$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/9aad5e4e-dbba-3824-8f34-d21bd8ee2f01.roa File: 9aad5e4e-dbba-3824-8f34-d21bd8ee2f01.roa (raw, json) Hash identifier: 8gaAbkX0fiCv1TvOAmhSebGsvwW3GVcFQbsNoS1X3J0= Subject key identifier: A2:04:C7:F8:91:99:59:64:B7:59:22:2D:79:92:A1:F1:A5:B6:D8:DA Certificate issuer: /CN=ecbe2caf-afd0-4edf-a743-b350c23e307d Certificate serial: 010D0C9F4328584B80B75E7B1EF616FD168FB680 Authority key identifier: C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/9aad5e4e-dbba-3824-8f34-d21bd8ee2f01.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 36734 IP address blocks: 2607:5100::/28 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:5e:7b:1e:f6:16:fd:16:8f:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecbe2caf-afd0-4edf-a743-b350c23e307d Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=43df8ca0-76ff-42aa-a9ae-45beb325c502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d6:0c:e3:f2:e3:d1:e9:0c:4f:18:91:68:74: 77:e9:8b:39:ff:3a:45:df:ff:81:d3:04:28:88:c4: 72:cc:64:99:9b:bf:bc:b8:76:48:3e:53:9a:8e:a6: cb:2e:4a:4f:fd:96:56:14:63:c6:b0:0b:38:04:a0: 5e:b4:de:d9:c5:e6:4d:de:11:28:d4:b8:98:d2:71: b8:bb:e5:a7:54:98:c5:62:12:db:93:b5:8f:26:1e: 80:3b:53:bb:ea:11:96:24:e0:14:d1:55:30:15:5b: 2e:00:54:31:3c:a2:c4:53:c2:6e:f6:e8:5a:af:ce: 6f:8d:05:81:cd:c9:1b:3e:de:63:be:a3:d3:ed:43: 5f:02:3b:00:f1:66:cb:8f:98:0a:08:99:3e:d1:20: 7c:ae:aa:89:2e:7d:3b:0b:51:97:60:3b:b1:90:85: e9:43:4f:64:f1:ce:65:0a:d2:21:c8:60:1a:12:2f: 8a:bc:85:74:26:29:ac:11:2c:c4:d8:07:b6:68:cf: 8a:93:ce:0d:c4:c8:b4:80:94:50:bb:7f:32:21:55: 87:bb:76:85:7e:cc:a8:c0:63:73:fa:f5:47:d4:a3: cb:8b:02:9a:de:ac:40:34:52:ef:ee:42:38:15:3f: 15:46:b8:38:40:eb:34:16:5f:d8:08:07:1e:75:2f: 6b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:04:C7:F8:91:99:59:64:B7:59:22:2D:79:92:A1:F1:A5:B6:D8:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/9aad5e4e-dbba-3824-8f34-d21bd8ee2f01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl X509v3 Authority Key Identifier: keyid:C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer sbgp-ipAddrBlock: critical IPv6: 2607:5100::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:29:df:83:b2:97:d3:ee:d9:08:1a:fe:76:d6:b0:98:4d:50: 4e:8a:a8:d8:38:cc:e8:08:1d:fb:71:9c:b9:51:b6:2a:05:79: be:92:15:b6:76:17:f3:a4:50:ba:45:b6:61:e3:57:44:35:fb: 6c:e0:a8:e6:4f:3a:79:9e:22:e7:17:9e:8d:5f:e3:87:45:ee: a3:61:2d:27:fe:6c:ae:79:6e:24:36:1e:04:ba:78:84:07:22: 5b:d6:dd:66:36:8f:06:bb:c7:a9:ef:a9:73:a1:19:a1:40:b3: 98:65:a8:71:01:14:45:8a:d6:fb:b5:f8:35:49:d5:ec:15:f9: 12:63:1c:7c:92:b4:b0:9e:5f:35:07:66:af:5d:d8:c8:72:0c: d8:fd:94:26:7f:4a:8c:de:ee:8b:31:7c:85:55:66:8a:73:97: 6b:44:08:f5:1e:ef:6a:da:00:7c:3d:76:fe:fb:2e:05:63:8c: 76:8e:f7:65:ac:3b:a2:15:76:05:6b:b5:8c:60:13:27:9b:3f: d3:20:43:b4:57:cd:a0:8b:37:48:9b:a7:ca:1b:5d:1a:63:34: 13:62:91:91:ef:41:14:db:1f:7f:15:3e:ab:e5:47:c7:d0:13: 1e:e6:1f:be:0f:c1:48:7b:36:6a:19:ba:f3:c8:43:d6:18:62: 06:d9:18:c4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuAt157HvYW/RaPtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWNiZTJjYWYtYWZkMC00ZWRmLWE3NDMtYjM1MGMyM2Uz MDdkMB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk NDNkZjhjYTAtNzZmZi00MmFhLWE5YWUtNDViZWIzMjVjNTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9YM4/Lj0ekMTxiRaHR36Ys5/zpF3/+B0wQo iMRyzGSZm7+8uHZIPlOajqbLLkpP/ZZWFGPGsAs4BKBetN7ZxeZN3hEo1LiY0nG4 u+WnVJjFYhLbk7WPJh6AO1O76hGWJOAU0VUwFVsuAFQxPKLEU8Ju9uhar85vjQWB zckbPt5jvqPT7UNfAjsA8WbLj5gKCJk+0SB8rqqJLn07C1GXYDuxkIXpQ09k8c5l CtIhyGAaEi+KvIV0JimsESzE2Ae2aM+Kk84NxMi0gJRQu38yIVWHu3aFfsyowGNz +vVH1KPLiwKa3qxANFLv7kI4FT8VRrg4QOs0Fl/YCAcedS9rvQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKIEx/iRmVlkt1kiLXmSofGlttjaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lY2Jl MmNhZi1hZmQwLTRlZGYtYTc0My1iMzUwYzIzZTMwN2QvOWFhZDVlNGUtZGJiYS0z ODI0LThmMzQtZDIxYmQ4ZWUyZjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWNiZTJjYWYtYWZkMC00ZWRmLWE3 NDMtYjM1MGMyM2UzMDdkL2VjYmUyY2FmLWFmZDAtNGVkZi1hNzQzLWIzNTBjMjNl MzA3ZC5jcmwwHwYDVR0jBBgwFoAUwnZy+KO6PDsEP1vhWw2QXNk6WFgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lY2JlMmNhZi1hZmQwLTRlZGYtYTc0My1iMzUw YzIzZTMwN2QuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgdRADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQChKd+DspfT7tkIGv521rCYTVBOiqjYOMzoCB37cZy5UbYqBXm+khW2 dhfzpFC6RbZh41dENfts4KjmTzp5niLnF56NX+OHRe6jYS0n/myueW4kNh4EuniE ByJb1t1mNo8Gu8ep76lzoRmhQLOYZahxARRFitb7tfg1SdXsFfkSYxx8krSwnl81 B2avXdjIcgzY/ZQmf0qM3u6LMXyFVWaKc5drRAj1Hu9q2gB8PXb++y4FY4x2jvdl rDuiFXYFa7WMYBMnmz/TIEO0V82gizdIm6fKG10aYzQTYpGR70EU2x9/FT6r5UfH 0BMe5h++D8FIezZqGbrzyEPWGGIG2RjE -----END CERTIFICATE-----Generated at Mon Oct 20 18:02:24 2025 by rpki-client