$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/8457b927-f253-3bd4-b95a-f0d3169ad8d6.roa File: 8457b927-f253-3bd4-b95a-f0d3169ad8d6.roa (raw, json) Hash identifier: hduF24megkjazG6uNTsmCvFI2T7wh+Lk4aXTipDaUPY= Subject key identifier: 18:D1:BC:17:66:6D:2D:28:30:D7:83:FB:8F:E3:20:FE:2A:8D:43:96 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584B7D2502ED4C29416E27951200 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/8457b927-f253-3bd4-b95a-f0d3169ad8d6.roa Signing time: Sat 11 Oct 2025 18:18:19 +0000 ROA not before: Sat 11 Oct 2025 18:18:19 +0000 ROA not after: Fri 09 Jan 2026 19:18:19 +0000 asID: 55286 IP address blocks: 2607:4300:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:25:02:ed:4c:29:41:6e:27:95:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Oct 11 18:18:19 2025 GMT Not After : Jan 9 19:18:19 2026 GMT Subject: CN=9a68b9b3-3249-433a-9d80-035b31c3586f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:45:a0:e0:73:24:d2:f2:f0:a8:3a:fd:9a:88: ce:72:d8:6d:bf:55:95:65:a9:bd:f7:35:44:5c:03: 9e:c0:0a:af:9a:2a:23:13:41:dd:a7:3e:5f:99:b0: cd:70:b6:d7:d6:47:7d:b6:3e:8e:a1:fb:a3:2b:eb: 8f:7f:6f:dd:3d:9f:5e:16:54:26:69:e2:5e:bb:27: 19:03:45:ae:a6:6c:c6:65:26:9d:c8:25:85:86:94: 95:2a:eb:be:d3:6e:6b:0e:a8:a8:ae:c1:b9:a6:d1: 6a:07:e1:3b:7c:47:fe:6f:d3:f0:4c:0f:e4:ce:8f: d6:63:e3:3a:47:8f:a4:6a:e5:47:ad:67:af:01:7b: 27:e4:c6:f6:bd:ec:98:6d:e9:ed:1e:5a:2a:1c:44: 19:d5:2e:b6:8c:e9:96:5a:65:57:f5:4c:c2:56:bf: 5f:cb:48:95:ee:7d:b6:46:b4:84:27:1a:2d:2b:1a: b2:2f:23:3c:3d:55:42:d0:e4:58:6b:b9:af:10:dd: 89:85:2d:1d:78:9e:37:b0:ba:4b:cd:90:56:1c:6f: 07:ca:03:b5:12:2e:b0:40:a2:e7:57:86:8c:b1:aa: 50:da:56:a4:ce:96:fb:cc:d9:20:95:27:7a:37:70: 2b:aa:25:99:64:19:d2:e6:4b:18:f3:b0:9b:71:53: 44:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:D1:BC:17:66:6D:2D:28:30:D7:83:FB:8F:E3:20:FE:2A:8D:43:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/8457b927-f253-3bd4-b95a-f0d3169ad8d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv6: 2607:4300:4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:3b:f4:ca:1a:a1:27:cb:1d:b9:2d:b5:63:d4:f0:77:66:c2: 31:c0:d2:84:36:8c:42:ec:4a:e8:01:23:f9:1d:6d:9b:61:19: bc:96:bf:80:50:95:ee:32:05:29:bf:ff:05:49:3d:cd:1f:43: 3c:6e:21:a7:b1:8f:a6:71:49:93:5c:ad:07:d1:88:fd:06:e3: ee:94:dc:b4:fe:38:f8:93:3a:a1:61:ae:ad:9e:27:ae:a1:3b: 46:1f:c4:92:f0:30:82:ad:49:39:a8:f5:d0:46:63:44:f5:33: 7c:75:a3:16:b4:67:bf:8d:04:da:b2:10:bb:a6:73:c4:05:f4: 70:e3:94:33:51:73:0a:2b:72:7b:5d:d2:9e:79:c6:7e:c4:bd: 21:22:ff:9c:b7:50:5a:29:52:0c:ef:c5:d2:61:05:ca:08:4f: 2e:21:b0:84:77:8a:51:95:6a:d9:37:98:61:1a:3f:e7:60:49: 99:f6:db:ec:f6:30:ee:0a:73:ba:8f:32:02:1e:fe:db:10:4d: 6a:25:05:4d:45:f9:dd:98:72:1d:61:d0:e1:a2:12:2b:46:aa: 0f:e8:2e:30:80:c4:fd:72:9b:6a:7c:54:ab:40:d2:88:38:65: 1c:65:be:dc:04:f8:c1:7e:c7:5b:a1:c5:7a:bc:94:67:7e:ce: 2c:8e:52:d9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt9JQLtTClBbieVEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI1MTAxMTE4MTgxOVoXDTI2MDEwOTE5MTgxOVowLzEtMCsGA1UEAxMk OWE2OGI5YjMtMzI0OS00MzNhLTlkODAtMDM1YjMxYzM1ODZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkWg4HMk0vLwqDr9mojOcthtv1WVZam99zVE XAOewAqvmiojE0Hdpz5fmbDNcLbX1kd9tj6OofujK+uPf2/dPZ9eFlQmaeJeuycZ A0WupmzGZSadyCWFhpSVKuu+025rDqiorsG5ptFqB+E7fEf+b9PwTA/kzo/WY+M6 R4+kauVHrWevAXsn5Mb2veyYbentHloqHEQZ1S62jOmWWmVX9UzCVr9fy0iV7n22 RrSEJxotKxqyLyM8PVVC0ORYa7mvEN2JhS0deJ43sLpLzZBWHG8HygO1Ei6wQKLn V4aMsapQ2lakzpb7zNkglSd6N3ArqiWZZBnS5ksY87CbcVNEqQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBjRvBdmbS0oMNeD+4/jIP4qjUOWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvODQ1N2I5MjctZjI1My0z YmQ0LWI5NWEtZjBkMzE2OWFkOGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgdDAAAE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALQ79MoaoSfLHbkttWPU8HdmwjHA0oQ2jELsSugBI/kdbZthGbyW v4BQle4yBSm//wVJPc0fQzxuIaexj6ZxSZNcrQfRiP0G4+6U3LT+OPiTOqFhrq2e J66hO0YfxJLwMIKtSTmo9dBGY0T1M3x1oxa0Z7+NBNqyELumc8QF9HDjlDNRcwor cntd0p55xn7EvSEi/5y3UFopUgzvxdJhBcoITy4hsIR3ilGVatk3mGEaP+dgSZn2 2+z2MO4Kc7qPMgIe/tsQTWolBU1F+d2Ych1h0OGiEitGqg/oLjCAxP1ym2p8VKtA 0og4ZRxlvtwE+MF+x1uhxXq8lGd+ziyOUtk= -----END CERTIFICATE-----Generated at Mon Oct 20 10:01:14 2025 by rpki-client