$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/b14f6dc6-aac6-354c-b773-19074de6cb64.roa File: b14f6dc6-aac6-354c-b773-19074de6cb64.roa (raw, json) Hash identifier: jmZ0gSdtFj4yKLv4Zm43PX0y8prKAXWKWmBakL1exns= Subject key identifier: 28:B8:24:C4:DD:8A:F8:AD:8B:2B:6B:54:CE:89:B4:F4:3F:1D:07:45 Certificate issuer: /CN=0e08deb7-db4d-4298-bfe7-8df00db48dc3 Certificate serial: 010D0C9F4328584B2CF6EAF7131FA54D09ACCA40 Authority key identifier: 75:29:E0:2C:22:9F:1A:8D:00:71:EC:92:B2:35:02:2E:62:59:30:4A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/b14f6dc6-aac6-354c-b773-19074de6cb64.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 2620:197:de0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:ea:f7:13:1f:a5:4d:09:ac:ca:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e08deb7-db4d-4298-bfe7-8df00db48dc3 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=d7648128-ae7e-4942-afe9-24c8d375daf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:93:89:a9:0e:dc:bb:90:8f:d8:83:23:c4:c6: 66:ac:cb:a9:c3:35:08:81:a3:20:bc:0e:97:e5:03: c5:bc:1f:11:64:2b:8c:2d:96:79:0a:c2:a9:62:16: 6e:02:1a:77:ce:a1:65:cf:66:3c:c8:8f:89:81:e3: cf:5b:b9:eb:0b:af:6b:e9:5f:c3:b2:b1:a5:b9:47: 7d:0c:a9:3a:24:d2:be:73:b0:f2:01:16:7d:65:c0: e9:72:cf:c1:b4:37:eb:2a:91:f9:67:d0:c7:92:dc: ad:b3:dc:2a:75:33:7c:00:18:bb:9b:ad:1a:8b:d4: f7:23:76:4d:2e:ae:e9:b4:b1:ff:d6:4e:2a:f7:a4: aa:45:29:7a:ad:77:7f:dd:8c:78:33:fa:ec:9e:07: 38:dc:f4:b2:bd:1a:ce:9b:34:bd:42:8c:64:48:b1: 29:96:dc:75:13:67:47:4e:35:cb:bc:74:9a:82:4d: 45:ed:33:9e:f1:c4:e0:13:07:9f:26:93:f9:41:9c: e9:3c:bb:eb:63:1c:23:ae:62:13:5c:cb:b3:ab:ba: b6:5a:ef:1a:b9:6e:ee:66:45:96:69:f9:81:bf:d8: b5:53:52:29:32:ab:bc:e6:62:a7:9e:94:dc:4a:aa: d0:ee:88:31:2a:bb:14:87:8e:9d:79:9d:0f:62:9a: d5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B8:24:C4:DD:8A:F8:AD:8B:2B:6B:54:CE:89:B4:F4:3F:1D:07:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/b14f6dc6-aac6-354c-b773-19074de6cb64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.crl X509v3 Authority Key Identifier: keyid:75:29:E0:2C:22:9F:1A:8D:00:71:EC:92:B2:35:02:2E:62:59:30:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer sbgp-ipAddrBlock: critical IPv6: 2620:197:de0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:a4:88:1b:72:00:97:ab:01:54:eb:06:ee:ac:5e:d6:70:62: 47:85:1a:44:7d:d9:ee:19:1c:ee:80:3c:27:c3:e6:7c:66:ad: 5f:c0:5c:70:39:04:ba:f8:bd:e2:d6:6b:60:5d:a1:b2:dc:74: 04:90:7d:3f:2b:93:4b:d0:c5:b2:e2:93:db:3e:81:ae:2d:7c: 20:2b:fd:e0:fb:80:76:a8:3f:93:6d:4e:11:ae:d7:23:37:7c: 07:75:b9:55:59:3a:ea:0d:bf:be:1c:e6:08:92:0e:01:15:5b: 7d:b4:56:18:c9:8a:73:7f:57:09:61:04:14:6d:90:b3:37:d0: 7a:8e:45:43:83:e4:87:e4:94:7f:5a:5f:ce:2b:83:3f:8c:38: 77:03:9f:0d:24:73:e5:c4:aa:1e:21:29:b0:cc:33:b3:89:78: 04:18:80:cb:77:b2:88:4e:41:f8:ae:2a:73:83:22:92:6c:60: 75:fa:89:c5:dd:90:63:e8:b9:4c:3e:77:15:7e:4e:a7:f2:58: 88:de:f9:29:e6:45:00:7c:fb:b3:8f:b7:2c:04:59:43:3d:ae: a2:e8:f6:73:e1:69:47:fc:44:88:c8:be:04:1a:07:4f:0a:a7: e3:da:a8:65:50:be:b0:18:f9:d0:3e:2c:77:b8:54:14:c1:fc: 7b:f3:84:e5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEss9ur3Ex+lTQmsykAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGUwOGRlYjctZGI0ZC00Mjk4LWJmZTctOGRmMDBkYjQ4 ZGMzMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk ZDc2NDgxMjgtYWU3ZS00OTQyLWFmZTktMjRjOGQzNzVkYWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pOJqQ7cu5CP2IMjxMZmrMupwzUIgaMgvA6X 5QPFvB8RZCuMLZZ5CsKpYhZuAhp3zqFlz2Y8yI+JgePPW7nrC69r6V/DsrGluUd9 DKk6JNK+c7DyARZ9ZcDpcs/BtDfrKpH5Z9DHktyts9wqdTN8ABi7m60ai9T3I3ZN Lq7ptLH/1k4q96SqRSl6rXd/3Yx4M/rsngc43PSyvRrOmzS9QoxkSLEpltx1E2dH TjXLvHSagk1F7TOe8cTgEwefJpP5QZzpPLvrYxwjrmITXMuzq7q2Wu8auW7uZkWW afmBv9i1U1IpMqu85mKnnpTcSqrQ7ogxKrsUh46deZ0PYprVowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCi4JMTdivitiytrVM6JtPQ/HQdFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTA4 ZGViNy1kYjRkLTQyOTgtYmZlNy04ZGYwMGRiNDhkYzMvYjE0ZjZkYzYtYWFjNi0z NTRjLWI3NzMtMTkwNzRkZTZjYjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGUwOGRlYjctZGI0ZC00Mjk4LWJm ZTctOGRmMDBkYjQ4ZGMzLzBlMDhkZWI3LWRiNGQtNDI5OC1iZmU3LThkZjAwZGI0 OGRjMy5jcmwwHwYDVR0jBBgwFoAUdSngLCKfGo0AceySsjUCLmJZMEowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTA4ZGViNy1kYjRkLTQyOTgtYmZlNy04ZGYw MGRiNDhkYzMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABlw3g MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH6kiBtyAJerAVTrBu6sXtZwYkeFGkR92e4ZHO6APCfD5nxmrV/A XHA5BLr4veLWa2BdobLcdASQfT8rk0vQxbLik9s+ga4tfCAr/eD7gHaoP5NtThGu 1yM3fAd1uVVZOuoNv74c5giSDgEVW320VhjJinN/VwlhBBRtkLM30HqORUOD5Ifk lH9aX84rgz+MOHcDnw0kc+XEqh4hKbDMM7OJeAQYgMt3sohOQfiuKnODIpJsYHX6 icXdkGPouUw+dxV+TqfyWIje+SnmRQB8+7OPtywEWUM9rqLo9nPhaUf8RIjIvgQa B08Kp+PaqGVQvrAY+dA+LHe4VBTB/HvzhOU= -----END CERTIFICATE-----Generated at Mon Oct 20 18:07:28 2025 by rpki-client