$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f/022d5c6a-7e45-3587-8084-f8af25ed8817.roa File: 022d5c6a-7e45-3587-8084-f8af25ed8817.roa (raw, json) Hash identifier: 7eUVT9/gdtxtYQwXbUrIHFNVF2+8N95Sy5PPkaRWqrE= Subject key identifier: 5A:28:29:07:09:4A:74:28:87:E0:20:44:7F:D0:77:4D:73:02:3D:6C Certificate issuer: /CN=a9694c21-178c-4e7b-9e78-08bc978c5e6f Certificate serial: 010D0C9F4328584B4D11D9DB5A5444EDBEBD2B20 Authority key identifier: 84:39:81:4F:67:A4:F0:69:AB:6B:59:7D:A3:EA:1C:66:EE:44:88:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f/022d5c6a-7e45-3587-8084-f8af25ed8817.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 32815 IP address blocks: 2607:e140::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f/a9694c21-178c-4e7b-9e78-08bc978c5e6f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f/a9694c21-178c-4e7b-9e78-08bc978c5e6f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:d9:db:5a:54:44:ed:be:bd:2b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9694c21-178c-4e7b-9e78-08bc978c5e6f Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=e98d7621-dc73-475f-9e66-9c643b70905c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:16:4d:75:de:24:89:9f:72:f2:85:f3:2a:17: 2b:69:2a:40:89:05:98:fe:29:38:ff:e8:dc:c1:0d: 8e:54:bd:26:62:fc:ef:78:5c:50:ae:78:10:d8:54: 4e:ce:ce:4b:2f:09:a0:65:50:e2:e0:aa:d1:cd:65: 19:d0:60:50:bf:4e:bb:19:ef:c0:b6:39:a2:41:41: 10:67:e3:61:7e:92:18:58:f0:01:bb:3a:54:21:56: 24:7c:74:1f:e0:73:32:81:1d:cb:0c:a6:ab:99:c6: 4b:3e:2a:eb:3b:7a:21:4d:c8:fa:3c:ba:91:2e:26: 20:67:1e:59:e4:34:aa:3c:05:fe:8d:65:8a:0d:7c: 20:38:77:3f:9d:e5:0a:2b:47:ee:01:df:05:2f:7e: 00:7b:ed:40:78:3e:99:0e:a6:14:ae:dc:84:04:bd: 6a:d4:c9:df:0a:3a:7f:e1:cb:ac:a9:5b:72:a0:33: 3a:b4:bf:69:a4:b0:9d:4d:40:88:25:ed:0b:77:d3: f3:6a:4e:6f:9c:26:cf:56:05:99:58:36:6d:1c:7d: 3f:69:19:ee:5c:3f:91:d3:e1:9b:06:f3:e4:4f:37: bb:25:b3:51:1c:e4:d1:10:68:47:6a:52:87:f9:f2: 00:60:7a:63:29:e2:35:2e:5b:0e:a3:2b:4e:b0:76: 2d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:28:29:07:09:4A:74:28:87:E0:20:44:7F:D0:77:4D:73:02:3D:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f/022d5c6a-7e45-3587-8084-f8af25ed8817.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f/a9694c21-178c-4e7b-9e78-08bc978c5e6f.crl X509v3 Authority Key Identifier: keyid:84:39:81:4F:67:A4:F0:69:AB:6B:59:7D:A3:EA:1C:66:EE:44:88:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f.cer sbgp-ipAddrBlock: critical IPv6: 2607:e140::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:03:fc:3c:a1:b8:dc:16:03:0c:45:59:88:c0:9f:38:76:98: cc:9c:13:ee:43:6e:06:3b:cf:4e:0c:04:48:21:0d:86:04:2d: c8:6a:5f:8d:45:1c:c3:eb:3f:a7:19:28:c1:b5:e6:d6:ad:9f: 55:6b:7f:10:0a:0b:52:5a:cd:05:c8:43:cf:db:ef:54:6b:dd: c3:9e:8b:60:bd:fc:a3:6f:1c:05:8d:4b:c5:dd:d0:c9:b6:e6: 2a:3a:69:a0:3d:90:06:72:b0:f0:37:0f:72:d5:d5:4d:40:81: a7:ba:a0:8f:de:95:93:86:61:ac:78:c7:d1:05:dc:e9:3a:7c: 4f:d2:ca:68:2e:09:41:65:7f:fb:95:2d:ef:fe:6b:49:af:be: 90:c3:f3:51:8e:c5:b4:85:83:df:94:13:65:48:5e:40:d4:3f: b1:2f:67:e0:3d:e8:17:86:e6:88:41:46:fc:82:6c:57:0f:fe: f0:24:8c:05:fe:8c:97:07:81:e4:21:fc:fe:26:86:53:29:31: 58:67:e0:77:9e:7e:cf:04:01:a9:e5:b8:46:a9:63:cf:fa:f1: 6b:74:5d:db:bc:09:86:5b:31:09:1c:2c:67:77:0b:c2:50:dd: 2c:58:fc:01:81:b1:1a:ea:21:f6:7c:80:2e:75:1e:e7:70:96: 36:e5:d6:69 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtNEdnbWlRE7b69KyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTk2OTRjMjEtMTc4Yy00ZTdiLTllNzgtMDhiYzk3OGM1 ZTZmMB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk ZTk4ZDc2MjEtZGM3My00NzVmLTllNjYtOWM2NDNiNzA5MDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRZNdd4kiZ9y8oXzKhcraSpAiQWY/ik4/+jc wQ2OVL0mYvzveFxQrngQ2FROzs5LLwmgZVDi4KrRzWUZ0GBQv067Ge/AtjmiQUEQ Z+NhfpIYWPABuzpUIVYkfHQf4HMygR3LDKarmcZLPirrO3ohTcj6PLqRLiYgZx5Z 5DSqPAX+jWWKDXwgOHc/neUKK0fuAd8FL34Ae+1AeD6ZDqYUrtyEBL1q1MnfCjp/ 4cusqVtyoDM6tL9ppLCdTUCIJe0Ld9Pzak5vnCbPVgWZWDZtHH0/aRnuXD+R0+Gb BvPkTze7JbNRHOTREGhHalKH+fIAYHpjKeI1LlsOoytOsHYtxwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFooKQcJSnQoh+AgRH/Qd01zAj1sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hOTY5 NGMyMS0xNzhjLTRlN2ItOWU3OC0wOGJjOTc4YzVlNmYvMDIyZDVjNmEtN2U0NS0z NTg3LTgwODQtZjhhZjI1ZWQ4ODE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYTk2OTRjMjEtMTc4Yy00ZTdiLTll NzgtMDhiYzk3OGM1ZTZmL2E5Njk0YzIxLTE3OGMtNGU3Yi05ZTc4LTA4YmM5Nzhj NWU2Zi5jcmwwHwYDVR0jBBgwFoAUhDmBT2ek8Gmra1l9o+ocZu5EiB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hOTY5NGMyMS0xNzhjLTRlN2ItOWU3OC0wOGJj OTc4YzVlNmYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfhQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBGA/w8objcFgMMRVmIwJ84dpjMnBPuQ24GO89ODARIIQ2GBC3Ial+N RRzD6z+nGSjBtebWrZ9Va38QCgtSWs0FyEPP2+9Ua93DnotgvfyjbxwFjUvF3dDJ tuYqOmmgPZAGcrDwNw9y1dVNQIGnuqCP3pWThmGseMfRBdzpOnxP0spoLglBZX/7 lS3v/mtJr76Qw/NRjsW0hYPflBNlSF5A1D+xL2fgPegXhuaIQUb8gmxXD/7wJIwF /oyXB4HkIfz+JoZTKTFYZ+B3nn7PBAGp5bhGqWPP+vFrdF3bvAmGWzEJHCxndwvC UN0sWPwBgbEa6iH2fIAudR7ncJY25dZp -----END CERTIFICATE-----Generated at Mon Oct 20 10:45:10 2025 by rpki-client