$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b07bbdfb-7998-3c03-b442-ceb21f49d205.roa File: b07bbdfb-7998-3c03-b442-ceb21f49d205.roa (raw, json) Hash identifier: wFnU475kv4ZaKF7j+63BXGJVz/2gO/AjUEU6yFXHBvI= Subject key identifier: D5:51:AA:C6:BC:42:1C:52:F5:82:8E:4F:17:73:B3:19:A8:01:28:3B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD76B86307E5E1FF61BA80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b07bbdfb-7998-3c03-b442-ceb21f49d205.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 32381 IP address blocks: 2001:4860:1040::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:76:b8:63:07:e5:e1:ff:61:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=374000fc-69e9-4345-9a7a-c6d4bc13c087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1a:6c:42:78:e2:7b:1a:5d:cc:37:8f:8a:00: db:b3:09:75:9c:3d:14:1d:af:cf:1b:da:5d:e4:76: fe:b7:3d:15:4a:42:d5:2a:cf:72:23:76:ac:2c:54: cc:48:70:71:8b:7f:4d:46:0d:a5:e5:64:67:d7:80: 33:94:c8:08:4f:c2:2e:03:ac:89:52:55:de:4d:3a: ac:3e:6a:89:4b:ab:cb:72:4b:92:80:78:1d:fa:59: a8:fa:52:ec:7f:74:f6:6e:36:1a:96:08:1d:d3:a7: 98:84:78:42:56:a5:27:8d:1f:6a:43:65:c5:3e:a6: 20:69:89:9f:d9:fd:35:43:1b:3c:71:58:a9:0d:cf: ea:17:c5:84:fd:ff:48:59:78:2a:1d:e2:02:ce:53: 98:03:a8:da:5d:2f:54:97:64:f5:59:a0:c0:a8:3c: b0:2d:2a:4d:62:11:83:fb:52:03:ec:19:91:dc:0b: 47:67:5b:e1:9c:42:38:fd:40:5c:e5:e6:20:40:80: 23:f5:70:50:30:72:2f:94:b9:70:14:05:a9:56:79: 9b:4d:42:1f:7d:06:aa:a4:b4:4e:9a:7e:99:8b:71: 18:6f:1f:84:f2:64:8a:fc:ae:0e:aa:a8:cf:46:c6: c9:0d:da:a0:a7:45:8f:3e:98:43:7a:68:5d:dc:8a: a1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:51:AA:C6:BC:42:1C:52:F5:82:8E:4F:17:73:B3:19:A8:01:28:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b07bbdfb-7998-3c03-b442-ceb21f49d205.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:1040::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:d2:21:04:45:c6:b3:55:72:0d:43:67:6c:9c:cd:a2:dc:9d: ba:a0:e6:5a:22:87:bf:55:15:bf:b6:1c:18:76:d5:d6:14:6d: c3:9b:e6:fa:8d:85:c5:a5:de:c4:1d:5c:c8:d6:1f:b0:74:39: 9b:5b:e4:3d:f9:93:dc:24:8f:cc:89:c8:fd:82:a2:16:11:fa: cd:96:0e:e3:35:62:a6:a6:45:ac:02:3d:40:24:20:c7:73:a7: fb:f7:66:23:1a:c8:b0:84:be:9c:71:4e:33:ae:c3:fc:16:e5: d8:dc:2e:cc:10:a1:56:8e:27:f1:74:5c:69:9c:5f:82:65:99: 54:a9:50:46:39:30:38:b7:2e:fc:61:ad:87:7f:09:34:be:0a: a8:1b:c3:ba:4a:39:f3:37:98:ee:bc:e2:a4:c0:17:1d:c1:9f: 04:0f:94:d8:f2:26:70:83:89:44:52:74:8a:60:7d:4b:10:dd: 51:ba:54:29:ff:5f:ce:ed:50:24:c8:7a:01:36:fc:c8:24:3d: 9b:e2:10:2c:cf:45:f1:d8:bc:dc:b0:f1:1c:b6:4d:2f:c0:7f: 98:1c:09:9f:43:c8:e1:37:41:c1:f0:6b:48:00:03:0d:e1:7f: 4f:1d:64:e9:7e:f3:02:4c:b8:c6:92:0d:7c:7b:0a:16:03:90: 72:ab:66:e5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzXa4Ywfl4f9huoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk Mzc0MDAwZmMtNjllOS00MzQ1LTlhN2EtYzZkNGJjMTNjMDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BpsQnjiexpdzDePigDbswl1nD0UHa/PG9pd 5Hb+tz0VSkLVKs9yI3asLFTMSHBxi39NRg2l5WRn14AzlMgIT8IuA6yJUlXeTTqs PmqJS6vLckuSgHgd+lmo+lLsf3T2bjYalggd06eYhHhCVqUnjR9qQ2XFPqYgaYmf 2f01Qxs8cVipDc/qF8WE/f9IWXgqHeICzlOYA6jaXS9Ul2T1WaDAqDywLSpNYhGD +1ID7BmR3AtHZ1vhnEI4/UBc5eYgQIAj9XBQMHIvlLlwFAWpVnmbTUIffQaqpLRO mn6Zi3EYbx+E8mSK/K4OqqjPRsbJDdqgp0WPPphDemhd3IqhTQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNVRqsa8QhxS9YKOTxdzsxmoASg7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjA3YmJkZmItNzk5OC0z YzAzLWI0NDItY2ViMjFmNDlkMjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAFIYBBA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAvSIQRFxrNVcg1DZ2yczaLcnbqg5loih79VFb+2HBh21dYUbcOb 5vqNhcWl3sQdXMjWH7B0OZtb5D35k9wkj8yJyP2CohYR+s2WDuM1YqamRawCPUAk IMdzp/v3ZiMayLCEvpxxTjOuw/wW5djcLswQoVaOJ/F0XGmcX4JlmVSpUEY5MDi3 LvxhrYd/CTS+Cqgbw7pKOfM3mO684qTAFx3BnwQPlNjyJnCDiURSdIpgfUsQ3VG6 VCn/X87tUCTIegE2/MgkPZviECzPRfHYvNyw8Ry2TS/Af5gcCZ9DyOE3QcHwa0gA Aw3hf08dZOl+8wJMuMaSDXx7ChYDkHKrZuU= -----END CERTIFICATE-----Generated at Mon Oct 20 10:24:35 2025 by rpki-client