$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/de9871b6-c06a-3910-8be5-7c2c3df1b317.roa File: de9871b6-c06a-3910-8be5-7c2c3df1b317.roa (raw, json) Hash identifier: YGEFlQs3eGo0Mk0dDlwXPE60TaeoAR7H/iZf9rOWEpY= Subject key identifier: 66:02:CB:18:D5:69:51:EE:A5:4D:5E:F2:45:E5:25:05:F8:B7:D8:65 Certificate issuer: /CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c Certificate serial: 010D0C9F4328584B7B21FA0CA8949EE54EB61F80 Authority key identifier: C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/de9871b6-c06a-3910-8be5-7c2c3df1b317.roa Signing time: Sat 11 Oct 2025 01:00:30 +0000 ROA not before: Sat 11 Oct 2025 01:00:30 +0000 ROA not after: Fri 09 Jan 2026 02:00:30 +0000 asID: 7029 IP address blocks: 2607:340::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7b:21:fa:0c:a8:94:9e:e5:4e:b6:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c Validity Not Before: Oct 11 01:00:30 2025 GMT Not After : Jan 9 02:00:30 2026 GMT Subject: CN=9b215ba0-d908-4319-ba12-3c52b644ec20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6d:2f:4f:ea:38:fd:f7:fa:54:a2:55:86:79: 53:e6:5d:57:2c:6f:c3:e2:bd:1a:d5:87:42:9e:99: 83:8e:5d:a2:96:f4:9f:2b:8a:ae:19:dd:68:51:7b: 81:33:9b:74:9e:8a:85:df:24:5f:04:ab:c7:eb:5b: 6f:f8:b7:42:1f:55:dc:52:b3:80:54:b7:dd:fe:d0: 4e:2e:b5:8a:95:88:8c:75:99:5f:78:70:6e:b6:ae: e9:c9:32:b0:6a:5f:ef:59:6e:94:04:04:ae:9a:57: 90:9c:7d:92:0b:c1:a4:12:ec:1d:4e:68:f5:f5:e4: 05:83:e9:f1:88:01:3e:1d:e9:d4:3d:b0:4d:e9:1b: ae:6b:a8:c2:c3:2f:25:6a:63:c5:34:62:fd:65:e4: d9:60:22:5f:d5:89:d6:7f:e6:e5:57:4c:db:2c:7a: bb:97:71:d3:7b:dd:03:4e:73:60:57:d4:b1:1c:1e: a0:dd:a5:6a:ef:fe:11:b1:c2:b0:f4:76:62:94:1b: 3d:ff:cf:9e:d2:d3:38:e6:ce:46:9e:90:25:60:61: fe:b3:ae:8c:74:91:d8:5d:28:0d:e9:d7:53:e3:d7: c9:39:84:cb:2a:cc:65:6c:47:6b:d5:a1:9f:dc:61: f9:59:b7:da:9a:62:66:a8:0b:96:82:58:a9:76:aa: 79:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:02:CB:18:D5:69:51:EE:A5:4D:5E:F2:45:E5:25:05:F8:B7:D8:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/de9871b6-c06a-3910-8be5-7c2c3df1b317.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl X509v3 Authority Key Identifier: keyid:C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer sbgp-ipAddrBlock: critical IPv6: 2607:340::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:2a:fe:d4:1c:83:ae:c9:b1:7f:f7:c8:f4:81:90:0b:15:3e: f4:f6:18:18:63:8f:db:da:19:14:b1:c8:13:a1:b3:a3:c9:85: 00:e2:02:7d:26:91:02:f4:9a:a1:7f:5a:51:ab:8b:ab:0b:3e: 72:66:98:1d:f5:cb:5f:20:eb:af:2d:63:f6:2d:c4:5b:38:19: 55:23:f7:e2:e2:4d:ba:73:6e:47:bc:9c:43:35:e2:d1:a4:2c: 5c:ec:3d:1a:a7:78:d5:45:84:02:75:7c:b8:45:f4:49:49:d7: 21:dc:46:17:3a:09:9a:2d:51:14:89:46:7a:db:df:83:67:44: e7:1d:d6:4a:93:53:0a:b6:0b:8e:45:c2:67:22:ef:22:79:e8: 0b:2c:6a:12:e5:83:a3:5e:5e:8d:3a:24:13:05:e0:23:5e:af: 1d:6c:d3:85:94:61:20:94:22:41:e0:75:d8:5a:98:4d:8c:14: 58:9e:e7:93:5a:dc:df:c8:40:c2:9b:97:ab:6c:f9:45:8f:8f: 06:ca:ac:d9:0f:72:6c:7a:6e:78:3e:59:85:1a:a2:08:a1:72: 65:af:f3:c7:1b:ff:bb:16:8c:f4:e4:c9:bf:5f:d6:95:b0:ac: 5f:8b:df:db:fa:bb:98:de:ea:9b:a1:5d:09:74:76:2d:45:86: 7c:9a:4d:d2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt7IfoMqJSe5U62H4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhM2I4YmEtYWM3ZS00ZTBlLTg5MWMtYWEyMGU1ZmU0 NDJjMB4XDTI1MTAxMTAxMDAzMFoXDTI2MDEwOTAyMDAzMFowLzEtMCsGA1UEAxMk OWIyMTViYTAtZDkwOC00MzE5LWJhMTItM2M1MmI2NDRlYzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2m0vT+o4/ff6VKJVhnlT5l1XLG/D4r0a1YdC npmDjl2ilvSfK4quGd1oUXuBM5t0noqF3yRfBKvH61tv+LdCH1XcUrOAVLfd/tBO LrWKlYiMdZlfeHButq7pyTKwal/vWW6UBASumleQnH2SC8GkEuwdTmj19eQFg+nx iAE+HenUPbBN6Ruua6jCwy8lamPFNGL9ZeTZYCJf1YnWf+blV0zbLHq7l3HTe90D TnNgV9SxHB6g3aVq7/4RscKw9HZilBs9/8+e0tM45s5GnpAlYGH+s66MdJHYXSgN 6ddT49fJOYTLKsxlbEdr1aGf3GH5WbfammJmqAuWglipdqp5lQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGYCyxjVaVHupU1e8kXlJQX4t9hlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wOWEz YjhiYS1hYzdlLTRlMGUtODkxYy1hYTIwZTVmZTQ0MmMvZGU5ODcxYjYtYzA2YS0z OTEwLThiZTUtN2MyYzNkZjFiMzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDlhM2I4YmEtYWM3ZS00ZTBlLTg5 MWMtYWEyMGU1ZmU0NDJjLzA5YTNiOGJhLWFjN2UtNGUwZS04OTFjLWFhMjBlNWZl NDQyYy5jcmwwHwYDVR0jBBgwFoAUxFLvKSfy7FpRPMFy1nO9HjkFlSYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wOWEzYjhiYS1hYzdlLTRlMGUtODkxYy1hYTIw ZTVmZTQ0MmMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcDQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAQKv7UHIOuybF/98j0gZALFT709hgYY4/b2hkUscgTobOjyYUA4gJ9 JpEC9Jqhf1pRq4urCz5yZpgd9ctfIOuvLWP2LcRbOBlVI/fi4k26c25HvJxDNeLR pCxc7D0ap3jVRYQCdXy4RfRJSdch3EYXOgmaLVEUiUZ629+DZ0TnHdZKk1MKtguO RcJnIu8ieegLLGoS5YOjXl6NOiQTBeAjXq8dbNOFlGEglCJB4HXYWphNjBRYnueT WtzfyEDCm5erbPlFj48GyqzZD3Jsem54PlmFGqIIoXJlr/PHG/+7Foz05Mm/X9aV sKxfi9/b+ruY3uqboV0JdHYtRYZ8mk3S -----END CERTIFICATE-----Generated at Mon Oct 20 18:34:09 2025 by rpki-client