$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4393a060-0e2f-3249-9574-2ed7f187f0eb.roa File: 4393a060-0e2f-3249-9574-2ed7f187f0eb.roa (raw, json) Hash identifier: uApPQDTGEAy/O+XlVEXqrY5JjHy3EBYFjblHXphXnK8= Subject key identifier: 97:8B:78:28:E7:1E:C4:34:E1:8D:BB:FE:29:71:7F:4A:9A:16:6E:79 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584B7F525148921513D986076FB0 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4393a060-0e2f-3249-9574-2ed7f187f0eb.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 33363 IP address blocks: 2605:a401:8090::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:51:48:92:15:13:d9:86:07:6f:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=9ea2d431-67a9-402e-b94d-45adf119c5cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:42:e6:ef:50:87:01:fe:d9:60:56:bd:17:1e: 00:8c:e9:a7:03:94:a7:77:e0:7e:31:7d:32:b1:53: 1d:6d:bf:50:6a:bf:d8:b3:e7:db:21:f8:4a:9c:70: b3:5e:48:44:6c:64:1f:d4:7e:7d:e5:df:68:6a:9b: 99:cb:02:5e:88:73:26:96:5b:9e:f8:9c:3c:b0:8f: 47:a7:d4:35:12:08:c4:e0:39:88:50:01:bc:3f:37: b8:78:d6:7d:d8:84:44:64:5c:72:81:0f:24:a7:29: 62:5b:40:0c:54:6b:d4:03:ea:7e:d9:e2:9a:cf:be: 5c:84:c4:7a:10:08:40:f8:17:88:44:04:1a:af:b1: a6:be:8f:36:d1:48:9c:7d:2a:e7:87:f1:dd:2d:0c: fb:44:07:86:34:4f:81:66:3b:d6:9d:52:98:70:df: ea:9d:7a:40:c5:46:13:ca:18:ea:af:c9:e9:b1:db: 04:ba:b2:88:78:1a:a4:ea:61:9f:d3:e0:20:2b:62: f4:9e:b6:4c:b3:3d:f1:57:c9:6a:34:0d:ce:ed:22: c7:0a:b3:4d:4e:41:ce:e3:e1:86:40:e5:24:ed:8a: 97:0f:2b:08:05:77:46:00:26:b3:19:07:f6:ca:14: f3:36:49:62:32:14:1a:eb:6a:bb:d3:6e:63:36:c7: c2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:8B:78:28:E7:1E:C4:34:E1:8D:BB:FE:29:71:7F:4A:9A:16:6E:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4393a060-0e2f-3249-9574-2ed7f187f0eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv6: 2605:a401:8090::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:02:2a:9a:24:72:e3:04:15:ab:40:0b:cb:02:ec:8e:33:f5: 12:18:99:03:96:74:26:26:9e:53:39:5f:c3:eb:fa:a0:eb:9e: 06:8c:76:f9:a8:bd:d0:5c:e5:a9:37:65:60:09:5e:65:f1:7e: 1c:4c:08:d7:e3:36:e3:fe:d6:27:d4:57:c2:b7:64:1f:3e:3b: 44:53:ea:65:0e:3a:89:00:54:8c:8c:1f:7f:8b:0c:c4:79:74: 79:ae:52:71:cd:29:42:5e:48:e6:8f:ba:be:a8:c1:4f:3a:fb: 4b:4a:8e:c3:ce:ed:b7:4d:c4:25:f5:08:67:b8:09:70:84:69: ef:a2:ca:86:c4:d2:b5:6b:be:23:aa:59:9a:61:9b:57:f3:bb: 8f:f3:12:c8:e6:fd:0e:4a:63:53:06:30:ee:f8:42:7b:e6:cb: 9a:59:7b:72:98:40:a9:6f:40:90:36:ef:a5:b2:dd:b0:78:62: 78:0b:a9:30:c1:c7:46:04:e9:39:e7:62:94:22:b1:25:bf:1e: a4:db:a0:b9:76:31:0f:bc:be:0e:d9:50:30:cc:22:03:c4:e5: 1b:5d:11:0e:4a:b9:66:d2:c9:b8:b8:f3:01:8e:65:a3:03:8d: 4e:56:da:6e:32:c6:ee:74:32:bc:c6:88:20:74:6a:fc:6d:27: 80:9c:1a:33 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt/UlFIkhUT2YYHb7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk OWVhMmQ0MzEtNjdhOS00MDJlLWI5NGQtNDVhZGYxMTljNWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ULm71CHAf7ZYFa9Fx4AjOmnA5Snd+B+MX0y sVMdbb9Qar/Ys+fbIfhKnHCzXkhEbGQf1H595d9oapuZywJeiHMmllue+Jw8sI9H p9Q1EgjE4DmIUAG8Pze4eNZ92IREZFxygQ8kpyliW0AMVGvUA+p+2eKaz75chMR6 EAhA+BeIRAQar7Gmvo820UicfSrnh/HdLQz7RAeGNE+BZjvWnVKYcN/qnXpAxUYT yhjqr8npsdsEurKIeBqk6mGf0+AgK2L0nrZMsz3xV8lqNA3O7SLHCrNNTkHO4+GG QOUk7YqXDysIBXdGACazGQf2yhTzNkliMhQa62q7025jNsfC8QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJeLeCjnHsQ04Y27/ilxf0qaFm55MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNDM5M2EwNjAtMGUyZi0z MjQ5LTk1NzQtMmVkN2YxODdmMGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYCQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFACKpokcuMEFatAC8sC7I4z9RIYmQOWdCYmnlM5X8Pr+qDrngaM dvmovdBc5ak3ZWAJXmXxfhxMCNfjNuP+1ifUV8K3ZB8+O0RT6mUOOokAVIyMH3+L DMR5dHmuUnHNKUJeSOaPur6owU86+0tKjsPO7bdNxCX1CGe4CXCEae+iyobE0rVr viOqWZphm1fzu4/zEsjm/Q5KY1MGMO74Qnvmy5pZe3KYQKlvQJA276Wy3bB4YngL qTDBx0YE6TnnYpQisSW/HqTboLl2MQ+8vg7ZUDDMIgPE5RtdEQ5KuWbSybi48wGO ZaMDjU5W2m4yxu50MrzGiCB0avxtJ4CcGjM= -----END CERTIFICATE-----Generated at Mon Oct 20 08:14:11 2025 by rpki-client