$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/d1bc157d-452c-3df9-8b8f-0af48916ab94.roa File: d1bc157d-452c-3df9-8b8f-0af48916ab94.roa (raw, json) Hash identifier: QfEq/41Gs9egjM9jo6uOWje1tZomXnr3NRy0qj3vbKs= Subject key identifier: 01:F7:E7:EC:A9:93:28:4B:CE:1D:81:A8:F1:38:6D:5E:DC:23:7C:C7 Certificate issuer: /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Certificate serial: 010D0C9F4328584B95A78D30955DAEBB11AC7040 Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/d1bc157d-452c-3df9-8b8f-0af48916ab94.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 13984 IP address blocks: 2604:2ec0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:8d:30:95:5d:ae:bb:11:ac:70:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=18471a1e-d306-4b8a-af51-35c2bbf94046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:76:31:03:4b:78:e6:a9:b7:2c:c7:d0:e8:9a: dc:f2:28:94:73:ae:b3:1c:91:5d:c4:5b:15:3a:25: 20:4d:98:6e:37:57:f1:80:89:e7:3e:17:59:42:68: a1:b6:5e:9c:37:4b:0e:e3:57:4b:ca:35:44:12:02: 49:3e:a1:2a:a9:8c:14:fd:2f:54:08:08:54:8a:0f: c3:2b:98:7b:55:02:51:e7:24:b3:bb:03:5e:04:6a: 0d:e4:d2:b9:a4:c9:5e:9f:b4:14:5d:86:a6:1f:78: 4e:9b:01:de:d4:98:af:55:7b:01:ce:91:e8:8c:92: f0:59:bd:26:21:1e:a4:52:c0:68:3d:6e:09:c2:f5: da:d0:18:ff:28:b0:38:5d:7a:20:16:87:db:be:5f: 82:ee:a8:96:a0:bf:91:ce:7d:65:88:d2:3d:af:dc: a0:1d:cf:07:51:61:79:6a:c4:c1:6f:80:7c:3c:42: b8:46:17:57:0d:a5:28:7c:05:0a:c4:11:fa:4a:6a: 29:29:9e:6a:3b:af:c3:49:fd:f5:a7:b5:c5:eb:6c: bd:5b:18:8d:db:19:fa:36:69:5f:24:fd:d7:1e:53: 04:f0:fe:32:93:37:f5:77:0e:80:c4:a2:2b:11:38: 81:98:0e:4e:69:da:f4:28:df:fb:a6:1d:82:be:bd: 75:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:F7:E7:EC:A9:93:28:4B:CE:1D:81:A8:F1:38:6D:5E:DC:23:7C:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/d1bc157d-452c-3df9-8b8f-0af48916ab94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl X509v3 Authority Key Identifier: keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer sbgp-ipAddrBlock: critical IPv6: 2604:2ec0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:73:36:22:aa:b2:bc:47:92:88:a0:8d:1f:2b:bc:11:ff:40: f7:7a:76:3a:9d:25:19:c5:7b:bd:aa:72:16:c6:de:88:4b:c2: b2:ab:34:c5:3d:36:f1:8b:3d:93:fb:6b:30:0a:a8:56:83:d1: 2f:f8:58:83:23:2b:c0:f0:18:ed:ab:56:bd:d4:5b:5d:cf:ca: 8a:36:8d:2d:1b:99:c0:21:a5:a0:90:e1:38:0a:0a:b3:0f:f3: 63:43:cd:c4:85:ff:01:24:fc:91:62:6e:6a:6a:2b:73:45:3e: fb:a4:ee:e2:53:c3:91:92:07:bb:83:ea:fd:a0:3b:49:06:6c: 25:83:cf:7e:7f:d5:d6:52:3d:3c:4b:a1:86:d8:00:71:8f:1b: 17:eb:eb:8c:5b:e1:d3:ab:78:65:e9:11:91:69:ed:b8:9c:e0: 67:b0:3b:6d:ac:ff:04:00:09:09:95:35:f9:7a:12:3d:8b:65: de:28:c9:0a:d4:7d:a9:b2:00:da:91:6f:b0:3b:c0:04:aa:c2: 4f:43:3e:cf:47:ed:6a:2d:1d:a8:a6:c9:e0:49:52:19:70:8d: ca:cb:bb:bf:8c:f1:bf:9a:e9:05:c7:59:46:bc:05:bc:fc:63: 95:ba:7f:14:54:0f:50:df:23:4f:5c:7a:1e:75:77:c6:4b:bc: d8:19:93:7f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuVp40wlV2uuxGscEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM1YWY5ZTYtNTAwOS00NGRhLWJkMTMtYWY1YzhlYjU2 NGMzMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MTg0NzFhMWUtZDMwNi00YjhhLWFmNTEtMzVjMmJiZjk0MDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63YxA0t45qm3LMfQ6Jrc8iiUc66zHJFdxFsV OiUgTZhuN1fxgInnPhdZQmihtl6cN0sO41dLyjVEEgJJPqEqqYwU/S9UCAhUig/D K5h7VQJR5ySzuwNeBGoN5NK5pMlen7QUXYamH3hOmwHe1JivVXsBzpHojJLwWb0m IR6kUsBoPW4JwvXa0Bj/KLA4XXogFofbvl+C7qiWoL+Rzn1liNI9r9ygHc8HUWF5 asTBb4B8PEK4RhdXDaUofAUKxBH6SmopKZ5qO6/DSf31p7XF62y9WxiN2xn6Nmlf JP3XHlME8P4ykzf1dw6AxKIrETiBmA5Oadr0KN/7ph2Cvr11uwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAH35+ypkyhLzh2BqPE4bV7cI3zHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVh ZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVjOGViNTY0YzMvZDFiYzE1N2QtNDUyYy0z ZGY5LThiOGYtMGFmNDg5MTZhYjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWM1YWY5ZTYtNTAwOS00NGRhLWJk MTMtYWY1YzhlYjU2NGMzLzFjNWFmOWU2LTUwMDktNDRkYS1iZDEzLWFmNWM4ZWI1 NjRjMy5jcmwwHwYDVR0jBBgwFoAUip3SRpI+SzXC0JUmHwmxRVsznagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVhZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVj OGViNTY0YzMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQuwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA2czYiqrK8R5KIoI0fK7wR/0D3enY6nSUZxXu9qnIWxt6IS8KyqzTF PTbxiz2T+2swCqhWg9Ev+FiDIyvA8Bjtq1a91Ftdz8qKNo0tG5nAIaWgkOE4Cgqz D/NjQ83Ehf8BJPyRYm5qaitzRT77pO7iU8ORkge7g+r9oDtJBmwlg89+f9XWUj08 S6GG2ABxjxsX6+uMW+HTq3hl6RGRae24nOBnsDttrP8EAAkJlTX5ehI9i2XeKMkK 1H2psgDakW+wO8AEqsJPQz7PR+1qLR2opsngSVIZcI3Ky7u/jPG/mukFx1lGvAW8 /GOVun8UVA9Q3yNPXHoedXfGS7zYGZN/ -----END CERTIFICATE-----Generated at Mon Nov 3 18:01:40 2025 by rpki-client