$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/7d38fa73-ad05-39b4-8ee8-83a83b2a993a.roa File: 7d38fa73-ad05-39b4-8ee8-83a83b2a993a.roa (raw, json) Hash identifier: OIHTlbG9jr7xrOOKVIOtK3n9MwwLiWVB3GbbjIWRsiA= Subject key identifier: 34:61:E5:7F:9E:34:8F:19:84:97:A4:9B:C0:81:36:1D:85:9A:02:17 Certificate issuer: /CN=afa71238-3202-40f6-8fdd-d9505c5a8635 Certificate serial: 010D0C9F4328584B7C87683ADD4AA84F3E7A2600 Authority key identifier: 5B:F6:61:9D:C4:CA:54:0A:21:F2:91:5D:E2:CE:9E:F8:1E:B8:79:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/7d38fa73-ad05-39b4-8ee8-83a83b2a993a.roa Signing time: Sat 11 Oct 2025 13:00:38 +0000 ROA not before: Sat 11 Oct 2025 13:00:38 +0000 ROA not after: Fri 09 Jan 2026 14:00:38 +0000 asID: 401523 IP address blocks: 2620:d0:e000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/afa71238-3202-40f6-8fdd-d9505c5a8635.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/afa71238-3202-40f6-8fdd-d9505c5a8635.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7c:87:68:3a:dd:4a:a8:4f:3e:7a:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afa71238-3202-40f6-8fdd-d9505c5a8635 Validity Not Before: Oct 11 13:00:38 2025 GMT Not After : Jan 9 14:00:38 2026 GMT Subject: CN=9f069066-c793-45f4-afc1-09b8bfbc1e5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:39:ad:af:08:5e:cb:53:30:4b:e0:c0:83:9b: 76:a0:b7:4d:64:39:1f:bd:0f:9a:a2:ab:b9:49:9c: c5:2a:54:4c:3d:cc:f0:b7:7e:ac:7b:dd:39:f7:81: df:bd:42:09:ce:dd:05:5c:6d:42:8c:90:f2:05:36: 67:3b:3f:a7:75:29:93:34:35:ee:50:f1:26:cc:3c: 9d:9b:71:54:74:a5:19:26:c1:5f:63:e5:94:60:a2: 71:cc:3b:b5:da:83:ef:f7:48:5b:c0:8f:d5:92:e2: 95:23:2f:4e:cb:6f:d8:45:0d:0f:f1:f2:68:19:51: 04:68:9d:71:2d:97:75:fe:50:c6:f6:aa:d6:84:fa: 7b:64:fd:0d:ec:92:d3:22:11:22:e8:f6:19:86:4f: 12:46:1f:df:54:33:cd:1f:da:e0:9a:d9:ff:56:a3: 65:e7:19:dc:32:34:b7:9f:09:54:32:8b:2b:b6:d4: ac:36:be:83:2c:40:67:fc:c6:9d:43:dc:4f:76:3d: dd:5c:ab:d2:3e:91:97:95:37:48:8b:a3:5b:37:72: fc:b3:86:00:be:df:0b:bf:22:5b:fa:eb:fb:8e:9b: 38:62:46:ad:b8:9b:8c:86:0b:ca:e3:9f:bd:84:d2: b2:65:b9:01:51:07:93:0b:5b:74:6a:43:d6:a1:e0: 2f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:61:E5:7F:9E:34:8F:19:84:97:A4:9B:C0:81:36:1D:85:9A:02:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/7d38fa73-ad05-39b4-8ee8-83a83b2a993a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/afa71238-3202-40f6-8fdd-d9505c5a8635.crl X509v3 Authority Key Identifier: keyid:5B:F6:61:9D:C4:CA:54:0A:21:F2:91:5D:E2:CE:9E:F8:1E:B8:79:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635.cer sbgp-ipAddrBlock: critical IPv6: 2620:d0:e000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:92:4e:ca:9f:89:26:5b:3f:96:27:a3:69:c1:fd:a3:a2:e2: 0e:2c:ac:bf:b8:0b:35:6f:a2:ed:6e:fa:d8:93:23:aa:22:17: 69:6f:f3:08:f9:c5:f2:22:3e:ce:8a:c0:fd:bb:ed:c3:4e:36: 98:66:5d:61:2e:4e:83:37:9e:38:36:03:b8:f6:a0:bd:94:35: de:8d:22:9b:39:f9:ae:ac:51:0e:2a:bb:c1:31:92:78:63:b3: 19:73:38:5d:4b:61:d3:dd:1d:c9:f5:24:68:3e:77:00:49:3c: 58:4a:30:77:a2:ac:43:5d:10:9f:fc:09:25:5e:78:09:e4:39: 37:6b:c3:4e:0b:0a:35:2c:f5:52:e2:e7:d7:1b:9f:f1:2b:0d: 4b:c6:63:21:a5:88:93:2c:b0:27:91:bb:65:79:a9:80:46:0a: d8:5b:88:77:69:cd:16:b8:80:cc:4f:70:10:83:19:3c:b2:f1: 1a:ea:9b:ea:a1:cd:32:b5:20:48:83:f0:be:2c:bf:9e:04:ae: f4:74:6d:6c:bc:6f:72:d7:b8:63:7b:c2:f8:87:80:fa:96:fb: 7b:4b:a1:d0:80:d1:03:00:da:ed:86:b0:e4:07:49:37:80:8f: 90:57:5f:d6:07:c0:da:f4:62:f7:d6:bf:dd:a7:f7:6b:9b:23: ae:11:91:85 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt8h2g63UqoTz56JgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZhNzEyMzgtMzIwMi00MGY2LThmZGQtZDk1MDVjNWE4 NjM1MB4XDTI1MTAxMTEzMDAzOFoXDTI2MDEwOTE0MDAzOFowLzEtMCsGA1UEAxMk OWYwNjkwNjYtYzc5My00NWY0LWFmYzEtMDliOGJmYmMxZTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjmtrwhey1MwS+DAg5t2oLdNZDkfvQ+aoqu5 SZzFKlRMPczwt36se90594HfvUIJzt0FXG1CjJDyBTZnOz+ndSmTNDXuUPEmzDyd m3FUdKUZJsFfY+WUYKJxzDu12oPv90hbwI/VkuKVIy9Oy2/YRQ0P8fJoGVEEaJ1x LZd1/lDG9qrWhPp7ZP0N7JLTIhEi6PYZhk8SRh/fVDPNH9rgmtn/VqNl5xncMjS3 nwlUMosrttSsNr6DLEBn/MadQ9xPdj3dXKvSPpGXlTdIi6NbN3L8s4YAvt8LvyJb +uv7jps4YkatuJuMhgvK45+9hNKyZbkBUQeTC1t0akPWoeAvwwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDRh5X+eNI8ZhJekm8CBNh2FmgIXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hZmE3 MTIzOC0zMjAyLTQwZjYtOGZkZC1kOTUwNWM1YTg2MzUvN2QzOGZhNzMtYWQwNS0z OWI0LThlZTgtODNhODNiMmE5OTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWZhNzEyMzgtMzIwMi00MGY2LThm ZGQtZDk1MDVjNWE4NjM1L2FmYTcxMjM4LTMyMDItNDBmNi04ZmRkLWQ5NTA1YzVh ODYzNS5jcmwwHwYDVR0jBBgwFoAUW/ZhncTKVAoh8pFd4s6e+B64eY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hZmE3MTIzOC0zMjAyLTQwZjYtOGZkZC1kOTUw NWM1YTg2MzUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAA0OAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIySTsqfiSZbP5Yno2nB/aOi4g4srL+4CzVvou1u+tiTI6oiF2lv 8wj5xfIiPs6KwP277cNONphmXWEuToM3njg2A7j2oL2UNd6NIps5+a6sUQ4qu8Ex knhjsxlzOF1LYdPdHcn1JGg+dwBJPFhKMHeirENdEJ/8CSVeeAnkOTdrw04LCjUs 9VLi59cbn/ErDUvGYyGliJMssCeRu2V5qYBGCthbiHdpzRa4gMxPcBCDGTyy8Rrq m+qhzTK1IEiD8L4sv54ErvR0bWy8b3LXuGN7wviHgPqW+3tLodCA0QMA2u2GsOQH STeAj5BXX9YHwNr0YvfWv92n92ubI64RkYU= -----END CERTIFICATE-----Generated at Mon Oct 20 10:25:49 2025 by rpki-client