$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/5ac0a3d9-be9f-36c9-9bb9-86dbc92658a3.roa File: 5ac0a3d9-be9f-36c9-9bb9-86dbc92658a3.roa (raw, json) Hash identifier: f9frXaexLodSA4YyGt6Z+Gzp8O6o7DzA7FiYES065c0= Subject key identifier: 7A:78:CD:E2:8B:25:CA:7E:26:4B:E6:53:0D:05:46:59:12:98:B2:7E Certificate issuer: /CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c Certificate serial: 010D0C9F4328584AC2E0FF1EC30FA7C537934680 Authority key identifier: C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/5ac0a3d9-be9f-36c9-9bb9-86dbc92658a3.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 399989 IP address blocks: 2607:340::/28 maxlen: 28 2607:340::/29 maxlen: 29 2607:348::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:ff:1e:c3:0f:a7:c5:37:93:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=47cea300-75fc-43aa-8b6b-4d3ce7e07295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0e:21:f9:28:e1:54:77:10:e8:ef:6c:0b:34: 0e:ff:b3:40:bd:a7:ef:7f:02:e2:01:8d:ce:20:65: 82:86:f2:55:96:d4:96:db:25:76:f9:b7:9e:df:1d: 2c:f2:9c:6d:98:51:a1:50:99:d9:9a:ec:b3:31:18: 91:67:3c:65:e3:86:11:91:11:ee:c1:b9:99:c3:b7: 2d:8c:f1:91:25:66:13:f0:08:bf:79:e1:86:a5:60: df:37:b5:da:5c:32:9d:20:22:db:19:28:04:77:c1: 54:18:f1:31:1e:62:c4:c0:18:7f:90:c9:6a:b6:4c: 08:51:db:22:26:83:65:8d:0f:dd:6c:ea:de:f5:2f: dd:72:bf:98:f4:a2:dd:65:92:76:aa:c7:04:03:ce: 9d:66:fc:43:be:5f:64:a5:7e:16:bf:a5:39:bf:ef: 16:77:2b:59:5e:40:88:79:bc:f6:a4:f1:87:90:e9: c4:19:a4:ac:12:d0:55:49:73:c4:7e:7f:a7:2c:1f: 9e:b1:b6:33:7b:ae:73:bc:f8:cc:c6:86:2e:53:77: 42:9a:6d:98:17:5e:87:a6:4d:4a:1d:8a:95:f6:a9: 71:fc:43:d7:03:9a:99:cb:6f:c6:c0:00:40:86:d8: ca:a3:70:3e:73:21:27:88:5e:2a:96:49:6a:9d:0b: bb:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:78:CD:E2:8B:25:CA:7E:26:4B:E6:53:0D:05:46:59:12:98:B2:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/5ac0a3d9-be9f-36c9-9bb9-86dbc92658a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl X509v3 Authority Key Identifier: keyid:C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer sbgp-ipAddrBlock: critical IPv6: 2607:340::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:2a:3b:28:ee:82:7d:67:e2:87:c2:e7:9d:37:83:25:3d:78: ba:cd:ae:7f:92:4d:f5:30:a4:0f:eb:24:6a:83:13:ec:cd:21: 81:0a:f2:66:44:11:0d:43:7e:9f:46:b1:be:fb:5e:75:5d:a1: 22:8b:be:b2:db:97:f9:47:08:22:f7:47:fe:c2:ff:33:b7:67: 16:12:9c:9a:8b:ee:4f:e9:61:9f:9a:15:88:57:65:4a:6b:5f: 13:71:c0:36:4b:05:7a:ef:ec:d1:c5:d4:5c:a9:8a:49:ba:8a: bb:d4:1e:e2:9b:a7:dc:7d:13:5d:29:e5:d3:96:9f:ba:13:b8: 51:ee:b2:14:1b:7a:52:ae:dd:a9:1d:dd:9e:c3:15:85:28:a3: 71:d0:56:9c:90:9a:29:7d:9a:ed:32:de:41:20:39:8a:07:32: 47:5d:e3:62:1d:45:87:42:3d:fa:1f:39:48:25:19:05:bb:e5: 3a:10:e9:6d:c3:36:54:b6:ac:e9:97:3f:56:89:e8:c2:05:ff: 88:e9:3c:a5:84:1b:73:88:27:4a:48:5e:4d:cd:78:65:1e:18: 97:2f:94:8a:84:3c:cc:52:80:1b:22:56:16:f3:ac:f4:7f:34: 97:26:18:5a:16:ad:9e:ca:5a:ff:59:bd:0b:da:08:7d:44:9d: cb:77:f9:64 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErC4P8eww+nxTeTRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhM2I4YmEtYWM3ZS00ZTBlLTg5MWMtYWEyMGU1ZmU0 NDJjMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk NDdjZWEzMDAtNzVmYy00M2FhLThiNmItNGQzY2U3ZTA3Mjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjg4h+SjhVHcQ6O9sCzQO/7NAvafvfwLiAY3O IGWChvJVltSW2yV2+bee3x0s8pxtmFGhUJnZmuyzMRiRZzxl44YRkRHuwbmZw7ct jPGRJWYT8Ai/eeGGpWDfN7XaXDKdICLbGSgEd8FUGPExHmLEwBh/kMlqtkwIUdsi JoNljQ/dbOre9S/dcr+Y9KLdZZJ2qscEA86dZvxDvl9kpX4Wv6U5v+8WdytZXkCI ebz2pPGHkOnEGaSsEtBVSXPEfn+nLB+esbYze65zvPjMxoYuU3dCmm2YF16Hpk1K HYqV9qlx/EPXA5qZy2/GwABAhtjKo3A+cyEniF4qlklqnQu7mwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHp4zeKLJcp+JkvmUw0FRlkSmLJ+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wOWEz YjhiYS1hYzdlLTRlMGUtODkxYy1hYTIwZTVmZTQ0MmMvNWFjMGEzZDktYmU5Zi0z NmM5LTliYjktODZkYmM5MjY1OGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDlhM2I4YmEtYWM3ZS00ZTBlLTg5 MWMtYWEyMGU1ZmU0NDJjLzA5YTNiOGJhLWFjN2UtNGUwZS04OTFjLWFhMjBlNWZl NDQyYy5jcmwwHwYDVR0jBBgwFoAUxFLvKSfy7FpRPMFy1nO9HjkFlSYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wOWEzYjhiYS1hYzdlLTRlMGUtODkxYy1hYTIw ZTVmZTQ0MmMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgcDQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBPKjso7oJ9Z+KHwuedN4MlPXi6za5/kk31MKQP6yRqgxPszSGBCvJm RBENQ36fRrG++151XaEii76y25f5Rwgi90f+wv8zt2cWEpyai+5P6WGfmhWIV2VK a18TccA2SwV67+zRxdRcqYpJuoq71B7im6fcfRNdKeXTlp+6E7hR7rIUG3pSrt2p Hd2ewxWFKKNx0FackJopfZrtMt5BIDmKBzJHXeNiHUWHQj36HzlIJRkFu+U6EOlt wzZUtqzplz9WiejCBf+I6TylhBtziCdKSF5NzXhlHhiXL5SKhDzMUoAbIlYW86z0 fzSXJhhaFq2eylr/Wb0L2gh9RJ3Ld/lk -----END CERTIFICATE-----Generated at Sat Aug 23 20:53:05 2025 by rpki-client