$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/ff6b0a43-1d49-332b-9a2e-4d25e9eea59e.roa File: ff6b0a43-1d49-332b-9a2e-4d25e9eea59e.roa (raw, json) Hash identifier: G5zJm66r/D23KZWcLWJA1VkCNV34v9MWnUUkZ54bnfM= Subject key identifier: DE:56:84:0E:6F:BC:3E:4F:99:43:6D:AD:10:CD:E5:A9:C8:BD:40:C7 Certificate issuer: /CN=b61fdb7f-6654-4226-b916-f915d5e335dc Certificate serial: 010D0C9F4328584B84E77CBEDF19BC5C2C59F240 Authority key identifier: 15:99:A2:44:30:B5:80:14:66:AF:CC:2D:76:0C:27:40:A7:FA:00:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/ff6b0a43-1d49-332b-9a2e-4d25e9eea59e.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 395842 IP address blocks: 2607:8c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/b61fdb7f-6654-4226-b916-f915d5e335dc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/b61fdb7f-6654-4226-b916-f915d5e335dc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:7c:be:df:19:bc:5c:2c:59:f2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b61fdb7f-6654-4226-b916-f915d5e335dc Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=58401d27-6284-4368-9c0d-378084f36658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:af:2d:32:f4:e5:6b:c5:67:7d:08:8c:78:95: ce:be:00:db:39:10:ec:f2:13:a7:ca:9e:34:dd:d6: b2:19:4f:0e:26:cc:b1:04:74:28:6a:a5:cf:ae:0b: 6f:05:46:cf:3c:93:37:dd:b3:77:9f:df:bf:38:83: 7d:68:80:1b:dd:56:a6:4a:d5:d3:55:d7:05:be:15: a9:f9:30:6b:b0:6a:20:82:65:ce:37:72:5e:12:dd: d0:ab:99:46:84:5f:19:ba:fd:44:cd:df:cc:92:93: cf:19:50:b6:7a:1a:44:a6:67:4f:70:c5:c3:57:80: 8c:52:ef:34:c9:1c:63:ad:ce:8e:1e:43:d3:24:a6: 3f:71:23:ef:50:23:c6:40:8d:0a:8d:d6:4a:3a:8e: da:e3:cd:80:35:10:26:96:be:83:3b:9c:6d:38:f2: f8:56:24:31:98:a7:32:d6:d0:16:ec:c8:b4:85:ac: 4f:da:3a:90:df:88:38:b6:02:8a:aa:a3:ec:2c:2f: f1:86:65:dc:f9:62:f3:fb:92:1c:43:0b:c7:6d:5f: 90:34:ba:e4:fc:09:bc:60:13:0c:b1:3a:77:3f:af: d0:57:65:2f:72:13:10:d2:59:44:4a:e7:20:4a:97: 2b:99:25:f1:0c:69:e6:83:0b:de:2d:a5:af:44:be: 33:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:56:84:0E:6F:BC:3E:4F:99:43:6D:AD:10:CD:E5:A9:C8:BD:40:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/ff6b0a43-1d49-332b-9a2e-4d25e9eea59e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/b61fdb7f-6654-4226-b916-f915d5e335dc.crl X509v3 Authority Key Identifier: keyid:15:99:A2:44:30:B5:80:14:66:AF:CC:2D:76:0C:27:40:A7:FA:00:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc.cer sbgp-ipAddrBlock: critical IPv6: 2607:8c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:76:8b:0a:4b:f7:60:01:93:f4:91:10:03:68:db:57:1e:e5: 7b:34:69:55:58:04:52:20:64:96:6f:83:5b:5f:3a:5a:fb:93: 4f:1c:b9:10:35:bb:ac:00:1f:d1:9b:c3:21:8b:7d:d7:aa:1b: 5d:fc:46:7e:a0:f2:22:3e:73:0f:e3:44:c5:bf:a4:02:c3:cf: 81:d6:53:af:55:54:40:12:54:69:b8:bf:06:66:0f:8d:a1:a7: 6e:11:8e:23:c6:e6:5a:27:a9:ae:da:71:d3:97:ec:30:dd:9b: 6c:a2:34:f1:29:fb:55:4b:27:5a:4a:93:be:a4:77:dc:cc:aa: ce:0f:42:76:62:e6:5d:c1:b6:1e:db:bf:a7:fa:23:b8:8e:aa: 69:24:a2:9c:69:8b:f9:b4:3c:e4:00:02:31:d1:e9:7f:33:ad: bd:a4:89:c5:58:04:fb:5b:1d:69:26:e5:e4:52:d6:b9:ba:52: 53:78:45:61:52:9a:8d:06:3f:3a:29:03:fe:51:2d:a2:55:e8: e5:21:ad:9c:5e:d3:f8:23:29:43:18:cb:cb:a6:1e:ed:7a:05: d4:21:a6:9e:56:37:c3:9d:14:90:74:78:9c:dc:96:c0:48:31: ca:04:25:32:f1:3e:1b:d8:30:be:09:f3:81:9c:dc:b3:6a:67: bb:2e:8c:23 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuE53y+3xm8XCxZ8kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjYxZmRiN2YtNjY1NC00MjI2LWI5MTYtZjkxNWQ1ZTMz NWRjMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk NTg0MDFkMjctNjI4NC00MzY4LTljMGQtMzc4MDg0ZjM2NjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl68tMvTla8VnfQiMeJXOvgDbORDs8hOnyp40 3dayGU8OJsyxBHQoaqXPrgtvBUbPPJM33bN3n9+/OIN9aIAb3VamStXTVdcFvhWp +TBrsGoggmXON3JeEt3Qq5lGhF8Zuv1Ezd/MkpPPGVC2ehpEpmdPcMXDV4CMUu80 yRxjrc6OHkPTJKY/cSPvUCPGQI0KjdZKOo7a482ANRAmlr6DO5xtOPL4ViQxmKcy 1tAW7Mi0haxP2jqQ34g4tgKKqqPsLC/xhmXc+WLz+5IcQwvHbV+QNLrk/Am8YBMM sTp3P6/QV2UvchMQ0llESucgSpcrmSXxDGnmgwveLaWvRL4zFQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFN5WhA5vvD5PmUNtrRDN5anIvUDHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNjFm ZGI3Zi02NjU0LTQyMjYtYjkxNi1mOTE1ZDVlMzM1ZGMvZmY2YjBhNDMtMWQ0OS0z MzJiLTlhMmUtNGQyNWU5ZWVhNTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjYxZmRiN2YtNjY1NC00MjI2LWI5 MTYtZjkxNWQ1ZTMzNWRjL2I2MWZkYjdmLTY2NTQtNDIyNi1iOTE2LWY5MTVkNWUz MzVkYy5jcmwwHwYDVR0jBBgwFoAUFZmiRDC1gBRmr8wtdgwnQKf6ACYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNjFmZGI3Zi02NjU0LTQyMjYtYjkxNi1mOTE1 ZDVlMzM1ZGMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcIwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC/dosKS/dgAZP0kRADaNtXHuV7NGlVWARSIGSWb4NbXzpa+5NPHLkQ NbusAB/Rm8Mhi33Xqhtd/EZ+oPIiPnMP40TFv6QCw8+B1lOvVVRAElRpuL8GZg+N oaduEY4jxuZaJ6mu2nHTl+ww3ZtsojTxKftVSydaSpO+pHfczKrOD0J2YuZdwbYe 27+n+iO4jqppJKKcaYv5tDzkAAIx0el/M629pInFWAT7Wx1pJuXkUta5ulJTeEVh UpqNBj86KQP+US2iVejlIa2cXtP4IylDGMvLph7tegXUIaaeVjfDnRSQdHic3JbA SDHKBCUy8T4b2DC+CfOBnNyzame7Lowj -----END CERTIFICATE-----Generated at Mon Oct 20 21:09:29 2025 by rpki-client