$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/267afcf4-a45d-45d4-bd0b-11774e4dc5f1/ad382bd2-7c9b-310f-a043-80133884a8ee.roa File: ad382bd2-7c9b-310f-a043-80133884a8ee.roa (raw, json) Hash identifier: C1Lb/lScqmb2pKXqrnKd6JeBAgmHmTMTkVd2vX6UbpM= Subject key identifier: E9:F3:32:C4:12:EB:54:2D:73:9C:4B:55:EB:B1:24:59:35:CD:D5:53 Certificate issuer: /CN=267afcf4-a45d-45d4-bd0b-11774e4dc5f1 Certificate serial: 010D0C9F4328584B7C8764F895135363D9B47B00 Authority key identifier: B2:3A:20:99:62:0A:D9:C0:D7:93:C2:26:2E:5F:B9:38:FF:64:89:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/267afcf4-a45d-45d4-bd0b-11774e4dc5f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/267afcf4-a45d-45d4-bd0b-11774e4dc5f1/ad382bd2-7c9b-310f-a043-80133884a8ee.roa Signing time: Sat 11 Oct 2025 13:00:38 +0000 ROA not before: Sat 11 Oct 2025 13:00:38 +0000 ROA not after: Fri 09 Jan 2026 14:00:38 +0000 asID: 401179 IP address blocks: 2607:bcc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/267afcf4-a45d-45d4-bd0b-11774e4dc5f1/267afcf4-a45d-45d4-bd0b-11774e4dc5f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/267afcf4-a45d-45d4-bd0b-11774e4dc5f1/267afcf4-a45d-45d4-bd0b-11774e4dc5f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/267afcf4-a45d-45d4-bd0b-11774e4dc5f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7c:87:64:f8:95:13:53:63:d9:b4:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=267afcf4-a45d-45d4-bd0b-11774e4dc5f1 Validity Not Before: Oct 11 13:00:38 2025 GMT Not After : Jan 9 14:00:38 2026 GMT Subject: CN=cd95a117-4c8e-4d81-9098-9ad25326e3c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:73:47:d0:59:20:71:c6:8c:ff:b5:6e:cb:b2: 02:73:dd:83:67:2b:48:5a:b9:13:2f:b1:b7:21:31: e3:0a:54:d5:b4:6f:ee:21:04:f2:b0:7e:fb:cf:b0: 20:81:2f:69:51:12:cb:9c:f8:2b:e2:3c:fe:ce:98: ec:a9:11:bf:65:d8:2e:3f:f8:53:53:9c:18:b2:d2: 42:f3:dd:65:ef:38:22:6d:59:e9:c7:a9:cc:35:85: fc:b6:4e:08:b5:bc:a0:70:5f:75:30:52:2c:dc:82: 63:02:df:0a:91:79:c1:ea:59:04:b5:d0:0f:ab:91: 64:66:b2:db:56:0a:51:eb:0f:03:25:d5:94:d5:70: d7:0c:9e:fe:5a:49:2b:9d:aa:27:03:fe:f6:b5:37: ce:38:7f:42:90:dc:e4:ad:d8:c0:d0:00:f2:d3:f0: fb:9b:75:55:08:35:91:82:6c:aa:30:57:82:be:46: 2c:58:68:fc:cf:d4:a1:a5:2e:41:34:2b:03:7c:9a: 35:73:13:47:dc:c6:07:d4:87:09:0c:4c:84:30:b0: 29:5b:1d:72:bb:66:53:db:6b:40:1c:9a:90:2e:f7: 41:f6:fa:39:18:94:e6:2d:35:19:e4:00:64:4c:d0: 3a:81:4d:65:03:80:2c:10:67:9b:6a:97:be:3b:70: ba:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:F3:32:C4:12:EB:54:2D:73:9C:4B:55:EB:B1:24:59:35:CD:D5:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/267afcf4-a45d-45d4-bd0b-11774e4dc5f1/ad382bd2-7c9b-310f-a043-80133884a8ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/267afcf4-a45d-45d4-bd0b-11774e4dc5f1/267afcf4-a45d-45d4-bd0b-11774e4dc5f1.crl X509v3 Authority Key Identifier: keyid:B2:3A:20:99:62:0A:D9:C0:D7:93:C2:26:2E:5F:B9:38:FF:64:89:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/267afcf4-a45d-45d4-bd0b-11774e4dc5f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:bcc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:3b:3e:8c:e4:42:46:06:f0:e9:bc:46:e2:42:dc:ee:0a:33: 6c:07:4f:f9:f1:8b:70:9a:28:de:81:e0:a2:47:f0:2c:42:2c: 17:f0:b4:df:a5:95:55:7f:4c:fa:47:dd:a0:57:17:51:ed:a8: b5:ae:20:aa:09:7c:8e:b4:ed:46:60:bf:fd:50:de:95:a6:ec: 9b:60:e2:1d:4d:a9:fe:d3:4f:94:9b:46:7e:29:4f:3e:8b:cb: 90:57:1a:b7:d1:3a:4d:80:18:ec:8d:27:d0:a2:a4:a3:6e:5d: eb:e4:4e:0d:86:14:71:bc:4a:f7:2e:d3:88:8a:6f:d3:4e:f3: 00:6d:de:03:d8:37:7b:ad:b4:fa:3e:05:97:22:23:fa:52:6f: 8a:43:e5:23:a5:52:b5:bd:86:35:a9:7e:6d:5d:20:72:53:00: 0d:eb:21:36:02:67:c9:85:81:5c:f0:22:60:22:ab:1f:14:21: fa:f2:ca:31:ff:14:73:f8:81:7d:ed:ae:19:c2:8b:ec:6f:cb: 0d:26:b4:53:3b:19:3e:c8:16:9b:cc:7c:1d:f2:2c:4e:2f:81: c1:fa:2a:fd:3a:1d:38:84:ff:9d:d5:08:9a:18:b9:2b:21:8e: 5a:d2:80:49:b5:05:94:37:92:7e:14:f9:a0:96:ef:3e:c7:57: 25:45:9a:b2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt8h2T4lRNTY9m0ewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjY3YWZjZjQtYTQ1ZC00NWQ0LWJkMGItMTE3NzRlNGRj NWYxMB4XDTI1MTAxMTEzMDAzOFoXDTI2MDEwOTE0MDAzOFowLzEtMCsGA1UEAxMk Y2Q5NWExMTctNGM4ZS00ZDgxLTkwOTgtOWFkMjUzMjZlM2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3NH0FkgccaM/7Vuy7ICc92DZytIWrkTL7G3 ITHjClTVtG/uIQTysH77z7AggS9pURLLnPgr4jz+zpjsqRG/ZdguP/hTU5wYstJC 891l7zgibVnpx6nMNYX8tk4ItbygcF91MFIs3IJjAt8KkXnB6lkEtdAPq5FkZrLb VgpR6w8DJdWU1XDXDJ7+WkkrnaonA/72tTfOOH9CkNzkrdjA0ADy0/D7m3VVCDWR gmyqMFeCvkYsWGj8z9ShpS5BNCsDfJo1cxNH3MYH1IcJDEyEMLApWx1yu2ZT22tA HJqQLvdB9vo5GJTmLTUZ5ABkTNA6gU1lA4AsEGebape+O3C6JQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOnzMsQS61Qtc5xLVeuxJFk1zdVTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8yNjdh ZmNmNC1hNDVkLTQ1ZDQtYmQwYi0xMTc3NGU0ZGM1ZjEvYWQzODJiZDItN2M5Yi0z MTBmLWEwNDMtODAxMzM4ODRhOGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMjY3YWZjZjQtYTQ1ZC00NWQ0LWJk MGItMTE3NzRlNGRjNWYxLzI2N2FmY2Y0LWE0NWQtNDVkNC1iZDBiLTExNzc0ZTRk YzVmMS5jcmwwHwYDVR0jBBgwFoAUsjogmWIK2cDXk8ImLl+5OP9kibAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8yNjdhZmNmNC1hNDVkLTQ1ZDQtYmQwYi0xMTc3 NGU0ZGM1ZjEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJge8wDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB1Oz6M5EJGBvDpvEbiQtzuCjNsB0/58YtwmijegeCiR/AsQiwX8LTf pZVVf0z6R92gVxdR7ai1riCqCXyOtO1GYL/9UN6VpuybYOIdTan+00+Um0Z+KU8+ i8uQVxq30TpNgBjsjSfQoqSjbl3r5E4NhhRxvEr3LtOIim/TTvMAbd4D2Dd7rbT6 PgWXIiP6Um+KQ+UjpVK1vYY1qX5tXSByUwAN6yE2AmfJhYFc8CJgIqsfFCH68sox /xRz+IF97a4Zwovsb8sNJrRTOxk+yBabzHwd8ixOL4HB+ir9Oh04hP+d1QiaGLkr IY5a0oBJtQWUN5J+FPmglu8+x1clRZqy -----END CERTIFICATE-----Generated at Mon Oct 20 13:22:00 2025 by rpki-client