$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/65f885f6-a3ea-3813-a3a9-b7599adf130f.roa File: 65f885f6-a3ea-3813-a3a9-b7599adf130f.roa (raw, json) Hash identifier: 7N7iu30dx8e7FH12Qd+twXS1qH5HAmqn0ear2DDWf0w= Subject key identifier: B9:8B:99:4D:62:93:50:92:17:0A:DC:77:F5:CF:F8:68:23:B3:68:28 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B48E1C2067A831F8013EFEC40 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/65f885f6-a3ea-3813-a3a9-b7599adf130f.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 8987 IP address blocks: 2605:4300:2c1b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:c2:06:7a:83:1f:80:13:ef:ec:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=fa429259-943b-4d91-8cbd-d2e29dcf4fed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ca:e6:fd:12:7b:1e:33:aa:1e:ef:38:77:8f: da:32:2a:7a:5b:9e:7a:6b:28:ee:fe:bd:c2:0a:f9: 3a:77:68:ae:0a:42:3f:86:5a:09:3b:e9:bf:99:84: d3:b3:30:8f:6a:53:b4:63:e6:48:16:ea:9e:e1:ff: 1c:a0:69:75:b8:f3:28:7b:0d:02:2a:ba:c3:c2:c8: 8e:c5:bc:03:ef:56:ec:46:56:43:11:01:88:5d:fc: c8:ae:e2:44:f2:a3:90:69:dc:8d:73:80:63:eb:a0: 60:ff:6c:48:32:94:a9:62:05:93:85:58:7b:d0:02: ab:54:3b:e0:a7:c5:51:67:3e:b2:8c:ea:98:e7:de: f8:e7:07:59:9d:5a:36:26:02:2c:60:3f:f2:9b:c5: 33:6a:89:51:fb:55:f3:80:24:37:c3:ee:56:c1:86: 3b:d9:61:c6:f5:81:9b:42:59:22:99:d2:95:d7:49: 17:fb:7f:c6:ef:04:e6:d5:76:c5:22:f3:40:36:aa: d8:88:3c:c3:ee:f8:c8:f3:30:fa:90:5c:a2:d3:58: a5:2c:e7:54:f7:83:f3:aa:60:4e:cc:cd:4e:2e:2b: eb:ef:78:c4:98:e7:fc:a9:c7:de:19:75:d9:e7:ea: 74:9b:0f:c0:a5:70:95:24:5c:61:90:5e:13:c3:6e: 7c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:8B:99:4D:62:93:50:92:17:0A:DC:77:F5:CF:F8:68:23:B3:68:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/65f885f6-a3ea-3813-a3a9-b7599adf130f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv6: 2605:4300:2c1b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:2c:ca:d4:79:0c:de:11:9c:69:96:54:31:f0:2a:93:88:99: b0:9a:90:9c:0d:ef:53:bf:d8:6a:38:9d:6b:81:4a:24:51:13: 0e:fd:0e:63:34:7a:11:e2:33:dc:40:49:fd:c6:bd:c2:b7:7f: e6:ee:c2:ab:85:b9:39:4c:1e:2c:39:36:04:b4:3d:64:a6:0e: 60:ab:48:6b:2c:6a:5c:67:97:9f:3a:67:c0:fc:d8:36:ef:0f: 00:d2:2b:cd:f2:9e:bf:fc:d4:a9:f5:98:85:b5:6f:08:09:c1: ab:ca:63:3c:e7:95:52:04:f5:0d:3b:2f:0d:c6:9a:a5:78:83: c5:92:e7:16:87:82:63:18:37:31:52:f9:1f:0e:8d:60:77:51: 35:43:97:d5:17:46:cb:26:ba:c1:70:61:48:75:67:4d:f5:5d: 8a:70:a6:58:78:6d:67:05:68:26:25:05:97:ba:96:13:a1:4f: 1e:48:c2:5c:ae:9f:9b:53:9f:93:1c:bd:f6:05:33:24:0d:12: f2:2e:f8:e8:47:af:da:8e:1e:07:05:4b:ee:22:d8:94:e5:22: 70:2e:32:b1:a2:08:9d:bb:9e:56:89:d3:6f:25:f1:54:c6:cb: 03:97:2d:e7:18:ca:84:8a:14:a9:57:a7:23:a8:d5:6c:4d:7b: ba:23:3b:f7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4cIGeoMfgBPv7EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZmE0MjkyNTktOTQzYi00ZDkxLThjYmQtZDJlMjlkY2Y0ZmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcrm/RJ7HjOqHu84d4/aMip6W556ayju/r3C Cvk6d2iuCkI/hloJO+m/mYTTszCPalO0Y+ZIFuqe4f8coGl1uPMoew0CKrrDwsiO xbwD71bsRlZDEQGIXfzIruJE8qOQadyNc4Bj66Bg/2xIMpSpYgWThVh70AKrVDvg p8VRZz6yjOqY59745wdZnVo2JgIsYD/ym8UzaolR+1XzgCQ3w+5WwYY72WHG9YGb QlkimdKV10kX+3/G7wTm1XbFIvNANqrYiDzD7vjI8zD6kFyi01ilLOdU94PzqmBO zM1OLivr73jEmOf8qcfeGXXZ5+p0mw/ApXCVJFxhkF4Tw258hQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLmLmU1ik1CSFwrcd/XP+Ggjs2goMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNjVmODg1ZjYtYTNlYS0z ODEzLWEzYTktYjc1OTlhZGYxMzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgVDACwb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACQsytR5DN4RnGmWVDHwKpOImbCakJwN71O/2Go4nWuBSiRREw79 DmM0ehHiM9xASf3GvcK3f+buwquFuTlMHiw5NgS0PWSmDmCrSGssalxnl586Z8D8 2DbvDwDSK83ynr/81Kn1mIW1bwgJwavKYzznlVIE9Q07Lw3GmqV4g8WS5xaHgmMY NzFS+R8OjWB3UTVDl9UXRssmusFwYUh1Z031XYpwplh4bWcFaCYlBZe6lhOhTx5I wlyun5tTn5McvfYFMyQNEvIu+OhHr9qOHgcFS+4i2JTlInAuMrGiCJ27nlaJ028l 8VTGywOXLecYyoSKFKlXpyOo1WxNe7ojO/c= -----END CERTIFICATE-----Generated at Mon Oct 20 12:40:08 2025 by rpki-client