$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/af75499f-b1bf-3457-87dd-6cd7353b32a6.roa File: af75499f-b1bf-3457-87dd-6cd7353b32a6.roa (raw, json) Hash identifier: 2e3wdNyQegoBtSEXVFJK6qKKUIUk1HxcXBZGfhl4Lbw= Subject key identifier: CD:CE:5D:51:42:4C:E6:E0:F9:62:98:02:29:AE:7B:D7:DA:C8:D7:60 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584B7F5228B22475D60A74C43D40 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/af75499f-b1bf-3457-87dd-6cd7353b32a6.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 33363 IP address blocks: 2605:a401:807b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:28:b2:24:75:d6:0a:74:c4:3d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=bbb8e7d7-95eb-4af9-bd48-de1c16120427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:86:a2:1e:bb:3f:22:74:f4:61:89:c9:82:ab: 5b:fd:4b:35:ae:49:e0:2b:0a:e5:6f:3e:99:42:9d: 57:07:90:6f:f2:90:fb:ef:bf:a0:77:ab:91:69:36: bd:5e:6d:67:e8:ef:f3:c6:31:0f:cd:54:5c:f0:02: 3a:81:80:b8:95:bb:cc:a5:eb:ad:9c:e6:d1:b8:b9: f1:37:8d:48:70:4c:0b:aa:43:5b:03:05:9e:7b:66: 37:a1:42:89:2d:a3:51:52:f0:62:d0:cf:4c:b4:3c: b3:e8:55:5c:b7:69:41:63:47:85:90:33:0a:25:67: 1a:91:1b:27:0b:38:dc:c7:6d:88:73:ff:7d:7a:34: d4:28:a1:13:94:09:f2:15:29:55:56:e4:bc:2e:b8: 04:3e:5d:c2:fa:c7:2b:a2:97:79:c7:91:71:68:0e: bc:1b:06:ad:69:61:80:de:05:04:b6:82:79:e4:9d: 68:ec:8d:d9:9f:e8:bc:85:d6:b5:0e:ec:c9:16:36: ee:b9:61:66:a4:bc:64:ae:d5:75:54:c7:c3:26:22: 67:6d:0c:cf:59:f1:1c:32:7b:2b:7f:55:9d:87:5f: a0:68:6b:b5:1d:78:10:9e:80:89:7e:15:bf:80:14: 8d:c8:e6:39:57:ea:ee:2d:a2:c8:1f:cc:89:fd:bf: 5e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:CE:5D:51:42:4C:E6:E0:F9:62:98:02:29:AE:7B:D7:DA:C8:D7:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/af75499f-b1bf-3457-87dd-6cd7353b32a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv6: 2605:a401:807b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:bd:84:4d:4c:8b:90:60:2a:3c:d8:3e:7d:e5:d9:40:c8:1c: 4b:d5:88:cb:b4:ba:17:ea:0c:f2:f3:c6:02:23:b4:c8:36:db: b1:50:13:a2:b8:5f:53:7f:da:a7:77:67:34:7d:9d:8d:96:de: a8:78:38:f9:0a:a5:14:57:5f:4d:9f:c8:bf:4f:74:79:26:4c: 37:47:29:fe:d6:68:36:3b:53:17:64:9e:7e:d0:70:70:5e:32: b6:d3:39:cf:2e:26:e0:bd:d4:4f:3a:c7:f5:f4:23:bf:42:88: 1f:22:c4:b1:74:67:0e:c0:8a:c0:87:38:b2:c9:10:8c:e6:e6: 0c:ef:6d:b7:c0:d1:d0:23:2b:eb:1b:0d:4b:a5:95:ef:4c:a4: 94:ce:3c:e3:f4:17:30:2e:fc:ae:e8:d7:60:ea:a8:45:a9:f7: 1e:d1:30:ca:bf:51:3b:34:04:ae:dc:14:df:0b:52:f6:71:17: e9:f6:64:32:ea:27:af:77:87:91:99:d4:52:24:30:d1:80:29: 66:8a:c7:6f:16:71:f6:33:d0:8c:b7:0f:0d:19:ec:d8:93:0c: ab:c3:6f:ea:f8:ac:e6:37:64:71:29:c9:0a:36:73:ed:b4:c8: e8:4e:a3:77:57:22:75:2d:f4:31:0a:c7:fe:38:80:bc:59:07: fb:5d:1a:4d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt/UiiyJHXWCnTEPUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk YmJiOGU3ZDctOTVlYi00YWY5LWJkNDgtZGUxYzE2MTIwNDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4aiHrs/InT0YYnJgqtb/Us1rkngKwrlbz6Z Qp1XB5Bv8pD777+gd6uRaTa9Xm1n6O/zxjEPzVRc8AI6gYC4lbvMpeutnObRuLnx N41IcEwLqkNbAwWee2Y3oUKJLaNRUvBi0M9MtDyz6FVct2lBY0eFkDMKJWcakRsn Czjcx22Ic/99ejTUKKETlAnyFSlVVuS8LrgEPl3C+scropd5x5FxaA68GwataWGA 3gUEtoJ55J1o7I3Zn+i8hda1DuzJFjbuuWFmpLxkrtV1VMfDJiJnbQzPWfEcMnsr f1Wdh1+gaGu1HXgQnoCJfhW/gBSNyOY5V+ruLaLIH8yJ/b9e7QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM3OXVFCTObg+WKYAimue9fayNdgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYWY3NTQ5OWYtYjFiZi0z NDU3LTg3ZGQtNmNkNzM1M2IzMmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYB7 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEu9hE1Mi5BgKjzYPn3l2UDIHEvViMu0uhfqDPLzxgIjtMg227FQ E6K4X1N/2qd3ZzR9nY2W3qh4OPkKpRRXX02fyL9PdHkmTDdHKf7WaDY7Uxdknn7Q cHBeMrbTOc8uJuC91E86x/X0I79CiB8ixLF0Zw7AisCHOLLJEIzm5gzvbbfA0dAj K+sbDUulle9MpJTOPOP0FzAu/K7o12DqqEWp9x7RMMq/UTs0BK7cFN8LUvZxF+n2 ZDLqJ693h5GZ1FIkMNGAKWaKx28WcfYz0Iy3Dw0Z7NiTDKvDb+r4rOY3ZHEpyQo2 c+20yOhOo3dXInUt9DEKx/44gLxZB/tdGk0= -----END CERTIFICATE-----Generated at Mon Oct 20 15:58:49 2025 by rpki-client