$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/0d2d7fe3-bd63-31fa-8abe-c35f9dc6cd20.roa File: 0d2d7fe3-bd63-31fa-8abe-c35f9dc6cd20.roa (raw, json) Hash identifier: i0ocSj9ZP6zLNWI9uEHpqTNyXsvyg1uj3J2sALYUpHw= Subject key identifier: 8B:73:22:46:4D:7E:1C:65:69:38:66:53:E5:EA:6A:2E:B5:E2:CC:C1 Certificate issuer: /CN=c86a7ba5-67c5-481d-b278-0b265dc97144 Certificate serial: 010D0C9F4328584B0B76BB2064FA4CECF5208900 Authority key identifier: 69:92:8D:83:C4:F4:B4:92:18:C1:FE:F0:78:A4:3C:F7:1D:D0:2B:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/0d2d7fe3-bd63-31fa-8abe-c35f9dc6cd20.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 8075 IP address blocks: 2620:7d:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:bb:20:64:fa:4c:ec:f5:20:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c86a7ba5-67c5-481d-b278-0b265dc97144 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=4036652b-73c1-4b90-82b9-7cba433f9ba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c6:52:63:0f:bd:e7:0a:f9:d7:55:fb:c8:66: ad:2f:22:4b:09:5b:22:42:bf:a1:0c:b4:b2:54:85: a8:74:59:93:8a:92:5e:c9:bc:68:dd:7a:4d:6f:eb: 94:b8:ff:7e:7f:ef:ed:c3:bc:38:02:ab:17:25:c0: 66:8a:6b:b1:78:d2:bc:90:6f:af:97:7e:01:95:78: 1b:4c:4c:06:b8:f6:6d:1f:ed:4a:7b:ab:95:61:14: a9:37:74:85:e4:0e:b3:5d:d5:66:61:07:a5:37:60: 86:b2:87:3b:3d:98:4c:0a:e6:f2:e3:be:fb:b9:02: 81:66:15:7d:1f:39:03:21:ab:58:84:20:36:59:b2: 97:d2:a5:00:15:de:b4:bc:14:01:2d:d1:09:5b:b8: 28:c9:08:74:fb:11:86:78:6e:f0:62:20:81:ae:12: 43:55:60:e7:fe:e5:36:94:39:26:ad:69:04:8b:da: fd:ea:b5:4f:cf:be:70:54:db:7d:9e:d4:0a:b5:65: 16:98:84:da:5d:2f:3f:bc:91:c9:3a:a7:67:00:56: a9:57:4c:a6:d1:c4:02:d5:7a:d2:97:33:ab:56:53: d7:79:33:e6:02:0c:d5:41:ad:fd:4f:83:9d:99:c3: 5f:10:6c:a7:34:84:d5:2d:4e:61:82:0f:36:7c:b4: 7e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:73:22:46:4D:7E:1C:65:69:38:66:53:E5:EA:6A:2E:B5:E2:CC:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/0d2d7fe3-bd63-31fa-8abe-c35f9dc6cd20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.crl X509v3 Authority Key Identifier: keyid:69:92:8D:83:C4:F4:B4:92:18:C1:FE:F0:78:A4:3C:F7:1D:D0:2B:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer sbgp-ipAddrBlock: critical IPv6: 2620:7d:f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:1a:3c:f2:25:1c:5b:30:bd:3f:d9:1f:f1:64:c2:25:58:11: 9f:51:ff:3b:0d:2c:3f:e7:81:d4:22:44:21:03:ee:36:62:72: 5d:35:c6:57:c7:f2:b3:58:47:5a:b8:7e:a8:78:1c:e4:bb:74: 6a:c8:7b:5a:d8:5c:35:49:79:13:64:39:85:68:c6:de:cf:19: 7c:a7:0c:ff:73:83:1e:81:39:18:8a:f9:3f:c6:f9:a0:19:27: b2:3b:11:a2:17:37:d0:0c:39:93:31:54:cf:d7:56:65:78:58: 19:67:51:6d:33:05:54:a0:03:7c:43:eb:7b:cc:22:e3:e5:fa: bc:da:40:a4:e9:f1:76:67:ee:2e:4d:3f:bc:77:f1:e3:8d:f7: cd:42:1a:d9:6e:32:5e:de:a7:dc:68:e4:40:a9:ea:21:9a:fb: 17:78:8b:69:3d:48:11:d4:a8:af:43:36:00:f1:d8:26:08:ee: 93:ea:4d:59:44:c0:ab:f0:34:1e:9c:e3:c1:a2:5c:36:ad:fa: f6:b5:4f:0f:37:60:9a:be:86:62:59:48:2a:14:e5:50:e7:93: 70:e3:18:64:59:3f:85:41:75:15:66:13:c6:ec:6e:e4:fe:65: 33:65:d4:ef:b6:94:cb:75:0b:c3:7b:be:91:36:22:0f:df:79: ec:7d:b4:80 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsLdrsgZPpM7PUgiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg2YTdiYTUtNjdjNS00ODFkLWIyNzgtMGIyNjVkYzk3 MTQ0MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk NDAzNjY1MmItNzNjMS00YjkwLTgyYjktN2NiYTQzM2Y5YmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8ZSYw+95wr511X7yGatLyJLCVsiQr+hDLSy VIWodFmTipJeybxo3XpNb+uUuP9+f+/tw7w4AqsXJcBmimuxeNK8kG+vl34BlXgb TEwGuPZtH+1Ke6uVYRSpN3SF5A6zXdVmYQelN2CGsoc7PZhMCuby4777uQKBZhV9 HzkDIatYhCA2WbKX0qUAFd60vBQBLdEJW7goyQh0+xGGeG7wYiCBrhJDVWDn/uU2 lDkmrWkEi9r96rVPz75wVNt9ntQKtWUWmITaXS8/vJHJOqdnAFapV0ym0cQC1XrS lzOrVlPXeTPmAgzVQa39T4OdmcNfEGynNITVLU5hgg82fLR+bwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFItzIkZNfhxlaThmU+Xqai614szBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODZh N2JhNS02N2M1LTQ4MWQtYjI3OC0wYjI2NWRjOTcxNDQvMGQyZDdmZTMtYmQ2My0z MWZhLThhYmUtYzM1ZjlkYzZjZDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg2YTdiYTUtNjdjNS00ODFkLWIy NzgtMGIyNjVkYzk3MTQ0L2M4NmE3YmE1LTY3YzUtNDgxZC1iMjc4LTBiMjY1ZGM5 NzE0NC5jcmwwHwYDVR0jBBgwFoAUaZKNg8T0tJIYwf7weKQ89x3QKzwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODZhN2JhNS02N2M1LTQ4MWQtYjI3OC0wYjI2 NWRjOTcxNDQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAfQAP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMMaPPIlHFswvT/ZH/FkwiVYEZ9R/zsNLD/ngdQiRCED7jZicl01 xlfH8rNYR1q4fqh4HOS7dGrIe1rYXDVJeRNkOYVoxt7PGXynDP9zgx6BORiK+T/G +aAZJ7I7EaIXN9AMOZMxVM/XVmV4WBlnUW0zBVSgA3xD63vMIuPl+rzaQKTp8XZn 7i5NP7x38eON981CGtluMl7ep9xo5ECp6iGa+xd4i2k9SBHUqK9DNgDx2CYI7pPq TVlEwKvwNB6c48GiXDat+va1Tw83YJq+hmJZSCoU5VDnk3DjGGRZP4VBdRVmE8bs buT+ZTNl1O+2lMt1C8N7vpE2Ig/feex9tIA= -----END CERTIFICATE-----Generated at Wed Nov 5 12:44:35 2025 by rpki-client