$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0a9e59d9-1f2d-3321-84d0-4e6d6efd399b.roa File: 0a9e59d9-1f2d-3321-84d0-4e6d6efd399b.roa (raw, json) Hash identifier: FiKu6FQfseQBmRgTgLiXSc9DJLVjOMxYS+HUK1G2DqQ= Subject key identifier: A2:32:D1:27:7B:CB:F9:60:8B:26:B0:39:25:70:35:F1:19:EE:44:61 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584BA23792078265562BE151F880 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0a9e59d9-1f2d-3321-84d0-4e6d6efd399b.roa Signing time: Sat 25 Oct 2025 01:00:31 +0000 ROA not before: Sat 25 Oct 2025 01:00:31 +0000 ROA not after: Fri 23 Jan 2026 02:00:31 +0000 asID: 23473 IP address blocks: 2607:f750:a000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a2:37:92:07:82:65:56:2b:e1:51:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 25 01:00:31 2025 GMT Not After : Jan 23 02:00:31 2026 GMT Subject: CN=3ef4fc36-46d5-4438-94d6-6f22161e9396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:72:8c:6b:95:e2:cd:43:6b:7c:df:dc:5a:72: fe:63:2f:bd:22:9a:74:d3:a2:98:cc:6b:bb:ea:a0: c4:1e:58:15:27:b4:9a:cf:3a:c5:3f:6f:fd:8b:7f: 23:71:2e:b0:d9:20:20:9c:a7:80:cd:ae:3e:c1:85: cf:ea:09:50:a2:49:df:b6:02:70:9c:81:aa:36:fe: 0a:ec:74:52:a5:93:1d:77:8c:16:73:b1:28:bd:2d: 69:3e:de:b5:74:53:45:04:66:b6:47:78:9a:b0:b3: 49:6c:a4:e4:86:d3:72:f7:f0:a4:d1:70:4b:80:63: 4a:4d:0a:c9:b0:d8:4f:66:86:8f:d6:20:e6:d8:93: 0e:57:c0:91:40:80:9c:48:42:b7:48:4b:1d:a3:26: 4d:70:c4:9d:7d:2f:af:66:0b:7d:d6:53:f4:27:67: 8e:86:87:a5:7b:c0:d6:c6:ac:91:93:70:f6:f9:9f: 3f:4d:4a:c5:6a:b6:bf:da:fe:dc:34:40:80:36:f8: 99:93:b8:46:f9:41:d3:41:f8:88:58:fa:52:b4:d7: 2c:2b:29:18:c6:27:bc:6b:92:41:b3:60:e1:96:26: dc:4b:71:aa:24:c1:49:3e:2a:10:90:e0:ca:e8:3b: 06:ec:bf:f0:4a:dc:47:c4:10:9e:8d:cc:d3:5a:39: 1f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:32:D1:27:7B:CB:F9:60:8B:26:B0:39:25:70:35:F1:19:EE:44:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0a9e59d9-1f2d-3321-84d0-4e6d6efd399b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv6: 2607:f750:a000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:85:86:1f:96:4c:c4:df:04:06:c6:7a:97:c2:74:3a:44:50: da:97:10:85:ed:53:fa:89:fd:70:db:a1:7e:c7:2e:5f:b9:83: 2b:33:64:f5:8b:a3:aa:78:fe:51:c8:97:29:0e:53:7e:fc:bc: 32:98:20:c6:aa:4d:7d:76:2d:7e:47:08:e8:8a:d9:72:ca:92: 6d:1c:0e:aa:4b:35:57:bf:59:00:49:e4:47:81:e5:09:f3:d3: 39:7f:67:6f:78:5a:13:3d:c1:b9:75:a7:c6:1e:7f:d2:eb:eb: 4d:84:d6:dd:81:64:f8:79:e8:cd:05:5b:28:75:6f:fb:c4:f6: 46:3a:8f:8e:8d:50:ce:49:63:dc:2d:b2:fd:ae:71:f8:fa:43: c1:3b:34:54:09:33:1f:05:7b:16:90:04:90:7e:f0:39:73:a5: 62:c3:2e:d0:d2:ac:36:ba:cd:1f:4b:8b:8e:ea:f3:07:a0:4d: 42:c7:4f:1d:9b:f4:c2:07:46:57:d4:9d:a3:f8:24:52:fe:9c: a9:e9:e0:79:b0:8b:2b:7d:4e:98:37:bd:33:2b:75:1a:fd:c1: 45:03:6e:e5:d6:1e:e4:ef:c1:c8:d5:fc:cc:26:39:07:c8:2f: ed:7c:33:b7:8a:d9:0e:22:30:71:a1:e8:c4:35:64:19:c0:11: 96:ce:b8:29 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuiN5IHgmVWK+FR+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTAyNTAxMDAzMVoXDTI2MDEyMzAyMDAzMVowLzEtMCsGA1UEAxMk M2VmNGZjMzYtNDZkNS00NDM4LTk0ZDYtNmYyMjE2MWU5Mzk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXKMa5XizUNrfN/cWnL+Yy+9Ipp006KYzGu7 6qDEHlgVJ7SazzrFP2/9i38jcS6w2SAgnKeAza4+wYXP6glQoknftgJwnIGqNv4K 7HRSpZMdd4wWc7EovS1pPt61dFNFBGa2R3iasLNJbKTkhtNy9/Ck0XBLgGNKTQrJ sNhPZoaP1iDm2JMOV8CRQICcSEK3SEsdoyZNcMSdfS+vZgt91lP0J2eOhoele8DW xqyRk3D2+Z8/TUrFara/2v7cNECANviZk7hG+UHTQfiIWPpStNcsKykYxie8a5JB s2DhlibcS3GqJMFJPioQkODK6DsG7L/wStxHxBCejczTWjkflwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKIy0Sd7y/lgiyawOSVwNfEZ7kRhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMGE5ZTU5ZDktMWYyZC0z MzIxLTg0ZDAtNGU2ZDZlZmQzOTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgf3UKAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEASIWGH5ZMxN8EBsZ6l8J0OkRQ2pcQhe1T+on9cNuhfscuX7mDKzNk 9Yujqnj+UciXKQ5Tfvy8MpggxqpNfXYtfkcI6IrZcsqSbRwOqks1V79ZAEnkR4Hl CfPTOX9nb3haEz3BuXWnxh5/0uvrTYTW3YFk+HnozQVbKHVv+8T2RjqPjo1Qzklj 3C2y/a5x+PpDwTs0VAkzHwV7FpAEkH7wOXOlYsMu0NKsNrrNH0uLjurzB6BNQsdP HZv0wgdGV9Sdo/gkUv6cqengebCLK31OmDe9Myt1Gv3BRQNu5dYe5O/ByNX8zCY5 B8gv7Xwzt4rZDiIwcaHoxDVkGcARls64KQ== -----END CERTIFICATE-----Generated at Wed Nov 5 04:36:23 2025 by rpki-client