$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/03233396-7373-36cb-ab6f-70f08e11bdb8.roa File: 03233396-7373-36cb-ab6f-70f08e11bdb8.roa (raw, json) Hash identifier: IvQXZgHn/FcEC+byspBK7K8ag5X1bYkG/Bn9nxmofgg= Subject key identifier: C3:FA:4E:B2:FF:15:A5:25:56:31:5B:0E:E3:BF:DB:63:6C:69:B1:8C Certificate issuer: /CN=1f60c0cf-9537-4a86-bd67-a1dfd2892507 Certificate serial: 010D0C9F4328584B477C68AACBF3A8A1B508DB00 Authority key identifier: 9D:B7:19:FA:97:3D:4F:D2:FA:41:B6:80:92:4E:D7:18:33:4C:4E:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/03233396-7373-36cb-ab6f-70f08e11bdb8.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 22280 IP address blocks: 2607:1940::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/1f60c0cf-9537-4a86-bd67-a1dfd2892507.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/1f60c0cf-9537-4a86-bd67-a1dfd2892507.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:68:aa:cb:f3:a8:a1:b5:08:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f60c0cf-9537-4a86-bd67-a1dfd2892507 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=081beaa5-8f92-4995-9ca8-df663202d927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9b:41:60:7e:8d:bb:35:9d:a2:21:d0:b4:b5: 49:55:be:0a:54:28:22:e7:8d:c8:dd:10:48:e6:17: 4d:5b:c4:b5:e6:10:76:b5:d9:c0:46:02:39:29:f9: 68:cd:80:dc:97:e9:18:be:a4:a6:81:a6:5a:23:d5: 21:23:ad:74:ed:0e:9f:80:5d:d1:72:96:33:87:61: 84:c9:78:03:aa:38:c4:57:f1:d1:39:8e:31:5e:7c: ef:96:a4:2e:77:0f:f7:f8:00:9d:a3:04:8b:76:b9: ad:59:ce:d7:28:a7:b1:78:cc:c1:cb:06:53:a6:e3: 99:01:13:41:8d:54:05:79:9e:91:c8:a9:3e:b6:c6: f2:d7:24:20:80:52:8a:d8:74:82:ee:f3:fe:68:42: ff:5c:7f:74:26:92:e5:67:8f:d6:c2:a4:96:34:8a: d4:cb:78:30:ba:1d:07:7f:42:8e:26:05:22:82:e4: 38:1e:01:ed:24:90:75:23:05:cb:51:2e:98:66:56: 90:3d:bf:de:d1:b0:30:98:9f:b7:a4:c7:ae:ac:30: 1a:a2:9a:75:c3:0f:6d:c2:b0:82:2b:e3:46:e2:71: ca:e1:e2:32:74:84:96:04:56:8f:c2:f2:85:0b:5a: f6:bb:e7:6f:8f:42:71:44:1b:8c:22:24:6a:a7:9a: dd:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:FA:4E:B2:FF:15:A5:25:56:31:5B:0E:E3:BF:DB:63:6C:69:B1:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/03233396-7373-36cb-ab6f-70f08e11bdb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/1f60c0cf-9537-4a86-bd67-a1dfd2892507.crl X509v3 Authority Key Identifier: keyid:9D:B7:19:FA:97:3D:4F:D2:FA:41:B6:80:92:4E:D7:18:33:4C:4E:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507.cer sbgp-ipAddrBlock: critical IPv6: 2607:1940::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:8a:a6:25:f2:f4:b4:fb:7a:67:13:44:57:10:9d:38:96:f6: 88:01:25:d9:db:55:77:e6:5f:b5:9e:1c:10:74:99:08:cf:a4: ea:8d:3f:ae:45:e9:01:7e:38:fd:9f:2e:aa:6a:23:6e:b4:e6: e8:1f:0a:75:d2:0e:c2:61:04:b3:85:aa:54:b8:31:7f:3d:2a: 1b:76:bc:98:19:7a:36:17:40:c5:96:0c:64:4d:d9:30:8a:17: ac:f1:53:50:f7:3f:56:fd:a1:ac:41:a2:09:ef:4a:ce:3f:5e: 32:7c:7d:a2:4a:31:41:8e:b4:4e:51:e3:c1:71:ae:29:12:d1: 69:83:cf:2d:d3:2e:17:e6:48:2f:aa:43:89:c4:71:4e:55:b1: ca:96:ad:fb:6f:0a:fe:0c:2f:5e:b6:08:5d:b4:43:aa:f8:f0: 00:a9:cc:02:d2:26:34:0f:7e:4b:b7:fe:6c:15:92:11:b8:5b: 4e:e9:f7:f9:2e:e4:bd:00:26:4f:21:a9:00:38:3c:59:38:cf: cd:51:26:41:b4:b1:eb:ad:25:4a:da:a6:de:d0:4f:aa:d8:3b: 65:ab:6b:27:eb:80:71:5b:18:e5:9d:5d:15:6b:b4:39:53:90: 19:57:f1:23:d4:ec:89:98:dc:94:b9:fe:66:86:e5:45:c5:ed: ad:b7:d1:2a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtHfGiqy/OoobUI2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY2MGMwY2YtOTUzNy00YTg2LWJkNjctYTFkZmQyODky NTA3MB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk MDgxYmVhYTUtOGY5Mi00OTk1LTljYTgtZGY2NjMyMDJkOTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlptBYH6NuzWdoiHQtLVJVb4KVCgi543I3RBI 5hdNW8S15hB2tdnARgI5KflozYDcl+kYvqSmgaZaI9UhI6107Q6fgF3RcpYzh2GE yXgDqjjEV/HROY4xXnzvlqQudw/3+ACdowSLdrmtWc7XKKexeMzBywZTpuOZARNB jVQFeZ6RyKk+tsby1yQggFKK2HSC7vP+aEL/XH90JpLlZ4/WwqSWNIrUy3gwuh0H f0KOJgUiguQ4HgHtJJB1IwXLUS6YZlaQPb/e0bAwmJ+3pMeurDAaopp1ww9twrCC K+NG4nHK4eIydISWBFaPwvKFC1r2u+dvj0JxRBuMIiRqp5rdMwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMP6TrL/FaUlVjFbDuO/22NsabGMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xZjYw YzBjZi05NTM3LTRhODYtYmQ2Ny1hMWRmZDI4OTI1MDcvMDMyMzMzOTYtNzM3My0z NmNiLWFiNmYtNzBmMDhlMTFiZGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWY2MGMwY2YtOTUzNy00YTg2LWJk NjctYTFkZmQyODkyNTA3LzFmNjBjMGNmLTk1MzctNGE4Ni1iZDY3LWExZGZkMjg5 MjUwNy5jcmwwHwYDVR0jBBgwFoAUnbcZ+pc9T9L6QbaAkk7XGDNMTpUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xZjYwYzBjZi05NTM3LTRhODYtYmQ2Ny1hMWRm ZDI4OTI1MDcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcZQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCMiqYl8vS0+3pnE0RXEJ04lvaIASXZ21V35l+1nhwQdJkIz6TqjT+u RekBfjj9ny6qaiNutOboHwp10g7CYQSzhapUuDF/PSobdryYGXo2F0DFlgxkTdkw ihes8VNQ9z9W/aGsQaIJ70rOP14yfH2iSjFBjrROUePBca4pEtFpg88t0y4X5kgv qkOJxHFOVbHKlq37bwr+DC9etghdtEOq+PAAqcwC0iY0D35Lt/5sFZIRuFtO6ff5 LuS9ACZPIakAODxZOM/NUSZBtLHrrSVK2qbe0E+q2Dtlq2sn64BxWxjlnV0Va7Q5 U5AZV/Ej1OyJmNyUuf5mhuVFxe2tt9Eq -----END CERTIFICATE-----Generated at Wed Oct 22 00:38:45 2025 by rpki-client