$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/aa7ca5fc-2ca8-3b1f-89be-923c5a72206e.roa File: aa7ca5fc-2ca8-3b1f-89be-923c5a72206e.roa (raw, json) Hash identifier: GUeL//xHBFY4ua2PBR3km9k2UIKuCBENBau4BU/RoRs= Subject key identifier: 26:9C:02:89:96:67:DC:00:6E:8A:1E:9C:19:F5:F5:56:AE:9B:9C:01 Certificate issuer: /CN=7ea21a7b-596c-45f8-899e-6879815f26b1 Certificate serial: 010D0C9F4328584BBB757FC1F1BAF9C2B0E08580 Authority key identifier: 58:D5:D5:32:EB:10:00:C4:BF:8A:19:33:CE:EA:A3:86:2D:77:F4:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/aa7ca5fc-2ca8-3b1f-89be-923c5a72206e.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 16509 IP address blocks: 2620:85:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/7ea21a7b-596c-45f8-899e-6879815f26b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/7ea21a7b-596c-45f8-899e-6879815f26b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:7f:c1:f1:ba:f9:c2:b0:e0:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ea21a7b-596c-45f8-899e-6879815f26b1 Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=8d4af380-c354-416c-a8bd-c7a99769fd7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a6:9e:1d:01:b9:a2:16:c9:1e:02:17:f0:e7: d6:bc:20:8e:80:e0:97:a6:97:30:17:0d:c3:2d:1c: fa:ba:b7:a3:06:56:25:f0:91:b3:e5:37:51:b3:70: 73:d4:8d:76:98:db:27:d6:b8:67:1d:b3:3c:45:b0: 89:77:c7:36:ee:72:96:59:58:0a:89:a9:8d:9d:68: 96:47:25:3f:4d:19:4a:4d:b8:b4:c9:1d:f5:60:5d: 0d:db:1d:ca:ba:f4:12:d8:39:b9:56:2a:80:ff:58: 2a:79:16:ea:a0:1d:93:31:1b:cd:29:4c:73:6b:61: dc:6c:59:48:d7:5d:ab:e2:c5:e2:ec:75:f4:71:8f: d0:62:9d:71:dc:4c:5d:13:34:a8:80:2f:92:b2:2b: 37:fb:dd:1c:e9:52:5f:5f:99:fc:ba:b8:2a:9c:72: df:f1:61:1f:23:f4:4a:e2:f3:79:96:d4:1a:2e:77: 9d:82:6a:e8:fd:a8:d1:f4:0b:fd:bd:45:63:ea:b2: aa:69:49:ae:58:3a:7d:ff:17:7d:37:d4:a2:3d:5f: 43:3a:30:21:82:16:d6:49:a6:ab:97:a5:27:f5:ea: a5:59:1e:17:dd:f3:0e:9b:81:f1:0e:53:67:12:24: 77:e9:20:c4:00:36:45:ca:53:7b:14:d8:c5:a8:d3: 1f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:9C:02:89:96:67:DC:00:6E:8A:1E:9C:19:F5:F5:56:AE:9B:9C:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/aa7ca5fc-2ca8-3b1f-89be-923c5a72206e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/7ea21a7b-596c-45f8-899e-6879815f26b1.crl X509v3 Authority Key Identifier: keyid:58:D5:D5:32:EB:10:00:C4:BF:8A:19:33:CE:EA:A3:86:2D:77:F4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1.cer sbgp-ipAddrBlock: critical IPv6: 2620:85:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:7a:ad:36:47:90:80:c2:21:ab:2f:f8:f5:86:c9:8d:1e:7e: 03:6c:dd:cb:9b:f9:aa:f4:6c:98:aa:71:d0:9d:ac:46:ee:e0: 3e:c7:ce:53:bb:dc:c8:d6:38:67:1e:b5:06:c7:9a:67:f3:eb: b4:fd:6a:32:4c:26:6f:12:17:8f:bb:c9:f8:a6:6b:98:f7:dd: c1:f6:30:10:ef:0b:4a:5a:0e:7e:6b:db:0f:46:d7:75:f9:de: d5:71:bd:f1:c1:7f:57:d4:fd:6a:da:d0:9c:e7:60:d9:16:9c: 08:40:b2:00:c4:2c:f9:b9:84:42:1d:7b:9a:56:25:0e:de:cc: 30:f4:67:0b:69:30:04:1a:bc:32:0f:71:11:b9:80:cd:4d:36: 6b:3f:4b:4a:10:38:cf:0f:7b:0d:13:97:56:83:22:9f:e6:61: de:ff:09:8f:5f:67:15:07:04:32:a8:c0:23:8b:df:68:20:97: 28:c6:9a:36:cc:35:ec:22:84:39:2c:ec:89:bf:4a:53:55:f8: 88:da:81:16:d4:21:c9:4b:4f:94:47:f6:77:be:31:e3:69:3a: 0f:7f:7e:e8:b2:1c:ad:1c:b9:0d:b9:87:ab:6c:e0:73:a3:e0: bd:2f:69:63:96:76:24:14:b0:d9:7d:51:4e:fc:bd:5d:df:16: 0d:f8:d6:fb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu7dX/B8br5wrDghYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2VhMjFhN2ItNTk2Yy00NWY4LTg5OWUtNjg3OTgxNWYy NmIxMB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk OGQ0YWYzODAtYzM1NC00MTZjLWE4YmQtYzdhOTk3NjlmZDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaaeHQG5ohbJHgIX8OfWvCCOgOCXppcwFw3D LRz6urejBlYl8JGz5TdRs3Bz1I12mNsn1rhnHbM8RbCJd8c27nKWWVgKiamNnWiW RyU/TRlKTbi0yR31YF0N2x3KuvQS2Dm5ViqA/1gqeRbqoB2TMRvNKUxza2HcbFlI 112r4sXi7HX0cY/QYp1x3ExdEzSogC+Ssis3+90c6VJfX5n8urgqnHLf8WEfI/RK 4vN5ltQaLnedgmro/ajR9Av9vUVj6rKqaUmuWDp9/xd9N9SiPV9DOjAhghbWSaar l6Un9eqlWR4X3fMOm4HxDlNnEiR36SDEADZFylN7FNjFqNMfcwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCacAomWZ9wAbooenBn19Vaum5wBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWEy MWE3Yi01OTZjLTQ1ZjgtODk5ZS02ODc5ODE1ZjI2YjEvYWE3Y2E1ZmMtMmNhOC0z YjFmLTg5YmUtOTIzYzVhNzIyMDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2VhMjFhN2ItNTk2Yy00NWY4LTg5 OWUtNjg3OTgxNWYyNmIxLzdlYTIxYTdiLTU5NmMtNDVmOC04OTllLTY4Nzk4MTVm MjZiMS5jcmwwHwYDVR0jBBgwFoAUWNXVMusQAMS/ihkzzuqjhi139KkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWEyMWE3Yi01OTZjLTQ1ZjgtODk5ZS02ODc5 ODE1ZjI2YjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAhaAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACt6rTZHkIDCIasv+PWGyY0efgNs3cub+ar0bJiqcdCdrEbu4D7H zlO73MjWOGcetQbHmmfz67T9ajJMJm8SF4+7yfima5j33cH2MBDvC0paDn5r2w9G 13X53tVxvfHBf1fU/Wra0JznYNkWnAhAsgDELPm5hEIde5pWJQ7ezDD0ZwtpMAQa vDIPcRG5gM1NNms/S0oQOM8Pew0Tl1aDIp/mYd7/CY9fZxUHBDKowCOL32gglyjG mjbMNewihDks7Im/SlNV+IjagRbUIclLT5RH9ne+MeNpOg9/fuiyHK0cuQ25h6ts 4HOj4L0vaWOWdiQUsNl9UU78vV3fFg341vs= -----END CERTIFICATE-----Generated at Wed Nov 5 07:44:10 2025 by rpki-client