$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f85e1c45-0290-3564-8c76-a2216b498c1b.roa File: f85e1c45-0290-3564-8c76-a2216b498c1b.roa (raw, json) Hash identifier: 0FBBN8x7B/jGWcCBEkP0Ds2j3amAJcCuSbvAEMRr/DA= Subject key identifier: E3:4E:EC:59:03:41:AF:A5:3B:04:52:52:E7:A7:42:12:34:3E:8E:41 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584B7F52576408942D428B9B9A80 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f85e1c45-0290-3564-8c76-a2216b498c1b.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 33363 IP address blocks: 2605:a401:803a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:57:64:08:94:2d:42:8b:9b:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=fec96c88-c4b7-433b-910d-c1c40fc9e379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:63:89:96:70:9f:57:36:46:77:f4:fa:1d:c0: c9:9d:9e:ba:a7:27:eb:c6:f3:a9:65:41:a3:65:b3: 57:22:a9:4a:71:eb:10:11:bc:b6:fa:74:68:2f:c5: 25:5c:b1:47:83:d3:e4:cb:ba:29:99:ab:6b:48:a1: 0b:57:e0:01:e0:e9:ef:d3:44:78:42:c6:55:b4:ec: 13:1b:96:11:c8:c2:84:9b:41:78:8a:07:4a:39:16: bb:9b:e8:97:4f:4c:18:d1:8b:32:dd:da:b8:2f:e3: 50:a9:41:d2:d2:1d:8f:f2:a6:c3:a2:c6:21:67:99: 69:1a:bd:fa:33:69:92:6e:ec:06:f8:6b:0a:14:6b: 82:3a:55:d8:f1:97:45:93:3e:6d:ac:57:fc:d5:4d: 8f:4c:ed:8d:d7:44:0f:bc:05:29:6c:d1:f7:c7:a3: 98:78:36:fe:e7:e2:94:fa:cd:d5:ab:32:87:ca:84: 6b:ee:0c:28:4a:ce:6b:cc:6d:c8:24:9e:c3:45:f0: 33:5c:30:56:fd:56:f1:76:90:5e:f4:8e:c4:b5:4c: 3c:63:2c:24:69:73:d4:63:32:dd:17:95:61:2a:01: 11:a7:61:c6:36:b2:d3:21:9f:2f:50:fa:b7:1e:90: 26:23:41:9b:fd:97:07:7f:0e:11:33:24:93:9a:88: c8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:4E:EC:59:03:41:AF:A5:3B:04:52:52:E7:A7:42:12:34:3E:8E:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f85e1c45-0290-3564-8c76-a2216b498c1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv6: 2605:a401:803a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:22:99:65:81:65:82:78:82:46:92:3a:82:65:11:c8:ce:a4: 3d:9f:a9:ed:02:bf:53:f8:e6:59:a8:84:88:f4:3e:08:30:95: 2e:78:06:03:e8:50:0f:c1:5c:dd:19:8c:93:8d:84:bf:ae:16: 30:db:5b:15:47:9d:d2:39:7b:41:de:d8:34:51:53:af:02:aa: 3d:cf:b8:0a:6b:c9:b2:36:fe:42:cd:98:8b:90:b2:c1:77:a4: 26:1a:4f:df:3e:48:d2:fa:7f:26:ed:13:2b:ac:d2:c4:bd:a4: ab:f5:d7:25:4c:e0:a5:af:10:fc:ea:4d:72:ea:48:75:bd:ca: fd:08:8f:d0:d0:4e:b0:64:44:73:07:93:1a:fc:85:19:17:c6: ad:ec:67:4b:0e:14:dc:5f:11:e0:41:5a:45:39:01:94:76:b4: 9b:ac:9d:94:0a:31:4e:b8:24:0c:37:28:9c:69:18:4c:3a:a7: 05:5f:a5:74:ef:c2:54:e9:7f:40:ce:2c:f8:02:53:da:5c:b9: ed:ac:71:6f:80:77:12:58:f6:b2:d3:b3:03:7e:8d:80:b3:13: ef:34:e5:15:9c:41:fd:18:2c:0b:a7:f3:8a:45:00:72:d0:eb: d5:90:0d:8a:50:e8:d3:87:05:22:52:85:19:98:b7:e5:f3:2f: 7b:4d:d3:f9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt/UldkCJQtQoubmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk ZmVjOTZjODgtYzRiNy00MzNiLTkxMGQtYzFjNDBmYzllMzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WOJlnCfVzZGd/T6HcDJnZ66pyfrxvOpZUGj ZbNXIqlKcesQEby2+nRoL8UlXLFHg9Pky7opmatrSKELV+AB4Onv00R4QsZVtOwT G5YRyMKEm0F4igdKORa7m+iXT0wY0Ysy3dq4L+NQqUHS0h2P8qbDosYhZ5lpGr36 M2mSbuwG+GsKFGuCOlXY8ZdFkz5trFf81U2PTO2N10QPvAUpbNH3x6OYeDb+5+KU +s3VqzKHyoRr7gwoSs5rzG3IJJ7DRfAzXDBW/VbxdpBe9I7EtUw8YywkaXPUYzLd F5VhKgERp2HGNrLTIZ8vUPq3HpAmI0Gb/ZcHfw4RMySTmojIzwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFONO7FkDQa+lOwRSUuenQhI0Po5BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZjg1ZTFjNDUtMDI5MC0z NTY0LThjNzYtYTIyMTZiNDk4YzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYA6 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC4imWWBZYJ4gkaSOoJlEcjOpD2fqe0Cv1P45lmohIj0PggwlS54 BgPoUA/BXN0ZjJONhL+uFjDbWxVHndI5e0He2DRRU68Cqj3PuAprybI2/kLNmIuQ ssF3pCYaT98+SNL6fybtEyus0sS9pKv11yVM4KWvEPzqTXLqSHW9yv0Ij9DQTrBk RHMHkxr8hRkXxq3sZ0sOFNxfEeBBWkU5AZR2tJusnZQKMU64JAw3KJxpGEw6pwVf pXTvwlTpf0DOLPgCU9pcue2scW+AdxJY9rLTswN+jYCzE+805RWcQf0YLAun84pF AHLQ69WQDYpQ6NOHBSJShRmYt+XzL3tN0/k= -----END CERTIFICATE-----Generated at Mon Oct 20 08:15:06 2025 by rpki-client