$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/147d4e1d-a096-314d-b104-4b2b7e03db0f.roa File: 147d4e1d-a096-314d-b104-4b2b7e03db0f.roa (raw, json) Hash identifier: 1Jl/LdGl1kZaIXDzvTUPQdv7AqnZkLleaflUdyfw5bs= Subject key identifier: F9:9F:FA:93:C8:FF:C9:F4:44:A2:BB:3A:C1:66:CA:76:D2:BC:2E:78 Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Certificate serial: 010D0C9F4328584B8BE2176CF6921ADABB91C400 Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/147d4e1d-a096-314d-b104-4b2b7e03db0f.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 40948 IP address blocks: 2607:e300::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:17:6c:f6:92:1a:da:bb:91:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=45c5145c-9d2e-4b6e-b445-90849a87db53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:75:2d:5d:36:32:f0:01:6b:5b:08:70:fe:12: 80:26:5c:e0:08:ed:55:d0:f2:b1:44:50:c2:ae:c5: a1:2b:42:72:39:ec:d6:78:7a:c2:a5:50:22:b0:ea: 30:1a:ed:35:5e:2d:cb:a7:d7:ba:c6:05:06:9f:e2: df:34:43:e1:9e:9a:36:98:8f:d6:9d:61:cc:0b:ce: f7:59:26:41:ce:00:67:ae:da:a3:8c:e3:7b:d7:a8: 0a:00:f3:a7:f0:6a:a4:cf:f2:a8:0b:77:fe:4a:cf: 2a:37:1a:07:03:de:f3:f1:64:f7:97:96:9c:3e:65: 2b:7c:99:5f:ed:c6:44:9b:63:1e:bb:0f:e1:6b:55: 44:37:b1:9f:f5:52:c8:0e:8c:88:5d:39:df:6c:19: 58:52:00:70:76:f6:77:f7:a6:f4:e8:cf:75:db:c5: e6:a8:94:10:68:17:87:8d:d4:f1:2e:8e:3c:2d:35: 50:97:93:3a:5c:7e:74:01:3a:2d:37:16:26:57:95: 26:95:dd:08:35:47:e0:30:62:c8:37:f7:6f:63:f7: 40:58:b9:24:6a:cf:dc:78:7a:4a:6d:c6:c1:3e:40: 6f:2a:c0:d0:da:aa:e8:37:71:02:9e:71:74:6c:e7: c6:f7:f0:3b:e0:8e:b1:a1:3f:d8:95:c2:e7:b7:2b: b1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:9F:FA:93:C8:FF:C9:F4:44:A2:BB:3A:C1:66:CA:76:D2:BC:2E:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/147d4e1d-a096-314d-b104-4b2b7e03db0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl X509v3 Authority Key Identifier: keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer sbgp-ipAddrBlock: critical IPv6: 2607:e300::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:3f:1e:fc:1e:35:59:5a:06:9c:47:4e:6e:29:7c:d6:4d:57: 59:47:0c:f3:d5:d2:c2:67:71:5d:31:d3:0b:f6:41:6d:fd:67: fe:32:69:f2:2b:22:ea:92:b7:33:be:df:d2:69:31:0c:24:34: 1c:d8:21:8b:bc:e5:e4:0b:59:5a:8d:46:f5:f7:73:1b:8a:ca: b0:09:1e:c2:85:cc:c6:cb:d5:cb:04:d5:15:2f:9e:1f:dd:60: dc:a7:53:13:84:92:cb:3a:38:0e:48:0b:ec:f1:6e:56:82:d2: e5:26:d8:2b:5a:a7:b9:77:13:06:e4:39:1c:35:88:da:56:b9: 6e:ae:51:ff:b8:5d:24:2a:a5:49:21:7c:ac:53:ac:bd:6b:0f: 2d:6e:f6:7c:81:da:f6:8c:5e:05:39:0e:44:2b:85:2c:c0:96: 01:c9:88:b3:db:06:c1:5a:fd:72:00:9b:f1:5b:89:5d:77:6b: 9b:6f:3f:92:7c:68:65:5a:63:f3:c7:0d:cf:72:d4:4b:15:4f: 35:f2:ed:dd:28:05:8e:7b:e1:e9:f4:fb:ad:26:77:8b:b8:07: 52:f4:ee:c8:c1:7d:20:81:6d:82:86:18:ca:88:a3:4c:d3:fd: b3:da:4c:8a:d3:00:59:2a:f5:3e:c8:0f:8f:a3:9e:fd:fd:8a: c4:a4:46:9b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuL4hds9pIa2ruRxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5NzI0N2YtMmQ4OC00YzUxLTgwNWEtN2FiMmE5YWY5 ZGM1MB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk NDVjNTE0NWMtOWQyZS00YjZlLWI0NDUtOTA4NDlhODdkYjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnUtXTYy8AFrWwhw/hKAJlzgCO1V0PKxRFDC rsWhK0JyOezWeHrCpVAisOowGu01Xi3Lp9e6xgUGn+LfNEPhnpo2mI/WnWHMC873 WSZBzgBnrtqjjON716gKAPOn8Gqkz/KoC3f+Ss8qNxoHA97z8WT3l5acPmUrfJlf 7cZEm2Meuw/ha1VEN7Gf9VLIDoyIXTnfbBlYUgBwdvZ396b06M9128XmqJQQaBeH jdTxLo48LTVQl5M6XH50ATotNxYmV5Umld0INUfgMGLIN/dvY/dAWLkkas/ceHpK bcbBPkBvKsDQ2qroN3ECnnF0bOfG9/A74I6xoT/YlcLntyuxUQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPmf+pPI/8n0RKK7OsFmynbSvC54MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3 MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIyYTlhZjlkYzUvMTQ3ZDRlMWQtYTA5Ni0z MTRkLWIxMDQtNGIyYjdlMDNkYjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU5NzI0N2YtMmQ4OC00YzUxLTgw NWEtN2FiMmE5YWY5ZGM1LzU1OTcyNDdmLTJkODgtNGM1MS04MDVhLTdhYjJhOWFm OWRjNS5jcmwwHwYDVR0jBBgwFoAUPHMq3QSzawItRgP+6YfSg1gci6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIy YTlhZjlkYzUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfjADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCTPx78HjVZWgacR05uKXzWTVdZRwzz1dLCZ3FdMdML9kFt/Wf+Mmny KyLqkrczvt/SaTEMJDQc2CGLvOXkC1lajUb193MbisqwCR7ChczGy9XLBNUVL54f 3WDcp1MThJLLOjgOSAvs8W5WgtLlJtgrWqe5dxMG5DkcNYjaVrlurlH/uF0kKqVJ IXysU6y9aw8tbvZ8gdr2jF4FOQ5EK4UswJYByYiz2wbBWv1yAJvxW4ldd2ubbz+S fGhlWmPzxw3PctRLFU818u3dKAWOe+Hp9PutJneLuAdS9O7IwX0ggW2ChhjKiKNM 0/2z2kyK0wBZKvU+yA+Po579/YrEpEab -----END CERTIFICATE-----Generated at Tue Oct 21 02:34:22 2025 by rpki-client