$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/b3b3910d-a610-3b46-a9cb-c5249e265700.roa File: b3b3910d-a610-3b46-a9cb-c5249e265700.roa (raw, json) Hash identifier: Wl4WiNQnNHVp15VHdcc4Z4EID+x1xj7+oI0uEi5FHcw= Subject key identifier: 5B:F3:57:D1:77:C8:47:19:84:79:C9:FC:C7:ED:B1:B8:33:9F:CD:14 Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Certificate serial: 010D0C9F4328584B0CDC2916BEFE61F7245B0E20 Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/b3b3910d-a610-3b46-a9cb-c5249e265700.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 21947 IP address blocks: 2607:f8e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:29:16:be:fe:61:f7:24:5b:0e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=344cacf1-c68b-4eef-802b-077b43490e7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d0:1b:99:2a:e1:43:73:88:c6:2c:a0:17:51: a8:99:84:48:3f:b7:5d:80:91:61:ca:c2:8e:e9:28: 79:b2:5a:af:d4:b0:4e:a8:3f:53:86:b9:0a:8c:e6: 62:de:25:15:0c:69:94:b3:0f:d8:86:d8:c1:f9:57: db:5b:fe:e5:15:92:91:34:da:9c:65:2c:48:68:fd: 81:eb:4c:70:5a:47:00:46:06:35:06:fa:f9:79:ae: 50:94:56:dd:4b:81:3a:0f:52:b6:6e:a3:39:42:58: 36:ff:73:62:0d:65:58:cf:85:17:f3:4e:69:7a:c1: eb:45:ba:c4:62:36:64:7d:17:8f:ab:7f:22:1f:b0: 6c:a1:b1:7b:76:02:9f:35:13:3b:f2:5c:c7:51:b5: 60:35:1b:69:2a:8d:6d:23:2b:00:c3:a8:97:a1:a9: f1:0f:c6:d2:67:af:3e:cd:39:c2:b2:d4:ac:13:b2: 9c:3d:e2:b3:2c:82:ae:c8:76:79:b8:78:98:fd:38: 5e:c6:07:d7:63:9c:0f:b4:76:47:a5:98:a5:45:1a: 8d:44:4a:c8:ec:0c:61:cd:c2:f1:d9:5e:34:30:f6: 79:df:e0:be:ff:df:ce:c9:7e:e7:e8:dd:c8:90:2d: ce:ec:df:99:43:c5:23:dc:37:84:45:46:61:59:99: d4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F3:57:D1:77:C8:47:19:84:79:C9:FC:C7:ED:B1:B8:33:9F:CD:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/b3b3910d-a610-3b46-a9cb-c5249e265700.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl X509v3 Authority Key Identifier: keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8e0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:cc:05:a3:0f:f5:ad:1a:1a:f0:52:98:ac:45:20:c3:ae:f4: 3d:42:8f:d9:9f:53:d1:b5:f7:60:4a:44:95:09:af:61:46:ae: 78:06:68:37:42:a7:9a:29:63:c7:01:4d:8c:c9:4d:cb:7a:f8: 12:d9:dd:27:72:3d:27:f4:e8:48:b6:74:b1:3a:64:00:59:09: c3:bb:28:90:69:ea:d5:7a:ba:e3:c1:b3:60:90:87:0f:6c:62: fc:87:33:aa:a5:4b:67:02:f0:7f:48:93:9d:a7:34:56:15:ac: 10:c3:2e:7b:b5:0f:0a:9f:2d:33:32:0d:72:87:ef:97:f7:f2: 41:54:0d:be:7e:3f:7c:5c:5e:02:fa:7d:8a:6c:02:ef:ea:2f: 0f:32:b7:3d:a7:0a:56:ce:f3:b6:75:a2:cb:e3:8f:1d:c6:04: 32:0c:2a:b7:c6:01:cf:18:af:05:ab:13:cf:1f:fd:b8:88:54: 3f:13:3a:5e:92:9d:a8:8c:40:14:8e:cd:43:26:f3:71:12:c5: 9f:0f:16:a5:03:5a:44:91:da:5d:29:4c:07:ca:d0:51:91:71: 8d:f6:4d:c7:f6:00:bf:05:0b:c9:36:da:13:59:01:0c:a1:d3: d0:a9:f7:6a:45:41:5d:14:53:cc:5d:3a:1e:f6:31:da:d7:dc: 07:0e:e1:bc -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsM3CkWvv5h9yRbDiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz OGEzMB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk MzQ0Y2FjZjEtYzY4Yi00ZWVmLTgwMmItMDc3YjQzNDkwZTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNAbmSrhQ3OIxiygF1GomYRIP7ddgJFhysKO 6Sh5slqv1LBOqD9ThrkKjOZi3iUVDGmUsw/YhtjB+VfbW/7lFZKRNNqcZSxIaP2B 60xwWkcARgY1Bvr5ea5QlFbdS4E6D1K2bqM5Qlg2/3NiDWVYz4UX805pesHrRbrE YjZkfRePq38iH7BsobF7dgKfNRM78lzHUbVgNRtpKo1tIysAw6iXoanxD8bSZ68+ zTnCstSsE7KcPeKzLIKuyHZ5uHiY/ThexgfXY5wPtHZHpZilRRqNRErI7AxhzcLx 2V40MPZ53+C+/9/OyX7n6N3IkC3O7N+ZQ8Uj3DeERUZhWZnUVQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFvzV9F3yEcZhHnJ/Mftsbgzn80UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3 MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvYjNiMzkxMGQtYTYxMC0z YjQ2LWE5Y2ItYzUyNDllMjY1NzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1 NDVlYzM4YTMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf44DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAmzAWjD/WtGhrwUpisRSDDrvQ9Qo/Zn1PRtfdgSkSVCa9hRq54Bmg3 QqeaKWPHAU2MyU3LevgS2d0ncj0n9OhItnSxOmQAWQnDuyiQaerVerrjwbNgkIcP bGL8hzOqpUtnAvB/SJOdpzRWFawQwy57tQ8Kny0zMg1yh++X9/JBVA2+fj98XF4C +n2KbALv6i8PMrc9pwpWzvO2daLL448dxgQyDCq3xgHPGK8FqxPPH/24iFQ/Ezpe kp2ojEAUjs1DJvNxEsWfDxalA1pEkdpdKUwHytBRkXGN9k3H9gC/BQvJNtoTWQEM odPQqfdqRUFdFFPMXToe9jHa19wHDuG8 -----END CERTIFICATE-----Generated at Mon Oct 20 13:55:27 2025 by rpki-client