$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d08a2975-c6d9-49a4-818f-c7bcd8c4e11c/b7c92564-bd30-32e3-ad36-ab7b59176993.roa File: b7c92564-bd30-32e3-ad36-ab7b59176993.roa (raw, json) Hash identifier: mft/Js0ryQodalA2K84s5nLkjUAEpaeRdAfIQxSQQmA= Subject key identifier: A4:E8:45:38:DF:10:62:5A:6E:7C:09:9A:49:0B:B5:7D:F7:91:37:73 Certificate issuer: /CN=d08a2975-c6d9-49a4-818f-c7bcd8c4e11c Certificate serial: 010D0C9F4328584B917784B796640A9A37A6AF80 Authority key identifier: B8:89:F5:94:64:04:B5:5F:9D:B0:AC:3C:52:BF:69:86:62:B7:CF:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d08a2975-c6d9-49a4-818f-c7bcd8c4e11c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d08a2975-c6d9-49a4-818f-c7bcd8c4e11c/b7c92564-bd30-32e3-ad36-ab7b59176993.roa Signing time: Sun 19 Oct 2025 01:00:30 +0000 ROA not before: Sun 19 Oct 2025 01:00:30 +0000 ROA not after: Sat 17 Jan 2026 02:00:30 +0000 asID: 401866 IP address blocks: 2604:19a0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d08a2975-c6d9-49a4-818f-c7bcd8c4e11c/d08a2975-c6d9-49a4-818f-c7bcd8c4e11c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d08a2975-c6d9-49a4-818f-c7bcd8c4e11c/d08a2975-c6d9-49a4-818f-c7bcd8c4e11c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d08a2975-c6d9-49a4-818f-c7bcd8c4e11c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:91:77:84:b7:96:64:0a:9a:37:a6:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d08a2975-c6d9-49a4-818f-c7bcd8c4e11c Validity Not Before: Oct 19 01:00:30 2025 GMT Not After : Jan 17 02:00:30 2026 GMT Subject: CN=e8cb165d-c0b1-41a2-b9ad-1902617ba575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:59:5a:a0:c1:11:a6:b7:f6:b5:c5:53:fc:1f: ca:86:7d:62:e8:de:04:e5:3a:ef:65:18:bd:16:3f: bc:78:47:2b:8c:6d:f3:e4:c6:6b:95:76:00:da:15: ea:d9:c9:76:db:37:43:e0:82:cf:d8:ac:48:c8:0c: fc:c0:02:bd:c2:68:10:da:3e:df:f7:97:ed:5e:c5: 21:4a:e1:3c:14:e9:db:c3:bc:0f:85:2f:44:04:99: 0d:72:92:09:cc:8f:f0:8d:6f:53:05:c6:b2:c0:d0: 2c:43:23:b3:ba:cc:5d:40:22:54:d1:62:e0:8a:f9: 7d:66:1f:50:ef:a1:7a:bc:6a:67:a2:5a:2d:e8:f5: 37:30:40:3b:d4:51:53:68:a8:f6:e7:9b:b7:6d:7d: 22:46:26:b9:99:d2:07:e9:bb:40:dd:26:7e:7b:78: d5:d4:05:d9:a5:67:c3:e4:3d:0d:50:66:fd:e5:6b: 24:6d:19:1e:b6:1c:30:ca:6a:6e:29:4e:f4:6b:e6: 8b:93:de:88:7a:c4:e6:9f:9d:d7:63:5c:2f:77:0a: 8a:90:e1:c8:83:45:58:78:0b:4a:4c:0e:c2:a1:c8: 69:61:88:52:73:c2:e9:b4:b6:39:6d:ad:8f:3c:70: 79:a9:15:d4:24:5d:38:53:f8:84:f6:f8:8c:f1:db: af:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:E8:45:38:DF:10:62:5A:6E:7C:09:9A:49:0B:B5:7D:F7:91:37:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d08a2975-c6d9-49a4-818f-c7bcd8c4e11c/b7c92564-bd30-32e3-ad36-ab7b59176993.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d08a2975-c6d9-49a4-818f-c7bcd8c4e11c/d08a2975-c6d9-49a4-818f-c7bcd8c4e11c.crl X509v3 Authority Key Identifier: keyid:B8:89:F5:94:64:04:B5:5F:9D:B0:AC:3C:52:BF:69:86:62:B7:CF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d08a2975-c6d9-49a4-818f-c7bcd8c4e11c.cer sbgp-ipAddrBlock: critical IPv6: 2604:19a0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:7d:62:7f:d0:31:4d:e8:b8:25:0a:1f:7d:5d:13:4a:64:49: 29:c8:e2:7c:11:a0:03:b6:4c:c2:fc:db:b3:b2:27:dc:8c:75: d3:50:91:f0:3c:b4:76:d0:21:01:c7:05:a1:2e:ab:18:12:14: 32:f9:2a:77:d2:04:cb:7f:b6:21:77:c7:4a:fd:72:01:4a:3e: c5:fc:85:f6:50:e9:b0:e9:d2:01:6f:77:e6:aa:62:1e:11:be: f2:21:61:90:41:c7:01:8d:26:b0:16:67:22:2c:31:a1:79:27: 30:84:31:22:b2:4b:d5:9d:6c:36:63:0d:54:29:d4:d7:6b:63: a2:d1:3c:0d:9f:8f:18:88:8a:5e:62:73:1e:23:2b:ba:6b:5a: db:64:5c:d7:00:eb:8b:84:eb:ca:30:9b:92:89:00:0a:0c:79: fd:6a:84:87:cd:42:a4:07:7a:17:9b:30:1d:ed:4d:b5:87:9d: ac:21:4e:16:6e:fc:f3:b7:41:b2:8c:f7:8b:bf:92:ff:4e:c9: 74:43:32:6f:c9:2d:2a:b9:e7:b0:4c:5a:03:d5:c2:6b:21:05: 21:71:aa:40:82:3f:97:d2:6a:e4:1c:e6:0d:6d:79:12:28:69: 63:96:de:91:d5:9e:9e:3f:14:fe:45:8b:62:94:1a:d1:f1:6b: 3a:00:3f:2c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuRd4S3lmQKmjemr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDA4YTI5NzUtYzZkOS00OWE0LTgxOGYtYzdiY2Q4YzRl MTFjMB4XDTI1MTAxOTAxMDAzMFoXDTI2MDExNzAyMDAzMFowLzEtMCsGA1UEAxMk ZThjYjE2NWQtYzBiMS00MWEyLWI5YWQtMTkwMjYxN2JhNTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1laoMERprf2tcVT/B/Khn1i6N4E5TrvZRi9 Fj+8eEcrjG3z5MZrlXYA2hXq2cl22zdD4ILP2KxIyAz8wAK9wmgQ2j7f95ftXsUh SuE8FOnbw7wPhS9EBJkNcpIJzI/wjW9TBcaywNAsQyOzusxdQCJU0WLgivl9Zh9Q 76F6vGpnolot6PU3MEA71FFTaKj255u3bX0iRia5mdIH6btA3SZ+e3jV1AXZpWfD 5D0NUGb95WskbRkethwwympuKU70a+aLk96IesTmn53XY1wvdwqKkOHIg0VYeAtK TA7CochpYYhSc8LptLY5ba2PPHB5qRXUJF04U/iE9viM8duv7QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKToRTjfEGJabnwJmkkLtX33kTdzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kMDhh Mjk3NS1jNmQ5LTQ5YTQtODE4Zi1jN2JjZDhjNGUxMWMvYjdjOTI1NjQtYmQzMC0z MmUzLWFkMzYtYWI3YjU5MTc2OTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDA4YTI5NzUtYzZkOS00OWE0LTgx OGYtYzdiY2Q4YzRlMTFjL2QwOGEyOTc1LWM2ZDktNDlhNC04MThmLWM3YmNkOGM0 ZTExYy5jcmwwHwYDVR0jBBgwFoAUuIn1lGQEtV+dsKw8Ur9phmK3zxswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kMDhhMjk3NS1jNmQ5LTQ5YTQtODE4Zi1jN2Jj ZDhjNGUxMWMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQZoDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQApfWJ/0DFN6LglCh99XRNKZEkpyOJ8EaADtkzC/NuzsifcjHXTUJHw PLR20CEBxwWhLqsYEhQy+Sp30gTLf7Yhd8dK/XIBSj7F/IX2UOmw6dIBb3fmqmIe Eb7yIWGQQccBjSawFmciLDGheScwhDEiskvVnWw2Yw1UKdTXa2Oi0TwNn48YiIpe YnMeIyu6a1rbZFzXAOuLhOvKMJuSiQAKDHn9aoSHzUKkB3oXmzAd7U21h52sIU4W bvzzt0GyjPeLv5L/Tsl0QzJvyS0queewTFoD1cJrIQUhcapAgj+X0mrkHOYNbXkS KGljlt6R1Z6ePxT+RYtilBrR8Ws6AD8s -----END CERTIFICATE-----Generated at Mon Oct 20 04:40:16 2025 by rpki-client