$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7ae70d56-3bf0-3e04-a81f-0220f9523fcb.roa File: 7ae70d56-3bf0-3e04-a81f-0220f9523fcb.roa (raw, json) Hash identifier: FKMWJ8gciYOp/L/38HQZo4kJMYqBspDoan4nPZWezXU= Subject key identifier: CB:D1:64:1D:B8:7F:4E:20:C3:89:3B:12:77:5F:A4:34:A1:DE:65:DE Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584BBFA5B2A5C76A5E9A4C799280 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7ae70d56-3bf0-3e04-a81f-0220f9523fcb.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 16839 IP address blocks: 2606:3600:1120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:b2:a5:c7:6a:5e:9a:4c:79:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=3815af40-8a8b-47bb-8357-c0cad563dc2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d4:54:c2:df:3d:5f:b2:00:c9:1f:dd:cb:ca: d0:ed:0e:aa:48:ac:9f:46:0e:60:00:ef:ed:e9:f7: fd:9a:fe:26:19:ee:0c:8f:5d:ac:c0:71:52:7b:18: a5:5b:4a:ff:8c:f9:4d:92:db:3d:6b:1b:79:df:e2: a0:ea:78:50:9f:ce:e8:36:6f:58:90:e0:89:0f:52: ed:da:25:82:65:5e:0e:59:c3:09:d2:34:5c:22:62: eb:f6:a3:4b:49:20:7b:ff:77:39:34:1e:05:35:8b: 20:24:64:57:5d:35:f0:3a:d6:a5:32:d6:8e:f0:1f: 7c:07:12:00:6c:d8:2b:5f:2f:8f:cd:b3:f2:1c:b0: df:31:a7:10:6c:c5:8c:89:06:b2:e0:7d:b9:0b:e3: a3:83:62:cd:c3:54:07:24:52:de:c2:c8:47:a8:fb: b1:3d:00:cd:f2:55:b4:b5:8b:54:36:cb:87:55:bd: 04:b9:3c:1f:45:99:1d:ed:f7:61:b9:60:1a:6e:92: 05:2e:ca:ad:fd:e7:bf:a8:fe:83:f1:1e:8d:80:95: 97:0c:e2:5e:75:d3:4b:e8:c4:d1:17:98:ea:a4:b2: f9:13:6a:67:a0:ca:aa:06:44:a5:07:44:6a:55:68: 43:8b:89:8c:18:60:bf:b9:1b:c4:b1:78:c3:bb:e6: e6:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:D1:64:1D:B8:7F:4E:20:C3:89:3B:12:77:5F:A4:34:A1:DE:65:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7ae70d56-3bf0-3e04-a81f-0220f9523fcb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv6: 2606:3600:1120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:5e:49:c3:f3:5b:e0:dc:e2:19:91:e4:00:f9:5d:4d:ed:36: f0:65:b5:7c:c2:91:df:66:b9:00:b9:7e:88:17:c5:b4:c7:72: 45:a1:b0:bb:e6:31:56:a1:b9:b1:de:95:66:53:7b:95:50:9c: f6:9e:cf:38:18:03:28:3a:8a:87:8d:c3:a5:2d:53:9b:8f:46: 03:42:95:f1:a6:8f:ab:ca:c8:03:10:95:f5:2f:60:bc:84:81: 1a:4e:05:b3:c1:1a:13:1a:60:4a:3f:51:24:67:fd:7b:8c:11: d9:06:73:66:d3:17:3f:d5:8d:20:6a:bb:a3:59:04:65:21:bd: fc:9b:f3:76:aa:1c:b2:3a:0e:73:66:0d:57:54:fb:4a:c8:3a: b3:91:01:fd:25:7c:5f:2e:72:b5:81:26:38:bc:e5:28:0a:97: 46:ca:ce:17:6d:7e:4e:36:39:e4:e0:6e:0f:db:27:03:0e:12: f6:c6:6b:4e:1e:4f:fd:1d:64:dc:28:6f:ea:e7:8a:d1:da:c1: 73:4d:f9:01:3b:15:74:57:06:35:a5:88:d4:3f:6c:bd:d0:c5: 2f:10:b4:93:c7:52:7d:bb:8a:af:eb:2a:5f:09:72:a8:88:49: 2b:64:2b:f3:6c:59:8a:f8:68:bc:62:99:0d:e0:20:cf:1d:e2: 63:b3:e7:c0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu/pbKlx2pemkx5koAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk MzgxNWFmNDAtOGE4Yi00N2JiLTgzNTctYzBjYWQ1NjNkYzJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdRUwt89X7IAyR/dy8rQ7Q6qSKyfRg5gAO/t 6ff9mv4mGe4Mj12swHFSexilW0r/jPlNkts9axt53+Kg6nhQn87oNm9YkOCJD1Lt 2iWCZV4OWcMJ0jRcImLr9qNLSSB7/3c5NB4FNYsgJGRXXTXwOtalMtaO8B98BxIA bNgrXy+PzbPyHLDfMacQbMWMiQay4H25C+Ojg2LNw1QHJFLewshHqPuxPQDN8lW0 tYtUNsuHVb0EuTwfRZkd7fdhuWAabpIFLsqt/ee/qP6D8R6NgJWXDOJeddNL6MTR F5jqpLL5E2pnoMqqBkSlB0RqVWhDi4mMGGC/uRvEsXjDu+bm7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMvRZB24f04gw4k7EndfpDSh3mXeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvN2FlNzBkNTYtM2JmMC0z ZTA0LWE4MWYtMDIyMGY5NTIzZmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY2ABEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIReScPzW+Dc4hmR5AD5XU3tNvBltXzCkd9muQC5fogXxbTHckWh sLvmMVahubHelWZTe5VQnPaezzgYAyg6ioeNw6UtU5uPRgNClfGmj6vKyAMQlfUv YLyEgRpOBbPBGhMaYEo/USRn/XuMEdkGc2bTFz/VjSBqu6NZBGUhvfyb83aqHLI6 DnNmDVdU+0rIOrORAf0lfF8ucrWBJji85SgKl0bKzhdtfk42OeTgbg/bJwMOEvbG a04eT/0dZNwob+rnitHawXNN+QE7FXRXBjWliNQ/bL3QxS8QtJPHUn27iq/rKl8J cqiISStkK/NsWYr4aLximQ3gIM8d4mOz58A= -----END CERTIFICATE-----Generated at Wed Nov 5 07:16:44 2025 by rpki-client