$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/7b9bac5f-93e3-333d-8586-092b0b3f647b.roa File: 7b9bac5f-93e3-333d-8586-092b0b3f647b.roa (raw, json) Hash identifier: ktxHi/c+nck7lRo9+DemfBhmDnv239G7DLq+wjCnE6o= Subject key identifier: 9F:BA:AB:4E:CE:A7:D0:6C:6E:F3:4F:B1:43:18:23:06:23:2A:8E:40 Certificate issuer: /CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6 Certificate serial: 010D0C9F4328584B7A0C5DDD9705EA1A8A19B980 Authority key identifier: BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/7b9bac5f-93e3-333d-8586-092b0b3f647b.roa Signing time: Fri 10 Oct 2025 15:41:14 +0000 ROA not before: Fri 10 Oct 2025 15:41:14 +0000 ROA not after: Thu 08 Jan 2026 16:41:14 +0000 asID: 36850 IP address blocks: 2600:2701:4000::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:0c:5d:dd:97:05:ea:1a:8a:19:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6 Validity Not Before: Oct 10 15:41:14 2025 GMT Not After : Jan 8 16:41:14 2026 GMT Subject: CN=7e16557e-0983-4082-8837-88ab6eb8d087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ce:5b:dd:5e:94:83:c7:e2:50:56:d8:a3:46: 38:6a:c1:8f:83:11:97:a7:c3:14:3f:b2:b2:17:80: 89:ea:4a:e0:4a:77:79:7d:e6:e7:e3:6d:d7:b4:96: a1:2c:73:8c:8b:51:cb:50:15:d2:9d:e0:c3:1b:42: c9:8c:31:df:51:d0:d2:37:2a:2d:db:3c:f8:a9:1d: 68:25:5d:a5:63:3f:f7:24:ec:83:00:41:7d:7f:eb: 85:64:8b:2b:19:0c:5f:3f:ba:93:fc:94:8e:71:45: 2d:7d:7e:e2:25:c2:67:13:6c:00:b3:9d:8d:f4:19: ad:80:7c:5b:91:57:db:af:43:14:f8:50:4e:d3:7b: 43:3f:4c:bc:41:91:78:42:85:b0:ae:02:bf:74:b6: 66:59:83:49:0c:1c:5e:11:3e:44:ee:ed:22:eb:27: 9d:7e:b6:d6:97:62:99:79:6a:2f:7a:ee:df:7c:fe: 64:c9:29:0d:3b:78:38:91:f6:7a:9d:7d:dd:d6:03: 10:87:68:58:ab:24:8c:62:64:a8:08:b1:0d:47:7e: 71:d1:b8:96:72:f3:d5:a6:ca:c3:29:2a:c5:50:d4: c1:3f:bd:3b:db:0c:78:fa:c5:4d:28:af:58:c5:5f: 24:d6:59:bc:22:fb:63:6e:ac:fc:dd:04:4b:92:61: ba:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:BA:AB:4E:CE:A7:D0:6C:6E:F3:4F:B1:43:18:23:06:23:2A:8E:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/7b9bac5f-93e3-333d-8586-092b0b3f647b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl X509v3 Authority Key Identifier: keyid:BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer sbgp-ipAddrBlock: critical IPv6: 2600:2701:4000::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:14:2a:ad:e3:fe:04:47:ca:e0:46:f5:1b:a1:a0:45:88:04: e6:6e:35:f9:3c:b8:f0:45:01:38:6d:5a:fa:e4:12:16:fa:50: c0:07:20:9e:50:99:5d:5f:68:92:43:54:51:d0:b5:7b:00:71: 8a:b7:7d:a7:6b:dc:89:b1:66:37:97:2d:8d:81:f8:49:56:fb: 6b:44:16:4a:9a:f7:a3:36:1d:87:f7:59:5e:f3:d1:24:21:ec: e1:54:c7:79:7f:82:76:a6:3d:2e:24:97:86:46:41:7a:74:3a: 01:b0:33:c8:19:24:e9:21:85:18:11:ba:98:2f:30:5d:0c:e6: e5:ff:72:3a:ea:a3:fd:9c:31:40:98:ac:69:fc:9d:3b:12:60: 99:b0:49:79:fd:34:c0:db:03:24:7d:52:19:ce:68:1f:64:fb: 3f:b0:35:a5:86:93:fd:ee:60:14:3a:60:ea:16:54:f3:a7:d3: 7c:5f:03:f6:34:9b:2a:c7:e8:e5:4a:03:d1:2d:9d:a4:97:43: 5e:7a:19:ed:00:a6:e4:37:c0:7f:e5:2d:bb:23:a0:07:ed:ed: e1:a1:6c:6c:c4:02:ca:3b:83:46:d5:83:e4:f0:2a:f9:05:0a: 27:a3:f4:6f:22:79:b0:1d:b0:41:60:00:aa:b5:ea:f9:d4:eb: 8e:50:5b:45 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt6DF3dlwXqGooZuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QyOTFiNmEtMWIzMC00ZmMwLWIxZGQtNTgyYWI5ODM0 N2Q2MB4XDTI1MTAxMDE1NDExNFoXDTI2MDEwODE2NDExNFowLzEtMCsGA1UEAxMk N2UxNjU1N2UtMDk4My00MDgyLTg4MzctODhhYjZlYjhkMDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgs5b3V6Ug8fiUFbYo0Y4asGPgxGXp8MUP7Ky F4CJ6krgSnd5febn423XtJahLHOMi1HLUBXSneDDG0LJjDHfUdDSNyot2zz4qR1o JV2lYz/3JOyDAEF9f+uFZIsrGQxfP7qT/JSOcUUtfX7iJcJnE2wAs52N9BmtgHxb kVfbr0MU+FBO03tDP0y8QZF4QoWwrgK/dLZmWYNJDBxeET5E7u0i6yedfrbWl2KZ eWoveu7ffP5kySkNO3g4kfZ6nX3d1gMQh2hYqySMYmSoCLENR35x0biWcvPVpsrD KSrFUNTBP7072wx4+sVNKK9YxV8k1lm8Ivtjbqz83QRLkmG6hwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ+6q07Op9BsbvNPsUMYIwYjKo5AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zZDI5 MWI2YS0xYjMwLTRmYzAtYjFkZC01ODJhYjk4MzQ3ZDYvN2I5YmFjNWYtOTNlMy0z MzNkLTg1ODYtMDkyYjBiM2Y2NDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2QyOTFiNmEtMWIzMC00ZmMwLWIx ZGQtNTgyYWI5ODM0N2Q2LzNkMjkxYjZhLTFiMzAtNGZjMC1iMWRkLTU4MmFiOTgz NDdkNi5jcmwwHwYDVR0jBBgwFoAUvPdtyH70eguyx7hGpBdeRe34chEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zZDI5MWI2YS0xYjMwLTRmYzAtYjFkZC01ODJh Yjk4MzQ3ZDYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgAnAUAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHYUKq3j/gRHyuBG9RuhoEWIBOZuNfk8uPBFAThtWvrkEhb6UMAH IJ5QmV1faJJDVFHQtXsAcYq3fadr3ImxZjeXLY2B+ElW+2tEFkqa96M2HYf3WV7z 0SQh7OFUx3l/gnamPS4kl4ZGQXp0OgGwM8gZJOkhhRgRupgvMF0M5uX/cjrqo/2c MUCYrGn8nTsSYJmwSXn9NMDbAyR9UhnOaB9k+z+wNaWGk/3uYBQ6YOoWVPOn03xf A/Y0myrH6OVKA9EtnaSXQ156Ge0ApuQ3wH/lLbsjoAft7eGhbGzEAso7g0bVg+Tw KvkFCiej9G8iebAdsEFgAKq16vnU645QW0U= -----END CERTIFICATE-----Generated at Mon Oct 20 23:55:24 2025 by rpki-client