$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/30a4a3af-0d7c-3196-8c2b-1ff6e8fe81e4.roa File: 30a4a3af-0d7c-3196-8c2b-1ff6e8fe81e4.roa (raw, json) Hash identifier: 97VP18X9rdZYFWixZUQBKwElea0+gNk9e+j74S6myf8= Subject key identifier: 75:95:8D:06:E2:C3:FA:FD:41:78:96:52:F6:F8:06:D1:86:06:ED:33 Certificate issuer: /CN=693bf772-b1c2-4f2f-976c-528b6f1d8e16 Certificate serial: 010D0C9F4328584B41E70EE4BA78BFC28A3B0680 Authority key identifier: 04:3B:91:26:43:5A:E5:3D:B9:21:35:BF:18:C6:36:D0:DA:9D:41:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/30a4a3af-0d7c-3196-8c2b-1ff6e8fe81e4.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 33501 IP address blocks: 2607:19c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/693bf772-b1c2-4f2f-976c-528b6f1d8e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/693bf772-b1c2-4f2f-976c-528b6f1d8e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:0e:e4:ba:78:bf:c2:8a:3b:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=693bf772-b1c2-4f2f-976c-528b6f1d8e16 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=7c4d3771-e04c-4a52-b5d8-962b0de219d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:01:4a:b7:c0:32:6b:64:11:b8:78:be:59:f9: 86:c5:52:5c:99:e5:0b:dd:0d:cd:26:a9:a5:fa:00: eb:5c:7f:f0:18:4d:60:38:07:b2:a7:be:5d:37:b4: e7:f3:72:04:00:3d:4f:b4:ef:ed:00:15:06:02:30: b5:3e:f7:a2:86:a1:e1:8c:e9:5d:2f:73:6c:ca:9e: b3:a2:ef:59:4d:0f:30:fc:99:32:0e:b2:84:e6:c5: d5:b6:e9:2b:1c:61:38:ec:a7:99:28:98:3a:9a:bc: 2f:fc:6d:91:8f:2d:58:ac:6e:82:78:e1:2b:bb:5f: 9f:56:6e:55:9a:14:80:1b:67:99:fb:c0:6d:68:31: 6d:ec:9a:88:10:1b:d6:7c:66:5f:17:e5:d4:8d:b0: 89:19:1b:c5:5a:ff:fc:9f:99:40:64:32:85:6e:51: b1:71:2a:d9:47:0e:d7:af:a8:0a:02:81:2e:73:62: ef:6b:65:22:c6:21:eb:44:f9:28:7d:cc:15:fe:d6: c3:31:99:14:b3:ca:99:f9:75:70:d3:79:a5:b7:9f: 5f:54:7d:8f:b4:fa:2a:4e:0e:91:53:ec:45:33:76: f8:f5:5b:53:28:b6:61:5d:9d:94:45:0c:33:fd:b0: ac:9a:b9:09:ad:23:19:a0:8f:ea:79:84:4c:34:e9: e7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:95:8D:06:E2:C3:FA:FD:41:78:96:52:F6:F8:06:D1:86:06:ED:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/30a4a3af-0d7c-3196-8c2b-1ff6e8fe81e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/693bf772-b1c2-4f2f-976c-528b6f1d8e16.crl X509v3 Authority Key Identifier: keyid:04:3B:91:26:43:5A:E5:3D:B9:21:35:BF:18:C6:36:D0:DA:9D:41:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16.cer sbgp-ipAddrBlock: critical IPv6: 2607:19c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:8f:72:a3:be:64:44:68:e0:b1:7a:fc:b4:1a:2a:eb:af:2a: 77:d3:07:3d:8f:a9:b3:14:32:ec:d8:86:da:6a:8c:54:8e:7b: bc:d8:d7:50:7b:d2:b3:0f:5b:52:b9:a5:42:d8:47:7a:f6:50: 09:f5:5b:ea:8e:e1:e6:11:e6:91:66:47:54:b9:5f:8e:d8:20: 41:20:13:d0:ab:7f:0d:85:d0:2e:7d:c3:e6:7f:1f:f4:e6:f5: f1:c6:b2:78:61:97:56:ae:2f:aa:99:52:88:3a:fb:52:92:f3: 19:8c:1b:52:18:a8:41:e1:25:af:6d:a2:b8:9d:be:43:8f:11: a5:c0:ad:4e:ac:98:da:2a:fb:cb:d5:1a:a2:4a:f9:54:a6:47: 41:6e:99:a1:a3:e0:13:c8:90:7e:ec:1e:73:50:32:5e:45:a2: 33:ee:7d:ff:f5:c1:bc:97:be:0f:95:3e:87:76:78:32:60:0c: 7b:53:56:15:c1:7c:d1:a4:d8:f7:0b:07:14:f9:7a:79:2a:63: b3:dc:64:58:11:53:82:42:40:83:d7:45:fe:1c:65:8a:8b:3f: 42:c9:73:68:fe:e2:88:6f:9b:84:3b:c7:2d:d0:2e:0e:0d:e6: af:f5:bc:43:09:ed:7e:7f:95:bf:40:b9:94:1f:24:a1:a2:8d: 56:cc:2b:33 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5w7kuni/woo7BoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjkzYmY3NzItYjFjMi00ZjJmLTk3NmMtNTI4YjZmMWQ4 ZTE2MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk N2M0ZDM3NzEtZTA0Yy00YTUyLWI1ZDgtOTYyYjBkZTIxOWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7QFKt8Aya2QRuHi+WfmGxVJcmeUL3Q3NJqml +gDrXH/wGE1gOAeyp75dN7Tn83IEAD1PtO/tABUGAjC1PveihqHhjOldL3Nsyp6z ou9ZTQ8w/JkyDrKE5sXVtukrHGE47KeZKJg6mrwv/G2Rjy1YrG6CeOEru1+fVm5V mhSAG2eZ+8BtaDFt7JqIEBvWfGZfF+XUjbCJGRvFWv/8n5lAZDKFblGxcSrZRw7X r6gKAoEuc2Lva2UixiHrRPkofcwV/tbDMZkUs8qZ+XVw03mlt59fVH2PtPoqTg6R U+xFM3b49VtTKLZhXZ2URQwz/bCsmrkJrSMZoI/qeYRMNOnnwQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHWVjQbiw/r9QXiWUvb4BtGGBu0zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82OTNi Zjc3Mi1iMWMyLTRmMmYtOTc2Yy01MjhiNmYxZDhlMTYvMzBhNGEzYWYtMGQ3Yy0z MTk2LThjMmItMWZmNmU4ZmU4MWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjkzYmY3NzItYjFjMi00ZjJmLTk3 NmMtNTI4YjZmMWQ4ZTE2LzY5M2JmNzcyLWIxYzItNGYyZi05NzZjLTUyOGI2ZjFk OGUxNi5jcmwwHwYDVR0jBBgwFoAUBDuRJkNa5T25ITW/GMY20NqdQacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82OTNiZjc3Mi1iMWMyLTRmMmYtOTc2Yy01Mjhi NmYxZDhlMTYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcZwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQATj3KjvmREaOCxevy0Girrryp30wc9j6mzFDLs2IbaaoxUjnu82NdQ e9KzD1tSuaVC2Ed69lAJ9VvqjuHmEeaRZkdUuV+O2CBBIBPQq38NhdAufcPmfx/0 5vXxxrJ4YZdWri+qmVKIOvtSkvMZjBtSGKhB4SWvbaK4nb5DjxGlwK1OrJjaKvvL 1RqiSvlUpkdBbpmho+ATyJB+7B5zUDJeRaIz7n3/9cG8l74PlT6HdngyYAx7U1YV wXzRpNj3CwcU+Xp5KmOz3GRYEVOCQkCD10X+HGWKiz9CyXNo/uKIb5uEO8ct0C4O Deav9bxDCe1+f5W/QLmUHyShoo1WzCsz -----END CERTIFICATE-----Generated at Wed Oct 22 00:08:01 2025 by rpki-client