$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/c04eae26-66e7-330c-8da9-b02ffb952def.roa File: c04eae26-66e7-330c-8da9-b02ffb952def.roa (raw, json) Hash identifier: kBIVliZGuM+6sTN0MYM/9he0tYxVMnJTkUBd43eexRo= Subject key identifier: 88:A3:31:04:0A:E6:2E:18:0A:7A:7C:99:60:18:88:08:06:C8:8A:73 Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F4328584B33F19C7E7A673F5F9DE59500 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/c04eae26-66e7-330c-8da9-b02ffb952def.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 16509 IP address blocks: 2606:dc00:ff00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:9c:7e:7a:67:3f:5f:9d:e5:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=c09d3ed9-b6a6-4a80-a11b-fa2b93e44bc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4d:38:d2:a5:0a:05:21:e5:ae:5f:8b:49:96: 63:f7:fa:3c:ad:82:18:ed:43:30:e6:e5:67:94:7e: 31:24:14:a3:7c:b1:2d:be:3c:fc:fc:d9:39:b5:53: a8:4e:aa:05:39:02:dc:34:01:4b:c5:b3:11:c6:e3: 4a:7a:dc:60:e3:20:ac:13:9f:cc:4b:17:be:d0:7d: fa:fe:98:3a:6a:d1:ef:5e:b5:75:57:77:43:7d:2f: 1b:9d:37:ce:46:83:41:8f:54:76:55:2e:16:3f:54: 08:31:7a:57:1f:05:3e:a0:e5:ca:97:83:d2:3a:e1: 7e:50:da:52:af:d9:d8:f1:35:70:76:4d:fa:0b:27: ad:74:79:a6:1e:a2:50:82:e7:b2:39:11:c0:de:8b: 9b:c2:f4:ac:54:5b:27:b1:1c:95:e5:0c:70:af:6a: ca:77:5d:6c:b5:03:c5:d1:95:88:73:a4:e6:24:2a: f7:1b:b1:dd:69:38:24:a1:52:96:e2:65:ce:c9:51: 66:c0:f8:19:bb:7a:90:ed:75:31:01:72:8c:fd:74: 5f:eb:ff:04:f4:aa:92:a8:87:7b:6b:a2:1a:4a:fe: 7e:bb:2e:71:a2:95:cb:b1:ff:2d:05:e3:4e:be:3a: c3:df:43:72:74:12:e2:7d:36:b4:b1:af:ad:32:c1: d8:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A3:31:04:0A:E6:2E:18:0A:7A:7C:99:60:18:88:08:06:C8:8A:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/c04eae26-66e7-330c-8da9-b02ffb952def.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv6: 2606:dc00:ff00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:77:79:0d:ca:e8:6e:92:86:c4:18:6f:fb:2c:b6:ab:9e:ce: 8c:32:5d:b3:b4:b3:4d:64:7d:07:bc:ad:48:55:89:5e:5c:f4: 8c:a2:09:c5:e5:45:ee:0d:85:5b:c8:76:c9:73:45:19:ae:d3: 33:fa:43:37:ed:ea:d9:73:b2:6a:4c:70:da:0c:41:f9:02:c6: bc:28:f8:7f:6b:21:f3:e6:3b:e4:5a:04:06:7e:40:6c:3b:8b: 63:a2:d6:7c:f8:f0:bc:ff:97:a5:1a:ed:d0:89:67:07:1d:74: 48:5d:86:b2:0b:e5:90:88:be:6b:82:b5:8d:a7:c1:33:2a:9e: cd:71:c0:84:e9:0c:8d:b8:4b:e3:7e:16:d3:e9:ec:35:87:f8: 9f:aa:e4:b5:ff:ea:15:ed:85:47:30:0c:dd:dd:d0:fd:a2:a0: e1:68:7e:20:8a:85:eb:3f:35:00:6c:b5:55:22:27:21:55:18: 13:8d:57:8e:c9:e8:60:21:8b:03:bc:c5:c6:0a:5c:41:73:4e: 2c:19:60:11:c6:b3:50:9c:b8:63:1d:79:96:6a:8d:72:0f:a5: 26:1e:52:df:da:1a:1d:ef:07:9f:7e:cd:cb:b2:ea:c2:68:19: 5a:f7:80:6f:47:f8:d4:a0:2a:3a:59:24:48:bb:3d:27:61:f5: 06:35:b1:07 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsz8Zx+emc/X53llQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk YzA5ZDNlZDktYjZhNi00YTgwLWExMWItZmEyYjkzZTQ0YmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAok040qUKBSHlrl+LSZZj9/o8rYIY7UMw5uVn lH4xJBSjfLEtvjz8/Nk5tVOoTqoFOQLcNAFLxbMRxuNKetxg4yCsE5/MSxe+0H36 /pg6atHvXrV1V3dDfS8bnTfORoNBj1R2VS4WP1QIMXpXHwU+oOXKl4PSOuF+UNpS r9nY8TVwdk36CyetdHmmHqJQgueyORHA3oubwvSsVFsnsRyV5Qxwr2rKd11stQPF 0ZWIc6TmJCr3G7HdaTgkoVKW4mXOyVFmwPgZu3qQ7XUxAXKM/XRf6/8E9KqSqId7 a6IaSv5+uy5xopXLsf8tBeNOvjrD30NydBLifTa0sa+tMsHYlQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIijMQQK5i4YCnp8mWAYiAgGyIpzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvYzA0ZWFlMjYtNjZlNy0z MzBjLThkYTktYjAyZmZiOTUyZGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgbcAP8A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEx3eQ3K6G6ShsQYb/sstquezowyXbO0s01kfQe8rUhViV5c9Iyi CcXlRe4NhVvIdslzRRmu0zP6Qzft6tlzsmpMcNoMQfkCxrwo+H9rIfPmO+RaBAZ+ QGw7i2Oi1nz48Lz/l6Ua7dCJZwcddEhdhrIL5ZCIvmuCtY2nwTMqns1xwITpDI24 S+N+FtPp7DWH+J+q5LX/6hXthUcwDN3d0P2ioOFofiCKhes/NQBstVUiJyFVGBON V47J6GAhiwO8xcYKXEFzTiwZYBHGs1CcuGMdeZZqjXIPpSYeUt/aGh3vB59+zcuy 6sJoGVr3gG9H+NSgKjpZJEi7PSdh9QY1sQc= -----END CERTIFICATE-----Generated at Mon Oct 20 21:18:59 2025 by rpki-client