$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e1a9a8f-0052-378f-81c3-b97998c15d41.roa File: 0e1a9a8f-0052-378f-81c3-b97998c15d41.roa (raw, json) Hash identifier: fwcFVD5UrhKyCGEXykBmyrbYvJ7ImDr5y3E1Au+/fjI= Subject key identifier: A1:20:DF:A5:FF:41:A5:A6:7F:AE:84:32:13:21:7D:D9:67:1C:CF:EC Certificate issuer: /CN=0e08deb7-db4d-4298-bfe7-8df00db48dc3 Certificate serial: 010D0C9F4328584B2CF6EAE30B505943D1670F80 Authority key identifier: 75:29:E0:2C:22:9F:1A:8D:00:71:EC:92:B2:35:02:2E:62:59:30:4A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e1a9a8f-0052-378f-81c3-b97998c15d41.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 7246 IP address blocks: 2620:197:de0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:ea:e3:0b:50:59:43:d1:67:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e08deb7-db4d-4298-bfe7-8df00db48dc3 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=aa6e974b-fa47-4327-afae-509061a2f3ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c2:8b:a3:5c:23:cf:ab:69:b1:c2:2c:db:cf: 2a:a2:2d:7d:fc:09:8c:64:73:a5:ec:3b:6a:38:0a: d4:ce:60:2e:f7:ee:72:10:c7:c2:a7:d9:f9:da:1e: 45:11:f4:70:04:69:5c:a9:e4:80:a7:d5:7f:58:3e: e6:4d:9a:ed:d2:91:93:b9:11:8d:85:ba:92:a5:45: 40:9b:9f:f7:79:20:f0:37:53:7c:e5:cf:9c:16:88: ef:2e:48:78:78:48:96:d5:f2:a6:f8:8f:2a:2c:c5: b7:4a:57:42:bf:c8:5d:59:18:2c:ed:de:61:17:38: be:27:15:85:f2:23:da:7d:6d:11:c5:34:bb:06:e8: db:09:08:d6:35:c9:b0:ea:ef:f3:2b:6f:a0:c4:e0: 5b:ac:da:8b:ee:8a:cb:5f:2f:58:2d:7a:4a:3b:ff: 03:e8:ee:11:6f:4b:c9:ac:82:cd:49:68:be:8f:e1: ed:3d:db:1c:2b:4c:4d:92:30:2b:24:fd:ee:c9:6f: 64:d6:f7:b1:a2:81:a2:e7:b0:43:20:d7:36:f6:9c: 3c:97:47:ce:01:ab:3b:55:5b:cd:04:66:21:c0:ca: 45:ef:98:54:56:da:a7:f9:3e:90:53:98:f7:30:20: ef:1a:bd:18:4b:15:f3:bd:8c:41:7b:93:62:b5:17: 0e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:20:DF:A5:FF:41:A5:A6:7F:AE:84:32:13:21:7D:D9:67:1C:CF:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e1a9a8f-0052-378f-81c3-b97998c15d41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.crl X509v3 Authority Key Identifier: keyid:75:29:E0:2C:22:9F:1A:8D:00:71:EC:92:B2:35:02:2E:62:59:30:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer sbgp-ipAddrBlock: critical IPv6: 2620:197:de0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:e6:a0:e0:81:47:86:f3:a3:0a:e7:b7:b8:a7:60:5c:ac:3f: 36:61:a3:50:0f:60:23:69:5b:ea:57:82:9a:94:9e:a4:ce:c9: ab:1b:d8:53:db:ce:c7:7e:98:79:55:5b:7f:16:d7:59:fc:c2: 1b:97:63:48:2c:e9:49:70:28:d2:d5:14:09:df:24:6d:a3:d8: 9e:47:44:71:a6:c5:d2:79:28:0e:04:f4:9f:c2:c4:c4:48:e9: 96:dd:eb:31:f2:83:91:8c:c3:fc:7f:dd:f7:d6:1c:15:a5:c7: 22:19:9b:5f:1b:de:ec:f3:7a:c3:26:fa:9c:35:c6:64:22:c3: 1b:3c:b4:e4:2f:42:82:5d:7b:a9:e5:43:ec:9c:ca:11:2d:1a: b5:1c:6b:dd:c7:50:99:25:d2:d7:ab:95:53:24:08:68:75:bd: 27:c7:e2:3b:7a:ee:4a:2e:f2:0a:fe:e3:1e:b5:0b:1a:43:00: 30:62:6e:57:a7:31:0c:6f:71:bc:09:fa:95:aa:42:2c:b5:c6: a3:41:21:6a:d9:05:c2:d6:7a:3a:71:1a:33:cb:af:80:a9:50: 0b:2a:9b:a0:e2:a0:51:82:c6:14:c2:75:c6:a1:86:12:e8:d2: 1f:ff:d4:e6:70:90:8e:63:76:e5:4a:11:4d:54:b2:d9:d6:5e: 15:43:87:e1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEss9urjC1BZQ9FnD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGUwOGRlYjctZGI0ZC00Mjk4LWJmZTctOGRmMDBkYjQ4 ZGMzMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk YWE2ZTk3NGItZmE0Ny00MzI3LWFmYWUtNTA5MDYxYTJmM2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMKLo1wjz6tpscIs288qoi19/AmMZHOl7Dtq OArUzmAu9+5yEMfCp9n52h5FEfRwBGlcqeSAp9V/WD7mTZrt0pGTuRGNhbqSpUVA m5/3eSDwN1N85c+cFojvLkh4eEiW1fKm+I8qLMW3SldCv8hdWRgs7d5hFzi+JxWF 8iPafW0RxTS7BujbCQjWNcmw6u/zK2+gxOBbrNqL7orLXy9YLXpKO/8D6O4Rb0vJ rILNSWi+j+HtPdscK0xNkjArJP3uyW9k1vexooGi57BDINc29pw8l0fOAas7VVvN BGYhwMpF75hUVtqn+T6QU5j3MCDvGr0YSxXzvYxBe5NitRcO6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKEg36X/QaWmf66EMhMhfdlnHM/sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTA4 ZGViNy1kYjRkLTQyOTgtYmZlNy04ZGYwMGRiNDhkYzMvMGUxYTlhOGYtMDA1Mi0z NzhmLTgxYzMtYjk3OTk4YzE1ZDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGUwOGRlYjctZGI0ZC00Mjk4LWJm ZTctOGRmMDBkYjQ4ZGMzLzBlMDhkZWI3LWRiNGQtNDI5OC1iZmU3LThkZjAwZGI0 OGRjMy5jcmwwHwYDVR0jBBgwFoAUdSngLCKfGo0AceySsjUCLmJZMEowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTA4ZGViNy1kYjRkLTQyOTgtYmZlNy04ZGYw MGRiNDhkYzMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABlw3g MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEzmoOCBR4bzowrnt7inYFysPzZho1APYCNpW+pXgpqUnqTOyasb 2FPbzsd+mHlVW38W11n8whuXY0gs6UlwKNLVFAnfJG2j2J5HRHGmxdJ5KA4E9J/C xMRI6Zbd6zHyg5GMw/x/3ffWHBWlxyIZm18b3uzzesMm+pw1xmQiwxs8tOQvQoJd e6nlQ+ycyhEtGrUca93HUJkl0terlVMkCGh1vSfH4jt67kou8gr+4x61CxpDADBi blenMQxvcbwJ+pWqQiy1xqNBIWrZBcLWejpxGjPLr4CpUAsqm6DioFGCxhTCdcah hhLo0h//1OZwkI5jduVKEU1UstnWXhVDh+E= -----END CERTIFICATE-----Generated at Mon Oct 20 18:08:25 2025 by rpki-client