$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/abd1a5c2-5455-3d56-9f2d-7ec6f3b7a180.roa File: abd1a5c2-5455-3d56-9f2d-7ec6f3b7a180.roa (raw, json) Hash identifier: kP9nDQ1mOZc0xknU6ZjvClEtPW7Mlxyl0XZuf/Pbr4M= Subject key identifier: 9D:19:CD:0E:61:FB:07:AC:5F:A9:EF:B9:32:9F:82:8A:8D:E1:07:EB Certificate issuer: /CN=c9a96b03-6960-4655-8e34-04473ec1768f Certificate serial: 010D0C9F4328584B9442279CF10ED9EC190FC140 Authority key identifier: AF:08:12:EB:06:70:F1:86:BD:D4:35:58:8A:D5:25:E5:CE:84:AD:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/abd1a5c2-5455-3d56-9f2d-7ec6f3b7a180.roa Signing time: Mon 20 Oct 2025 01:00:31 +0000 ROA not before: Mon 20 Oct 2025 01:00:31 +0000 ROA not after: Sun 18 Jan 2026 02:00:31 +0000 asID: 40232 IP address blocks: 2607:e7c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/c9a96b03-6960-4655-8e34-04473ec1768f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/c9a96b03-6960-4655-8e34-04473ec1768f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:42:27:9c:f1:0e:d9:ec:19:0f:c1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9a96b03-6960-4655-8e34-04473ec1768f Validity Not Before: Oct 20 01:00:31 2025 GMT Not After : Jan 18 02:00:31 2026 GMT Subject: CN=eaec264d-a860-45e7-a81d-7d7c01321e2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4d:ce:3f:30:b7:ff:74:6e:44:83:20:81:c2: 85:c6:6b:89:67:ba:a2:7f:28:c9:7e:f5:78:f1:29: ec:30:af:25:98:13:f6:20:de:68:37:33:9b:c9:aa: 2a:76:cf:06:85:98:fa:cc:7e:f1:e5:03:6a:55:31: 0b:34:93:18:e1:16:f1:3f:d1:6a:76:b7:97:4c:af: 63:dc:ab:44:d4:6e:53:f0:92:42:30:17:01:fb:1f: 16:e2:f5:c2:fe:a2:78:da:16:ae:e2:27:55:7f:08: 9b:e9:23:e6:b5:79:53:56:ad:77:ab:85:6b:d0:e7: ff:9b:8d:b7:20:36:28:ae:a6:cb:2e:34:b0:47:5f: ff:d8:d6:f8:a3:92:27:c8:45:7b:b9:f2:13:fc:d6: 97:5b:1d:7f:3e:5b:25:02:95:50:49:8c:6e:f2:e7: eb:fa:d0:bb:2f:46:10:b7:f3:7c:6a:d5:05:bc:15: 5a:ea:ff:f6:99:5e:fe:cb:e8:9e:a1:66:7a:1d:4a: 5c:b9:e0:c9:5a:15:e5:75:4d:9c:a3:80:4c:4b:48: 47:fe:5a:07:0f:cf:b5:8a:79:85:e1:46:a8:b4:f7: ff:09:90:d3:98:2b:14:a8:af:97:dd:eb:50:7b:2b: 99:e8:a4:ba:e5:97:df:9b:fd:e0:34:6a:a6:a1:8f: 65:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:19:CD:0E:61:FB:07:AC:5F:A9:EF:B9:32:9F:82:8A:8D:E1:07:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/abd1a5c2-5455-3d56-9f2d-7ec6f3b7a180.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/c9a96b03-6960-4655-8e34-04473ec1768f.crl X509v3 Authority Key Identifier: keyid:AF:08:12:EB:06:70:F1:86:BD:D4:35:58:8A:D5:25:E5:CE:84:AD:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f.cer sbgp-ipAddrBlock: critical IPv6: 2607:e7c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:5c:fa:0a:fd:e8:46:f0:5a:91:33:0b:5a:3a:7a:21:dc:00: 88:45:65:95:63:66:d9:92:6d:b2:d4:d2:bf:a8:54:54:52:7e: 89:f9:74:7f:78:d4:01:5b:89:61:44:5b:0d:ad:fd:b6:df:02: 74:d3:a0:f0:12:dd:36:e8:38:e0:d3:ed:d9:5d:1b:cf:43:b6: 29:ad:d5:b3:05:90:70:f6:f8:27:3c:e0:8b:00:1f:bb:71:70: 4c:98:17:ab:51:9a:fc:00:95:f9:62:b3:ca:8b:12:b5:c3:9b: c3:8f:01:51:7c:cc:2a:05:a9:ff:ae:d6:24:b3:e2:a7:08:d2: af:04:83:38:06:af:98:2d:53:a8:9c:81:29:6d:8b:25:0b:31: 20:90:47:14:ea:62:d5:d6:5c:c6:04:3b:6b:3b:84:7b:1f:16: 29:9f:8c:95:89:b0:8d:8d:7b:46:f5:c8:09:9b:00:af:b8:7d: a0:0a:76:de:3a:e4:1e:bf:87:62:86:5f:87:09:e0:19:91:7f: 54:f4:97:81:bd:39:10:63:73:95:c1:72:e0:a8:13:84:45:a9: 85:5d:e9:4e:59:7d:0b:49:34:5f:a2:54:fe:30:0c:8b:a2:c4: 1b:76:ae:4e:da:b9:e8:ff:9a:00:33:a9:3e:68:f3:c7:49:0c: 28:25:1e:60 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuUQiec8Q7Z7BkPwUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzlhOTZiMDMtNjk2MC00NjU1LThlMzQtMDQ0NzNlYzE3 NjhmMB4XDTI1MTAyMDAxMDAzMVoXDTI2MDExODAyMDAzMVowLzEtMCsGA1UEAxMk ZWFlYzI2NGQtYTg2MC00NWU3LWE4MWQtN2Q3YzAxMzIxZTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAok3OPzC3/3RuRIMggcKFxmuJZ7qifyjJfvV4 8SnsMK8lmBP2IN5oNzObyaoqds8GhZj6zH7x5QNqVTELNJMY4RbxP9FqdreXTK9j 3KtE1G5T8JJCMBcB+x8W4vXC/qJ42hau4idVfwib6SPmtXlTVq13q4Vr0Of/m423 IDYorqbLLjSwR1//2Nb4o5InyEV7ufIT/NaXWx1/PlslApVQSYxu8ufr+tC7L0YQ t/N8atUFvBVa6v/2mV7+y+ieoWZ6HUpcueDJWhXldU2co4BMS0hH/loHD8+1inmF 4UaotPf/CZDTmCsUqK+X3etQeyuZ6KS65Zffm/3gNGqmoY9lIwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJ0ZzQ5h+wesX6nvuTKfgoqN4QfrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jOWE5 NmIwMy02OTYwLTQ2NTUtOGUzNC0wNDQ3M2VjMTc2OGYvYWJkMWE1YzItNTQ1NS0z ZDU2LTlmMmQtN2VjNmYzYjdhMTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzlhOTZiMDMtNjk2MC00NjU1LThl MzQtMDQ0NzNlYzE3NjhmL2M5YTk2YjAzLTY5NjAtNDY1NS04ZTM0LTA0NDczZWMx NzY4Zi5jcmwwHwYDVR0jBBgwFoAUrwgS6wZw8Ya91DVYitUl5c6ErVMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jOWE5NmIwMy02OTYwLTQ2NTUtOGUzNC0wNDQ3 M2VjMTc2OGYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfnwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBJXPoK/ehG8FqRMwtaOnoh3ACIRWWVY2bZkm2y1NK/qFRUUn6J+XR/ eNQBW4lhRFsNrf223wJ006DwEt026Djg0+3ZXRvPQ7YprdWzBZBw9vgnPOCLAB+7 cXBMmBerUZr8AJX5YrPKixK1w5vDjwFRfMwqBan/rtYks+KnCNKvBIM4Bq+YLVOo nIEpbYslCzEgkEcU6mLV1lzGBDtrO4R7HxYpn4yVibCNjXtG9cgJmwCvuH2gCnbe OuQev4dihl+HCeAZkX9U9JeBvTkQY3OVwXLgqBOERamFXelOWX0LSTRfolT+MAyL osQbdq5O2rno/5oAM6k+aPPHSQwoJR5g -----END CERTIFICATE-----Generated at Mon Oct 20 08:46:43 2025 by rpki-client