$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/42f72087-4467-3691-8acf-0987d8d58f26.roa File: 42f72087-4467-3691-8acf-0987d8d58f26.roa (raw, json) Hash identifier: jTOKzUsEcrE4aLZE/k0ZZI3cRcfgcl0EMOiNCRHRnOU= Subject key identifier: CA:11:F8:50:F2:10:DA:9C:12:42:50:DD:89:4A:A9:47:9F:51:69:7C Certificate issuer: /CN=e8a5a257-a121-41de-b0be-6ab191fc4486 Certificate serial: 010D0C9F4328584B41E72121531A869890152B00 Authority key identifier: 32:81:01:00:24:EC:B3:91:D5:9F:6C:62:90:9F:C1:0B:6C:1E:05:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/42f72087-4467-3691-8acf-0987d8d58f26.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 32709 IP address blocks: 2605:ea80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/e8a5a257-a121-41de-b0be-6ab191fc4486.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/e8a5a257-a121-41de-b0be-6ab191fc4486.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:21:21:53:1a:86:98:90:15:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8a5a257-a121-41de-b0be-6ab191fc4486 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=53f0bc27-0d6a-4eaf-a96f-64b638cb9dcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:16:84:ea:db:0c:2a:81:06:e5:f5:3a:a4:6d: 9f:aa:1e:da:1e:65:40:73:21:53:2a:db:d1:42:4d: 25:cc:d3:a2:31:46:77:2f:1d:b8:3e:1f:c9:42:2a: 6a:40:b9:51:cd:15:51:5a:72:c2:70:31:d7:02:1d: 87:d7:8f:0a:98:d5:cb:3e:0a:67:56:ef:1b:1a:03: 1c:24:b3:88:3a:ff:03:e4:8b:82:08:8c:cc:d3:c0: 12:00:97:9b:69:fd:cf:db:cb:ef:85:07:35:30:cf: 38:8d:f6:f2:2c:0c:51:f4:f3:18:d6:2c:35:f6:34: ff:f2:f4:80:5e:09:19:24:4e:b7:f6:4d:1d:6c:73: 6d:63:b0:9c:df:8e:ae:c8:96:f9:ba:f2:d0:0e:d7: aa:e4:9f:eb:57:fc:aa:87:51:d6:4a:05:82:80:08: 19:53:6d:42:ad:ba:5e:e4:68:a5:11:21:dd:5f:7f: bc:af:99:66:eb:2d:0e:7e:61:04:db:d9:a5:ce:5f: 69:4b:dd:da:d3:a8:57:22:66:20:41:db:f6:5a:11: c9:f2:7c:0c:94:f6:5f:88:65:f0:55:83:5e:3a:7e: 0b:67:69:ab:03:25:df:fa:1c:33:41:da:b1:6c:08: a4:72:95:55:c2:04:d2:01:84:85:ec:49:41:67:71: 99:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:11:F8:50:F2:10:DA:9C:12:42:50:DD:89:4A:A9:47:9F:51:69:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/42f72087-4467-3691-8acf-0987d8d58f26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/e8a5a257-a121-41de-b0be-6ab191fc4486.crl X509v3 Authority Key Identifier: keyid:32:81:01:00:24:EC:B3:91:D5:9F:6C:62:90:9F:C1:0B:6C:1E:05:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486.cer sbgp-ipAddrBlock: critical IPv6: 2605:ea80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:9b:7a:17:3c:ed:66:5c:f3:63:ad:fe:7d:5e:b3:64:d4:b9: 18:2d:97:c9:59:c7:93:b9:b5:a8:aa:e3:a6:6d:59:0b:78:93: e1:55:cf:b8:7d:1f:dc:44:f2:3d:41:13:48:39:0d:55:ce:7e: 1f:08:46:e5:c5:96:bb:2d:6a:46:10:f9:5b:1d:5a:ce:59:d4: 66:0e:3b:29:57:88:76:c2:5c:26:fd:a9:be:b8:9c:bc:4d:28: 52:7c:f8:59:c7:e3:7e:5a:5a:41:ad:2e:b1:23:56:8f:dc:03: f4:3b:d3:f0:16:96:15:42:e8:2f:5c:55:50:96:30:0a:7d:e1: cb:1b:72:07:63:b8:de:fb:56:f1:5f:4b:f0:a1:c6:05:49:87: 88:28:08:94:ca:f4:fc:da:4c:3f:4a:47:f4:73:73:e3:4b:54: 8e:1d:14:84:79:2a:3a:b6:d7:ad:c9:42:c3:be:62:9a:ec:55: 1e:37:e7:f1:2a:06:c5:42:cc:9f:c6:81:a8:b2:ae:b3:64:0d: 90:00:1e:46:1e:6f:c3:07:5d:70:db:2c:7a:9b:3e:d6:19:02: d2:69:6c:0c:0c:1e:8b:99:5a:4d:b2:29:b8:e0:1a:74:04:d9: c9:28:c3:60:bf:df:47:96:d2:17:a2:b5:65:c4:bf:b6:4b:aa: 68:98:03:8b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5yEhUxqGmJAVKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZThhNWEyNTctYTEyMS00MWRlLWIwYmUtNmFiMTkxZmM0 NDg2MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk NTNmMGJjMjctMGQ2YS00ZWFmLWE5NmYtNjRiNjM4Y2I5ZGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBaE6tsMKoEG5fU6pG2fqh7aHmVAcyFTKtvR Qk0lzNOiMUZ3Lx24Ph/JQipqQLlRzRVRWnLCcDHXAh2H148KmNXLPgpnVu8bGgMc JLOIOv8D5IuCCIzM08ASAJebaf3P28vvhQc1MM84jfbyLAxR9PMY1iw19jT/8vSA XgkZJE639k0dbHNtY7Cc346uyJb5uvLQDteq5J/rV/yqh1HWSgWCgAgZU21Crbpe 5GilESHdX3+8r5lm6y0OfmEE29mlzl9pS93a06hXImYgQdv2WhHJ8nwMlPZfiGXw VYNeOn4LZ2mrAyXf+hwzQdqxbAikcpVVwgTSAYSF7ElBZ3GZYQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMoR+FDyENqcEkJQ3YlKqUefUWl8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOGE1 YTI1Ny1hMTIxLTQxZGUtYjBiZS02YWIxOTFmYzQ0ODYvNDJmNzIwODctNDQ2Ny0z NjkxLThhY2YtMDk4N2Q4ZDU4ZjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZThhNWEyNTctYTEyMS00MWRlLWIw YmUtNmFiMTkxZmM0NDg2L2U4YTVhMjU3LWExMjEtNDFkZS1iMGJlLTZhYjE5MWZj NDQ4Ni5jcmwwHwYDVR0jBBgwFoAUMoEBACTss5HVn2xikJ/BC2weBc4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOGE1YTI1Ny1hMTIxLTQxZGUtYjBiZS02YWIx OTFmYzQ0ODYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXqgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCkm3oXPO1mXPNjrf59XrNk1LkYLZfJWceTubWoquOmbVkLeJPhVc+4 fR/cRPI9QRNIOQ1Vzn4fCEblxZa7LWpGEPlbHVrOWdRmDjspV4h2wlwm/am+uJy8 TShSfPhZx+N+WlpBrS6xI1aP3AP0O9PwFpYVQugvXFVQljAKfeHLG3IHY7je+1bx X0vwocYFSYeIKAiUyvT82kw/Skf0c3PjS1SOHRSEeSo6ttetyULDvmKa7FUeN+fx KgbFQsyfxoGosq6zZA2QAB5GHm/DB11w2yx6mz7WGQLSaWwMDB6LmVpNsim44Bp0 BNnJKMNgv99HltIXorVlxL+2S6pomAOL -----END CERTIFICATE-----Generated at Mon Oct 20 21:58:40 2025 by rpki-client