$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/35851de1-13b7-359f-a342-2d9f110b28a3.roa File: 35851de1-13b7-359f-a342-2d9f110b28a3.roa (raw, json) Hash identifier: lpI19IGV5cM4a1w06DPloX8gGBwrkiv9yrQ3OpaHK34= Subject key identifier: E7:DA:35:72:36:39:C0:EC:4B:63:FF:FC:88:A4:1A:A6:AE:CC:C3:F0 Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584B6E91FF9FCC1FEA24C9188B00 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/35851de1-13b7-359f-a342-2d9f110b28a3.roa Signing time: Mon 06 Oct 2025 13:00:41 +0000 ROA not before: Mon 06 Oct 2025 13:00:41 +0000 ROA not after: Sun 04 Jan 2026 14:00:41 +0000 asID: 22652 IP address blocks: 2607:fad8:1500::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6e:91:ff:9f:cc:1f:ea:24:c9:18:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Oct 6 13:00:41 2025 GMT Not After : Jan 4 14:00:41 2026 GMT Subject: CN=06ed55da-4e24-43c0-937f-d12407f236b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b5:60:8e:f8:70:b4:d8:92:78:f2:dc:a0:83: b0:1d:15:63:b1:79:b5:9e:4d:a0:88:8d:6a:84:fc: 58:fe:2e:24:64:ba:e6:04:ab:82:df:1e:4e:d4:ee: c8:82:8b:a0:90:ff:0c:9d:88:29:6c:31:19:a7:16: 3d:78:b6:4b:fe:0e:e6:02:4e:2b:b3:1f:96:e3:13: ea:31:25:77:4c:d6:04:6a:f5:88:0e:05:a0:8c:2d: aa:a7:1b:e7:ec:be:54:10:43:38:61:8d:2c:95:1b: ef:19:e2:97:55:34:72:7b:05:58:27:e6:cf:90:43: 8f:db:a5:c4:ba:4a:6f:99:51:84:e2:e0:3b:cb:ab: ac:12:9c:50:58:83:fb:32:e7:01:ab:0d:d2:e2:ae: 58:43:f0:89:ff:40:31:8a:1c:0a:89:e6:e3:e3:56: 8b:6b:ad:c5:d1:4f:74:c9:b1:40:56:27:ec:71:a8: 98:90:f5:15:4e:17:d5:b0:8d:22:e0:1a:22:c7:84: 90:2a:2b:04:5e:eb:32:d4:c7:8e:51:24:f2:12:11: d8:b8:d1:d6:fd:3c:a2:25:10:f3:d0:04:e1:81:a5: c2:e5:d0:92:1c:ee:da:2f:4d:f5:57:1b:5c:8f:45: ef:08:3b:12:1f:56:03:b3:bc:d0:11:4c:e7:1d:e5: 11:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:DA:35:72:36:39:C0:EC:4B:63:FF:FC:88:A4:1A:A6:AE:CC:C3:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/35851de1-13b7-359f-a342-2d9f110b28a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv6: 2607:fad8:1500::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:c4:aa:6d:5f:21:11:cd:73:b3:e3:c6:f2:19:fe:83:e2:78: 5c:36:84:d1:71:57:68:7b:07:ed:f0:85:3f:1c:05:50:4e:78: 33:ee:27:6b:0b:de:40:fd:4f:9f:cb:78:b4:8f:fe:f3:45:98: 3e:c2:d3:97:4e:6c:56:4c:f3:d5:e9:37:fa:aa:ad:dd:45:27: 8d:a5:15:f8:6b:4a:15:4b:12:90:2e:1e:1f:c1:dd:0f:47:c8: eb:e0:16:00:04:d5:26:52:62:7c:e4:31:1d:60:0c:dc:7f:5d: 40:af:c4:22:af:9f:cc:b9:4e:4d:99:d1:15:61:d2:fe:8e:17: 58:ea:62:a1:2f:9e:9d:78:fa:22:ba:84:74:57:2b:79:72:fa: b6:c2:58:5c:c9:0b:68:c0:81:98:c3:bc:2d:4b:c2:04:4c:8f: 0c:de:3b:38:58:84:aa:75:32:07:6f:62:26:0d:a9:81:15:c1: 2f:25:b7:69:3a:d9:c6:15:b3:c2:d5:eb:3a:ac:fb:a1:8e:b3: 65:10:21:35:37:72:99:10:99:e0:07:33:e7:47:13:f3:44:ba: 13:61:77:b9:ec:fa:1d:7c:5c:81:6d:61:95:08:db:05:87:8d: 9b:e9:cd:1b:e7:53:f2:ae:a9:95:1f:a7:2a:b7:c1:bb:2f:fd: f0:f6:4a:56 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtukf+fzB/qJMkYiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MTAwNjEzMDA0MVoXDTI2MDEwNDE0MDA0MVowLzEtMCsGA1UEAxMk MDZlZDU1ZGEtNGUyNC00M2MwLTkzN2YtZDEyNDA3ZjIzNmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7VgjvhwtNiSePLcoIOwHRVjsXm1nk2giI1q hPxY/i4kZLrmBKuC3x5O1O7IgougkP8MnYgpbDEZpxY9eLZL/g7mAk4rsx+W4xPq MSV3TNYEavWIDgWgjC2qpxvn7L5UEEM4YY0slRvvGeKXVTRyewVYJ+bPkEOP26XE ukpvmVGE4uA7y6usEpxQWIP7MucBqw3S4q5YQ/CJ/0AxihwKiebj41aLa63F0U90 ybFAVifscaiYkPUVThfVsI0i4Boix4SQKisEXusy1MeOUSTyEhHYuNHW/TyiJRDz 0AThgaXC5dCSHO7aL031Vxtcj0XvCDsSH1YDs7zQEUznHeUR8wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFOfaNXI2OcDsS2P//IikGqauzMPwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvMzU4NTFkZTEtMTNiNy0z NTlmLWEzNDItMmQ5ZjExMGIyOGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgf62BUw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAMcSqbV8hEc1zs+PG8hn+g+J4XDaE0XFXaHsH7fCFPxwFUE54M+4n awveQP1Pn8t4tI/+80WYPsLTl05sVkzz1ek3+qqt3UUnjaUV+GtKFUsSkC4eH8Hd D0fI6+AWAATVJlJifOQxHWAM3H9dQK/EIq+fzLlOTZnRFWHS/o4XWOpioS+enXj6 IrqEdFcreXL6tsJYXMkLaMCBmMO8LUvCBEyPDN47OFiEqnUyB29iJg2pgRXBLyW3 aTrZxhWzwtXrOqz7oY6zZRAhNTdymRCZ4Acz50cT80S6E2F3uez6HXxcgW1hlQjb BYeNm+nNG+dT8q6plR+nKrfBuy/98PZKVg== -----END CERTIFICATE-----Generated at Mon Oct 20 08:46:04 2025 by rpki-client