$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/89ceb73c-b3f7-3cf3-a707-a581e53afddb.roa File: 89ceb73c-b3f7-3cf3-a707-a581e53afddb.roa (raw, json) Hash identifier: r/DVC7tklhfKy0yGJpuXuaITx6UOCGUbHnHZuaQH5Nw= Subject key identifier: 38:BE:16:44:F2:09:4A:4F:A3:F4:EE:52:92:DF:2F:19:61:31:DB:F2 Certificate issuer: /CN=4ad5bd25-8afa-4e50-bb02-f6317eac7e05 Certificate serial: 010D0C9F4328584B891765087B9DBE95A7E1FF20 Authority key identifier: 46:BB:87:7A:ED:B3:EA:9B:8F:09:96:21:80:08:E9:2C:ED:4D:C2:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/89ceb73c-b3f7-3cf3-a707-a581e53afddb.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 14717 IP address blocks: 2607:fd90::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:65:08:7b:9d:be:95:a7:e1:ff:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ad5bd25-8afa-4e50-bb02-f6317eac7e05 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=ef0aefca-8b7c-4837-947c-37ae844bb0ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:71:80:d1:d5:3a:91:be:09:be:e7:b2:6b:10: 19:7c:0f:2b:85:8f:a9:d1:7b:ea:03:54:28:97:a0: 26:3a:4d:04:7f:99:dc:98:40:52:f6:7d:99:b6:5a: 4b:d6:e7:8e:ea:7b:56:ec:09:bb:19:2f:97:7b:2a: fc:a0:5c:9c:cf:9e:1f:d4:04:d9:c7:70:9e:90:7c: 8e:43:53:15:95:c5:95:b3:d9:8f:55:57:72:81:6b: b6:18:eb:14:ef:82:6c:37:a4:c0:f7:f6:21:11:6a: 61:9a:30:a7:c5:a4:2e:e3:a7:20:cf:0a:7d:87:ee: 40:66:06:09:86:36:af:ad:c2:c8:1d:66:4b:e1:38: 60:c5:b1:c0:43:8c:ff:7a:05:27:59:67:1e:90:22: c7:5d:8f:2a:66:f1:32:ff:d8:97:4d:de:16:ac:bc: 3c:0a:ab:4f:c9:eb:63:94:68:af:08:3b:6f:67:4f: 87:ac:7b:83:32:6b:85:d5:30:76:3c:f6:76:97:9d: 3c:e1:bd:9d:9c:c8:4e:9c:16:8d:b4:39:64:f1:ec: 54:7c:43:02:cb:29:8f:5e:7f:cc:1d:f3:a3:9e:90: 79:5c:10:40:c4:d7:96:af:5d:42:b2:a2:e9:39:5b: e9:00:00:70:b2:39:73:71:6f:50:6e:89:52:e2:1d: d1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:BE:16:44:F2:09:4A:4F:A3:F4:EE:52:92:DF:2F:19:61:31:DB:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/89ceb73c-b3f7-3cf3-a707-a581e53afddb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.crl X509v3 Authority Key Identifier: keyid:46:BB:87:7A:ED:B3:EA:9B:8F:09:96:21:80:08:E9:2C:ED:4D:C2:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer sbgp-ipAddrBlock: critical IPv6: 2607:fd90::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:8c:cb:ce:65:05:69:3d:b1:67:ca:49:93:94:d7:15:06:f0: ec:20:40:b0:ee:01:f2:53:a3:84:d7:3d:74:85:0a:d0:f6:c6: 0b:88:14:c0:b5:5d:d4:e9:47:4e:26:5d:1f:ef:e4:f4:c2:ad: 73:84:17:93:43:d4:3c:38:3e:40:69:5b:fa:5c:a9:9c:ba:87: cb:39:be:39:2c:7e:9c:04:30:93:72:a0:46:a6:7e:4d:f0:29: ec:3e:ba:ee:39:46:9f:32:b5:34:07:36:0a:30:9a:d3:0a:79: c0:d3:3d:ad:f6:d3:8c:52:a8:4d:56:01:16:4c:c8:91:10:c9: 1c:10:4a:f0:6a:79:75:6b:d7:cc:d8:30:bf:8a:15:5c:5e:f4: 02:04:dd:8a:39:43:58:ba:06:f5:7a:e8:b0:7a:df:3f:99:8c: df:15:30:ef:76:b7:85:d4:19:ca:88:d7:7e:fe:e3:5c:45:cf: 1a:07:39:f0:66:c0:0e:f4:68:ed:e1:72:fc:84:06:c4:ce:b7: e3:2c:83:d9:44:63:5a:d9:73:90:57:1e:01:36:88:1c:5a:bf: b6:3a:0b:c8:70:8d:b6:b1:df:1f:16:b9:6e:29:7f:95:4f:77: dc:3b:84:68:97:5e:14:93:8a:32:d3:17:bb:6a:95:79:a2:cb: d8:19:5c:a9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuJF2UIe52+lafh/yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFkNWJkMjUtOGFmYS00ZTUwLWJiMDItZjYzMTdlYWM3 ZTA1MB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk ZWYwYWVmY2EtOGI3Yy00ODM3LTk0N2MtMzdhZTg0NGJiMGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnGA0dU6kb4JvueyaxAZfA8rhY+p0XvqA1Qo l6AmOk0Ef5ncmEBS9n2ZtlpL1ueO6ntW7Am7GS+Xeyr8oFycz54f1ATZx3CekHyO Q1MVlcWVs9mPVVdygWu2GOsU74JsN6TA9/YhEWphmjCnxaQu46cgzwp9h+5AZgYJ hjavrcLIHWZL4ThgxbHAQ4z/egUnWWcekCLHXY8qZvEy/9iXTd4WrLw8CqtPyetj lGivCDtvZ0+HrHuDMmuF1TB2PPZ2l5084b2dnMhOnBaNtDlk8exUfEMCyymPXn/M HfOjnpB5XBBAxNeWr11CsqLpOVvpAABwsjlzcW9QbolS4h3RXwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDi+FkTyCUpPo/TuUpLfLxlhMdvyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YWQ1 YmQyNS04YWZhLTRlNTAtYmIwMi1mNjMxN2VhYzdlMDUvODljZWI3M2MtYjNmNy0z Y2YzLWE3MDctYTU4MWU1M2FmZGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGFkNWJkMjUtOGFmYS00ZTUwLWJi MDItZjYzMTdlYWM3ZTA1LzRhZDViZDI1LThhZmEtNGU1MC1iYjAyLWY2MzE3ZWFj N2UwNS5jcmwwHwYDVR0jBBgwFoAURruHeu2z6puPCZYhgAjpLO1NwtAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YWQ1YmQyNS04YWZhLTRlNTAtYmIwMi1mNjMx N2VhYzdlMDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf9kDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCYjMvOZQVpPbFnykmTlNcVBvDsIECw7gHyU6OE1z10hQrQ9sYLiBTA tV3U6UdOJl0f7+T0wq1zhBeTQ9Q8OD5AaVv6XKmcuofLOb45LH6cBDCTcqBGpn5N 8CnsPrruOUafMrU0BzYKMJrTCnnA0z2t9tOMUqhNVgEWTMiREMkcEErwanl1a9fM 2DC/ihVcXvQCBN2KOUNYugb1euiwet8/mYzfFTDvdreF1BnKiNd+/uNcRc8aBznw ZsAO9Gjt4XL8hAbEzrfjLIPZRGNa2XOQVx4BNogcWr+2OgvIcI22sd8fFrluKX+V T3fcO4Rol14Uk4oy0xe7apV5osvYGVyp -----END CERTIFICATE-----Generated at Mon Oct 20 22:21:51 2025 by rpki-client