$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d54a33d9-0800-39b0-862d-a305ea335a7d.roa File: d54a33d9-0800-39b0-862d-a305ea335a7d.roa (raw, json) Hash identifier: OEWxiAeQxwW7XLMgE+0+nSB4sV1RBj6d6DPx+VJ1jI0= Subject key identifier: BE:DB:55:B2:0D:B8:86:B2:D7:A8:83:0D:DC:05:52:1A:94:1B:F5:B4 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584B9CA231C84351221BDAD50920 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d54a33d9-0800-39b0-862d-a305ea335a7d.roa Signing time: Thu 23 Oct 2025 01:00:31 +0000 ROA not before: Thu 23 Oct 2025 01:00:31 +0000 ROA not after: Wed 21 Jan 2026 02:00:31 +0000 asID: 22781 IP address blocks: 2607:fb50:8c00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:a2:31:c8:43:51:22:1b:da:d5:09:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Oct 23 01:00:31 2025 GMT Not After : Jan 21 02:00:31 2026 GMT Subject: CN=fc51e033-4cd9-4ea4-ae31-0e0e99fe17c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c3:3e:43:a1:23:e6:38:88:05:5a:00:57:11: de:3a:1c:f8:46:e4:64:c9:5a:e5:89:be:23:b6:f0: b9:1c:45:b1:1a:0e:6c:aa:9f:39:5e:f4:7e:c0:d5: bb:de:42:8e:bc:56:ee:ea:41:46:80:3a:dc:92:07: 6d:d0:71:9d:7d:34:0e:4c:6c:1a:0f:68:cd:99:fa: 42:76:28:6f:d7:14:51:45:7d:eb:8c:4b:7a:bb:31: 23:33:04:bd:c7:ac:84:42:c8:b9:c1:92:8b:fd:52: 09:9f:2d:6b:7b:4b:e8:b6:7f:dc:af:19:08:26:23: e0:90:82:72:ef:ab:07:2e:c1:5e:57:ed:63:32:ca: 40:82:12:c5:73:1d:92:92:54:f5:2c:88:aa:45:f7: b7:11:de:a7:ba:e0:f5:12:d1:df:d9:43:bf:e7:06: af:a7:67:aa:72:3e:6f:28:bf:7c:59:a5:bf:12:4b: 99:30:09:40:5c:0b:80:de:f1:51:ef:65:03:6a:bb: a2:95:57:62:22:ed:9b:b5:ea:bd:77:87:24:50:41: f5:cb:3c:68:94:bb:99:c9:5a:bc:79:7d:27:83:a7: 7d:e6:4d:b1:a8:fa:ba:01:ae:7b:e7:b7:93:b5:87: 95:5a:29:4a:0b:35:2e:bf:61:ca:e6:e6:36:02:4b: e7:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:DB:55:B2:0D:B8:86:B2:D7:A8:83:0D:DC:05:52:1A:94:1B:F5:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d54a33d9-0800-39b0-862d-a305ea335a7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv6: 2607:fb50:8c00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:96:62:47:c1:f7:90:a6:b8:16:77:e6:40:00:bb:e1:f8:3d: 60:b9:e4:e7:3d:28:0d:68:f4:d2:69:36:e5:1b:b1:3f:65:9a: 65:56:41:b1:d9:a1:4c:cb:f5:c5:a3:71:d9:d9:60:20:c5:04: bf:fc:dd:12:a9:72:76:d0:e5:29:42:e7:c9:78:1d:62:14:44: 48:44:5f:f4:0e:7b:5f:13:d3:c4:90:38:b3:f5:18:81:f5:19: a5:0d:a8:3a:cb:15:c4:2e:ea:19:c0:86:44:de:2a:77:28:6c: 20:e4:41:73:57:8b:27:d0:f0:fb:ef:b2:cd:6b:46:02:80:83: 7d:4b:59:91:ec:e0:6b:08:0e:e9:20:db:41:bc:86:b7:b6:0c: 4f:55:65:e5:5b:85:87:8b:3a:47:f7:20:81:15:37:06:9b:54: a0:d7:c9:29:54:3f:5e:e8:69:b6:ab:13:40:15:43:87:82:35: 2d:79:3b:d1:c8:fd:b4:6f:d8:ee:1f:de:ab:d0:3f:5c:a4:bc: 5a:a6:81:5c:95:de:9b:a6:8a:c9:39:01:db:e2:2c:3a:28:8e: b5:3b:b4:68:93:50:04:b3:25:d7:7a:2e:1c:6f:f2:d8:65:ee: 66:b0:1f:f7:f8:3b:06:1d:38:65:9e:02:b7:54:5e:95:a3:b9: 37:98:b8:4a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEucojHIQ1EiG9rVCSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MTAyMzAxMDAzMVoXDTI2MDEyMTAyMDAzMVowLzEtMCsGA1UEAxMk ZmM1MWUwMzMtNGNkOS00ZWE0LWFlMzEtMGUwZTk5ZmUxN2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MM+Q6Ej5jiIBVoAVxHeOhz4RuRkyVrlib4j tvC5HEWxGg5sqp85XvR+wNW73kKOvFbu6kFGgDrckgdt0HGdfTQOTGwaD2jNmfpC dihv1xRRRX3rjEt6uzEjMwS9x6yEQsi5wZKL/VIJny1re0votn/crxkIJiPgkIJy 76sHLsFeV+1jMspAghLFcx2SklT1LIiqRfe3Ed6nuuD1EtHf2UO/5wavp2eqcj5v KL98WaW/EkuZMAlAXAuA3vFR72UDaruilVdiIu2bteq9d4ckUEH1yzxolLuZyVq8 eX0ng6d95k2xqPq6Aa5757eTtYeVWilKCzUuv2HK5uY2AkvnYQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFL7bVbINuIay16iDDdwFUhqUG/W0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvZDU0YTMzZDktMDgwMC0z OWIwLTg2MmQtYTMwNWVhMzM1YTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgf7UIww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAapZiR8H3kKa4FnfmQAC74fg9YLnk5z0oDWj00mk25RuxP2WaZVZB sdmhTMv1xaNx2dlgIMUEv/zdEqlydtDlKULnyXgdYhRESERf9A57XxPTxJA4s/UY gfUZpQ2oOssVxC7qGcCGRN4qdyhsIORBc1eLJ9Dw+++yzWtGAoCDfUtZkezgawgO 6SDbQbyGt7YMT1Vl5VuFh4s6R/cggRU3BptUoNfJKVQ/XuhptqsTQBVDh4I1LXk7 0cj9tG/Y7h/eq9A/XKS8WqaBXJXem6aKyTkB2+IsOiiOtTu0aJNQBLMl13ouHG/y 2GXuZrAf9/g7Bh04ZZ4Ct1RelaO5N5i4Sg== -----END CERTIFICATE-----Generated at Wed Nov 5 19:45:27 2025 by rpki-client