$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/5aff0123-c654-3a1d-bbad-1e7208a52d23.roa File: 5aff0123-c654-3a1d-bbad-1e7208a52d23.roa (raw, json) Hash identifier: gKYb92SG73+xg0rf7tpdME5q8y0fpK62BiyVJbOeCr8= Subject key identifier: 18:06:4C:D1:20:7B:91:6A:0E:78:79:99:C8:54:4F:D6:F7:92:C2:2A Certificate issuer: /CN=0f950b17-8345-41e7-bf75-5481729a0012 Certificate serial: 010D0C9F4328584B328C3B759F8CEBF5F974C240 Authority key identifier: 56:3C:2B:FC:3E:FC:B4:79:C4:82:D7:6A:DE:DE:73:30:B0:B3:B6:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/5aff0123-c654-3a1d-bbad-1e7208a52d23.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 32723 IP address blocks: 2607:2040::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:3b:75:9f:8c:eb:f5:f9:74:c2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f950b17-8345-41e7-bf75-5481729a0012 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=ba9c582b-c2bd-48f9-a8bc-54de8de4d1d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:11:fc:0f:ee:3c:ec:7d:82:79:f7:35:b9:1e: f8:4f:13:66:ef:e4:9b:97:3b:e6:49:a9:1d:69:50: bb:a3:61:14:45:e6:70:b9:5c:48:ae:9f:09:04:ee: b7:5f:ac:61:ac:39:c5:78:93:01:12:10:1a:ae:09: ff:7f:78:af:65:7e:3f:66:01:6c:33:b9:31:1b:76: 3c:81:50:6a:90:28:0a:76:ab:be:ea:fc:7d:9c:31: 59:dc:92:e1:a9:e9:85:67:3a:f2:e2:1b:8c:3f:78: 33:22:cd:83:8c:85:b5:b4:da:cc:61:b1:67:86:68: 4b:cd:8f:24:cc:ee:9b:d8:02:47:2b:06:ee:46:8e: 87:cb:de:89:88:13:26:ff:c9:46:ee:dd:13:b4:ff: 00:27:7a:cc:b3:d1:cf:72:57:87:6c:82:00:17:d8: 08:a9:b1:23:59:5a:13:7a:8f:ae:40:42:96:8b:a4: 92:ef:29:2f:8c:d1:34:a0:c3:68:21:a0:f4:9e:e5: c1:55:ff:86:51:40:17:27:3e:e2:00:69:bf:73:8e: 39:dc:45:a6:d9:c7:9e:a9:47:6a:9b:46:99:f0:4f: 87:00:2e:1e:4c:7e:26:61:87:9c:01:8e:f5:87:57: 45:ba:0d:f2:fe:ef:bc:47:f8:7a:1a:17:cb:c0:f6: f0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:06:4C:D1:20:7B:91:6A:0E:78:79:99:C8:54:4F:D6:F7:92:C2:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/5aff0123-c654-3a1d-bbad-1e7208a52d23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.crl X509v3 Authority Key Identifier: keyid:56:3C:2B:FC:3E:FC:B4:79:C4:82:D7:6A:DE:DE:73:30:B0:B3:B6:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer sbgp-ipAddrBlock: critical IPv6: 2607:2040::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:bc:a3:0c:2e:31:e7:47:40:2e:17:7d:2c:2b:dc:ae:a9:52: a6:cb:30:7d:53:0f:3c:c4:0b:48:5b:05:70:54:21:ed:06:95: 24:c0:e1:7c:e6:af:1f:c3:46:1e:5b:e6:ff:37:2b:a1:b3:eb: 40:e6:27:7a:2b:ee:8e:aa:4b:ca:1b:27:4e:fe:61:1e:79:e2: 78:14:13:26:82:0d:a6:67:a2:05:53:67:ba:37:b5:b8:92:8a: 9b:fd:68:f9:72:77:06:2f:25:3f:c5:6f:fc:ce:a1:a3:9b:cd: b8:da:36:9e:70:71:16:bc:0c:a1:19:7f:cf:d5:68:5d:67:e8: ff:1e:bd:1a:cd:58:68:9b:94:02:0e:3b:70:e3:55:ea:05:f3: b2:af:8c:98:8b:22:d8:b3:23:32:77:92:01:98:43:8e:9b:fd: 3c:2e:a8:78:66:de:d1:1b:98:8b:3b:35:f2:17:d2:f1:f7:4d: 2d:e3:61:18:1d:19:70:f6:98:eb:2d:3f:ee:24:3d:23:ce:23: 08:c7:be:8f:75:ce:ae:84:ca:26:60:05:df:79:04:27:1b:c2: ff:4e:bf:c9:88:20:1a:49:c9:3b:ba:65:a5:9f:46:9f:3b:d9: 8a:34:66:66:4c:2b:09:37:40:11:4b:4d:b9:c1:45:b3:08:85: c8:ab:d8:0c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsyjDt1n4zr9fl0wkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGY5NTBiMTctODM0NS00MWU3LWJmNzUtNTQ4MTcyOWEw MDEyMB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk YmE5YzU4MmItYzJiZC00OGY5LWE4YmMtNTRkZThkZTRkMWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBH8D+487H2Cefc1uR74TxNm7+SblzvmSakd aVC7o2EUReZwuVxIrp8JBO63X6xhrDnFeJMBEhAargn/f3ivZX4/ZgFsM7kxG3Y8 gVBqkCgKdqu+6vx9nDFZ3JLhqemFZzry4huMP3gzIs2DjIW1tNrMYbFnhmhLzY8k zO6b2AJHKwbuRo6Hy96JiBMm/8lG7t0TtP8AJ3rMs9HPcleHbIIAF9gIqbEjWVoT eo+uQEKWi6SS7ykvjNE0oMNoIaD0nuXBVf+GUUAXJz7iAGm/c4453EWm2ceeqUdq m0aZ8E+HAC4eTH4mYYecAY71h1dFug3y/u+8R/h6GhfLwPbwqQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBgGTNEge5FqDnh5mchUT9b3ksIqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZjk1 MGIxNy04MzQ1LTQxZTctYmY3NS01NDgxNzI5YTAwMTIvNWFmZjAxMjMtYzY1NC0z YTFkLWJiYWQtMWU3MjA4YTUyZDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGY5NTBiMTctODM0NS00MWU3LWJm NzUtNTQ4MTcyOWEwMDEyLzBmOTUwYjE3LTgzNDUtNDFlNy1iZjc1LTU0ODE3Mjlh MDAxMi5jcmwwHwYDVR0jBBgwFoAUVjwr/D78tHnEgtdq3t5zMLCztmAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZjk1MGIxNy04MzQ1LTQxZTctYmY3NS01NDgx NzI5YTAwMTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcgQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBSvKMMLjHnR0AuF30sK9yuqVKmyzB9Uw88xAtIWwVwVCHtBpUkwOF8 5q8fw0YeW+b/Nyuhs+tA5id6K+6OqkvKGydO/mEeeeJ4FBMmgg2mZ6IFU2e6N7W4 koqb/Wj5cncGLyU/xW/8zqGjm8242jaecHEWvAyhGX/P1WhdZ+j/Hr0azVhom5QC Djtw41XqBfOyr4yYiyLYsyMyd5IBmEOOm/08Lqh4Zt7RG5iLOzXyF9Lx900t42EY HRlw9pjrLT/uJD0jziMIx76Pdc6uhMomYAXfeQQnG8L/Tr/JiCAaSck7umWln0af O9mKNGZmTCsJN0ARS025wUWzCIXIq9gM -----END CERTIFICATE-----Generated at Tue Oct 21 18:02:56 2025 by rpki-client