$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/3a6e75a1-c9c1-3ce8-8709-6758cfa1eada.roa File: 3a6e75a1-c9c1-3ce8-8709-6758cfa1eada.roa (raw, json) Hash identifier: 9k79BFR3x3GH1aLK6zjjE2kMc2APJbRns6vyTJVPAvA= Subject key identifier: 2F:41:BC:87:4F:55:17:DC:BA:AD:8A:3D:B0:F7:F8:D5:24:2A:96:26 Certificate issuer: /CN=32e58881-6422-4e0d-9578-7c256d9f70bc Certificate serial: 010D0C9F4328584B7F521502382B430BA74DBB40 Authority key identifier: F3:7A:EB:F9:30:D5:DF:96:9C:79:22:51:D4:7D:4C:70:35:CC:ED:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/3a6e75a1-c9c1-3ce8-8709-6758cfa1eada.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 398191 IP address blocks: 2607:c7c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:15:02:38:2b:43:0b:a7:4d:bb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32e58881-6422-4e0d-9578-7c256d9f70bc Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=6a0f9289-9ec6-49e0-930d-2862043b4cf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:71:81:11:90:11:85:77:5e:22:8b:d0:ff:30: e7:66:6d:4b:b9:b7:ba:a8:0e:e2:21:43:74:58:08: 6e:63:de:ea:3e:74:14:19:ee:44:98:35:f8:89:22: 7c:cf:9d:6a:78:32:24:43:ab:96:bd:cb:2a:e2:72: 99:93:07:c4:97:c2:ce:15:b3:22:8f:27:f9:8e:2b: 66:16:22:56:df:d2:ab:7a:a9:12:08:2a:ad:6b:6f: de:28:73:08:19:02:15:a7:cc:5f:29:f1:c7:54:2b: 7d:2a:62:5d:17:9b:8f:a3:0e:83:32:64:e9:22:fb: 20:c1:c4:36:06:dd:21:34:33:67:25:32:76:8d:0b: 1a:d2:42:85:2b:56:35:22:b9:cc:8b:49:dd:fa:57: e1:00:e9:17:c9:69:22:0f:54:54:56:82:41:14:4f: 80:48:7b:dc:66:fe:84:e5:1f:64:89:19:0c:b3:70: 1d:1a:a3:44:6f:3c:50:7d:8c:e7:72:22:fe:50:ce: 4b:56:4d:5d:83:ac:39:f9:2a:dc:72:01:e4:c1:e1: 55:ff:46:f0:c6:73:c7:f5:bb:93:6f:05:0b:71:0f: 2d:52:3f:44:de:b8:09:60:7b:e5:c2:79:68:9c:91: 1e:5b:26:b5:53:99:4c:8a:c5:1b:ad:83:a3:b1:75: bc:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:41:BC:87:4F:55:17:DC:BA:AD:8A:3D:B0:F7:F8:D5:24:2A:96:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/3a6e75a1-c9c1-3ce8-8709-6758cfa1eada.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.crl X509v3 Authority Key Identifier: keyid:F3:7A:EB:F9:30:D5:DF:96:9C:79:22:51:D4:7D:4C:70:35:CC:ED:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc.cer sbgp-ipAddrBlock: critical IPv6: 2607:c7c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:d4:f3:73:5c:e8:f8:40:13:dd:37:59:ae:94:13:cb:58:40: 22:dc:bf:56:a7:39:6b:ee:33:31:d3:2a:e9:63:9a:e7:ff:27: a5:91:14:46:e3:f1:2e:ee:6d:c7:16:5c:e5:f7:8e:c2:22:54: d3:ff:46:54:41:8c:16:92:89:d9:4d:80:26:5d:93:5e:78:ba: 08:5e:29:35:dc:1b:bb:ee:aa:75:ca:87:9a:44:25:5e:a3:a7: f3:66:ca:97:92:74:64:ef:d6:1a:61:f6:65:d6:40:a5:6b:80: 84:96:3f:51:85:61:1e:e0:3d:6c:4e:a3:70:d9:50:fa:be:9d: 3c:92:c8:ce:3c:bc:e1:62:20:be:62:f0:e2:fd:27:70:f1:5a: 49:7b:32:54:29:49:38:ee:b1:fe:6e:94:15:d7:f7:39:9d:d4: 42:92:f2:e6:cd:ad:b6:b3:4f:3f:98:47:4e:c1:3f:b7:65:eb: d5:ef:aa:a0:57:8f:0f:c8:92:4a:86:d4:52:87:6b:ad:8b:f6: 5f:a0:ce:60:94:7e:5b:38:8f:f2:09:4f:0e:f5:68:33:ae:54: de:9e:b0:4c:65:48:50:11:39:ed:cd:fb:88:a7:ff:55:6e:72: 04:77:d6:6d:59:68:c8:24:40:9b:85:95:20:b2:f4:f4:83:18: 78:fd:a4:07 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UhUCOCtDC6dNu0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJlNTg4ODEtNjQyMi00ZTBkLTk1NzgtN2MyNTZkOWY3 MGJjMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk NmEwZjkyODktOWVjNi00OWUwLTkzMGQtMjg2MjA0M2I0Y2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXGBEZARhXdeIovQ/zDnZm1Lube6qA7iIUN0 WAhuY97qPnQUGe5EmDX4iSJ8z51qeDIkQ6uWvcsq4nKZkwfEl8LOFbMijyf5jitm FiJW39KreqkSCCqta2/eKHMIGQIVp8xfKfHHVCt9KmJdF5uPow6DMmTpIvsgwcQ2 Bt0hNDNnJTJ2jQsa0kKFK1Y1IrnMi0nd+lfhAOkXyWkiD1RUVoJBFE+ASHvcZv6E 5R9kiRkMs3AdGqNEbzxQfYznciL+UM5LVk1dg6w5+SrccgHkweFV/0bwxnPH9buT bwULcQ8tUj9E3rgJYHvlwnlonJEeWya1U5lMisUbrYOjsXW8+QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFC9BvIdPVRfcuq2KPbD3+NUkKpYmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zMmU1 ODg4MS02NDIyLTRlMGQtOTU3OC03YzI1NmQ5ZjcwYmMvM2E2ZTc1YTEtYzljMS0z Y2U4LTg3MDktNjc1OGNmYTFlYWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzJlNTg4ODEtNjQyMi00ZTBkLTk1 NzgtN2MyNTZkOWY3MGJjLzMyZTU4ODgxLTY0MjItNGUwZC05NTc4LTdjMjU2ZDlm NzBiYy5jcmwwHwYDVR0jBBgwFoAU83rr+TDV35aceSJR1H1McDXM7c8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zMmU1ODg4MS02NDIyLTRlMGQtOTU3OC03YzI1 NmQ5ZjcwYmMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfHwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAY1PNzXOj4QBPdN1mulBPLWEAi3L9Wpzlr7jMx0yrpY5rn/yelkRRG 4/Eu7m3HFlzl947CIlTT/0ZUQYwWkonZTYAmXZNeeLoIXik13Bu77qp1yoeaRCVe o6fzZsqXknRk79YaYfZl1kCla4CElj9RhWEe4D1sTqNw2VD6vp08ksjOPLzhYiC+ YvDi/Sdw8VpJezJUKUk47rH+bpQV1/c5ndRCkvLmza22s08/mEdOwT+3ZevV76qg V48PyJJKhtRSh2uti/ZfoM5glH5bOI/yCU8O9WgzrlTenrBMZUhQETntzfuIp/9V bnIEd9ZtWWjIJECbhZUgsvT0gxh4/aQH -----END CERTIFICATE-----Generated at Mon Oct 20 02:49:22 2025 by rpki-client