$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a870649-61cf-4a59-a195-226a35c00514/7a30f3f4-9e26-3c96-9672-29c6e695ea27.roa File: 7a30f3f4-9e26-3c96-9672-29c6e695ea27.roa (raw, json) Hash identifier: 8SLKxWQGA1/dadxpQWwq7xgwnqQFFmJI5XcP2Kxne6k= Subject key identifier: 12:11:EC:B4:56:A9:44:16:26:5A:F2:00:D4:4D:5F:D7:D6:E7:49:25 Certificate issuer: /CN=7a870649-61cf-4a59-a195-226a35c00514 Certificate serial: 010D0C9F4328584B8BE233A36AA480D9C205CF00 Authority key identifier: 89:32:94:27:6F:E0:A0:38:82:E5:3D:D9:29:B6:C7:33:5E:86:C0:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a870649-61cf-4a59-a195-226a35c00514.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a870649-61cf-4a59-a195-226a35c00514/7a30f3f4-9e26-3c96-9672-29c6e695ea27.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 1224 IP address blocks: 2620:0:c80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a870649-61cf-4a59-a195-226a35c00514/7a870649-61cf-4a59-a195-226a35c00514.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a870649-61cf-4a59-a195-226a35c00514/7a870649-61cf-4a59-a195-226a35c00514.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a870649-61cf-4a59-a195-226a35c00514.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:33:a3:6a:a4:80:d9:c2:05:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a870649-61cf-4a59-a195-226a35c00514 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=55cc574f-b9fc-4197-b567-f00cf0defad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fb:92:eb:6a:48:65:62:74:8f:ac:19:7e:57: 6a:40:19:4d:e7:e9:59:98:e8:ab:0d:a6:00:3b:b3: 2c:16:06:b3:87:46:00:96:b2:17:40:2c:55:5d:66: e5:f3:f5:10:50:ae:40:e8:6e:87:54:a8:06:a6:6c: 70:3b:c8:d2:27:6d:f7:f5:12:ee:f4:4b:c0:a3:29: 48:5b:07:82:35:1b:31:cb:8a:f5:18:0d:b7:74:d6: ab:f7:53:81:15:ae:db:bf:76:ca:76:4a:e2:23:72: 40:db:d3:8f:fd:71:7d:1f:4a:23:21:01:59:c8:d1: 59:e3:08:a4:a0:b6:78:64:50:8d:ad:9f:23:9a:42: c1:47:eb:5c:77:cf:ef:bb:53:ec:2d:2c:0a:93:23: 40:5d:1b:0c:f1:8d:b8:4c:95:28:2e:94:9d:28:85: 38:46:bb:1d:42:88:ca:2b:98:b9:80:62:69:ad:a4: f0:bf:ae:7c:dd:c6:1f:3c:ce:85:58:3a:d3:f6:bf: 8a:02:49:be:f6:da:c0:4d:27:5b:53:82:e8:7a:15: 1e:d8:8b:c6:ff:87:45:a8:98:88:c4:49:25:de:1d: b0:92:05:c2:f7:7c:b8:29:ec:82:de:d5:8d:4d:6d: 09:2a:44:65:a5:af:00:1f:66:d4:de:14:59:db:44: 1e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:11:EC:B4:56:A9:44:16:26:5A:F2:00:D4:4D:5F:D7:D6:E7:49:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a870649-61cf-4a59-a195-226a35c00514/7a30f3f4-9e26-3c96-9672-29c6e695ea27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a870649-61cf-4a59-a195-226a35c00514/7a870649-61cf-4a59-a195-226a35c00514.crl X509v3 Authority Key Identifier: keyid:89:32:94:27:6F:E0:A0:38:82:E5:3D:D9:29:B6:C7:33:5E:86:C0:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a870649-61cf-4a59-a195-226a35c00514.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:c80::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:cb:18:ee:01:71:96:eb:c1:71:71:2e:5e:67:a7:56:ba:40: 35:8b:82:8b:e9:e1:f9:5e:7f:99:8a:bc:05:16:55:29:39:66: f1:97:21:78:88:ba:ff:50:1c:e7:19:0c:55:14:d7:9e:c6:6f: fa:19:89:ab:46:18:48:f0:fe:1f:06:8d:0c:ac:e4:56:df:28: 42:ab:33:b4:02:e7:16:62:d7:33:83:0e:66:98:33:da:6b:09: 1b:a9:a3:8b:27:a6:f0:b0:9f:82:80:12:b1:1a:70:a8:37:49: 71:c3:e3:6a:e2:40:11:22:5b:cd:c2:01:ba:ea:09:df:9f:fc: 66:e2:4f:9a:f0:d6:73:7a:42:5c:9e:7d:d1:af:bd:59:e6:a9: 89:7d:06:6b:c2:f0:22:ce:3e:29:73:cf:1e:bd:9c:3f:22:16: 11:a4:c8:1e:2b:b1:fd:25:64:97:45:88:44:ef:9e:a2:a9:0f: 7b:44:e0:1c:bb:5a:9d:57:00:b9:2c:1a:88:94:27:e0:e7:53: 7d:7b:f6:4f:73:91:83:fd:4f:1c:60:af:2c:85:c6:b3:6e:3b: 79:93:02:5e:39:15:44:f5:26:70:f5:2a:b9:07:0e:b4:7e:44: bc:7a:49:aa:cb:27:e4:17:a7:4f:60:e8:77:91:6c:b4:18:ed: 5a:01:c8:04 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuL4jOjaqSA2cIFzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2E4NzA2NDktNjFjZi00YTU5LWExOTUtMjI2YTM1YzAw NTE0MB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk NTVjYzU3NGYtYjlmYy00MTk3LWI1NjctZjAwY2YwZGVmYWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPuS62pIZWJ0j6wZfldqQBlN5+lZmOirDaYA O7MsFgazh0YAlrIXQCxVXWbl8/UQUK5A6G6HVKgGpmxwO8jSJ2339RLu9EvAoylI WweCNRsxy4r1GA23dNar91OBFa7bv3bKdkriI3JA29OP/XF9H0ojIQFZyNFZ4wik oLZ4ZFCNrZ8jmkLBR+tcd8/vu1PsLSwKkyNAXRsM8Y24TJUoLpSdKIU4RrsdQojK K5i5gGJpraTwv6583cYfPM6FWDrT9r+KAkm+9trATSdbU4LoehUe2IvG/4dFqJiI xEkl3h2wkgXC93y4KeyC3tWNTW0JKkRlpa8AH2bU3hRZ20QefwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBIR7LRWqUQWJlryANRNX9fW50klMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83YTg3 MDY0OS02MWNmLTRhNTktYTE5NS0yMjZhMzVjMDA1MTQvN2EzMGYzZjQtOWUyNi0z Yzk2LTk2NzItMjljNmU2OTVlYTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvN2E4NzA2NDktNjFjZi00YTU5LWEx OTUtMjI2YTM1YzAwNTE0LzdhODcwNjQ5LTYxY2YtNGE1OS1hMTk1LTIyNmEzNWMw MDUxNC5jcmwwHwYDVR0jBBgwFoAUiTKUJ2/goDiC5T3ZKbbHM16GwEwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS83YTg3MDY0OS02MWNmLTRhNTktYTE5NS0yMjZh MzVjMDA1MTQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAAyA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADTLGO4BcZbrwXFxLl5np1a6QDWLgovp4flef5mKvAUWVSk5ZvGX IXiIuv9QHOcZDFUU157Gb/oZiatGGEjw/h8GjQys5FbfKEKrM7QC5xZi1zODDmaY M9prCRupo4snpvCwn4KAErEacKg3SXHD42riQBEiW83CAbrqCd+f/GbiT5rw1nN6 QlyefdGvvVnmqYl9BmvC8CLOPilzzx69nD8iFhGkyB4rsf0lZJdFiETvnqKpD3tE 4By7Wp1XALksGoiUJ+DnU3179k9zkYP9TxxgryyFxrNuO3mTAl45FUT1JnD1KrkH DrR+RLx6SarLJ+QXp09g6HeRbLQY7VoByAQ= -----END CERTIFICATE-----Generated at Mon Oct 20 13:58:44 2025 by rpki-client