$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/e2859ca0-5dce-362c-aad8-b0a42f360abe.roa File: e2859ca0-5dce-362c-aad8-b0a42f360abe.roa (raw, json) Hash identifier: 8oPu3jcv62lyh5Wpg5rO0vwg8vAdCKBRJxp5WYPZyh4= Subject key identifier: 72:6A:1E:61:48:69:E2:E5:64:F5:DE:AC:9E:B5:24:FF:AC:22:AB:84 Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Certificate serial: 010D0C9F4328584B8917677EF9EC1E352CE3DD80 Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/e2859ca0-5dce-362c-aad8-b0a42f360abe.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 22742 IP address blocks: 2607:f460::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:67:7e:f9:ec:1e:35:2c:e3:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=284c31c7-1c61-40fa-828a-b410aaaa2325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:15:9f:b3:ce:be:62:8e:91:44:dc:43:6a:5b: 78:9d:4e:0b:67:8f:76:05:62:bd:72:ce:ec:18:81: fe:ea:13:e9:fc:ed:1e:30:a4:71:ac:a1:47:f9:6d: 79:bc:54:c7:7b:36:79:cf:e4:9b:73:9c:d0:13:05: 02:25:48:40:b4:0d:bb:52:9f:9a:c9:73:b2:e3:7b: 84:8a:89:f1:3b:5a:f7:14:79:df:82:fe:87:56:d8: e2:e6:5e:e4:11:20:e5:6d:db:c0:5c:9c:85:a4:ea: 4f:2c:d1:7b:a1:1e:c7:4f:82:ff:57:c2:71:cd:26: 88:c5:ca:85:3d:07:c7:57:34:c5:7c:c9:d0:9f:5c: 2b:c0:ed:24:ff:ff:12:20:b8:78:93:90:f6:22:33: 6d:08:eb:59:82:4e:5b:6d:fb:71:2f:3c:44:48:c6: 4d:48:11:79:e2:c6:89:bc:d4:70:61:70:6c:f2:95: f0:6c:88:c0:62:2f:10:1e:b6:87:cd:f7:ab:3d:e9: 03:ed:f5:b7:64:e1:1c:05:e5:af:46:38:69:ea:e3: f4:75:3b:99:fc:ab:b1:ad:38:3e:e3:87:38:f6:f4: 19:5d:8a:86:c9:3a:4e:7e:45:67:85:a1:3b:ec:59: 95:91:47:e8:c6:76:01:48:fc:03:59:fa:1e:f6:56: 0c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:6A:1E:61:48:69:E2:E5:64:F5:DE:AC:9E:B5:24:FF:AC:22:AB:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/e2859ca0-5dce-362c-aad8-b0a42f360abe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl X509v3 Authority Key Identifier: keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer sbgp-ipAddrBlock: critical IPv6: 2607:f460::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:2c:81:6a:df:2f:be:b6:e1:e2:eb:14:49:93:16:20:99:19: 1c:a4:3a:56:57:8e:dc:60:2c:61:22:a8:9b:4b:67:06:9f:da: 3b:df:b4:c3:7c:a2:71:54:41:7b:2f:3f:6f:e9:37:bd:94:37: f9:b1:69:10:05:07:9d:83:71:49:a1:5f:51:83:5e:85:0b:d4: 1b:5c:f7:8f:05:7b:78:dd:ea:a3:9e:8c:59:c6:2b:23:01:61: cb:3b:e8:bf:48:2a:c5:31:bb:ae:fb:63:93:b8:ac:ce:a0:50: d3:2a:b4:98:fe:fe:57:36:97:bb:53:26:29:c5:9f:13:af:c2: 9a:0b:d8:f2:d7:00:ca:f3:11:46:8c:ed:af:42:7f:8e:a2:32: 03:1a:78:8a:07:6e:95:b5:71:01:70:cb:7e:c8:29:3e:50:ec: 2a:30:e8:21:8e:4c:e1:41:d5:41:d2:32:6c:c1:47:16:06:40: 6f:df:66:f4:c9:36:3d:19:33:ae:bb:0d:b0:a6:7b:3c:84:82: 1c:e1:0e:01:b5:5a:2a:52:44:2c:82:91:cb:eb:c3:e8:98:b7: 73:fc:55:8a:14:8a:70:24:ca:b4:4c:a7:ff:6b:f8:c9:fc:ea: 2c:0b:b2:17:41:03:0a:f2:6c:ea:d6:07:7f:d2:4f:c2:18:36: 42:49:04:a3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuJF2d++eweNSzj3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhmYmM0ODEtYTJjNy00Mzc5LWIyYzAtZGU0ZGYwNjBl MmI0MB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk Mjg0YzMxYzctMWM2MS00MGZhLTgyOGEtYjQxMGFhYWEyMzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBWfs86+Yo6RRNxDalt4nU4LZ492BWK9cs7s GIH+6hPp/O0eMKRxrKFH+W15vFTHezZ5z+Sbc5zQEwUCJUhAtA27Up+ayXOy43uE ionxO1r3FHnfgv6HVtji5l7kESDlbdvAXJyFpOpPLNF7oR7HT4L/V8JxzSaIxcqF PQfHVzTFfMnQn1wrwO0k//8SILh4k5D2IjNtCOtZgk5bbftxLzxESMZNSBF54saJ vNRwYXBs8pXwbIjAYi8QHraHzferPekD7fW3ZOEcBeWvRjhp6uP0dTuZ/KuxrTg+ 44c49vQZXYqGyTpOfkVnhaE77FmVkUfoxnYBSPwDWfoe9lYMdQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHJqHmFIaeLlZPXerJ61JP+sIquEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZi YzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRkZjA2MGUyYjQvZTI4NTljYTAtNWRjZS0z NjJjLWFhZDgtYjBhNDJmMzYwYWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhmYmM0ODEtYTJjNy00Mzc5LWIy YzAtZGU0ZGYwNjBlMmI0LzM4ZmJjNDgxLWEyYzctNDM3OS1iMmMwLWRlNGRmMDYw ZTJiNC5jcmwwHwYDVR0jBBgwFoAUe7WsRbLlDgq77ga840gjEBsnCwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZiYzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRk ZjA2MGUyYjQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf0YDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBoLIFq3y++tuHi6xRJkxYgmRkcpDpWV47cYCxhIqibS2cGn9o737TD fKJxVEF7Lz9v6Te9lDf5sWkQBQedg3FJoV9Rg16FC9QbXPePBXt43eqjnoxZxisj AWHLO+i/SCrFMbuu+2OTuKzOoFDTKrSY/v5XNpe7UyYpxZ8Tr8KaC9jy1wDK8xFG jO2vQn+OojIDGniKB26VtXEBcMt+yCk+UOwqMOghjkzhQdVB0jJswUcWBkBv32b0 yTY9GTOuuw2wpns8hIIc4Q4BtVoqUkQsgpHL68PomLdz/FWKFIpwJMq0TKf/a/jJ /OosC7IXQQMK8mzq1gd/0k/CGDZCSQSj -----END CERTIFICATE-----Generated at Mon Oct 20 08:08:04 2025 by rpki-client