$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/aefa05ab-d562-3fb0-aab4-a369d1a8fc21.roa File: aefa05ab-d562-3fb0-aab4-a369d1a8fc21.roa (raw, json) Hash identifier: FdpcVeMtA12SloBZhLalAsCcIAnDEGWGWhIEFJuYiUg= Subject key identifier: 74:5F:D1:47:1B:99:F1:15:8D:74:E6:88:23:C2:68:38:14:2D:EF:6E Certificate issuer: /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078 Certificate serial: 010D0C9F4328584B2496D61F022CEFCD1E5888E0 Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/aefa05ab-d562-3fb0-aab4-a369d1a8fc21.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 25664 IP address blocks: 2607:cc80:7000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:d6:1f:02:2c:ef:cd:1e:58:88:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078 Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=3d8261a1-abe8-43ce-a2c8-284604be60fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:28:c4:74:f3:86:b6:64:30:0d:6e:32:d0:82: c2:92:a8:53:7a:66:06:71:bb:84:ac:ff:19:cb:2c: a9:66:64:22:03:56:54:4e:37:2f:ba:78:71:60:9c: 1e:b4:64:c5:8c:3f:79:5b:e9:24:e0:45:62:32:01: bb:59:0a:c6:bf:e9:60:cc:56:4e:60:b5:34:54:f3: 6e:29:f9:c3:65:61:6b:c7:f1:42:55:81:86:66:be: 03:f6:69:d5:6c:25:cf:ef:ee:6b:6b:25:de:48:05: 5f:c3:2c:fc:4e:46:d8:cf:79:8e:f6:26:d7:c6:fb: 3a:39:fe:5c:98:3a:bb:fd:9e:2f:f1:d5:be:cf:02: 68:9c:8c:58:dc:ca:87:62:cb:10:ba:15:2f:9c:dc: ab:26:24:9c:76:e1:e2:ca:bc:0b:dd:08:98:6d:c0: 2b:8a:8d:a5:ee:3d:b6:1f:d6:cb:dd:63:56:53:45: 1d:42:2f:9e:b8:1b:62:43:5c:bf:a0:f3:4e:db:b7: 46:39:27:55:aa:4d:51:65:53:d9:20:26:ea:4d:e2: 13:6f:9f:d1:a4:90:94:92:78:cd:07:56:8e:60:a0: fd:9f:c0:73:f8:c4:c7:56:17:82:fb:7b:1a:07:9b: c6:61:dd:3d:12:f2:52:eb:94:8a:47:70:31:9a:24: e2:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:5F:D1:47:1B:99:F1:15:8D:74:E6:88:23:C2:68:38:14:2D:EF:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/aefa05ab-d562-3fb0-aab4-a369d1a8fc21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl X509v3 Authority Key Identifier: keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer sbgp-ipAddrBlock: critical IPv6: 2607:cc80:7000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:74:7e:87:af:54:66:d9:8e:03:14:87:5c:b0:d5:e8:84:b9: 6f:37:ec:01:00:9e:a0:83:6c:63:62:7e:17:af:e1:11:d6:95: 3a:c3:a9:4a:ce:d8:80:31:7f:99:4b:16:d4:2e:62:b6:87:7b: 88:97:a6:30:ed:24:05:b9:ae:43:90:64:4f:62:20:31:24:79: 30:96:50:bc:90:5f:0e:7d:71:2a:6f:56:90:1c:1c:ef:82:3c: 00:c7:76:78:8d:13:fe:ec:57:25:7c:37:d6:e6:64:48:d7:0d: 96:80:fd:4e:32:8e:ac:22:6d:ec:28:0d:f2:6b:18:ab:21:ad: fa:63:3d:e1:40:b1:61:86:1d:59:32:2c:1c:dd:f2:cf:66:49: 74:c1:56:0e:fb:77:e4:0d:0e:ab:cf:18:e3:1c:13:b7:c8:8a: 49:e4:70:de:e4:57:6e:e8:d4:5f:38:d4:db:01:bb:25:61:7d: 7e:55:a9:89:71:22:8a:eb:d9:68:0c:d1:89:94:ab:4f:f0:b9: a6:43:ca:77:d8:81:34:5f:15:22:4c:d7:4e:f9:99:16:5d:85: 1f:54:26:a9:ad:6a:a6:a6:cc:8b:9e:f2:30:28:a2:83:c3:28: c5:ff:99:51:3f:ac:ec:42:98:f5:86:dd:ab:90:a1:c6:7f:3e: 2a:a6:c0:0c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEskltYfAizvzR5YiOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE1ZDNmZGItN2MyZC00MzkwLWE3MmYtZmE0NmYwMmY0 MDc4MB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk M2Q4MjYxYTEtYWJlOC00M2NlLWEyYzgtMjg0NjA0YmU2MGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyjEdPOGtmQwDW4y0ILCkqhTemYGcbuErP8Z yyypZmQiA1ZUTjcvunhxYJwetGTFjD95W+kk4EViMgG7WQrGv+lgzFZOYLU0VPNu KfnDZWFrx/FCVYGGZr4D9mnVbCXP7+5rayXeSAVfwyz8TkbYz3mO9ibXxvs6Of5c mDq7/Z4v8dW+zwJonIxY3MqHYssQuhUvnNyrJiScduHiyrwL3QiYbcArio2l7j22 H9bL3WNWU0UdQi+euBtiQ1y/oPNO27dGOSdVqk1RZVPZICbqTeITb5/RpJCUknjN B1aOYKD9n8Bz+MTHVheC+3saB5vGYd09EvJS65SKR3AxmiTiQQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHRf0UcbmfEVjXTmiCPCaDgULe9uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMTVk M2ZkYi03YzJkLTQzOTAtYTcyZi1mYTQ2ZjAyZjQwNzgvYWVmYTA1YWItZDU2Mi0z ZmIwLWFhYjQtYTM2OWQxYThmYzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTE1ZDNmZGItN2MyZC00MzkwLWE3 MmYtZmE0NmYwMmY0MDc4L2UxNWQzZmRiLTdjMmQtNDM5MC1hNzJmLWZhNDZmMDJm NDA3OC5jcmwwHwYDVR0jBBgwFoAUEMqrDaYVw2cS3TXs0nMj95zDq7AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lMTVkM2ZkYi03YzJkLTQzOTAtYTcyZi1mYTQ2 ZjAyZjQwNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfMgHAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIp0foevVGbZjgMUh1yw1eiEuW837AEAnqCDbGNifhev4RHWlTrD qUrO2IAxf5lLFtQuYraHe4iXpjDtJAW5rkOQZE9iIDEkeTCWULyQXw59cSpvVpAc HO+CPADHdniNE/7sVyV8N9bmZEjXDZaA/U4yjqwibewoDfJrGKshrfpjPeFAsWGG HVkyLBzd8s9mSXTBVg77d+QNDqvPGOMcE7fIiknkcN7kV27o1F841NsBuyVhfX5V qYlxIorr2WgM0YmUq0/wuaZDynfYgTRfFSJM1075mRZdhR9UJqmtaqamzIue8jAo ooPDKMX/mVE/rOxCmPWG3auQocZ/PiqmwAw= -----END CERTIFICATE-----Generated at Mon Oct 20 20:35:54 2025 by rpki-client