$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4890f8fd-3ae6-4818-8c1f-19aab66f43a1/7c1ba9ff-755e-3117-9120-25b143c0f470.roa File: 7c1ba9ff-755e-3117-9120-25b143c0f470.roa (raw, json) Hash identifier: Yh69dAhLuon4HIfoWtAd3JuwK2pmFcf/noyitU0v9FM= Subject key identifier: D7:F3:49:DF:28:06:08:80:D8:01:0F:25:A8:5D:AA:4F:7F:CF:24:F5 Certificate issuer: /CN=4890f8fd-3ae6-4818-8c1f-19aab66f43a1 Certificate serial: 010D0C9F4328584B3DB7040DA6357509A9530FC0 Authority key identifier: 9F:85:49:00:D8:C8:26:66:8B:5E:DA:A7:05:C6:89:9D:EA:1F:7A:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4890f8fd-3ae6-4818-8c1f-19aab66f43a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4890f8fd-3ae6-4818-8c1f-19aab66f43a1/7c1ba9ff-755e-3117-9120-25b143c0f470.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 12145 IP address blocks: 2604:dec0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4890f8fd-3ae6-4818-8c1f-19aab66f43a1/4890f8fd-3ae6-4818-8c1f-19aab66f43a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4890f8fd-3ae6-4818-8c1f-19aab66f43a1/4890f8fd-3ae6-4818-8c1f-19aab66f43a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4890f8fd-3ae6-4818-8c1f-19aab66f43a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:04:0d:a6:35:75:09:a9:53:0f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4890f8fd-3ae6-4818-8c1f-19aab66f43a1 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=eb9f5459-29fc-42e7-aec6-8765fc1e0f72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c7:cc:97:7d:95:ef:31:9f:10:a2:c0:c3:46: 6d:83:75:71:a2:b5:c7:82:fa:e0:b0:fa:3e:1c:b2: cc:25:43:04:f4:5f:da:42:28:c2:cf:c1:44:14:6e: c9:75:df:66:ad:ea:f7:47:20:2a:08:f8:d2:4c:4b: a5:5f:0a:bd:49:d7:93:6e:70:86:b5:17:ad:d1:f8: 63:3d:30:c1:a2:70:2a:68:af:5b:62:6e:82:c9:08: c3:9e:79:0f:59:6a:bb:13:61:00:fc:1b:8d:47:36: 70:0f:5e:fe:58:35:64:97:93:15:75:1c:d7:e9:40: 32:7f:74:aa:26:dd:13:bf:81:d3:ba:38:6c:32:47: d4:d3:05:78:ff:92:94:9b:11:cb:a4:f5:4e:cb:21: 02:e6:8b:71:fb:01:b3:e3:06:99:41:c6:38:09:30: ee:be:e9:bd:01:65:b0:4b:1a:9f:b4:36:48:e1:db: 42:52:86:1f:52:5f:20:b3:8a:62:2e:fe:6b:3d:76: 2d:fc:c2:88:8b:4a:0d:d9:5a:a8:17:64:bd:9d:bb: bd:d0:85:a6:c5:cb:82:fe:76:b2:23:15:99:79:98: bd:f3:7f:35:27:ed:02:0f:6e:08:dd:5f:8e:76:27: 1f:e4:c8:d5:7f:94:7d:73:56:a0:3e:ee:41:ec:71: eb:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F3:49:DF:28:06:08:80:D8:01:0F:25:A8:5D:AA:4F:7F:CF:24:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4890f8fd-3ae6-4818-8c1f-19aab66f43a1/7c1ba9ff-755e-3117-9120-25b143c0f470.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4890f8fd-3ae6-4818-8c1f-19aab66f43a1/4890f8fd-3ae6-4818-8c1f-19aab66f43a1.crl X509v3 Authority Key Identifier: keyid:9F:85:49:00:D8:C8:26:66:8B:5E:DA:A7:05:C6:89:9D:EA:1F:7A:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4890f8fd-3ae6-4818-8c1f-19aab66f43a1.cer sbgp-ipAddrBlock: critical IPv6: 2604:dec0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:31:28:8f:69:72:67:4d:3c:c8:3b:17:4c:10:c3:d0:4b:a0: ad:fc:a3:39:7b:a6:1f:95:cf:51:a8:30:c6:7c:35:87:48:87: 5d:e0:7d:16:49:12:27:99:bd:23:fe:cb:c1:00:27:84:2e:fe: 3c:11:e4:26:f3:6d:db:ad:8e:7e:36:4b:3f:a4:5a:a7:46:ab: 3d:1c:7c:73:f0:ea:c4:bf:f9:ef:37:ab:20:f6:65:ec:bc:f3: 54:f6:e5:d3:c5:4e:77:7f:7f:83:8a:85:8b:e9:94:30:4f:f4: 8c:d1:e5:e5:5b:14:5d:16:5f:6b:26:a1:44:ca:80:c6:75:2e: ad:cb:fc:7e:35:8d:db:87:d9:98:17:d4:21:03:ac:d8:19:6e: 85:ff:93:4c:3d:e7:a2:57:83:dc:6d:2d:01:1d:76:78:b8:9c: c2:56:cc:4d:44:a9:7f:5c:29:87:f7:5e:87:20:d0:3b:f6:f0: 68:e9:34:99:3f:e7:76:af:fa:90:39:21:aa:30:b5:1e:98:28: 80:1e:1a:ce:f3:60:ea:69:64:77:52:fe:59:49:cf:77:fb:c7: 33:60:bb:90:91:74:06:55:b1:33:5e:e3:a6:f6:e4:9f:52:20: f2:4f:8f:b4:c3:70:e4:2f:5a:8f:a5:17:e5:91:5c:22:f5:a0: 48:93:7d:4f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEs9twQNpjV1CalTD8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDg5MGY4ZmQtM2FlNi00ODE4LThjMWYtMTlhYWI2NmY0 M2ExMB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ZWI5ZjU0NTktMjlmYy00MmU3LWFlYzYtODc2NWZjMWUwZjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncfMl32V7zGfEKLAw0Ztg3VxorXHgvrgsPo+ HLLMJUME9F/aQijCz8FEFG7Jdd9mrer3RyAqCPjSTEulXwq9SdeTbnCGtRet0fhj PTDBonAqaK9bYm6CyQjDnnkPWWq7E2EA/BuNRzZwD17+WDVkl5MVdRzX6UAyf3Sq Jt0Tv4HTujhsMkfU0wV4/5KUmxHLpPVOyyEC5otx+wGz4waZQcY4CTDuvum9AWWw SxqftDZI4dtCUoYfUl8gs4piLv5rPXYt/MKIi0oN2VqoF2S9nbu90IWmxcuC/nay IxWZeZi98381J+0CD24I3V+Odicf5MjVf5R9c1agPu5B7HHrZwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNfzSd8oBgiA2AEPJahdqk9/zyT1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ODkw ZjhmZC0zYWU2LTQ4MTgtOGMxZi0xOWFhYjY2ZjQzYTEvN2MxYmE5ZmYtNzU1ZS0z MTE3LTkxMjAtMjViMTQzYzBmNDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDg5MGY4ZmQtM2FlNi00ODE4LThj MWYtMTlhYWI2NmY0M2ExLzQ4OTBmOGZkLTNhZTYtNDgxOC04YzFmLTE5YWFiNjZm NDNhMS5jcmwwHwYDVR0jBBgwFoAUn4VJANjIJmaLXtqnBcaJneoferwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80ODkwZjhmZC0zYWU2LTQ4MTgtOGMxZi0xOWFh YjY2ZjQzYTEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTewDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQABMSiPaXJnTTzIOxdMEMPQS6Ct/KM5e6Yflc9RqDDGfDWHSIdd4H0W SRInmb0j/svBACeELv48EeQm823brY5+Nks/pFqnRqs9HHxz8OrEv/nvN6sg9mXs vPNU9uXTxU53f3+DioWL6ZQwT/SM0eXlWxRdFl9rJqFEyoDGdS6ty/x+NY3bh9mY F9QhA6zYGW6F/5NMPeeiV4PcbS0BHXZ4uJzCVsxNRKl/XCmH916HINA79vBo6TSZ P+d2r/qQOSGqMLUemCiAHhrO82DqaWR3Uv5ZSc93+8czYLuQkXQGVbEzXuOm9uSf UiDyT4+0w3DkL1qPpRflkVwi9aBIk31P -----END CERTIFICATE-----Generated at Mon Oct 20 13:55:42 2025 by rpki-client