$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/17688313-b672-388e-bef1-cd24e224ed7e.roa File: 17688313-b672-388e-bef1-cd24e224ed7e.roa (raw, json) Hash identifier: rhNm9UU0rgvJEhD5PU7warG6dKsBvsJDRv/fE7AEGu0= Subject key identifier: F3:81:19:61:DC:B5:07:A3:27:F9:11:52:A0:6F:86:15:30:17:46:DF Certificate issuer: /CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Certificate serial: 010D0C9F4328584B7DECA6600B78072A94DED280 Authority key identifier: 81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/17688313-b672-388e-bef1-cd24e224ed7e.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 21519 IP address blocks: 2607:4640::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:a6:60:0b:78:07:2a:94:de:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=028d2fd5-84f3-49a6-aec6-acd3ac8aad2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:94:67:ba:7a:ea:f1:63:fe:84:70:31:7c:b4: 16:cf:ea:4c:df:f9:70:5c:b6:5e:72:80:2e:00:7a: 5b:17:66:9f:be:2d:45:f5:25:8f:22:8e:d2:97:38: 0c:d8:7b:b0:f6:21:47:90:59:ef:89:ad:d0:ac:4d: 72:9f:4b:86:56:52:fa:ba:80:20:e3:03:be:3c:ae: 92:71:f6:d4:4c:3d:bd:f9:61:4f:23:a2:30:31:d3: 97:b0:d4:c7:ff:40:45:4e:54:01:23:e5:ef:1d:2e: e4:b7:b0:19:09:8d:63:88:4a:0e:11:aa:b5:a4:13: 25:07:ff:96:c7:fd:62:f3:50:4c:de:2a:16:40:c1: b0:0c:c1:eb:1d:2f:af:18:9b:1d:aa:d1:d9:fa:ed: 93:d8:a3:d7:3b:1f:53:30:17:e8:ec:b5:e4:6a:6d: e5:c5:0c:3e:8f:5f:75:3e:3d:09:02:dc:dd:19:c9: e3:0f:12:8d:ef:7d:cc:69:ba:dd:cf:eb:5a:2e:5b: e5:c1:fe:6a:f7:eb:cd:2b:b1:aa:53:bf:19:b8:d8: d9:7c:28:e0:8b:79:9a:97:c7:ac:bc:50:c6:98:0c: ae:c4:b4:9c:f6:80:6e:ad:7f:02:5d:cf:3a:5a:b9: 48:46:07:19:ed:b5:e8:77:d9:26:4b:8b:bd:8c:f9: ae:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:81:19:61:DC:B5:07:A3:27:F9:11:52:A0:6F:86:15:30:17:46:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/17688313-b672-388e-bef1-cd24e224ed7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl X509v3 Authority Key Identifier: keyid:81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer sbgp-ipAddrBlock: critical IPv6: 2607:4640::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:c4:73:aa:8b:e6:49:e2:32:83:d5:7f:19:e6:ac:e9:8b:e4: d3:dd:31:ee:61:01:dd:0b:17:ec:96:ae:b3:e7:10:0e:5e:bb: 64:65:a4:49:78:34:5a:49:44:7c:76:16:5f:e6:74:a1:de:9f: ca:c4:0e:03:b9:85:5e:3f:42:4b:23:d0:b1:53:4e:4b:39:3d: 69:9d:5a:b9:2a:6f:b8:87:30:ef:60:79:c6:60:83:ee:9a:22: 1f:aa:82:f4:07:1f:be:66:e8:1a:75:45:85:7d:5b:f1:f3:66: 8b:9d:f2:65:a3:9e:37:31:95:f4:fb:2f:fb:3c:0b:4e:06:32: 8f:76:b8:e7:36:6e:04:65:46:04:eb:5e:d9:dc:8e:36:07:bd: eb:30:d0:f3:79:ac:97:fd:1e:6e:c4:f4:79:b8:4c:a1:5e:b9: d6:e4:ac:d7:77:ef:5c:03:24:d9:00:42:6f:26:14:4c:42:9b: 28:ca:ae:65:ef:fc:5e:c2:bc:3e:99:8c:2c:3a:41:d5:9c:bc: d6:d2:e7:ab:54:f4:53:d8:e6:65:1f:2b:6b:ad:d7:8c:bc:81: 8f:23:9e:77:c6:0f:00:16:cb:4d:a2:e5:44:e2:c3:5a:2a:45: cf:8f:8a:9e:5e:03:5f:d5:b5:48:c8:08:0a:e2:fc:fa:73:27: cd:23:a3:fe -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt97KZgC3gHKpTe0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2UxY2E1YTItNjg0NC00NWYzLWIwMWEtY2ZjODg1Mzdk NmEzMB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk MDI4ZDJmZDUtODRmMy00OWE2LWFlYzYtYWNkM2FjOGFhZDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJRnunrq8WP+hHAxfLQWz+pM3/lwXLZecoAu AHpbF2afvi1F9SWPIo7SlzgM2Huw9iFHkFnvia3QrE1yn0uGVlL6uoAg4wO+PK6S cfbUTD29+WFPI6IwMdOXsNTH/0BFTlQBI+XvHS7kt7AZCY1jiEoOEaq1pBMlB/+W x/1i81BM3ioWQMGwDMHrHS+vGJsdqtHZ+u2T2KPXOx9TMBfo7LXkam3lxQw+j191 Pj0JAtzdGcnjDxKN733Mabrdz+taLlvlwf5q9+vNK7GqU78ZuNjZfCjgi3mal8es vFDGmAyuxLSc9oBurX8CXc86WrlIRgcZ7bXod9kmS4u9jPmuSQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPOBGWHctQejJ/kRUqBvhhUwF0bfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFj YTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4ODUzN2Q2YTMvMTc2ODgzMTMtYjY3Mi0z ODhlLWJlZjEtY2QyNGUyMjRlZDdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2UxY2E1YTItNjg0NC00NWYzLWIw MWEtY2ZjODg1MzdkNmEzL2NlMWNhNWEyLTY4NDQtNDVmMy1iMDFhLWNmYzg4NTM3 ZDZhMy5jcmwwHwYDVR0jBBgwFoAUgWfH6ryZ73INFItKw85aHh5MNZEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFjYTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4 ODUzN2Q2YTMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdGQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBtxHOqi+ZJ4jKD1X8Z5qzpi+TT3THuYQHdCxfslq6z5xAOXrtkZaRJ eDRaSUR8dhZf5nSh3p/KxA4DuYVeP0JLI9CxU05LOT1pnVq5Km+4hzDvYHnGYIPu miIfqoL0Bx++ZugadUWFfVvx82aLnfJlo543MZX0+y/7PAtOBjKPdrjnNm4EZUYE 617Z3I42B73rMNDzeayX/R5uxPR5uEyhXrnW5KzXd+9cAyTZAEJvJhRMQpsoyq5l 7/xewrw+mYwsOkHVnLzW0uerVPRT2OZlHytrrdeMvIGPI553xg8AFstNouVE4sNa KkXPj4qeXgNf1bVIyAgK4vz6cyfNI6P+ -----END CERTIFICATE-----Generated at Tue Oct 21 00:14:36 2025 by rpki-client