$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/09389e5b-8613-3924-a8e9-8decf046db3e.roa File: 09389e5b-8613-3924-a8e9-8decf046db3e.roa (raw, json) Hash identifier: lzEfindiVXebDShk0JEyY00R99T9zoxXtEtMewDAC/4= Subject key identifier: 8F:16:19:2C:AE:CC:AB:1C:F7:DF:9C:4A:DC:36:FA:F9:8F:53:D2:F1 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584B7F522C5E2693916BF6763B80 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/09389e5b-8613-3924-a8e9-8decf046db3e.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 33363 IP address blocks: 2605:a401:838d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:2c:5e:26:93:91:6b:f6:76:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=c66d4ba8-fba6-4037-a389-9a5cb0ef3ee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e0:4d:d1:17:a4:09:2c:78:f5:7d:ae:71:c2: 0a:ec:13:27:37:1e:ee:c8:4a:e4:d8:7b:39:b6:ca: 54:18:a6:d4:d6:59:24:09:9f:33:6c:3c:ef:8b:b6: 5c:29:40:bb:64:49:30:ac:80:57:95:05:38:58:6c: 0a:a6:ee:1a:72:34:98:db:3f:24:f1:23:d3:cb:65: 32:37:9f:97:62:47:25:ad:9a:58:0b:67:59:6e:c6: f2:14:0b:5e:9e:6b:9a:06:cc:6a:20:a2:b7:6a:dc: 52:fd:84:fb:d9:64:0c:ef:96:93:a2:90:a1:cd:df: 9f:39:bf:7f:e2:60:c3:a7:b7:f3:31:11:a9:eb:3d: 7f:6f:bc:e0:1c:86:d3:16:aa:29:5e:34:55:2e:9a: 54:c8:a5:f7:8e:3b:e9:9c:38:65:73:e0:a0:43:7d: e1:c6:14:f6:30:7f:61:30:07:11:0e:6e:c6:1a:6d: 77:7f:4c:7a:4e:32:3d:75:aa:d8:0b:36:47:21:f1: a8:d5:2e:a4:48:56:bd:c8:98:32:ba:12:81:ea:33: 9b:3d:3b:3b:52:4b:34:1c:8e:f3:a4:e5:fa:67:e2: 09:e8:d0:06:c9:2d:10:4a:d4:16:b3:c9:ab:ba:0d: e8:11:6b:4a:8b:76:f7:92:f7:39:63:5e:3d:eb:3f: ea:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:16:19:2C:AE:CC:AB:1C:F7:DF:9C:4A:DC:36:FA:F9:8F:53:D2:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/09389e5b-8613-3924-a8e9-8decf046db3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv6: 2605:a401:838d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:1e:36:7e:e6:a4:0b:f2:cc:67:5e:13:cc:5a:f9:f5:f9:73: 9b:72:ca:fd:8d:69:d7:2c:da:94:bb:c2:9d:b4:d7:a6:7e:ec: fa:16:79:9f:72:b4:40:ce:97:aa:78:1f:49:e8:4f:c9:4a:1b: 33:c7:8a:1c:b5:ac:62:77:b0:a6:cd:93:50:62:d3:8b:11:aa: 0c:ac:f0:85:cd:8e:44:47:a3:3a:53:c2:a6:39:d9:a5:4a:03: 08:7b:e7:05:f6:c3:41:8f:bd:24:ca:d0:db:c0:da:18:49:a0: ae:5b:a2:b5:52:d9:fa:a0:ab:e0:af:cc:e5:db:5d:65:95:ce: 63:ac:ba:10:b5:ee:53:33:de:42:fe:b6:c3:84:e6:b9:ee:d3: 6a:76:61:46:09:1a:5e:df:02:a7:2c:79:af:c7:3d:de:3b:7f: ed:2b:93:94:6b:b3:6f:51:79:8b:35:0d:5c:1c:cd:eb:c1:3b: ed:7f:32:f5:25:1d:7b:9b:1e:8c:ce:2c:30:e6:59:93:95:e5: 2d:62:d8:ae:bb:f4:94:e8:a5:2c:b2:ae:9f:d6:83:aa:60:b4: 9d:cb:71:22:ab:d3:70:66:50:2f:a4:b5:0a:58:c6:4c:1f:aa: 2f:62:b4:a6:65:e8:9d:52:f3:12:02:96:08:93:86:56:18:00: 46:50:fb:d5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt/UixeJpORa/Z2O4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk YzY2ZDRiYTgtZmJhNi00MDM3LWEzODktOWE1Y2IwZWYzZWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuBN0RekCSx49X2uccIK7BMnNx7uyErk2Hs5 tspUGKbU1lkkCZ8zbDzvi7ZcKUC7ZEkwrIBXlQU4WGwKpu4acjSY2z8k8SPTy2Uy N5+XYkclrZpYC2dZbsbyFAtenmuaBsxqIKK3atxS/YT72WQM75aTopChzd+fOb9/ 4mDDp7fzMRGp6z1/b7zgHIbTFqopXjRVLppUyKX3jjvpnDhlc+CgQ33hxhT2MH9h MAcRDm7GGm13f0x6TjI9darYCzZHIfGo1S6kSFa9yJgyuhKB6jObPTs7Uks0HI7z pOX6Z+IJ6NAGyS0QStQWs8mrug3oEWtKi3b3kvc5Y1496z/qGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI8WGSyuzKsc99+cStw2+vmPU9LxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMDkzODllNWItODYxMy0z OTI0LWE4ZTktOGRlY2YwNDZkYjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYON MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFceNn7mpAvyzGdeE8xa+fX5c5tyyv2Nadcs2pS7wp2016Z+7PoW eZ9ytEDOl6p4H0noT8lKGzPHihy1rGJ3sKbNk1Bi04sRqgys8IXNjkRHozpTwqY5 2aVKAwh75wX2w0GPvSTK0NvA2hhJoK5borVS2fqgq+CvzOXbXWWVzmOsuhC17lMz 3kL+tsOE5rnu02p2YUYJGl7fAqcsea/HPd47f+0rk5Rrs29ReYs1DVwczevBO+1/ MvUlHXubHozOLDDmWZOV5S1i2K679JTopSyyrp/Wg6pgtJ3LcSKr03BmUC+ktQpY xkwfqi9itKZl6J1S8xIClgiThlYYAEZQ+9U= -----END CERTIFICATE-----Generated at Mon Oct 20 10:23:38 2025 by rpki-client