$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0f4421e9-f24b-3fb4-80a3-278119725959.roa File: 0f4421e9-f24b-3fb4-80a3-278119725959.roa (raw, json) Hash identifier: H9HLtRyFWYzfGRxuyoKUJ8BJCCrkTKvRR99Grvme6qA= Subject key identifier: 95:5D:FC:5F:1C:17:20:15:2F:13:77:9B:53:94:49:F6:DF:32:F5:03 Certificate issuer: /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Certificate serial: 010D0C9F4328584B540C66AF0A841F278D6B5A80 Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0f4421e9-f24b-3fb4-80a3-278119725959.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 4213 IP address blocks: 2607:f820::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:66:af:0a:84:1f:27:8d:6b:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=2bf745ca-af00-47a7-bd19-f1aafa4d0a09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f0:7e:9b:56:77:fa:22:c3:92:2e:3d:c9:6b: 62:61:0f:1f:b5:21:75:3b:1b:ec:80:3a:cb:ac:34: 16:03:04:66:33:67:69:af:54:4d:b5:24:d0:62:aa: b7:db:2c:10:a2:ea:ef:a0:02:90:7f:7d:e7:0c:7f: 82:9d:e0:b4:58:25:ff:fc:38:d7:f7:bb:9a:15:ac: ad:b4:6a:55:6b:51:ee:3e:38:a0:86:ba:25:69:ae: b4:91:41:72:35:e2:19:49:3c:80:6b:f8:eb:fb:be: 43:eb:87:ca:9a:6b:38:49:6f:d2:6c:d8:46:25:b9: 0a:27:15:08:98:ab:95:6b:3e:da:4c:c7:3b:07:5d: 4f:91:30:f2:f5:e2:d1:ad:dc:f4:75:35:fd:f7:ad: 1c:02:a0:a5:96:38:db:de:db:1a:27:fe:1f:5e:46: 23:c1:01:9f:c7:81:c7:75:7a:59:c3:d8:6a:af:8a: 88:f0:ba:e2:2c:13:2e:16:8d:5a:e0:99:21:91:29: 98:f2:da:12:66:c2:6e:c5:31:09:bf:17:df:99:04: b4:c3:1d:eb:30:07:78:50:97:7b:4c:6e:38:47:bb: 7e:be:b1:5f:ca:ee:b5:f6:31:e6:12:70:1f:e3:15: 86:ab:c7:a2:a6:f9:17:80:72:6b:68:1e:19:ab:70: dd:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:5D:FC:5F:1C:17:20:15:2F:13:77:9B:53:94:49:F6:DF:32:F5:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0f4421e9-f24b-3fb4-80a3-278119725959.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl X509v3 Authority Key Identifier: keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer sbgp-ipAddrBlock: critical IPv6: 2607:f820::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:32:b1:4e:82:24:75:9c:14:e0:b0:e4:3b:b9:b0:2f:fe:71: ec:78:d7:01:40:88:e6:79:16:23:40:cf:a2:9f:83:3b:39:be: 02:d9:7c:12:bf:75:e7:db:58:2b:01:96:01:50:7e:28:99:28: 0b:8e:6b:97:39:2e:d7:a8:84:eb:a2:de:68:e4:b7:45:d3:19: f4:5c:3f:57:af:b9:35:cb:9c:87:70:38:f8:0c:76:a5:31:30: 04:a5:b5:91:ab:5e:d4:92:6e:57:d2:0e:6f:ee:95:8e:49:b2: d1:7d:18:fb:52:5d:35:97:68:7a:9a:ee:f5:0b:c3:8a:e7:12: 1a:d5:40:07:a8:5f:18:81:e7:a7:50:3a:a3:fc:ee:23:cf:e7: 70:82:d2:ee:90:b7:d2:05:9c:95:d3:25:c6:09:a7:ee:b2:36: 58:98:c2:af:dd:c1:a7:28:7f:6d:8e:35:96:26:90:dd:c1:af: 81:a8:61:33:12:3e:70:0d:08:53:59:f5:9d:57:b0:df:a6:ef: 5a:cd:ee:8d:e8:88:30:b7:a8:57:f1:88:32:f1:5b:29:5b:ee: dd:41:0a:d3:9f:fb:d3:82:64:cf:72:d8:49:39:f9:33:54:d4: 11:fa:1b:3f:1f:26:1d:bd:b7:70:96:31:ea:52:de:3b:e2:b3: 0e:d1:8f:ac -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtUDGavCoQfJ41rWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZTU2NTAtNTliNy00YWNiLWIwZGUtMGI0ZmJhYWYz ZWJmMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk MmJmNzQ1Y2EtYWYwMC00N2E3LWJkMTktZjFhYWZhNGQwYTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/B+m1Z3+iLDki49yWtiYQ8ftSF1OxvsgDrL rDQWAwRmM2dpr1RNtSTQYqq32ywQourvoAKQf33nDH+CneC0WCX//DjX97uaFayt tGpVa1HuPjighrolaa60kUFyNeIZSTyAa/jr+75D64fKmms4SW/SbNhGJbkKJxUI mKuVaz7aTMc7B11PkTDy9eLRrdz0dTX9960cAqClljjb3tsaJ/4fXkYjwQGfx4HH dXpZw9hqr4qI8LriLBMuFo1a4JkhkSmY8toSZsJuxTEJvxffmQS0wx3rMAd4UJd7 TG44R7t+vrFfyu619jHmEnAf4xWGq8eipvkXgHJraB4Zq3Dd0wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJVd/F8cFyAVLxN3m1OUSfbfMvUDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YzFl NTY1MC01OWI3LTRhY2ItYjBkZS0wYjRmYmFhZjNlYmYvMGY0NDIxZTktZjI0Yi0z ZmI0LTgwYTMtMjc4MTE5NzI1OTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGMxZTU2NTAtNTliNy00YWNiLWIw ZGUtMGI0ZmJhYWYzZWJmLzRjMWU1NjUwLTU5YjctNGFjYi1iMGRlLTBiNGZiYWFm M2ViZi5jcmwwHwYDVR0jBBgwFoAU2CuWzcI45A4X+nr1FMJWYJ3ScdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YzFlNTY1MC01OWI3LTRhY2ItYjBkZS0wYjRm YmFhZjNlYmYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf4IDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBfMrFOgiR1nBTgsOQ7ubAv/nHseNcBQIjmeRYjQM+in4M7Ob4C2XwS v3Xn21grAZYBUH4omSgLjmuXOS7XqITrot5o5LdF0xn0XD9Xr7k1y5yHcDj4DHal MTAEpbWRq17Ukm5X0g5v7pWOSbLRfRj7Ul01l2h6mu71C8OK5xIa1UAHqF8Ygeen UDqj/O4jz+dwgtLukLfSBZyV0yXGCafusjZYmMKv3cGnKH9tjjWWJpDdwa+BqGEz Ej5wDQhTWfWdV7Dfpu9aze6N6Igwt6hX8Ygy8VspW+7dQQrTn/vTgmTPcthJOfkz VNQR+hs/HyYdvbdwljHqUt474rMO0Y+s -----END CERTIFICATE-----Generated at Mon Oct 20 15:53:19 2025 by rpki-client