$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2adf0586-7cd5-36ac-adfe-58d6b1620455.roa File: 2adf0586-7cd5-36ac-adfe-58d6b1620455.roa (raw, json) Hash identifier: BmMvANRgWB2bgSku2+2QkjLM0A5aI/U3w9f5GhS8vJI= Subject key identifier: 6D:36:F3:7A:41:3F:63:02:8D:BD:21:58:B5:42:06:5F:D0:97:53:45 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584B7F522D5ABE5CDAEFA08BA7C0 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2adf0586-7cd5-36ac-adfe-58d6b1620455.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 33363 IP address blocks: 2605:a401:87a9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:2d:5a:be:5c:da:ef:a0:8b:a7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=e67aebf6-a3ec-4533-aec6-45fa427de540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:38:c9:c5:20:e1:01:1a:c2:04:32:f3:a7:f1: 2d:ec:80:96:d3:be:ba:88:5e:0a:3b:85:fc:1d:7e: 67:c4:06:7a:2d:96:8e:ba:a6:16:a0:c9:24:52:53: 89:b4:1e:04:8e:48:94:01:6d:95:58:76:63:82:2b: 52:11:6a:b1:a4:78:04:9a:3b:1a:ed:4e:e4:3c:9c: 23:49:af:84:8a:74:67:ed:99:a4:ae:ee:ef:74:8d: d0:f4:ac:1a:61:54:ae:17:17:9f:84:5c:47:52:0a: cc:af:cc:5b:69:f4:b1:05:f1:ad:45:71:05:6f:5a: 93:31:bb:53:2f:f8:2d:70:97:4e:d1:67:71:fa:38: 6f:c8:b0:e3:40:1f:9c:71:93:31:7f:6d:c0:e6:9b: df:14:e5:e8:56:75:05:39:00:f7:94:5d:3f:51:c2: 80:8a:12:df:00:12:42:ee:47:8d:09:43:cb:7b:ae: 04:b2:74:44:8f:b6:a0:54:d8:58:c5:35:cc:38:70: 4c:65:3d:aa:6a:78:93:81:20:3e:4b:bb:9f:9e:c5: 62:cb:26:cc:50:b2:99:00:9a:ac:d3:95:6b:92:7c: 29:84:d5:cf:3d:64:dd:9c:85:8c:b4:31:ab:80:d4: 7b:8c:2a:43:1b:fc:68:c9:8b:06:0a:c2:11:8c:15: ad:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:36:F3:7A:41:3F:63:02:8D:BD:21:58:B5:42:06:5F:D0:97:53:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2adf0586-7cd5-36ac-adfe-58d6b1620455.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv6: 2605:a401:87a9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:de:72:fc:48:07:47:fb:ea:ac:1c:1b:eb:72:cc:ba:a1:b8: 34:c2:c9:0f:ea:3a:02:f7:fe:f9:e0:59:0e:72:70:01:07:16: 37:ab:36:32:a9:70:a3:75:78:aa:57:4b:7c:9d:c3:76:19:64: 18:89:70:20:5b:15:65:82:26:cc:00:ad:fb:33:ae:33:4a:40: d9:47:65:11:5d:f2:e3:8b:30:0f:17:30:8c:35:c5:20:7a:de: 35:2f:04:bb:a9:e3:54:ab:89:83:b4:59:e5:91:38:f7:34:d4: 83:59:b3:e0:d3:a4:99:0e:91:2f:03:0a:7f:c1:d2:6b:a7:ad: 7d:20:04:f7:2d:8f:f1:57:ce:6b:92:9e:3d:7a:8a:1c:a8:48: a1:26:08:9e:05:68:66:8e:d3:e8:29:d4:54:ce:cb:50:16:7c: 8f:92:e5:26:97:42:f7:75:3a:b4:5f:90:20:ca:2c:1f:00:c9: 79:50:17:d0:12:13:5c:be:4b:cd:3c:3c:54:e7:f0:bb:d0:29: 69:45:c3:88:d3:a9:55:4d:da:a1:44:d5:9e:ad:25:92:00:98: 2c:d0:d7:c6:40:f2:06:ec:62:03:28:f4:b6:e3:fb:0c:44:86: d5:12:d9:13:37:82:d4:e8:51:10:d5:db:1e:20:0f:75:ec:ee: 54:51:fe:46 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt/Ui1avlza76CLp8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk ZTY3YWViZjYtYTNlYy00NTMzLWFlYzYtNDVmYTQyN2RlNTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijjJxSDhARrCBDLzp/Et7ICW0766iF4KO4X8 HX5nxAZ6LZaOuqYWoMkkUlOJtB4EjkiUAW2VWHZjgitSEWqxpHgEmjsa7U7kPJwj Sa+EinRn7Zmkru7vdI3Q9KwaYVSuFxefhFxHUgrMr8xbafSxBfGtRXEFb1qTMbtT L/gtcJdO0Wdx+jhvyLDjQB+ccZMxf23A5pvfFOXoVnUFOQD3lF0/UcKAihLfABJC 7keNCUPLe64EsnREj7agVNhYxTXMOHBMZT2qaniTgSA+S7ufnsViyybMULKZAJqs 05VrknwphNXPPWTdnIWMtDGrgNR7jCpDG/xoyYsGCsIRjBWt6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG0283pBP2MCjb0hWLVCBl/Ql1NFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMmFkZjA1ODYtN2NkNS0z NmFjLWFkZmUtNThkNmIxNjIwNDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYep MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFfecvxIB0f76qwcG+tyzLqhuDTCyQ/qOgL3/vngWQ5ycAEHFjer NjKpcKN1eKpXS3ydw3YZZBiJcCBbFWWCJswArfszrjNKQNlHZRFd8uOLMA8XMIw1 xSB63jUvBLup41SriYO0WeWROPc01INZs+DTpJkOkS8DCn/B0munrX0gBPctj/FX zmuSnj16ihyoSKEmCJ4FaGaO0+gp1FTOy1AWfI+S5SaXQvd1OrRfkCDKLB8AyXlQ F9ASE1y+S808PFTn8LvQKWlFw4jTqVVN2qFE1Z6tJZIAmCzQ18ZA8gbsYgMo9Lbj +wxEhtUS2RM3gtToURDV2x4gD3Xs7lRR/kY= -----END CERTIFICATE-----Generated at Mon Oct 20 15:48:42 2025 by rpki-client