$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152/f09c3f26-10f7-3b2f-b86c-9b92161da077.roa File: f09c3f26-10f7-3b2f-b86c-9b92161da077.roa (raw, json) Hash identifier: yOcj77HrqXtcMPGhokUdwB5uR29RonN9KX5K7fTCs/M= Subject key identifier: 9D:6E:F6:31:4F:C4:35:C2:91:06:74:E9:D1:BA:0A:37:A8:B2:9D:1D Certificate issuer: /CN=12797d33-d775-45fc-9d2a-a3e7bbe51152 Certificate serial: 010D0C9F4328584B821CC54189DD74E12535C350 Authority key identifier: 9E:FA:EF:7E:45:43:9E:B6:9C:B0:84:8E:C2:07:C7:A4:26:5B:71:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152/f09c3f26-10f7-3b2f-b86c-9b92161da077.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 87 IP address blocks: 2001:18e8::/44 maxlen: 44 2001:18e8:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152/12797d33-d775-45fc-9d2a-a3e7bbe51152.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152/12797d33-d775-45fc-9d2a-a3e7bbe51152.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:c5:41:89:dd:74:e1:25:35:c3:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12797d33-d775-45fc-9d2a-a3e7bbe51152 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=bb519f35-2504-4eb7-80d7-24926f3022cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ab:84:e2:3f:9c:b3:6b:97:05:0f:e8:60:65: b9:0a:32:f4:f7:3c:f2:e0:3b:a5:a0:57:11:df:bb: 59:d5:a6:dd:ae:94:e6:83:4a:fc:ec:d6:b5:76:07: c9:2d:59:b3:b0:f2:93:b9:06:63:bd:64:aa:d8:63: d4:16:64:22:60:0b:4d:88:36:05:5e:0b:ad:f3:ca: dd:e7:2b:8b:55:a5:39:09:5b:2f:b4:51:e1:d8:81: f0:9c:e7:82:fe:88:02:b0:f5:9e:f7:13:55:29:bb: 2d:9f:23:52:92:d7:f9:b6:5e:b6:f0:3e:d4:93:dd: 8e:3d:83:86:44:70:50:5a:85:92:04:d2:d0:fd:4b: 53:98:8f:2c:80:21:ec:89:fe:5c:01:32:f8:bc:2c: 9b:2d:70:7f:ae:6d:77:6b:b1:c8:16:06:d7:f8:04: 51:91:14:aa:ac:16:45:b4:21:8d:6d:86:90:ae:ce: 99:0f:83:c1:0d:42:32:b3:0a:97:b2:7d:28:3e:7b: 69:e0:2d:a7:a3:ea:78:7f:f9:2b:4f:3d:7f:09:95: 94:53:6d:4c:ce:86:a1:2d:0b:db:40:6d:cb:b2:5f: 30:5f:9a:d4:8c:78:e9:90:20:60:99:62:50:f3:3f: 7d:cd:b1:75:6e:47:af:ae:b2:fc:19:ac:15:d0:f7: 68:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:6E:F6:31:4F:C4:35:C2:91:06:74:E9:D1:BA:0A:37:A8:B2:9D:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152/f09c3f26-10f7-3b2f-b86c-9b92161da077.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152/12797d33-d775-45fc-9d2a-a3e7bbe51152.crl X509v3 Authority Key Identifier: keyid:9E:FA:EF:7E:45:43:9E:B6:9C:B0:84:8E:C2:07:C7:A4:26:5B:71:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152.cer sbgp-ipAddrBlock: critical IPv6: 2001:18e8::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:42:5b:2e:4d:84:c5:b9:93:b8:b3:d5:a7:da:fa:b5:2e:7c: 6c:0d:44:02:1d:4f:22:cf:35:a4:97:1c:3a:c5:b6:c9:0a:f7: 2e:e6:f4:52:e8:83:e8:6e:31:64:4c:ce:37:b2:34:82:53:79: 61:36:f1:ae:a8:e6:16:b6:bf:04:e2:36:c6:0d:5b:32:3a:2e: 21:9a:f1:da:0d:39:fc:dd:c1:48:66:59:1f:f7:ee:7b:74:64: fe:4a:3b:6b:19:8d:dc:2c:d1:af:9d:ff:57:7e:fe:96:ef:6d: a8:03:d7:71:e0:df:2c:e3:65:e1:85:18:05:70:03:4c:7e:ee: cb:c8:d1:a3:e4:e2:91:90:06:b1:44:c9:9a:53:85:5e:fa:4c: 88:9a:9d:a5:b2:c5:c5:cc:9e:c5:bb:69:b5:81:f4:8e:32:8f: 23:7f:50:2f:e9:27:f1:b9:0e:c8:c7:fd:56:d9:b0:51:52:53: 13:04:8a:3b:49:65:34:fc:b0:64:de:5d:83:2b:bc:99:9f:b0: 07:33:06:63:7b:26:15:5d:55:ef:a1:7a:22:ed:51:57:31:15: e1:1f:68:73:12:39:01:65:00:a2:23:de:71:cd:7d:5f:96:89: 2b:5e:6d:3b:f3:f2:a5:aa:09:3f:42:b4:ec:3a:6f:cf:ce:c2: b8:11:76:d7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuCHMVBid104SU1w1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI3OTdkMzMtZDc3NS00NWZjLTlkMmEtYTNlN2JiZTUx MTUyMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk YmI1MTlmMzUtMjUwNC00ZWI3LTgwZDctMjQ5MjZmMzAyMmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhauE4j+cs2uXBQ/oYGW5CjL09zzy4DuloFcR 37tZ1abdrpTmg0r87Na1dgfJLVmzsPKTuQZjvWSq2GPUFmQiYAtNiDYFXgut88rd 5yuLVaU5CVsvtFHh2IHwnOeC/ogCsPWe9xNVKbstnyNSktf5tl628D7Uk92OPYOG RHBQWoWSBNLQ/UtTmI8sgCHsif5cATL4vCybLXB/rm13a7HIFgbX+ARRkRSqrBZF tCGNbYaQrs6ZD4PBDUIyswqXsn0oPntp4C2no+p4f/krTz1/CZWUU21MzoahLQvb QG3Lsl8wX5rUjHjpkCBgmWJQ8z99zbF1bkevrrL8GawV0PdobQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ1u9jFPxDXCkQZ06dG6Cjeosp0dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMjc5 N2QzMy1kNzc1LTQ1ZmMtOWQyYS1hM2U3YmJlNTExNTIvZjA5YzNmMjYtMTBmNy0z YjJmLWI4NmMtOWI5MjE2MWRhMDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTI3OTdkMzMtZDc3NS00NWZjLTlk MmEtYTNlN2JiZTUxMTUyLzEyNzk3ZDMzLWQ3NzUtNDVmYy05ZDJhLWEzZTdiYmU1 MTE1Mi5jcmwwHwYDVR0jBBgwFoAUnvrvfkVDnracsISOwgfHpCZbcYEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMjc5N2QzMy1kNzc1LTQ1ZmMtOWQyYS1hM2U3 YmJlNTExNTIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAEY6AAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ9CWy5NhMW5k7iz1afa+rUufGwNRAIdTyLPNaSXHDrFtskK9y7m 9FLog+huMWRMzjeyNIJTeWE28a6o5ha2vwTiNsYNWzI6LiGa8doNOfzdwUhmWR/3 7nt0ZP5KO2sZjdws0a+d/1d+/pbvbagD13Hg3yzjZeGFGAVwA0x+7svI0aPk4pGQ BrFEyZpThV76TIianaWyxcXMnsW7abWB9I4yjyN/UC/pJ/G5DsjH/VbZsFFSUxME ijtJZTT8sGTeXYMrvJmfsAczBmN7JhVdVe+heiLtUVcxFeEfaHMSOQFlAKIj3nHN fV+WiStebTvz8qWqCT9CtOw6b8/OwrgRdtc= -----END CERTIFICATE-----Generated at Tue Oct 21 00:01:27 2025 by rpki-client