:F0:55:A6:18:B5:6B:13:EC:25:8D:52:BF:03:38:49:C7:0C:2F Certificate issuer: /CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea Certificate serial: 010D0C9F4328584B40819D6ED7FA60410827AC00 Authority key identifier: 04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/7711e710-d931-3d65-aa3c-e7e676c7e85e.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 395403 IP address blocks: 2620:4d:400e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:9d:6e:d7:fa:60:41:08:27:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=b05e1802-b114-41df-8af8-479e299322ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2f:a9:db:1a:34:c5:ed:8f:1a:25:20:24:b5: 3b:31:66:97:67:00:1b:a6:e2:8e:d9:c6:17:dd:af: cb:08:03:80:ab:f3:c0:4c:e2:68:16:d8:a4:ef:18: 12:e9:05:ce:36:7d:49:61:6c:eb:a9:07:9a:b0:cf: 1f:6c:5d:ed:1a:96:47:f1:87:e8:82:5c:e3:10:b9: d5:02:3d:fd:e5:b5:ac:79:93:23:bb:31:30:ad:2f: ca:a3:11:ff:bf:9d:fa:dd:42:c6:60:85:2d:e4:fb: 70:66:5f:40:94:3e:4f:e9:ff:e4:af:c0:f9:d1:6a: 26:b6:ac:d3:02:24:50:d2:e6:a4:fd:82:01:01:25: 53:b6:e3:0f:e5:a0:fd:4d:d0:9d:49:b6:fc:46:98: 18:f4:c2:20:57:d5:ae:20:22:22:e7:aa:d0:48:89: 99:7d:17:98:4a:b2:16:32:71:b7:a7:f1:b5:6f:62: 72:eb:1f:99:94:8b:19:5e:6a:64:93:8a:d9:dd:55: d4:8c:16:b8:a9:24:0a:53:de:22:b4:74:cc:ba:34: 08:44:cd:9a:ff:bb:71:f9:3c:a3:e0:8a:8a:8d:2a: ef:1a:d4:e2:7d:1c:46:75:1b:43:e1:ce:2f:21:dc: 71:a6:54:e7:55:6b:e8:e8:3b:d3:49:95:52:b2:db: c6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:D2:F0:55:A6:18:B5:6B:13:EC:25:8D:52:BF:03:38:49:C7:0C:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/7711e710-d931-3d65-aa3c-e7e676c7e85e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl X509v3 Authority Key Identifier: keyid:04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer sbgp-ipAddrBlock: critical IPv6: 2620:4d:400e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:79:8a:59:d5:23:90:f0:58:22:10:2c:80:e8:0e:94:c9:f7: 36:de:6a:1b:75:60:00:4c:3e:95:f8:71:e4:77:e3:66:0b:cf: 01:6c:f2:da:33:59:a9:61:92:47:80:78:4e:98:2c:33:6b:79: 7a:86:45:44:39:cc:ed:4a:48:ac:53:52:fc:c5:6d:47:55:10: e5:a6:96:5e:1d:92:fe:cd:63:ff:75:9f:32:24:0f:80:64:52: cc:9d:d7:35:b4:eb:5c:ae:82:42:97:83:9c:5d:d1:57:c1:8c: a0:5d:6c:03:fb:2d:4f:e4:12:76:48:87:12:c1:cc:7b:d7:ba: d9:8d:2c:de:c6:71:ca:24:c6:3c:7c:79:7f:c8:4b:56:65:ec: f9:d4:95:72:ad:4e:d0:56:b2:3e:86:80:e1:f2:c1:97:48:07: f5:cd:01:1e:9b:84:c9:90:cb:b0:87:8b:29:d9:e1:c4:6a:96: dc:83:d9:1d:de:d9:32:1f:cb:7a:d2:4f:fd:e3:d3:37:82:51: fc:0d:72:e3:30:a0:6a:f6:09:ac:b2:32:a8:f0:69:32:e1:d1: e8:b6:1b:5f:7a:2a:99:05:29:c5:2d:82:07:48:b5:29:92:ef: 1b:f7:0a:f3:b5:44:ed:48:35:55:22:3f:7f:dc:b8:ed:c5:58: 31:10:0e:fa -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtAgZ1u1/pgQQgnrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEwYjU0ZDQtOTIxYS00MDVhLThjN2EtNmFhMWRjYjI2 M2VhMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk YjA1ZTE4MDItYjExNC00MWRmLThhZjgtNDc5ZTI5OTMyMmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnC+p2xo0xe2PGiUgJLU7MWaXZwAbpuKO2cYX 3a/LCAOAq/PATOJoFtik7xgS6QXONn1JYWzrqQeasM8fbF3tGpZH8YfoglzjELnV Aj395bWseZMjuzEwrS/KoxH/v5363ULGYIUt5PtwZl9AlD5P6f/kr8D50WomtqzT AiRQ0uak/YIBASVTtuMP5aD9TdCdSbb8RpgY9MIgV9WuICIi56rQSImZfReYSrIW MnG3p/G1b2Jy6x+ZlIsZXmpkk4rZ3VXUjBa4qSQKU94itHTMujQIRM2a/7tx+Tyj 4IqKjSrvGtTifRxGdRtD4c4vIdxxplTnVWvo6DvTSZVSstvGBwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP7S8FWmGLVrE+wljVK/AzhJxwwvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYTBi NTRkNC05MjFhLTQwNWEtOGM3YS02YWExZGNiMjYzZWEvNzcxMWU3MTAtZDkzMS0z ZDY1LWFhM2MtZTdlNjc2YzdlODVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGEwYjU0ZDQtOTIxYS00MDVhLThj N2EtNmFhMWRjYjI2M2VhL2RhMGI1NGQ0LTkyMWEtNDA1YS04YzdhLTZhYTFkY2Iy NjNlYS5jcmwwHwYDVR0jBBgwFoAUBL87a95hwed1KW8LcOgjFNgbvA4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYTBiNTRkNC05MjFhLTQwNWEtOGM3YS02YWEx ZGNiMjYzZWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAATUAO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKx5ilnVI5DwWCIQLIDoDpTJ9zbeaht1YABMPpX4ceR342YLzwFs 8tozWalhkkeAeE6YLDNreXqGRUQ5zO1KSKxTUvzFbUdVEOWmll4dkv7NY/91nzIk D4BkUsyd1zW061yugkKXg5xd0VfBjKBdbAP7LU/kEnZIhxLBzHvXutmNLN7Gccok xjx8eX/IS1Zl7PnUlXKtTtBWsj6GgOHywZdIB/XNAR6bhMmQy7CHiynZ4cRqltyD 2R3e2TIfy3rST/3j0zeCUfwNcuMwoGr2CayyMqjwaTLh0ei2G196KpkFKcUtggdI tSmS7xv3CvO1RO1INVUiP3/cuO3FWDEQDvo= -----END CERTIFICATE-----Generated at Mon Nov 3 04:26:16 2025 by rpki-client