$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f/330beafe-fbea-34dd-8e41-2fb4b002c95e.roa File: 330beafe-fbea-34dd-8e41-2fb4b002c95e.roa (raw, json) Hash identifier: 4eG/+FLKBBP92oP6irT6m3Kg1RrVDh2dbFz5fBK6U08= Subject key identifier: 61:00:C5:88:E8:4F:34:21:BF:D0:AC:51:05:BE:F8:4D:DD:C6:7D:01 Certificate issuer: /CN=85460c0f-52ac-44dc-a2ba-1250555dba1f Certificate serial: 010D0C9F4328584B9B3F1A4DCBA0C119B16CED80 Authority key identifier: 03:08:93:B6:D7:A7:86:C1:89:6B:77:13:2F:23:36:97:C4:6F:C9:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f/330beafe-fbea-34dd-8e41-2fb4b002c95e.roa Signing time: Wed 22 Oct 2025 13:05:08 +0000 ROA not before: Wed 22 Oct 2025 13:05:08 +0000 ROA not after: Tue 20 Jan 2026 14:05:08 +0000 asID: 62523 IP address blocks: 2605:b180::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f/85460c0f-52ac-44dc-a2ba-1250555dba1f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f/85460c0f-52ac-44dc-a2ba-1250555dba1f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3f:1a:4d:cb:a0:c1:19:b1:6c:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85460c0f-52ac-44dc-a2ba-1250555dba1f Validity Not Before: Oct 22 13:05:08 2025 GMT Not After : Jan 20 14:05:08 2026 GMT Subject: CN=e239d6f7-6526-4163-b874-318de7270acd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ad:5d:dc:d4:38:fa:42:17:cf:1d:c1:40:da: b1:8f:76:5d:5c:29:b8:0e:4c:16:7d:e3:79:32:f8: c3:b1:d0:a9:01:d9:d2:87:8b:26:2f:0c:5a:58:ef: 5c:d2:6f:39:95:16:85:8c:43:49:53:d3:60:3b:1c: 3b:36:f2:6c:e9:73:0d:1c:b0:d8:58:32:8c:57:18: 0d:f5:50:b6:27:88:07:3c:4c:59:cc:04:54:b0:63: dd:f8:25:89:22:5a:be:34:dd:55:87:45:06:d3:96: 28:33:35:8f:d3:4c:0d:90:10:c7:b6:b4:a1:a8:d2: 98:51:56:2e:ce:f2:0a:f9:76:ef:89:ca:4a:98:f8: 2d:19:d1:d7:65:64:06:4c:ba:7e:80:cf:e7:6c:c3: 55:39:b6:98:87:1a:4e:53:c1:f2:2a:39:33:18:cd: 17:88:df:c1:55:6f:84:7c:df:51:87:c4:16:b4:d1: 6c:5b:3d:f0:f7:33:29:1b:ae:0d:bf:70:8c:c1:ec: 78:e5:ad:f9:ce:5f:cd:2f:9e:1e:3d:c3:63:ef:2e: 5f:09:3b:13:b6:84:02:b5:97:91:a2:b4:60:5f:3a: 35:13:c2:1c:22:74:b7:14:55:55:3e:8f:19:fe:bc: 78:ac:f1:75:1a:fd:71:4d:81:ed:1e:0f:09:4d:59: f5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:00:C5:88:E8:4F:34:21:BF:D0:AC:51:05:BE:F8:4D:DD:C6:7D:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f/330beafe-fbea-34dd-8e41-2fb4b002c95e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f/85460c0f-52ac-44dc-a2ba-1250555dba1f.crl X509v3 Authority Key Identifier: keyid:03:08:93:B6:D7:A7:86:C1:89:6B:77:13:2F:23:36:97:C4:6F:C9:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85460c0f-52ac-44dc-a2ba-1250555dba1f.cer sbgp-ipAddrBlock: critical IPv6: 2605:b180::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:90:76:2e:b7:44:95:19:cb:e2:56:19:00:25:7e:f2:d9:10: 36:9c:ec:17:d1:2d:a9:c9:a1:0c:cb:48:af:b0:57:71:7f:26: 07:92:f8:55:ab:1d:94:ee:76:ca:4d:6d:ed:73:77:87:e5:50: 2b:f5:9e:e7:c6:cb:e3:06:a6:59:31:ee:95:b9:67:e8:ad:cf: f4:8d:fe:31:40:c4:08:fb:c5:d4:5e:f5:75:d0:bd:4c:ed:61: 43:c8:ac:90:d6:c4:72:ea:c6:b2:f8:97:30:10:cb:b4:f6:fa: f2:11:b3:fc:4a:51:31:29:c8:d6:aa:dd:02:5c:c1:46:47:5a: 29:10:cc:37:a9:28:3a:61:73:7b:ef:0e:45:15:e0:67:41:5d: 25:67:ca:0e:1c:a2:74:33:7c:bc:78:4c:86:f0:72:37:a4:45: 93:50:14:9c:80:22:53:48:9a:fd:01:d5:61:c7:21:7c:f0:18: 2c:9b:d7:12:b8:44:be:b3:fe:c2:7c:7f:f7:38:2a:16:ec:46: ba:a7:71:ea:d8:a1:93:b4:49:c2:fb:a2:93:78:56:92:22:36: a2:5c:a7:7b:2e:67:ee:e4:06:22:80:db:17:26:7f:b5:08:cc: 9c:f6:75:d4:3f:49:c2:a6:5f:6f:97:59:28:27:f3:aa:e4:d3: 10:95:24:e6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEubPxpNy6DBGbFs7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODU0NjBjMGYtNTJhYy00NGRjLWEyYmEtMTI1MDU1NWRi YTFmMB4XDTI1MTAyMjEzMDUwOFoXDTI2MDEyMDE0MDUwOFowLzEtMCsGA1UEAxMk ZTIzOWQ2ZjctNjUyNi00MTYzLWI4NzQtMzE4ZGU3MjcwYWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnK1d3NQ4+kIXzx3BQNqxj3ZdXCm4DkwWfeN5 MvjDsdCpAdnSh4smLwxaWO9c0m85lRaFjENJU9NgOxw7NvJs6XMNHLDYWDKMVxgN 9VC2J4gHPExZzARUsGPd+CWJIlq+NN1Vh0UG05YoMzWP00wNkBDHtrShqNKYUVYu zvIK+XbvicpKmPgtGdHXZWQGTLp+gM/nbMNVObaYhxpOU8HyKjkzGM0XiN/BVW+E fN9Rh8QWtNFsWz3w9zMpG64Nv3CMwex45a35zl/NL54ePcNj7y5fCTsTtoQCtZeR orRgXzo1E8IcInS3FFVVPo8Z/rx4rPF1Gv1xTYHtHg8JTVn1TQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGEAxYjoTzQhv9CsUQW++E3dxn0BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NTQ2 MGMwZi01MmFjLTQ0ZGMtYTJiYS0xMjUwNTU1ZGJhMWYvMzMwYmVhZmUtZmJlYS0z NGRkLThlNDEtMmZiNGIwMDJjOTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvODU0NjBjMGYtNTJhYy00NGRjLWEy YmEtMTI1MDU1NWRiYTFmLzg1NDYwYzBmLTUyYWMtNDRkYy1hMmJhLTEyNTA1NTVk YmExZi5jcmwwHwYDVR0jBBgwFoAUAwiTttenhsGJa3cTLyM2l8RvyQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84NTQ2MGMwZi01MmFjLTQ0ZGMtYTJiYS0xMjUw NTU1ZGJhMWYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgWxgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAbkHYut0SVGcviVhkAJX7y2RA2nOwX0S2pyaEMy0ivsFdxfyYHkvhV qx2U7nbKTW3tc3eH5VAr9Z7nxsvjBqZZMe6VuWforc/0jf4xQMQI+8XUXvV10L1M 7WFDyKyQ1sRy6say+JcwEMu09vryEbP8SlExKcjWqt0CXMFGR1opEMw3qSg6YXN7 7w5FFeBnQV0lZ8oOHKJ0M3y8eEyG8HI3pEWTUBScgCJTSJr9AdVhxyF88Bgsm9cS uES+s/7CfH/3OCoW7Ea6p3Hq2KGTtEnC+6KTeFaSIjaiXKd7Lmfu5AYigNsXJn+1 CMyc9nXUP0nCpl9vl1koJ/Oq5NMQlSTm -----END CERTIFICATE-----Generated at Wed Oct 29 05:01:11 2025 by rpki-client