$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/968165e5-88c3-3387-a5d8-ab18559ba120.roa File: 968165e5-88c3-3387-a5d8-ab18559ba120.roa (raw, json) Hash identifier: MPy1OTPYKlhcFi+Ws3v34OoxfXmFfN4CB/d2Q1RMSho= Subject key identifier: 0E:68:9D:E1:BA:67:BE:E2:92:96:13:5C:53:B2:A5:9A:C5:50:B7:96 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584B7F5224B5622FF6D511A14600 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/968165e5-88c3-3387-a5d8-ab18559ba120.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 33363 IP address blocks: 2605:a401:817b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:24:b5:62:2f:f6:d5:11:a1:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=bba14316-cafa-4e68-9d59-a5c97df7569b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:74:bf:06:e2:4c:ac:b1:41:86:00:b8:53:b9: 16:6b:c1:c5:3e:f0:99:45:af:0d:ab:b3:df:76:00: 77:49:d3:2e:88:bc:5e:8f:72:eb:f1:24:19:74:f6: 74:e7:b3:fb:21:36:55:5c:5e:63:6b:d6:fb:7a:e4: 66:51:a2:40:9f:d0:a1:df:9f:8a:08:8c:47:88:50: 92:c1:c3:8c:31:a6:3f:76:99:a7:3e:fa:bd:bb:88: c6:7c:4d:70:48:fc:ef:09:cd:5b:06:2a:f4:7a:da: 7a:56:2f:d9:e7:8d:3b:b3:6c:aa:eb:b7:5a:6b:1d: cf:cf:39:b3:72:51:e5:25:37:e4:f8:ea:fc:31:d6: 16:40:1f:43:79:e2:c2:74:59:7a:ce:ca:64:2c:19: 85:18:a1:a5:76:dd:3c:19:00:f1:1f:21:44:42:bd: 99:c3:d1:ef:a2:05:78:ba:01:24:2e:c5:3f:2f:92: 17:12:26:3a:c7:0a:da:3c:9f:69:ec:a9:cc:a7:3d: fd:c7:94:b4:4f:61:4c:e8:46:35:30:e6:a2:9a:0f: f8:c0:b7:5e:d8:53:4d:09:26:25:70:05:4e:3c:09: 17:0d:ac:e3:9b:8c:22:69:72:a2:50:13:ad:2d:dd: 1d:db:c5:c1:4a:59:20:12:ac:de:89:1a:06:24:24: cd:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:68:9D:E1:BA:67:BE:E2:92:96:13:5C:53:B2:A5:9A:C5:50:B7:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/968165e5-88c3-3387-a5d8-ab18559ba120.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv6: 2605:a401:817b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:92:6c:7e:c0:66:d3:5c:c3:5f:34:7d:40:6d:0e:4c:6b:44: 6d:e7:54:a2:8a:f9:68:6e:0d:ff:73:4c:02:cc:14:e6:ee:f7: a3:da:31:71:ba:5f:55:58:26:47:7d:a2:0b:20:c5:ee:ed:52: 0e:00:ab:c2:7e:c3:7f:7b:c6:8b:c0:63:00:26:7e:d6:42:40: 06:d5:cb:b4:4a:80:98:83:96:fd:21:da:5b:59:9d:9d:24:5f: 15:af:90:99:97:81:51:06:ed:01:fe:52:b6:0d:51:bc:1d:af: ae:2d:12:12:88:66:60:b9:ed:45:77:50:39:cb:f4:15:ed:eb: 86:88:77:5e:7c:4a:c4:af:7f:36:0d:41:97:e6:f2:e6:9f:bd: 35:c9:14:45:cf:d5:63:25:a4:00:6e:dd:f7:ac:5b:1b:32:7a: ed:1b:94:35:70:79:58:b6:d0:1d:16:25:66:d0:7c:c3:cd:7c: 7b:53:7d:22:59:60:6b:48:ca:f2:33:47:31:91:73:ba:55:12: b5:0b:9c:5a:db:85:c3:f6:a9:77:62:2f:2b:15:17:2c:60:77: 78:88:db:c7:57:01:37:83:d1:2a:36:16:57:16:f2:6c:cf:7a: 4b:d1:0f:0b:03:a6:54:a9:f6:39:45:c9:e2:7a:e5:f4:71:04: 5d:38:0d:e7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt/UiS1Yi/21RGhRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk YmJhMTQzMTYtY2FmYS00ZTY4LTlkNTktYTVjOTdkZjc1NjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnS/BuJMrLFBhgC4U7kWa8HFPvCZRa8Nq7Pf dgB3SdMuiLxej3Lr8SQZdPZ057P7ITZVXF5ja9b7euRmUaJAn9Ch35+KCIxHiFCS wcOMMaY/dpmnPvq9u4jGfE1wSPzvCc1bBir0etp6Vi/Z5407s2yq67daax3Pzzmz clHlJTfk+Or8MdYWQB9DeeLCdFl6zspkLBmFGKGldt08GQDxHyFEQr2Zw9HvogV4 ugEkLsU/L5IXEiY6xwraPJ9p7KnMpz39x5S0T2FM6EY1MOaimg/4wLde2FNNCSYl cAVOPAkXDazjm4wiaXKiUBOtLd0d28XBSlkgEqzeiRoGJCTNoQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA5oneG6Z77ikpYTXFOypZrFULeWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvOTY4MTY1ZTUtODhjMy0z Mzg3LWE1ZDgtYWIxODU1OWJhMTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYF7 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACySbH7AZtNcw180fUBtDkxrRG3nVKKK+WhuDf9zTALMFObu96Pa MXG6X1VYJkd9ogsgxe7tUg4Aq8J+w397xovAYwAmftZCQAbVy7RKgJiDlv0h2ltZ nZ0kXxWvkJmXgVEG7QH+UrYNUbwdr64tEhKIZmC57UV3UDnL9BXt64aId158SsSv fzYNQZfm8uafvTXJFEXP1WMlpABu3fesWxsyeu0blDVweVi20B0WJWbQfMPNfHtT fSJZYGtIyvIzRzGRc7pVErULnFrbhcP2qXdiLysVFyxgd3iI28dXATeD0So2FlcW 8mzPekvRDwsDplSp9jlFyeJ65fRxBF04Dec= -----END CERTIFICATE-----Generated at Mon Oct 20 10:28:34 2025 by rpki-client