$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cb25b00e-0b1a-374d-a31c-f89abc87586b.roa File: cb25b00e-0b1a-374d-a31c-f89abc87586b.roa (raw, json) Hash identifier: 7WTZyqDgSOi83RcQCdU1MO0KsO2MGBiHpVWLh1iWpd8= Subject key identifier: 6E:FE:16:9A:96:10:91:DC:1F:EF:44:88:85:1D:0C:49:45:0B:10:36 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584B7F524F155B0B3B9FFDCCBF80 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cb25b00e-0b1a-374d-a31c-f89abc87586b.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 33363 IP address blocks: 2607:f098:3000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:4f:15:5b:0b:3b:9f:fd:cc:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=24fc4572-9e01-47d5-bb08-d4cf1dca87c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:72:bf:26:0b:c9:be:91:20:31:02:6b:46:dc: 02:53:52:1b:de:00:0f:ba:58:21:ed:04:b1:d9:3d: 14:32:ee:d0:6c:97:d0:0c:46:4f:34:f0:1d:eb:a9: f1:70:61:d3:d5:c2:90:80:45:9b:b4:aa:45:8c:0b: 04:03:0e:ac:07:45:76:5e:a9:d0:99:43:11:5a:be: 81:c8:3d:4c:12:03:d0:37:e6:7b:1b:ad:58:1f:66: c0:e0:88:62:44:19:4e:f2:f2:f0:8e:3e:7f:9d:57: bb:36:a1:6b:83:f5:d6:0b:87:8a:96:f8:da:23:69: b8:23:4d:fc:e2:d0:c3:3a:97:62:ab:06:b0:01:bb: 59:5b:4c:77:a8:8e:bd:5e:cc:aa:e5:bf:48:e4:45: 93:6e:0f:79:31:25:0f:c4:ed:d8:ed:0d:7b:66:6e: 8a:27:0d:4e:23:01:05:e3:20:fe:7b:c6:48:4b:56: 30:0e:57:9a:3f:9b:f2:09:77:c8:22:20:d3:fc:96: 8f:80:8b:ef:7e:60:d9:26:ae:30:1e:f0:3c:6e:ec: 47:47:de:4f:71:63:4b:52:ee:3a:f7:13:ec:c2:29: b1:a5:18:48:7a:23:cd:90:6c:0d:83:aa:76:bd:fd: 3b:f3:eb:07:8a:e7:7f:c0:75:98:0e:4e:22:9a:a0: cc:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:FE:16:9A:96:10:91:DC:1F:EF:44:88:85:1D:0C:49:45:0B:10:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cb25b00e-0b1a-374d-a31c-f89abc87586b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv6: 2607:f098:3000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:ae:7d:1d:ab:19:9a:9e:0b:15:ed:8d:ca:41:c9:7a:e8:ef: 43:28:ae:44:7f:47:e5:2d:dd:32:93:dd:02:cb:6f:4e:94:c0: ec:54:52:38:5e:10:7f:f4:e6:bc:d4:a3:09:f9:f4:d8:0e:27: c5:79:f9:9e:b6:75:ee:79:71:f0:7b:5c:c3:7d:d3:14:2b:e6: 0c:dd:d1:b1:e8:bd:ef:6f:37:53:ac:c3:25:53:c1:07:c2:d9: 4d:ab:d9:77:91:ac:91:51:5e:3f:dd:f8:5d:ba:06:24:e1:eb: 96:8f:40:c1:42:04:77:c0:a6:13:fe:15:17:62:3b:c6:9b:dc: 59:ff:c7:0a:ce:0a:6a:76:5a:4a:7f:b0:1c:5c:b5:75:76:af: bb:01:9a:82:b1:da:9f:c8:4d:cb:1e:cb:1f:6b:92:60:22:4a: 9e:2d:c5:57:30:f0:1e:bf:08:f1:14:75:84:a2:62:7e:b9:72: 0d:05:85:51:0f:cd:6c:e4:fe:d0:ab:db:b1:73:55:e4:18:d9: e3:56:19:b0:23:92:c9:3c:4d:14:81:af:5f:53:4a:8a:8a:b5: 01:5f:40:57:02:4a:83:ba:cb:72:6d:25:10:d1:d1:75:e6:4a: 38:ad:65:1e:70:b0:ec:f1:9f:dc:78:a7:a9:fe:4b:c1:b5:16: 44:32:18:28 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEt/Uk8VWws7n/3Mv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk MjRmYzQ1NzItOWUwMS00N2Q1LWJiMDgtZDRjZjFkY2E4N2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXK/JgvJvpEgMQJrRtwCU1Ib3gAPulgh7QSx 2T0UMu7QbJfQDEZPNPAd66nxcGHT1cKQgEWbtKpFjAsEAw6sB0V2XqnQmUMRWr6B yD1MEgPQN+Z7G61YH2bA4IhiRBlO8vLwjj5/nVe7NqFrg/XWC4eKlvjaI2m4I038 4tDDOpdiqwawAbtZW0x3qI69Xsyq5b9I5EWTbg95MSUPxO3Y7Q17Zm6KJw1OIwEF 4yD+e8ZIS1YwDleaP5vyCXfIIiDT/JaPgIvvfmDZJq4wHvA8buxHR95PcWNLUu46 9xPswimxpRhIeiPNkGwNg6p2vf078+sHiud/wHWYDk4imqDMXQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFG7+FpqWEJHcH+9EiIUdDElFCxA2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvY2IyNWIwMGUtMGIxYS0z NzRkLWEzMWMtZjg5YWJjODc1ODZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgfwmDAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAMa59HasZmp4LFe2NykHJeujvQyiuRH9H5S3dMpPdAstvTpTA7FRS OF4Qf/TmvNSjCfn02A4nxXn5nrZ17nlx8Htcw33TFCvmDN3Rsei97283U6zDJVPB B8LZTavZd5GskVFeP934XboGJOHrlo9AwUIEd8CmE/4VF2I7xpvcWf/HCs4KanZa Sn+wHFy1dXavuwGagrHan8hNyx7LH2uSYCJKni3FVzDwHr8I8RR1hKJifrlyDQWF UQ/NbOT+0KvbsXNV5BjZ41YZsCOSyTxNFIGvX1NKioq1AV9AVwJKg7rLcm0lENHR deZKOK1lHnCw7PGf3Hinqf5LwbUWRDIYKA== -----END CERTIFICATE-----Generated at Mon Oct 20 08:17:23 2025 by rpki-client