$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2f733f22-2e34-32a2-a211-7e67c547e4b9.roa File: 2f733f22-2e34-32a2-a211-7e67c547e4b9.roa (raw, json) Hash identifier: SkNJWATDnz0K+zcqyb1rfbyfZfscigTyi+zrzKLTbUU= Subject key identifier: 57:55:CC:D4:8F:1D:FA:D0:4A:A0:17:EF:5F:46:12:EC:F1:60:83:2C Certificate issuer: /CN=2de5d746-3402-4263-b880-ea4d7ecfc168 Certificate serial: 010D0C9F4328584B4D11D2D0DB8F24E8AAC20360 Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2f733f22-2e34-32a2-a211-7e67c547e4b9.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 53471 IP address blocks: 2607:8240:ff1a::/48 maxlen: 48 2607:8240:ff1b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:d2:d0:db:8f:24:e8:aa:c2:03:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=eb27c2b3-64a2-47e5-8755-424b44c98830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bc:26:e0:f1:55:37:2d:c9:7a:06:a3:67:c2: 8d:5d:34:96:4b:8d:1b:29:fb:40:8c:a4:ab:d4:3d: a9:c2:c5:b7:fb:04:fd:39:96:fa:82:43:41:15:4f: b2:fa:ee:8b:38:e7:45:1e:9e:1d:53:a5:5f:b8:4b: 8c:7c:dc:98:1f:74:6b:f1:92:57:3d:fa:ad:92:8b: 0c:9e:93:7b:d5:a3:ae:5e:d1:b4:d9:ce:30:79:be: 18:b6:fc:e5:0f:a4:3f:d0:31:f6:d2:64:73:a4:f0: 8f:b2:a8:c2:ab:ea:93:5c:ba:13:cf:92:89:8c:ac: dd:dd:a3:a9:ff:41:df:19:bc:26:5c:c3:ea:4d:09: cf:96:c4:b4:e2:fd:7c:19:33:f8:1d:39:54:1f:44: ee:33:41:a1:32:11:d6:f9:d6:74:82:eb:58:7e:ea: 02:00:90:9d:1e:f6:96:ed:1c:c7:7e:5b:e3:bb:26: 90:e8:b7:64:91:1a:36:39:a6:3f:f5:b1:71:1d:f5: 4c:03:2c:b3:48:38:20:32:4c:eb:a9:c2:d3:5d:21: e3:45:8c:fe:58:d7:5b:b9:f6:20:9d:28:5c:c2:fe: 7c:d6:0e:97:22:8a:17:5d:cf:e5:e0:d7:a1:b4:07: 5f:49:72:cd:07:17:98:e3:1e:ba:fd:20:26:d5:01: 7a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:55:CC:D4:8F:1D:FA:D0:4A:A0:17:EF:5F:46:12:EC:F1:60:83:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2f733f22-2e34-32a2-a211-7e67c547e4b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl X509v3 Authority Key Identifier: keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer sbgp-ipAddrBlock: critical IPv6: 2607:8240:ff1a::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:a5:0c:26:ac:c7:6e:72:51:02:bd:1b:6d:e4:0a:c3:c6:c2: e4:d1:94:e3:5d:9f:ee:70:41:c0:53:2f:50:d1:88:01:84:84: 9c:10:ce:d5:b2:3d:97:30:68:dd:52:41:e1:95:d0:08:89:aa: a0:16:da:38:82:9b:1a:d1:ce:91:9d:02:9e:e9:22:a2:78:37: 77:25:0a:87:18:0a:f5:a8:8b:88:fe:c0:e7:96:67:06:f9:20: cf:3c:ff:12:f9:67:9b:a0:4b:a4:f9:a3:08:18:42:06:4c:8f: c5:fb:26:bf:3c:03:7f:1b:39:0a:a7:fd:f6:58:19:2d:c6:a8: bf:11:3e:b4:07:2c:6a:b6:73:ff:b2:41:9f:cd:cd:f6:a0:60: cc:2f:8c:a8:d8:92:a4:f3:c2:1e:ec:12:65:6c:dd:25:cf:f7: 58:99:46:95:de:ed:f0:b4:9a:75:5a:56:c1:95:22:fe:b5:05: 23:2b:be:a0:71:3c:39:ce:51:34:ce:24:8c:93:95:9e:6e:b2: 1e:68:0b:4c:23:7a:64:df:e5:fb:91:b9:ed:51:0f:6b:8d:44: f5:bc:e1:c6:d4:7b:55:75:63:f0:3b:bb:85:50:e5:6b:59:4b: 10:b3:cc:0c:9b:ad:8d:7c:d3:41:d2:9c:99:2b:d5:94:d2:14: ef:87:31:cc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtNEdLQ248k6KrCA2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRlNWQ3NDYtMzQwMi00MjYzLWI4ODAtZWE0ZDdlY2Zj MTY4MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk ZWIyN2MyYjMtNjRhMi00N2U1LTg3NTUtNDI0YjQ0Yzk4ODMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLwm4PFVNy3JegajZ8KNXTSWS40bKftAjKSr 1D2pwsW3+wT9OZb6gkNBFU+y+u6LOOdFHp4dU6VfuEuMfNyYH3Rr8ZJXPfqtkosM npN71aOuXtG02c4web4YtvzlD6Q/0DH20mRzpPCPsqjCq+qTXLoTz5KJjKzd3aOp /0HfGbwmXMPqTQnPlsS04v18GTP4HTlUH0TuM0GhMhHW+dZ0gutYfuoCAJCdHvaW 7RzHflvjuyaQ6LdkkRo2OaY/9bFxHfVMAyyzSDggMkzrqcLTXSHjRYz+WNdbufYg nShcwv581g6XIooXXc/l4NehtAdfSXLNBxeY4x66/SAm1QF6JQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFdVzNSPHfrQSqAX719GEuzxYIMsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yZGU1 ZDc0Ni0zNDAyLTQyNjMtYjg4MC1lYTRkN2VjZmMxNjgvMmY3MzNmMjItMmUzNC0z MmEyLWEyMTEtN2U2N2M1NDdlNGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMmRlNWQ3NDYtMzQwMi00MjYzLWI4 ODAtZWE0ZDdlY2ZjMTY4LzJkZTVkNzQ2LTM0MDItNDI2My1iODgwLWVhNGQ3ZWNm YzE2OC5jcmwwHwYDVR0jBBgwFoAUa7vQBHnN1sRmwfvAalg6KhVtSHwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yZGU1ZDc0Ni0zNDAyLTQyNjMtYjg4MC1lYTRk N2VjZmMxNjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgeCQP8a MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADylDCasx25yUQK9G23kCsPGwuTRlONdn+5wQcBTL1DRiAGEhJwQ ztWyPZcwaN1SQeGV0AiJqqAW2jiCmxrRzpGdAp7pIqJ4N3clCocYCvWoi4j+wOeW Zwb5IM88/xL5Z5ugS6T5owgYQgZMj8X7Jr88A38bOQqn/fZYGS3GqL8RPrQHLGq2 c/+yQZ/NzfagYMwvjKjYkqTzwh7sEmVs3SXP91iZRpXe7fC0mnVaVsGVIv61BSMr vqBxPDnOUTTOJIyTlZ5ush5oC0wjemTf5fuRue1RD2uNRPW84cbUe1V1Y/A7u4VQ 5WtZSxCzzAybrY1800HSnJkr1ZTSFO+HMcw= -----END CERTIFICATE-----Generated at Mon Oct 20 13:54:07 2025 by rpki-client