$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a2875bb0-0a9f-3a4d-aca7-0d0e847b1dc4.roa File: a2875bb0-0a9f-3a4d-aca7-0d0e847b1dc4.roa (raw, json) Hash identifier: XOF2uT7KZLE/n3fuZfUdoiSRc9zH6qfKx5+YZORXj9w= Subject key identifier: 22:8F:95:40:29:C8:32:B4:7B:0D:B9:99:39:09:F7:F1:01:DA:8A:49 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584B7F524281D1604E2AAFFD0500 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a2875bb0-0a9f-3a4d-aca7-0d0e847b1dc4.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 19115 IP address blocks: 2607:f098::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:42:81:d1:60:4e:2a:af:fd:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=124bda95-00d6-4361-ab16-937e7dd8656c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2a:b9:46:76:3a:a8:b0:c4:38:43:e9:d8:90: ea:00:83:b4:78:4c:a1:73:d8:7f:ce:b2:4b:ec:db: 53:a5:93:34:66:5c:fc:52:85:0f:46:a8:90:4f:71: 15:3c:8e:93:2e:25:c1:a0:ec:04:36:d8:76:49:65: 7d:74:a3:dc:9b:4f:41:65:4f:7f:cb:08:eb:87:04: 36:51:a3:c8:a0:d5:dd:30:06:6e:73:7d:de:93:6f: 10:28:e8:75:40:e4:8b:a2:7e:e7:8d:26:ae:e4:57: 57:b9:d9:ca:06:81:b1:da:cf:ce:fd:10:1c:ee:a3: ce:0e:42:c4:c2:e7:1e:5c:fb:93:82:89:8c:1b:1a: fe:bf:90:f7:e2:17:88:96:a5:d0:32:6a:c8:c0:d2: 20:5f:9f:0c:d4:77:45:80:e0:97:fd:63:a0:21:21: 47:bf:7f:38:ad:0a:ce:22:f7:42:a7:35:31:ac:ac: 8d:da:9d:e9:08:a3:64:e4:19:b3:06:3f:9c:98:92: e7:21:35:9e:87:de:06:37:bc:8f:95:9d:72:1c:35: 02:8d:83:a0:9c:a0:6a:74:e0:d0:7d:02:ba:8a:f6: 27:cf:cb:e9:3d:10:ae:20:79:98:63:12:32:72:c9: 5b:18:8f:81:6d:6b:a9:32:22:84:a6:fc:6e:6a:d2: fa:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:8F:95:40:29:C8:32:B4:7B:0D:B9:99:39:09:F7:F1:01:DA:8A:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a2875bb0-0a9f-3a4d-aca7-0d0e847b1dc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv6: 2607:f098::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:7c:ed:ca:d7:f5:c2:6d:7f:b4:53:45:9e:97:26:b1:ca:fe: db:ea:85:e1:d3:2e:4c:e7:1e:4e:58:59:ec:4a:8f:b6:26:fa: b7:b7:0c:1a:6d:19:7b:68:ba:8e:45:3a:26:4b:17:77:77:8b: ac:8d:ee:20:aa:85:0d:ba:49:66:c9:e0:86:52:34:cf:17:31: 5f:67:4d:7a:99:ba:0f:6b:85:c5:20:36:a1:0a:6a:43:cd:ad: 3b:fa:8c:bc:5a:ea:48:60:5d:04:28:01:63:b3:04:b2:e7:b1: 51:76:77:3e:59:b6:43:ae:d7:c6:d3:11:39:23:be:fa:f8:8b: e7:13:2e:26:0d:b9:2b:07:4f:28:a4:e7:f3:73:7d:02:ff:cb: a7:35:e3:18:57:49:7a:c4:8f:60:85:93:08:f1:9b:7f:b7:97: 29:b2:e5:2a:e6:8a:08:96:4c:ea:ff:78:c9:7a:22:24:50:6c: 67:fb:26:7d:96:66:67:4b:18:9c:61:41:53:74:fb:e1:e2:60: 3b:53:c9:d0:5a:47:79:a9:62:00:3c:8f:0a:23:88:c4:e8:49: a8:2e:f1:a0:03:76:73:41:f2:fc:fd:e5:3b:45:db:f4:17:c5: de:96:f7:36:bb:56:28:44:b1:10:2e:1a:81:89:38:c5:f1:ca: ca:69:c7:cd -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UkKB0WBOKq/9BQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk MTI0YmRhOTUtMDBkNi00MzYxLWFiMTYtOTM3ZTdkZDg2NTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCq5RnY6qLDEOEPp2JDqAIO0eEyhc9h/zrJL 7NtTpZM0Zlz8UoUPRqiQT3EVPI6TLiXBoOwENth2SWV9dKPcm09BZU9/ywjrhwQ2 UaPIoNXdMAZuc33ek28QKOh1QOSLon7njSau5FdXudnKBoGx2s/O/RAc7qPODkLE wuceXPuTgomMGxr+v5D34heIlqXQMmrIwNIgX58M1HdFgOCX/WOgISFHv384rQrO IvdCpzUxrKyN2p3pCKNk5BmzBj+cmJLnITWeh94GN7yPlZ1yHDUCjYOgnKBqdODQ fQK6ivYnz8vpPRCuIHmYYxIycslbGI+BbWupMiKEpvxuatL6AwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCKPlUApyDK0ew25mTkJ9/EB2opJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYTI4NzViYjAtMGE5Zi0z YTRkLWFjYTctMGQwZTg0N2IxZGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfwmDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAtfO3K1/XCbX+0U0Welyaxyv7b6oXh0y5M5x5OWFnsSo+2Jvq3twwa bRl7aLqORTomSxd3d4usje4gqoUNuklmyeCGUjTPFzFfZ016mboPa4XFIDahCmpD za07+oy8WupIYF0EKAFjswSy57FRdnc+WbZDrtfG0xE5I776+IvnEy4mDbkrB08o pOfzc30C/8unNeMYV0l6xI9ghZMI8Zt/t5cpsuUq5ooIlkzq/3jJeiIkUGxn+yZ9 lmZnSxicYUFTdPvh4mA7U8nQWkd5qWIAPI8KI4jE6EmoLvGgA3ZzQfL8/eU7Rdv0 F8Xelvc2u1YoRLEQLhqBiTjF8crKacfN -----END CERTIFICATE-----Generated at Mon Oct 20 08:17:24 2025 by rpki-client