$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda/71b83ec4-78b1-3f7e-b800-7136d3f2784e.roa File: 71b83ec4-78b1-3f7e-b800-7136d3f2784e.roa (raw, json) Hash identifier: OG12h7CGi2vZy0qC4B0q0DeguTBfYrp1ssOEyQ4TI5Y= Subject key identifier: 34:62:A6:CF:74:53:3E:FB:1F:08:6D:99:2D:49:20:82:60:1B:95:CE Certificate issuer: /CN=26f87379-b07b-41fb-8976-6fd9e7149fda Certificate serial: 010D0C9F4328584B84E76CB3E570EC2F356EB298 Authority key identifier: B3:E3:8B:C0:B5:ED:73:06:2C:85:6C:E9:D3:69:C8:9E:A9:E3:DB:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda/71b83ec4-78b1-3f7e-b800-7136d3f2784e.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 19016 IP address blocks: 2607::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda/26f87379-b07b-41fb-8976-6fd9e7149fda.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda/26f87379-b07b-41fb-8976-6fd9e7149fda.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:6c:b3:e5:70:ec:2f:35:6e:b2:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26f87379-b07b-41fb-8976-6fd9e7149fda Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=13f567f3-947e-4b06-beaa-c20fc4c6e21e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e4:7d:da:63:7a:b7:1e:0e:ce:83:50:e6:55: 6b:9c:db:98:20:8d:f8:9f:f0:b6:9d:01:00:42:c3: 78:69:f6:43:28:dc:48:e8:e0:26:69:e6:96:4d:7c: 54:0c:e6:e0:0c:3c:e1:7c:d8:59:82:c6:f3:26:a1: 1b:b8:84:f1:fa:f0:c4:2c:e3:3a:c9:33:8e:35:fd: 62:9f:6a:e2:fe:d0:94:80:f8:03:68:15:3a:f4:e0: d5:ec:db:a6:90:99:81:93:aa:94:eb:51:a9:6c:44: 0f:11:84:15:e1:79:e9:0f:c0:01:99:a3:70:31:2d: 8e:df:62:59:96:95:d1:70:7f:48:db:95:b9:89:59: d7:96:71:13:11:e3:1d:fe:51:9f:4c:a3:8e:65:ba: 86:ee:6e:e0:67:3d:14:f4:4a:db:4c:20:d1:bd:82: 9e:74:b8:69:ba:37:49:4d:ea:be:9b:43:c7:fe:9c: 32:4b:8f:1a:7e:47:e5:cf:8f:2d:eb:72:15:db:6c: 02:f6:43:3a:f0:4f:ca:22:1d:56:91:1c:1a:c5:fd: 51:e9:07:d9:25:33:f5:ac:0d:d3:5b:79:e7:cd:32: 03:cf:52:fd:d6:ab:3c:6b:43:df:9a:2e:3c:8a:28: 24:da:ae:f8:e1:c5:da:d7:fa:e8:8d:6b:c7:d9:48: 10:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:62:A6:CF:74:53:3E:FB:1F:08:6D:99:2D:49:20:82:60:1B:95:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda/71b83ec4-78b1-3f7e-b800-7136d3f2784e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda/26f87379-b07b-41fb-8976-6fd9e7149fda.crl X509v3 Authority Key Identifier: keyid:B3:E3:8B:C0:B5:ED:73:06:2C:85:6C:E9:D3:69:C8:9E:A9:E3:DB:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda.cer sbgp-ipAddrBlock: critical IPv6: 2607::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:77:08:f4:30:e3:73:f6:b4:11:75:af:01:f4:ac:af:63:1b: 4a:e0:6a:d9:4d:25:df:04:48:43:e5:8f:b0:5b:50:25:12:68: d8:f2:d2:71:54:6b:ac:5a:88:9a:1d:28:0f:83:d0:ff:5c:f9: 70:79:cd:eb:63:2a:91:ec:3d:f1:1d:b4:f7:44:d0:06:c3:89: 8a:71:4e:d9:ca:2b:41:c4:a5:da:c3:e6:83:73:71:df:b6:e9: 1c:a1:9e:18:9d:dc:ac:ce:27:bd:8d:74:02:62:3f:f6:b3:48: 41:27:e1:fb:30:ef:55:8e:b5:9e:e3:15:4a:1a:73:a2:79:dc: 94:90:06:01:d5:9e:21:11:ee:9f:1e:f9:24:99:79:61:75:d0: aa:2b:8c:e0:ec:78:df:51:e1:8f:ff:bd:dc:04:dd:1a:7e:4a: 4e:b7:ee:a8:7f:e1:9e:8a:0e:1b:08:f8:88:d8:21:da:5a:14: 58:3b:1a:e4:af:b3:1a:fa:f3:6e:92:dc:21:77:45:2d:31:c5: b1:b7:ba:f3:e2:ab:a9:dd:3a:b8:11:c3:cd:86:e1:cf:ee:17: 8e:14:14:a5:9c:78:3b:c6:47:2a:ce:70:4e:55:72:c4:e2:7c: 89:43:67:75:c7:1f:e9:ff:87:d0:43:77:16:ea:0a:e5:f9:27: b1:6c:2e:39 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuE52yz5XDsLzVuspgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjZmODczNzktYjA3Yi00MWZiLTg5NzYtNmZkOWU3MTQ5 ZmRhMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk MTNmNTY3ZjMtOTQ3ZS00YjA2LWJlYWEtYzIwZmM0YzZlMjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguR92mN6tx4OzoNQ5lVrnNuYII34n/C2nQEA QsN4afZDKNxI6OAmaeaWTXxUDObgDDzhfNhZgsbzJqEbuITx+vDELOM6yTOONf1i n2ri/tCUgPgDaBU69ODV7NumkJmBk6qU61GpbEQPEYQV4XnpD8ABmaNwMS2O32JZ lpXRcH9I25W5iVnXlnETEeMd/lGfTKOOZbqG7m7gZz0U9ErbTCDRvYKedLhpujdJ Teq+m0PH/pwyS48afkflz48t63IV22wC9kM68E/KIh1WkRwaxf1R6QfZJTP1rA3T W3nnzTIDz1L91qs8a0Pfmi48iigk2q744cXa1/rojWvH2UgQKQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDRips90Uz77HwhtmS1JIIJgG5XOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yNmY4 NzM3OS1iMDdiLTQxZmItODk3Ni02ZmQ5ZTcxNDlmZGEvNzFiODNlYzQtNzhiMS0z ZjdlLWI4MDAtNzEzNmQzZjI3ODRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjZmODczNzktYjA3Yi00MWZiLTg5 NzYtNmZkOWU3MTQ5ZmRhLzI2Zjg3Mzc5LWIwN2ItNDFmYi04OTc2LTZmZDllNzE0 OWZkYS5jcmwwHwYDVR0jBBgwFoAUs+OLwLXtcwYshWzp02nInqnj298wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yNmY4NzM3OS1iMDdiLTQxZmItODk3Ni02ZmQ5 ZTcxNDlmZGEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcAADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAEdwj0MONz9rQRda8B9KyvYxtK4GrZTSXfBEhD5Y+wW1AlEmjY8tJx VGusWoiaHSgPg9D/XPlwec3rYyqR7D3xHbT3RNAGw4mKcU7ZyitBxKXaw+aDc3Hf tukcoZ4Yndyszie9jXQCYj/2s0hBJ+H7MO9VjrWe4xVKGnOiedyUkAYB1Z4hEe6f HvkkmXlhddCqK4zg7HjfUeGP/73cBN0afkpOt+6of+Geig4bCPiI2CHaWhRYOxrk r7Ma+vNuktwhd0UtMcWxt7rz4qup3Tq4EcPNhuHP7heOFBSlnHg7xkcqznBOVXLE 4nyJQ2d1xx/p/4fQQ3cW6grl+SexbC45 -----END CERTIFICATE-----Generated at Mon Oct 20 18:03:34 2025 by rpki-client