$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c7f6c7b9-e2ac-3ef7-8a51-9e9a97676656.roa File: c7f6c7b9-e2ac-3ef7-8a51-9e9a97676656.roa (raw, json) Hash identifier: H6/a84Uxd7VBUB60cB/b5KKntw46D06gshbY+q+lTGY= Subject key identifier: BF:43:28:CD:84:C1:7D:78:AB:12:0F:FE:E1:B9:56:AA:02:27:30:97 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584B7F52591FFB1F1868EA267F80 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c7f6c7b9-e2ac-3ef7-8a51-9e9a97676656.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 33363 IP address blocks: 2605:a401:817e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:59:1f:fb:1f:18:68:ea:26:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=6821f2a8-1a51-48ec-a5e7-6ad4779d3014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9c:3a:ac:de:87:5d:9c:6d:c1:03:4e:03:d8: 19:5b:66:90:8b:84:29:11:9d:71:66:19:09:0a:96: 46:2b:3f:7a:3b:c0:24:cb:0f:6b:81:d3:c3:5c:55: 5e:df:79:80:56:28:fc:bc:ec:1b:9a:37:8f:9b:0d: 27:9b:f6:05:e7:79:aa:8c:5a:42:f5:c7:fb:a2:39: 00:3a:94:c4:c1:5c:98:d2:43:15:28:0a:b8:42:a1: 5f:47:df:d2:a8:ac:64:bc:3a:a6:e0:54:77:84:49: 77:19:ce:cf:76:d0:f9:ec:3f:ad:4e:34:00:25:7d: bf:d1:a9:cf:07:5d:07:77:21:f4:e1:43:e6:de:9f: 00:79:f4:f3:88:a9:ee:82:5e:d8:7a:9b:94:1c:14: ae:54:20:fd:3f:43:c2:62:cb:44:89:77:e6:1f:d5: e5:a9:58:17:fa:e3:b1:c3:0e:ed:c4:af:1c:c8:89: 57:bf:1d:f3:c2:08:4c:30:0b:6a:bb:3e:53:a7:1e: d5:a5:69:f3:49:b8:8a:8d:49:0a:72:c4:33:21:54: 9f:15:f6:47:06:c0:4c:1d:1f:a4:c7:ff:35:70:09: ab:0c:63:85:52:1a:dd:56:46:46:7d:21:d8:0b:b0: 64:6d:00:c7:2d:78:41:ad:8c:fa:a3:be:81:ce:5a: 96:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:43:28:CD:84:C1:7D:78:AB:12:0F:FE:E1:B9:56:AA:02:27:30:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c7f6c7b9-e2ac-3ef7-8a51-9e9a97676656.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv6: 2605:a401:817e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:73:5e:4c:89:9e:c3:3f:3d:b8:f5:a9:6f:37:bc:e9:de:e0: 9f:a4:31:9e:39:59:00:6c:50:c8:cb:ea:c8:57:09:b6:7d:b0: 4c:f3:ac:6f:ba:4f:db:f6:de:87:51:5c:31:61:fd:36:7d:68: 86:79:3e:1c:68:7f:77:93:f8:5a:03:2e:c6:13:d9:7d:4c:86: d6:06:17:56:8c:95:a8:8b:be:18:d0:c5:80:8b:dd:af:fd:93: 76:c6:e5:68:06:39:b7:a7:25:e5:19:1c:c2:6c:53:eb:63:fd: 74:fe:a4:46:af:af:8d:4f:86:8d:db:f4:5e:d5:4f:72:96:bf: 00:b1:c2:be:a9:8f:fc:9d:97:88:90:91:58:e2:8c:0d:4c:fb: 42:66:83:88:0e:09:a5:90:e5:0a:87:cd:4d:41:58:44:5a:9e: 76:bf:34:27:eb:70:18:7e:0d:87:7f:5f:c9:5d:85:e2:8e:78: b3:36:c3:b1:a6:6a:9e:6a:f4:07:e6:8d:07:f1:de:ea:e4:14: 35:eb:b5:bf:da:79:13:23:1e:58:73:8c:aa:29:de:5c:a3:0f: 93:5b:32:ba:ba:0e:9d:5d:14:21:46:44:21:33:2e:31:38:96: 19:b4:b1:c7:3b:c5:3d:c2:a0:18:24:64:10:70:74:8d:94:58: 3d:5a:11:2f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt/Ulkf+x8YaOomf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk NjgyMWYyYTgtMWE1MS00OGVjLWE1ZTctNmFkNDc3OWQzMDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpw6rN6HXZxtwQNOA9gZW2aQi4QpEZ1xZhkJ CpZGKz96O8Akyw9rgdPDXFVe33mAVij8vOwbmjePmw0nm/YF53mqjFpC9cf7ojkA OpTEwVyY0kMVKAq4QqFfR9/SqKxkvDqm4FR3hEl3Gc7PdtD57D+tTjQAJX2/0anP B10HdyH04UPm3p8AefTziKnugl7YepuUHBSuVCD9P0PCYstEiXfmH9XlqVgX+uOx ww7txK8cyIlXvx3zwghMMAtquz5Tpx7VpWnzSbiKjUkKcsQzIVSfFfZHBsBMHR+k x/81cAmrDGOFUhrdVkZGfSHYC7BkbQDHLXhBrYz6o76BzlqWLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL9DKM2EwX14qxIP/uG5VqoCJzCXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYzdmNmM3YjktZTJhYy0z ZWY3LThhNTEtOWU5YTk3Njc2NjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYF+ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFJzXkyJnsM/Pbj1qW83vOne4J+kMZ45WQBsUMjL6shXCbZ9sEzz rG+6T9v23odRXDFh/TZ9aIZ5Phxof3eT+FoDLsYT2X1MhtYGF1aMlaiLvhjQxYCL 3a/9k3bG5WgGObenJeUZHMJsU+tj/XT+pEavr41Pho3b9F7VT3KWvwCxwr6pj/yd l4iQkVjijA1M+0Jmg4gOCaWQ5QqHzU1BWERanna/NCfrcBh+DYd/X8ldheKOeLM2 w7Gmap5q9AfmjQfx3urkFDXrtb/aeRMjHlhzjKop3lyjD5NbMrq6Dp1dFCFGRCEz LjE4lhm0scc7xT3CoBgkZBBwdI2UWD1aES8= -----END CERTIFICATE-----Generated at Mon Oct 20 08:15:59 2025 by rpki-client