$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/33952f95-e900-31ea-860e-de63f1452611.roa File: 33952f95-e900-31ea-860e-de63f1452611.roa (raw, json) Hash identifier: HFDpzV1f6xgsqLSkSUGhoEJ7M++bTcWRs2K+9d3iY0c= Subject key identifier: 12:72:67:B9:8E:09:3B:EB:96:C1:A6:E6:2C:6E:28:B0:D2:57:02:C9 Certificate issuer: /CN=a509a7f2-7b5a-4e82-86cc-217eab093131 Certificate serial: 010D0C9F4328584B87EE215E2497C76894C18B00 Authority key identifier: F5:09:E8:F5:08:1E:9C:78:DB:AF:52:A3:00:53:35:94:85:24:8E:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/33952f95-e900-31ea-860e-de63f1452611.roa Signing time: Wed 15 Oct 2025 15:01:38 +0000 ROA not before: Wed 15 Oct 2025 15:01:38 +0000 ROA not after: Tue 13 Jan 2026 16:01:38 +0000 asID: 395173 IP address blocks: 2607:4580::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/a509a7f2-7b5a-4e82-86cc-217eab093131.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/a509a7f2-7b5a-4e82-86cc-217eab093131.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:ee:21:5e:24:97:c7:68:94:c1:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a509a7f2-7b5a-4e82-86cc-217eab093131 Validity Not Before: Oct 15 15:01:38 2025 GMT Not After : Jan 13 16:01:38 2026 GMT Subject: CN=06d59c24-bfee-458c-ad31-28e16d945262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7c:c1:21:81:e0:ab:9b:89:e0:ce:e8:e3:8e: d7:8a:dc:8f:d4:b0:fe:14:51:5f:aa:fc:67:9c:f3: 07:f0:44:ef:72:aa:f8:e9:32:dc:64:06:d1:71:99: c8:6d:66:c5:ab:ee:68:75:ea:21:e0:34:a6:17:0c: 98:64:42:a8:18:11:a1:de:f3:23:ac:85:09:1b:60: f8:72:dc:61:38:dd:ac:80:5b:b1:1d:14:a2:a1:6c: 35:ec:c5:cc:49:9d:79:cf:11:ad:1f:32:bd:ab:b1: 2d:84:08:d3:e1:b0:25:58:9b:70:47:a0:04:23:b2: 4b:f3:de:d1:ad:59:66:7e:76:67:00:90:6e:4d:98: b9:b6:00:20:19:cd:fc:7c:57:69:4e:fc:c9:00:7e: 1c:ae:7c:85:63:bf:a1:e3:33:83:a5:b6:c4:8f:83: ba:25:a1:96:3b:5b:ce:d8:17:d2:c6:65:81:b1:09: 9d:ab:49:2b:57:32:8f:d7:fb:e3:7a:ad:69:ae:5a: 16:96:a4:1c:3d:4b:ed:f2:c5:68:4d:0d:1a:e4:a4: 5e:02:29:9b:06:44:91:2f:73:e6:e6:ae:d2:ce:b3: 8f:cb:21:3b:a1:60:5e:21:e8:49:3b:f6:ef:ae:46: f7:02:60:42:76:2f:0b:fd:81:29:fa:e0:25:70:02: c2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:72:67:B9:8E:09:3B:EB:96:C1:A6:E6:2C:6E:28:B0:D2:57:02:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/33952f95-e900-31ea-860e-de63f1452611.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/a509a7f2-7b5a-4e82-86cc-217eab093131.crl X509v3 Authority Key Identifier: keyid:F5:09:E8:F5:08:1E:9C:78:DB:AF:52:A3:00:53:35:94:85:24:8E:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131.cer sbgp-ipAddrBlock: critical IPv6: 2607:4580::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:45:49:eb:25:37:81:ca:88:cd:8a:33:83:e3:44:3b:a3:a0: a4:b8:e5:d7:93:b6:7a:3c:92:6f:aa:20:aa:40:21:a5:0e:ee: ac:28:40:53:9f:d7:ad:66:ce:cb:5d:48:ee:a3:eb:3a:c2:07: 0a:f0:43:01:48:6f:ce:70:33:cc:1b:70:40:8b:21:dd:e6:4f: 60:c1:9c:e9:6f:2f:50:78:db:27:31:ce:f8:63:8d:61:28:f5: fe:5a:0e:9b:0c:22:9d:b2:c7:5e:c2:5b:3e:f4:26:c0:52:3e: 9b:1b:95:a0:67:e4:8e:e2:aa:7d:9f:f4:42:ef:86:d1:2a:13: df:ba:41:e1:d3:59:58:05:ed:88:7a:dd:1c:71:bb:14:2a:fe: c8:80:7a:9b:f2:6e:83:5e:25:dd:a4:31:89:0e:91:8e:59:a6: d0:1d:19:3f:0a:33:f4:d2:c2:54:00:f8:13:ca:c3:7f:85:a3: 60:41:50:f1:ff:ef:5c:07:a3:97:3d:d6:73:ce:0f:b5:7d:84: 48:e6:25:a8:da:f1:4b:d1:bb:e4:ef:a4:9e:1e:26:16:b3:c6: 15:58:aa:ed:d0:4a:f3:59:cb:1d:c9:71:cf:53:02:df:f5:01: 1c:b7:82:45:42:be:fc:2c:00:b5:eb:8d:1c:a9:ba:89:c8:e0: b7:b0:49:0d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuH7iFeJJfHaJTBiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUwOWE3ZjItN2I1YS00ZTgyLTg2Y2MtMjE3ZWFiMDkz MTMxMB4XDTI1MTAxNTE1MDEzOFoXDTI2MDExMzE2MDEzOFowLzEtMCsGA1UEAxMk MDZkNTljMjQtYmZlZS00NThjLWFkMzEtMjhlMTZkOTQ1MjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHzBIYHgq5uJ4M7o447XityP1LD+FFFfqvxn nPMH8ETvcqr46TLcZAbRcZnIbWbFq+5odeoh4DSmFwyYZEKoGBGh3vMjrIUJG2D4 ctxhON2sgFuxHRSioWw17MXMSZ15zxGtHzK9q7EthAjT4bAlWJtwR6AEI7JL897R rVlmfnZnAJBuTZi5tgAgGc38fFdpTvzJAH4crnyFY7+h4zODpbbEj4O6JaGWO1vO 2BfSxmWBsQmdq0krVzKP1/vjeq1prloWlqQcPUvt8sVoTQ0a5KReAimbBkSRL3Pm 5q7SzrOPyyE7oWBeIehJO/bvrkb3AmBCdi8L/YEp+uAlcALCHQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBJyZ7mOCTvrlsGm5ixuKLDSVwLJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hNTA5 YTdmMi03YjVhLTRlODItODZjYy0yMTdlYWIwOTMxMzEvMzM5NTJmOTUtZTkwMC0z MWVhLTg2MGUtZGU2M2YxNDUyNjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYTUwOWE3ZjItN2I1YS00ZTgyLTg2 Y2MtMjE3ZWFiMDkzMTMxL2E1MDlhN2YyLTdiNWEtNGU4Mi04NmNjLTIxN2VhYjA5 MzEzMS5jcmwwHwYDVR0jBBgwFoAU9Qno9QgenHjbr1KjAFM1lIUkjuswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hNTA5YTdmMi03YjVhLTRlODItODZjYy0yMTdl YWIwOTMxMzEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdFgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBgRUnrJTeByojNijOD40Q7o6CkuOXXk7Z6PJJvqiCqQCGlDu6sKEBT n9etZs7LXUjuo+s6wgcK8EMBSG/OcDPMG3BAiyHd5k9gwZzpby9QeNsnMc74Y41h KPX+Wg6bDCKdssdewls+9CbAUj6bG5WgZ+SO4qp9n/RC74bRKhPfukHh01lYBe2I et0ccbsUKv7IgHqb8m6DXiXdpDGJDpGOWabQHRk/CjP00sJUAPgTysN/haNgQVDx /+9cB6OXPdZzzg+1fYRI5iWo2vFL0bvk76SeHiYWs8YVWKrt0ErzWcsdyXHPUwLf 9QEct4JFQr78LAC1640cqbqJyOC3sEkN -----END CERTIFICATE-----Generated at Mon Oct 20 17:59:06 2025 by rpki-client