$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/7be0dac1-55ee-31d6-a934-19a3cbc26463.roa File: 7be0dac1-55ee-31d6-a934-19a3cbc26463.roa (raw, json) Hash identifier: xLEknRm/TnEx6+Bc4VS1Paoxj6nunICgk/AT3VNS8c4= Subject key identifier: B7:CC:D0:38:D8:7C:EB:03:0D:98:21:19:B5:07:0D:DE:57:B8:D0:3E Certificate issuer: /CN=c88ddf4a-b762-40e0-ad58-c8b1a63f462f Certificate serial: 010D0C9F4328584B80B767B14282F30F13363100 Authority key identifier: AE:33:3D:70:D3:C7:96:31:FD:81:5B:22:8D:DC:0E:31:0C:E9:14:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/7be0dac1-55ee-31d6-a934-19a3cbc26463.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 26457 IP address blocks: 2620:135:5002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:67:b1:42:82:f3:0f:13:36:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c88ddf4a-b762-40e0-ad58-c8b1a63f462f Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=8fc44839-fa5f-4e9d-b223-2e0eeca5dfcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d8:d4:69:90:3c:72:8a:77:f4:79:b1:82:43: e9:01:29:62:65:54:b4:5b:23:8c:cc:4d:6c:0f:7e: b1:b2:01:7d:56:60:a8:25:8d:bb:9b:33:b7:99:07: f7:6a:42:67:54:e4:6e:f3:c5:4c:a8:6b:da:fe:5c: 4c:c2:ff:74:24:c6:36:12:4e:06:68:bb:13:63:0f: 01:51:1e:17:38:72:20:c3:ee:96:3d:99:bb:e4:55: ae:e9:ce:48:9c:bc:cb:f4:cb:02:65:09:d3:0b:36: 30:ed:c0:5e:92:94:44:e2:23:21:32:19:7c:26:f6: e5:7d:3b:82:85:fb:31:17:ad:5a:d7:81:b8:cc:ef: dd:91:e0:63:ff:2f:7e:3e:4d:ea:0c:c6:95:2c:ab: 2a:ca:c4:e7:00:6d:be:1d:f1:3a:57:b3:7d:3a:ee: 41:13:f0:75:50:e0:f5:44:9e:77:19:e0:a8:d6:b3: 6a:e1:80:1b:cc:ac:12:84:5a:1b:05:45:dd:48:3b: 5f:bd:19:44:95:ff:47:fb:7b:e0:fc:fb:85:bb:46: 66:5d:06:a7:75:2e:da:f6:b0:63:a9:72:a7:62:bc: 9a:d4:a7:92:0e:43:ec:88:8a:68:1d:a7:aa:fc:32: 13:dd:17:a7:4a:9b:7f:0e:53:d0:0b:4d:25:5f:77: 47:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:CC:D0:38:D8:7C:EB:03:0D:98:21:19:B5:07:0D:DE:57:B8:D0:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/7be0dac1-55ee-31d6-a934-19a3cbc26463.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.crl X509v3 Authority Key Identifier: keyid:AE:33:3D:70:D3:C7:96:31:FD:81:5B:22:8D:DC:0E:31:0C:E9:14:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.cer sbgp-ipAddrBlock: critical IPv6: 2620:135:5002::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:1b:e4:96:83:da:3c:f4:ad:b2:79:cf:00:54:f3:30:28:50: dc:93:2e:87:ba:dd:86:27:fe:35:04:e2:a3:e3:8b:c0:67:a8: 42:f1:ba:b6:48:9f:19:bc:dd:d5:d3:f4:c3:84:90:40:ce:fc: 4f:93:6a:41:5d:50:cc:c5:3f:c4:d3:47:9f:40:14:2b:03:30: a2:a3:95:40:a4:31:98:14:41:98:83:82:0f:de:aa:f0:2d:0d: 2f:fa:27:f3:44:dd:c7:99:d3:aa:97:20:9b:e4:5e:51:1d:69: 0a:ce:52:ff:e7:d7:ba:19:f6:78:2d:54:9a:20:88:c2:08:14: 7a:fb:7e:59:c3:48:32:49:4b:d4:eb:34:a8:84:b9:e1:94:a4: d7:49:fd:e7:02:5e:51:b1:8b:57:a5:89:27:20:dd:78:63:c0: 20:8a:fb:7e:96:09:c5:33:a2:d5:a1:31:b5:df:2b:4a:ca:36: d2:96:eb:cf:ed:df:f3:85:08:ab:25:8e:4d:71:47:7c:3e:e8: 37:ca:03:cc:7d:0e:fe:c3:36:ba:ef:4f:86:ad:5a:cc:d6:8e: 08:76:10:fd:f0:1c:05:fb:bc:94:4d:49:a0:39:2e:8f:d6:d6: 32:82:3b:7d:35:a1:d9:b3:df:b1:82:1b:3b:45:2a:6f:83:5c: f4:78:3b:eb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuAt2exQoLzDxM2MQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg4ZGRmNGEtYjc2Mi00MGUwLWFkNTgtYzhiMWE2M2Y0 NjJmMB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk OGZjNDQ4MzktZmE1Zi00ZTlkLWIyMjMtMmUwZWVjYTVkZmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNjUaZA8cop39HmxgkPpASliZVS0WyOMzE1s D36xsgF9VmCoJY27mzO3mQf3akJnVORu88VMqGva/lxMwv90JMY2Ek4GaLsTYw8B UR4XOHIgw+6WPZm75FWu6c5InLzL9MsCZQnTCzYw7cBekpRE4iMhMhl8JvblfTuC hfsxF61a14G4zO/dkeBj/y9+Pk3qDMaVLKsqysTnAG2+HfE6V7N9Ou5BE/B1UOD1 RJ53GeCo1rNq4YAbzKwShFobBUXdSDtfvRlElf9H+3vg/PuFu0ZmXQandS7a9rBj qXKnYrya1KeSDkPsiIpoHaeq/DIT3RenSpt/DlPQC00lX3dHCwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLfM0DjYfOsDDZghGbUHDd5XuNA+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jODhk ZGY0YS1iNzYyLTQwZTAtYWQ1OC1jOGIxYTYzZjQ2MmYvN2JlMGRhYzEtNTVlZS0z MWQ2LWE5MzQtMTlhM2NiYzI2NDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzg4ZGRmNGEtYjc2Mi00MGUwLWFk NTgtYzhiMWE2M2Y0NjJmL2M4OGRkZjRhLWI3NjItNDBlMC1hZDU4LWM4YjFhNjNm NDYyZi5jcmwwHwYDVR0jBBgwFoAUrjM9cNPHljH9gVsijdwOMQzpFOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jODhkZGY0YS1iNzYyLTQwZTAtYWQ1OC1jOGIx YTYzZjQ2MmYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABNVAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFwb5JaD2jz0rbJ5zwBU8zAoUNyTLoe63YYn/jUE4qPji8BnqELx urZInxm83dXT9MOEkEDO/E+TakFdUMzFP8TTR59AFCsDMKKjlUCkMZgUQZiDgg/e qvAtDS/6J/NE3ceZ06qXIJvkXlEdaQrOUv/n17oZ9ngtVJogiMIIFHr7flnDSDJJ S9TrNKiEueGUpNdJ/ecCXlGxi1eliScg3XhjwCCK+36WCcUzotWhMbXfK0rKNtKW 68/t3/OFCKsljk1xR3w+6DfKA8x9Dv7DNrrvT4atWszWjgh2EP3wHAX7vJRNSaA5 Lo/W1jKCO301odmz37GCGztFKm+DXPR4O+s= -----END CERTIFICATE-----Generated at Mon Oct 20 18:53:51 2025 by rpki-client