$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/825148ae-8ee9-3b53-9fda-ff6eb4912a52.roa File: 825148ae-8ee9-3b53-9fda-ff6eb4912a52.roa (raw, json) Hash identifier: 5KQGaUFM9sC5U7Ahb0h8sBsGvlhwX925oLZ1/31QfpU= Subject key identifier: B7:79:C5:A1:53:BD:21:E6:7F:68:67:FD:DC:22:13:3C:96:AD:ED:DF Certificate issuer: /CN=6acf8afa-6cb1-4c9d-84c7-5ee8845003d1 Certificate serial: 010D0C9F4328584C4CA1161006E62E7752FA6340 Authority key identifier: D8:2C:17:54:D8:10:8C:24:31:5E:DA:EA:32:BD:49:1C:54:5E:95:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/825148ae-8ee9-3b53-9fda-ff6eb4912a52.roa Signing time: Thu 25 Dec 2025 02:00:31 +0000 ROA not before: Thu 25 Dec 2025 02:00:31 +0000 ROA not after: Wed 25 Mar 2026 01:00:31 +0000 asID: 22987 IP address blocks: 2604:f6c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4c:a1:16:10:06:e6:2e:77:52:fa:63:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6acf8afa-6cb1-4c9d-84c7-5ee8845003d1 Validity Not Before: Dec 25 02:00:31 2025 GMT Not After : Mar 25 01:00:31 2026 GMT Subject: CN=2e43eb44-c298-48ba-a3e7-533f1959d717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:7f:dc:cb:b8:67:ae:7e:05:7c:60:d5:d3:48: c3:f1:a7:14:fb:ce:2d:f3:e6:f2:47:e8:93:c7:b2: a6:4d:fa:73:51:b0:36:97:de:92:94:1b:c7:c7:81: b0:92:75:d4:c0:33:bb:8b:4c:f5:67:99:9d:32:4a: e6:fe:4f:c8:25:5c:a7:0b:86:36:1e:4a:6e:3a:80: 32:45:e5:39:00:bd:34:11:b4:fb:76:9c:f4:f4:7f: 68:db:5b:af:1e:d4:c6:3b:fc:d5:ba:94:4a:e3:d6: a9:ae:40:1e:d4:68:c4:8d:34:1b:3a:a6:64:2b:db: 00:57:03:30:0b:50:22:8f:1d:91:c8:00:b5:bb:71: e3:77:6b:48:e9:9e:f3:8f:fe:91:ff:6b:3d:08:c2: da:41:7e:15:87:62:7d:c5:2d:15:03:be:06:42:cb: 9d:74:ae:65:39:ff:39:e9:fe:d9:25:b9:c6:6d:6c: 02:c3:7a:c4:db:36:46:31:36:dd:03:51:71:b2:0c: 85:d9:06:07:5d:96:00:73:eb:fd:f2:f0:11:ef:26: ad:bc:71:e7:24:1b:76:2e:a7:91:80:ed:12:cf:c8: 7e:07:9e:81:85:6a:c3:3c:7e:e3:5a:60:23:74:83: 7d:f0:26:ea:61:90:32:28:71:76:94:94:f7:e4:59: 36:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:79:C5:A1:53:BD:21:E6:7F:68:67:FD:DC:22:13:3C:96:AD:ED:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/825148ae-8ee9-3b53-9fda-ff6eb4912a52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.crl X509v3 Authority Key Identifier: keyid:D8:2C:17:54:D8:10:8C:24:31:5E:DA:EA:32:BD:49:1C:54:5E:95:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer sbgp-ipAddrBlock: critical IPv6: 2604:f6c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:6c:2c:ab:4a:69:b3:59:2a:e7:93:d7:42:98:f4:8b:91:28: 3d:b2:29:52:f9:a3:73:ad:12:66:f8:6c:59:11:9b:6f:de:0e: a0:4f:7c:7c:24:0e:0e:f4:a8:75:c5:4a:7b:bd:7a:35:49:1a: 94:1c:ec:b2:05:cf:04:57:39:76:9f:0a:57:5e:3f:c5:a7:e3: 87:2d:89:49:f4:ac:cc:58:95:f3:c6:d6:07:a5:d0:4c:e2:bb: 8a:e1:65:37:2c:0d:a1:1f:09:ac:25:0f:fa:c7:93:cb:87:d0: 1c:6a:59:a6:b9:e9:35:b5:a1:6b:5a:9c:bc:21:fb:18:d7:01: e0:df:82:f7:a0:02:52:41:0d:b2:da:f9:0f:60:30:25:d0:ba: aa:9f:be:4c:a9:23:5b:6d:d1:10:6e:eb:ed:66:63:ae:5e:76: cd:fb:1a:60:14:99:77:ba:93:e9:b9:b2:e6:40:02:0b:05:a2: 7e:b6:72:fb:0a:4f:dd:ce:23:64:06:bc:67:c4:12:7e:d0:09: 79:01:d1:53:01:5e:94:eb:e3:80:aa:db:6c:9f:4f:80:8b:14: 7b:44:9f:85:63:a1:6e:69:dc:0f:76:23:12:b2:22:cd:0a:54: a5:9c:f4:9f:89:20:25:9b:1c:2f:93:86:16:ac:ab:c5:e5:90: 5f:51:7d:39 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWExMoRYQBuYud1L6Y0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmFjZjhhZmEtNmNiMS00YzlkLTg0YzctNWVlODg0NTAw M2QxMB4XDTI1MTIyNTAyMDAzMVoXDTI2MDMyNTAxMDAzMVowLzEtMCsGA1UEAxMk MmU0M2ViNDQtYzI5OC00OGJhLWEzZTctNTMzZjE5NTlkNzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgX/cy7hnrn4FfGDV00jD8acU+84t8+byR+iT x7KmTfpzUbA2l96SlBvHx4GwknXUwDO7i0z1Z5mdMkrm/k/IJVynC4Y2HkpuOoAy ReU5AL00EbT7dpz09H9o21uvHtTGO/zVupRK49aprkAe1GjEjTQbOqZkK9sAVwMw C1Aijx2RyAC1u3Hjd2tI6Z7zj/6R/2s9CMLaQX4Vh2J9xS0VA74GQsuddK5lOf85 6f7ZJbnGbWwCw3rE2zZGMTbdA1FxsgyF2QYHXZYAc+v98vAR7yatvHHnJBt2LqeR gO0Sz8h+B56BhWrDPH7jWmAjdIN98CbqYZAyKHF2lJT35Fk2JwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLd5xaFTvSHmf2hn/dwiEzyWre3fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YWNm OGFmYS02Y2IxLTRjOWQtODRjNy01ZWU4ODQ1MDAzZDEvODI1MTQ4YWUtOGVlOS0z YjUzLTlmZGEtZmY2ZWI0OTEyYTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmFjZjhhZmEtNmNiMS00YzlkLTg0 YzctNWVlODg0NTAwM2QxLzZhY2Y4YWZhLTZjYjEtNGM5ZC04NGM3LTVlZTg4NDUw MDNkMS5jcmwwHwYDVR0jBBgwFoAU2CwXVNgQjCQxXtrqMr1JHFRelVYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YWNmOGFmYS02Y2IxLTRjOWQtODRjNy01ZWU4 ODQ1MDAzZDEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgT2wDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQALbCyrSmmzWSrnk9dCmPSLkSg9silS+aNzrRJm+GxZEZtv3g6gT3x8 JA4O9Kh1xUp7vXo1SRqUHOyyBc8EVzl2nwpXXj/Fp+OHLYlJ9KzMWJXzxtYHpdBM 4ruK4WU3LA2hHwmsJQ/6x5PLh9Acalmmuek1taFrWpy8IfsY1wHg34L3oAJSQQ2y 2vkPYDAl0Lqqn75MqSNbbdEQbuvtZmOuXnbN+xpgFJl3upPpubLmQAILBaJ+tnL7 Ck/dziNkBrxnxBJ+0Al5AdFTAV6U6+OAqttsn0+AixR7RJ+FY6FuadwPdiMSsiLN ClSlnPSfiSAlmxwvk4YWrKvF5ZBfUX05 -----END CERTIFICATE-----Generated at Thu Feb 26 21:39:13 2026 by rpki-client