$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/2d066b72-4060-30eb-b5ac-a6583c7d483d.roa File: 2d066b72-4060-30eb-b5ac-a6583c7d483d.roa (raw, json) Hash identifier: 1dl+qWG9+AWMX7gbut3ovzMxNkOFTiMgm6MlmAGMnJ4= Subject key identifier: 09:EB:83:62:A5:9C:07:B5:FB:F3:EE:CC:E8:4C:71:24:DD:B6:4A:98 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F4328584B5571DA93D3100F94188FD300 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/2d066b72-4060-30eb-b5ac-a6583c7d483d.roa Signing time: Sat 27 Sep 2025 13:00:41 +0000 ROA not before: Sat 27 Sep 2025 13:00:41 +0000 ROA not after: Fri 26 Dec 2025 14:00:41 +0000 asID: 11055 IP address blocks: 2604:7a00:ffc0::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:55:71:da:93:d3:10:0f:94:18:8f:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Sep 27 13:00:41 2025 GMT Not After : Dec 26 14:00:41 2025 GMT Subject: CN=309e54e1-866e-4140-879f-6b162685b3fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:29:b7:f5:da:b7:a6:5c:0d:d5:ac:5b:30:3f: ec:0b:4c:1d:9f:d8:9e:d7:d3:05:64:3e:b7:30:dc: bf:9f:85:c9:93:16:c8:84:99:36:44:19:2f:ba:14: 71:26:02:f1:bd:37:34:2d:e2:97:bf:6b:e7:d3:be: 1b:e4:84:52:77:39:05:fd:6b:dd:94:e8:f6:4a:89: 56:3e:c1:bb:99:8b:70:3f:ea:4c:d3:1f:47:b7:1b: d2:ba:13:b2:54:63:29:81:a4:0a:30:f7:86:32:b6: 50:f7:bd:e4:5e:cb:53:6e:5c:52:2c:8f:60:e0:10: 88:c1:50:df:1f:81:7d:89:c1:a5:74:21:b2:ec:d0: 1e:c7:cb:9c:47:7c:12:4e:ff:95:ab:c5:1e:dd:4e: a5:fb:b2:da:8c:0d:25:2a:41:d9:eb:15:2d:39:4d: ff:7a:27:84:14:f9:79:86:a9:f7:c0:9a:17:c0:2e: 2b:d8:fd:42:4d:9c:90:71:1d:dd:16:bd:0a:6f:79: 8e:48:91:f1:1b:fe:32:df:aa:11:02:58:82:b7:35: 56:2a:2a:65:23:85:3d:ef:02:5b:2a:1c:23:26:10: 22:dc:a6:dc:cb:c2:e9:c8:b8:9d:d7:e4:57:ee:ba: 77:ad:01:7a:14:41:8c:38:33:31:35:fb:db:4b:c9: af:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:EB:83:62:A5:9C:07:B5:FB:F3:EE:CC:E8:4C:71:24:DD:B6:4A:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/2d066b72-4060-30eb-b5ac-a6583c7d483d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv6: 2604:7a00:ffc0::/43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:55:9f:35:2c:37:76:f6:a1:9b:40:31:a8:8d:ad:73:fa:19: 37:cf:2d:9e:a4:11:b7:cd:62:33:27:f1:46:89:41:42:5e:cc: 04:8d:38:a8:c2:4b:2e:57:81:43:58:26:eb:52:07:30:7a:2b: d1:0c:1b:68:d5:13:91:8f:ef:d2:96:e6:c6:ca:24:3e:07:9e: 98:8b:14:3f:76:c5:89:15:83:dc:66:21:92:07:18:71:89:70: e1:58:45:96:32:94:39:c1:23:f1:59:d0:6f:13:43:2d:6a:f4: 68:be:3a:03:fe:c1:c8:15:31:db:f0:e0:ea:a6:7a:dd:a7:ef: 28:a6:62:81:6b:56:1c:77:a7:20:95:25:d6:15:a9:21:89:af: 51:23:cb:50:99:b7:8d:a0:8c:ee:f1:89:73:22:fd:3a:8c:33: ec:09:3f:c2:5e:f2:6b:db:02:88:02:5f:4e:60:06:8e:60:ec: bc:16:32:14:60:6d:08:fb:14:84:d4:1d:2d:45:30:1f:fb:25: b1:15:46:c9:cb:10:35:c0:6a:e5:71:0c:3a:a2:ef:c4:bd:ef: c1:bb:09:25:14:05:b4:75:80:22:7c:9b:2c:f0:24:bb:fc:6b: 26:6f:a0:79:5e:b4:84:70:56:a3:22:75:c6:c9:df:12:28:7a: c5:31:6e:c3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtVcdqT0xAPlBiP0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI1MDkyNzEzMDA0MVoXDTI1MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk MzA5ZTU0ZTEtODY2ZS00MTQwLTg3OWYtNmIxNjI2ODViM2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnym39dq3plwN1axbMD/sC0wdn9ie19MFZD63 MNy/n4XJkxbIhJk2RBkvuhRxJgLxvTc0LeKXv2vn074b5IRSdzkF/WvdlOj2SolW PsG7mYtwP+pM0x9HtxvSuhOyVGMpgaQKMPeGMrZQ973kXstTblxSLI9g4BCIwVDf H4F9icGldCGy7NAex8ucR3wSTv+Vq8Ue3U6l+7LajA0lKkHZ6xUtOU3/eieEFPl5 hqn3wJoXwC4r2P1CTZyQcR3dFr0Kb3mOSJHxG/4y36oRAliCtzVWKiplI4U97wJb KhwjJhAi3Kbcy8LpyLid1+RX7rp3rQF6FEGMODMxNfvbS8mv4QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAnrg2KlnAe1+/PuzOhMcSTdtkqYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvMmQwNjZiNzItNDA2MC0z MGViLWI1YWMtYTY1ODNjN2Q0ODNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcFJgR6AP/A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFBVnzUsN3b2oZtAMaiNrXP6GTfPLZ6kEbfNYjMn8UaJQUJezASN OKjCSy5XgUNYJutSBzB6K9EMG2jVE5GP79KW5sbKJD4HnpiLFD92xYkVg9xmIZIH GHGJcOFYRZYylDnBI/FZ0G8TQy1q9Gi+OgP+wcgVMdvw4Oqmet2n7yimYoFrVhx3 pyCVJdYVqSGJr1Ejy1CZt42gjO7xiXMi/TqMM+wJP8Je8mvbAogCX05gBo5g7LwW MhRgbQj7FITUHS1FMB/7JbEVRsnLEDXAauVxDDqi78S978G7CSUUBbR1gCJ8myzw JLv8ayZvoHletIRwVqMidcbJ3xIoesUxbsM= -----END CERTIFICATE-----Generated at Mon Oct 20 10:44:04 2025 by rpki-client