$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/797d0e82-eeb8-3058-9696-f0adfa882a4a.roa File: 797d0e82-eeb8-3058-9696-f0adfa882a4a.roa (raw, json) Hash identifier: 6kQRfnXCB+npoGpWgyGL3opM7lTgeTyWiZ5XOpREaIE= Subject key identifier: 96:A1:DC:99:BA:E9:32:B9:D1:EC:A2:6E:E1:62:64:3A:68:A1:37:12 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584B9CA22F514316A96F90F01100 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/797d0e82-eeb8-3058-9696-f0adfa882a4a.roa Signing time: Thu 23 Oct 2025 01:00:31 +0000 ROA not before: Thu 23 Oct 2025 01:00:31 +0000 ROA not after: Wed 21 Jan 2026 02:00:31 +0000 asID: 22781 IP address blocks: 2607:fb50:8800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:a2:2f:51:43:16:a9:6f:90:f0:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Oct 23 01:00:31 2025 GMT Not After : Jan 21 02:00:31 2026 GMT Subject: CN=60fb3eda-4b63-483a-bebb-c6e3000530b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b0:31:95:2e:dd:11:2f:36:a5:19:d8:56:af: 54:5c:3a:c0:04:a5:da:c4:ac:1e:68:90:57:78:b5: 47:74:2d:3b:96:ba:6f:7b:3e:d5:50:0a:37:eb:00: fb:fd:f1:88:b7:25:eb:4f:4f:bf:85:62:eb:dd:d0: 6f:8d:03:16:ff:f7:51:b4:b1:da:8e:42:69:40:47: b7:29:1a:d3:66:77:66:e7:19:e4:bf:5b:70:a6:36: e5:e1:f5:8a:cf:12:41:f9:1e:62:3e:f7:17:2b:d1: fb:f5:05:ce:8b:bb:69:30:d8:69:e8:50:3b:7d:8a: f6:b7:c3:ea:46:80:80:e5:62:cd:49:ba:de:b9:62: b8:36:ed:e9:dc:75:71:10:be:f2:87:97:9c:b0:a0: 8e:0a:c7:77:1e:86:84:7d:1b:51:36:67:46:28:aa: c7:00:e1:1a:84:97:f0:ca:03:09:f0:84:97:39:7c: a7:b8:4e:9f:e2:a2:8d:f7:74:1b:f5:d0:49:1d:b7: 00:6d:ea:6f:f6:98:fa:1b:a8:0f:4c:fc:18:7d:2f: c8:40:67:19:ab:93:a9:fa:26:9b:4a:83:04:52:bd: b4:bd:1d:88:5a:ec:2b:2d:57:b6:71:cb:db:83:84: 76:e4:08:bf:00:f9:0f:b9:db:77:5e:a3:98:84:d6: 72:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A1:DC:99:BA:E9:32:B9:D1:EC:A2:6E:E1:62:64:3A:68:A1:37:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/797d0e82-eeb8-3058-9696-f0adfa882a4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv6: 2607:fb50:8800::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:6d:9b:f3:41:71:b9:85:87:49:10:84:17:bd:9a:54:44:aa: a0:33:00:29:5f:7f:62:51:6c:a2:cb:00:f0:27:93:70:dd:d8: ef:96:c7:65:62:01:3b:f4:91:22:e0:dc:a8:93:5f:50:4f:35: 1b:77:5c:64:1e:93:ef:36:ae:5b:54:f0:7b:6f:63:05:f8:df: a0:35:e0:3c:6e:40:c6:f7:bb:90:ad:24:09:08:b8:e2:67:df: 55:9e:8b:4b:bb:32:ff:c0:76:06:87:a2:fa:ab:79:42:ae:65: 9b:1c:bc:fd:1a:32:5c:e3:4e:6f:ff:ce:95:ff:05:dc:45:8b: 12:94:7a:95:85:28:38:8b:49:61:54:4b:56:dd:dc:fb:1d:33: 4c:14:67:f9:3d:a0:cc:47:62:86:d7:7e:f9:c5:a1:ee:a5:0a: 9c:05:6f:36:c9:5e:d7:ce:5a:4c:51:99:f4:3e:0e:e7:e3:b0: aa:a7:54:2d:ba:13:e6:9f:6b:2a:e3:da:93:ee:9c:f2:47:bb: 68:db:a4:dd:24:dd:a1:59:e9:51:46:2e:08:0a:9b:17:4c:cd: af:f0:81:91:ae:d1:f4:0b:50:a1:88:48:e3:77:5b:13:67:ff: 09:7f:cb:ac:5d:44:93:3d:14:e8:23:43:24:9a:69:39:44:b8: a0:44:3b:7a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEucoi9RQxapb5DwEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MTAyMzAxMDAzMVoXDTI2MDEyMTAyMDAzMVowLzEtMCsGA1UEAxMk NjBmYjNlZGEtNGI2My00ODNhLWJlYmItYzZlMzAwMDUzMGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrAxlS7dES82pRnYVq9UXDrABKXaxKweaJBX eLVHdC07lrpvez7VUAo36wD7/fGItyXrT0+/hWLr3dBvjQMW//dRtLHajkJpQEe3 KRrTZndm5xnkv1twpjbl4fWKzxJB+R5iPvcXK9H79QXOi7tpMNhp6FA7fYr2t8Pq RoCA5WLNSbreuWK4Nu3p3HVxEL7yh5ecsKCOCsd3HoaEfRtRNmdGKKrHAOEahJfw ygMJ8ISXOXynuE6f4qKN93Qb9dBJHbcAbepv9pj6G6gPTPwYfS/IQGcZq5Op+iab SoMEUr20vR2IWuwrLVe2ccvbg4R25Ai/APkPudt3XqOYhNZyuwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJah3Jm66TK50eyibuFiZDpooTcSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvNzk3ZDBlODItZWViOC0z MDU4LTk2OTYtZjBhZGZhODgyYTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgf7UIgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAHW2b80FxuYWHSRCEF72aVESqoDMAKV9/YlFsossA8CeTcN3Y75bH ZWIBO/SRIuDcqJNfUE81G3dcZB6T7zauW1Twe29jBfjfoDXgPG5Axve7kK0kCQi4 4mffVZ6LS7sy/8B2Boei+qt5Qq5lmxy8/RoyXONOb//Olf8F3EWLEpR6lYUoOItJ YVRLVt3c+x0zTBRn+T2gzEdihtd++cWh7qUKnAVvNsle185aTFGZ9D4O5+OwqqdU LboT5p9rKuPak+6c8ke7aNuk3STdoVnpUUYuCAqbF0zNr/CBka7R9AtQoYhI43db E2f/CX/LrF1Ekz0U6CNDJJppOUS4oEQ7eg== -----END CERTIFICATE-----Generated at Wed Nov 5 19:45:17 2025 by rpki-client