$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/a1fe6b98-8ca8-3bd4-b108-6345c52cff1e.roa File: a1fe6b98-8ca8-3bd4-b108-6345c52cff1e.roa (raw, json) Hash identifier: KvOFKgH8rdYkelFqc1dPUasJferEwzUjBSrKbVQ2pMk= Subject key identifier: 60:C9:C8:5D:A5:30:4E:B4:B5:0B:F3:AC:78:E3:47:9A:C5:5C:89:61 Certificate issuer: /CN=511ed25c-3ac7-4d86-9290-879e3813322e Certificate serial: 010D0C9F4328584B8EACE9E30CD86A64D99DDA80 Authority key identifier: BE:D7:8A:60:72:85:70:10:7B:28:43:F1:2E:E5:D4:DC:6F:C7:5B:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/a1fe6b98-8ca8-3bd4-b108-6345c52cff1e.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 13325 IP address blocks: 2620:167::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/511ed25c-3ac7-4d86-9290-879e3813322e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/511ed25c-3ac7-4d86-9290-879e3813322e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:e9:e3:0c:d8:6a:64:d9:9d:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=511ed25c-3ac7-4d86-9290-879e3813322e Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=b022f39f-057d-4d08-a226-edef20ee472b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f0:79:1d:76:ab:6e:87:28:0d:04:2c:02:6f: 03:74:30:6a:4a:11:b7:5e:12:63:a2:7e:fd:61:db: 61:c7:a8:0e:48:64:d2:0a:46:52:e8:f4:be:48:3b: 78:7c:f2:a4:ec:0d:fb:58:58:00:72:4a:2e:5c:0a: 08:6b:2c:59:39:3a:da:0c:bb:24:62:82:7d:62:19: 9b:d7:9c:35:f2:df:f9:bf:65:b5:76:1a:1f:da:9d: 82:d0:08:78:d4:60:80:97:de:48:d4:3c:2c:a8:19: cc:a9:12:f9:6e:8d:65:72:25:f9:7c:2d:05:05:1b: ad:fa:e7:ae:22:10:36:17:0e:d4:15:f1:e5:a2:bb: ea:7d:6a:d3:c6:32:e8:40:71:fb:4c:04:9d:23:84: 32:9a:b4:0f:f2:fc:7c:c2:53:46:29:27:4b:bf:76: cf:6e:af:93:9c:dc:ab:58:03:4a:09:91:43:27:66: ac:83:72:3d:fc:7b:c1:5a:bd:30:db:5c:28:ed:15: 56:1d:08:50:e7:14:98:cc:72:04:33:57:6d:29:5b: 43:5a:26:a9:d8:a2:33:80:e5:d5:a9:e4:ce:f3:f1: 23:57:ca:b7:ad:cf:e4:33:9a:78:ea:5e:1e:a2:93: 31:ff:29:73:97:d0:08:70:be:6b:b5:2f:82:a4:d0: 90:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C9:C8:5D:A5:30:4E:B4:B5:0B:F3:AC:78:E3:47:9A:C5:5C:89:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/a1fe6b98-8ca8-3bd4-b108-6345c52cff1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/511ed25c-3ac7-4d86-9290-879e3813322e.crl X509v3 Authority Key Identifier: keyid:BE:D7:8A:60:72:85:70:10:7B:28:43:F1:2E:E5:D4:DC:6F:C7:5B:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e.cer sbgp-ipAddrBlock: critical IPv6: 2620:167::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:76:86:76:ab:0b:92:0c:af:86:03:64:90:0f:8b:76:ae:d5: b9:bd:34:5a:00:42:ad:74:3d:f6:4f:fa:24:21:83:61:43:7c: de:2f:6f:cc:6a:f5:1b:18:f4:7a:75:c4:ed:22:be:4f:e7:e5: 8f:a9:5d:0b:af:57:6d:d7:06:b0:e5:0e:9a:d4:42:d1:05:4e: 55:df:30:41:15:8b:36:e9:9c:5b:81:4d:aa:f3:f8:a0:12:41: e4:4a:5f:29:25:ca:7a:61:66:69:4b:8b:3f:7b:cb:a5:13:2c: 90:80:60:2f:50:e1:87:46:9d:c7:8d:72:11:a2:e3:63:90:21: d1:39:b0:94:03:6c:9e:16:dc:9d:50:eb:0d:46:ee:bd:1e:6b: b7:24:81:f1:e7:3b:59:f4:53:88:52:20:01:ac:9c:38:e5:7a: d8:b0:fd:05:62:91:35:7f:41:01:56:23:9e:ff:e6:b6:f7:93: a4:79:cc:de:4e:12:7c:13:7c:f3:f2:f3:f5:2b:af:ec:97:c4: 9e:78:c1:9b:84:25:c8:14:49:ee:0c:2d:37:cb:b5:a0:d9:58: 56:59:92:01:28:93:25:7c:fe:ed:b3:0b:9a:c2:eb:a3:87:c4: a2:0f:00:2f:b0:04:26:80:01:1b:58:45:4b:2d:17:40:59:67: bb:c2:4b:7b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuOrOnjDNhqZNmd2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTExZWQyNWMtM2FjNy00ZDg2LTkyOTAtODc5ZTM4MTMz MjJlMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk YjAyMmYzOWYtMDU3ZC00ZDA4LWEyMjYtZWRlZjIwZWU0NzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfB5HXarbocoDQQsAm8DdDBqShG3XhJjon79 Ydthx6gOSGTSCkZS6PS+SDt4fPKk7A37WFgAckouXAoIayxZOTraDLskYoJ9Yhmb 15w18t/5v2W1dhof2p2C0Ah41GCAl95I1DwsqBnMqRL5bo1lciX5fC0FBRut+ueu IhA2Fw7UFfHlorvqfWrTxjLoQHH7TASdI4QymrQP8vx8wlNGKSdLv3bPbq+TnNyr WANKCZFDJ2asg3I9/HvBWr0w21wo7RVWHQhQ5xSYzHIEM1dtKVtDWiap2KIzgOXV qeTO8/EjV8q3rc/kM5p46l4eopMx/ylzl9AIcL5rtS+CpNCQXQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGDJyF2lME60tQvzrHjjR5rFXIlhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MTFl ZDI1Yy0zYWM3LTRkODYtOTI5MC04NzllMzgxMzMyMmUvYTFmZTZiOTgtOGNhOC0z YmQ0LWIxMDgtNjM0NWM1MmNmZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTExZWQyNWMtM2FjNy00ZDg2LTky OTAtODc5ZTM4MTMzMjJlLzUxMWVkMjVjLTNhYzctNGQ4Ni05MjkwLTg3OWUzODEz MzIyZS5jcmwwHwYDVR0jBBgwFoAUvteKYHKFcBB7KEPxLuXU3G/HWy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MTFlZDI1Yy0zYWM3LTRkODYtOTI5MC04Nzll MzgxMzMyMmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJiABZwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAWXaGdqsLkgyvhgNkkA+Ldq7Vub00WgBCrXQ99k/6JCGDYUN83i9v zGr1Gxj0enXE7SK+T+flj6ldC69XbdcGsOUOmtRC0QVOVd8wQRWLNumcW4FNqvP4 oBJB5EpfKSXKemFmaUuLP3vLpRMskIBgL1Dhh0adx41yEaLjY5Ah0TmwlANsnhbc nVDrDUbuvR5rtySB8ec7WfRTiFIgAaycOOV62LD9BWKRNX9BAVYjnv/mtveTpHnM 3k4SfBN88/Lz9Suv7JfEnnjBm4QlyBRJ7gwtN8u1oNlYVlmSASiTJXz+7bMLmsLr o4fEog8AL7AEJoABG1hFSy0XQFlnu8JLew== -----END CERTIFICATE-----Generated at Thu Oct 23 23:55:49 2025 by rpki-client