$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/881a9c8f-7e4d-3941-999e-ede38f508f84.roa File: 881a9c8f-7e4d-3941-999e-ede38f508f84.roa (raw, json) Hash identifier: NbVjQxlaICXzaCZ2zO5X/p92R/8oD2rUV4FOtwzS7lw= Subject key identifier: BD:13:21:B1:25:C2:E5:33:5D:75:27:90:06:53:FB:9B:9A:FB:08:7C Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584BA23791BD4118D5382D3B1480 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/881a9c8f-7e4d-3941-999e-ede38f508f84.roa Signing time: Sat 25 Oct 2025 01:00:31 +0000 ROA not before: Sat 25 Oct 2025 01:00:31 +0000 ROA not after: Fri 23 Jan 2026 02:00:31 +0000 asID: 23473 IP address blocks: 2607:f750:9000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a2:37:91:bd:41:18:d5:38:2d:3b:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 25 01:00:31 2025 GMT Not After : Jan 23 02:00:31 2026 GMT Subject: CN=3c849df8-f893-4d8f-bf9d-3999b14a01b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:8a:93:11:62:bb:57:19:59:63:aa:b9:db:65: 7b:14:18:dd:5e:9f:f7:b6:cd:a5:a8:d0:c0:6e:aa: 6b:9b:61:e7:fa:dd:00:17:e7:94:cf:eb:c1:06:ae: b2:ed:3b:bd:8a:a2:db:4a:63:2b:46:dd:18:a7:03: 27:2d:8f:d2:7b:c1:4a:58:19:bb:7d:98:62:30:f4: 95:72:7d:ca:66:3e:b1:3a:13:fa:db:be:45:15:95: c4:f2:0a:c5:c7:cb:fd:ae:f9:59:9f:92:6b:fa:e8: 6a:1c:74:51:49:c0:77:35:df:9a:5d:f7:6b:0c:de: 9e:f8:9b:f7:84:f9:df:1e:1a:f4:90:43:b9:27:34: e9:b7:05:58:95:96:5e:47:e1:dc:ed:6e:c8:b6:01: 90:b6:dd:a2:5d:a0:53:c5:27:7a:31:cc:4c:ec:e7: be:5f:de:77:0a:17:29:c4:21:fb:d6:e3:92:33:36: 16:13:83:6a:9c:aa:53:a0:2c:c0:7b:2d:e2:6f:f6: dc:7c:0c:02:97:de:28:1c:90:ea:bf:0d:27:a8:92: 51:0c:59:01:38:19:f0:53:e7:0b:40:e0:0b:94:1c: 4a:4c:14:3d:7f:f8:6f:15:d1:ae:4f:fd:88:ee:44: 64:ca:2a:42:42:15:d9:69:75:b4:7b:fa:b4:ae:fa: 8c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:13:21:B1:25:C2:E5:33:5D:75:27:90:06:53:FB:9B:9A:FB:08:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/881a9c8f-7e4d-3941-999e-ede38f508f84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv6: 2607:f750:9000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:76:ed:65:55:ae:29:de:97:5a:1c:9a:aa:6d:48:09:f2:68: 82:85:f4:ac:85:a4:28:35:f5:40:31:f5:e0:e6:aa:9a:c2:60: d3:4a:38:3e:17:36:35:25:e4:d0:d4:4a:11:f3:1a:84:44:46: 56:b1:d1:39:40:ec:29:08:2b:5e:3a:4e:c5:9c:83:4d:d0:16: e9:ee:4b:26:5c:31:f5:43:ca:d1:35:bc:44:de:a0:16:05:e5: ab:a7:b6:d5:88:88:fd:dc:e3:1d:48:e9:39:b6:24:4e:86:ce: 3d:c1:1a:3d:53:61:87:d9:c4:0c:2f:04:29:c7:f7:93:9f:c7: da:b6:02:f4:fb:80:20:d1:fe:4e:14:e6:70:c1:e9:ae:1e:64: 7d:31:92:66:ba:a7:ec:d4:5b:70:56:45:f4:f2:d3:cb:3a:5f: 77:d6:af:97:b0:32:df:47:af:1e:ac:e2:1f:c4:0e:98:5b:94: 13:7a:17:c4:b3:00:39:24:03:48:05:57:38:cf:94:f3:15:f7: 07:14:99:47:90:ca:76:f9:63:fd:83:ad:95:c5:53:74:06:f6: 1a:a1:5e:63:d1:d7:01:a6:99:dc:ac:6b:7f:3f:a7:3f:25:87: 9a:8f:87:e6:ea:09:80:21:b2:56:52:de:fe:fc:b8:8e:97:ee: d8:60:d8:33 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuiN5G9QRjVOC07FIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTAyNTAxMDAzMVoXDTI2MDEyMzAyMDAzMVowLzEtMCsGA1UEAxMk M2M4NDlkZjgtZjg5My00ZDhmLWJmOWQtMzk5OWIxNGEwMWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34qTEWK7VxlZY6q522V7FBjdXp/3ts2lqNDA bqprm2Hn+t0AF+eUz+vBBq6y7Tu9iqLbSmMrRt0YpwMnLY/Se8FKWBm7fZhiMPSV cn3KZj6xOhP6275FFZXE8grFx8v9rvlZn5Jr+uhqHHRRScB3Nd+aXfdrDN6e+Jv3 hPnfHhr0kEO5JzTptwVYlZZeR+Hc7W7ItgGQtt2iXaBTxSd6McxM7Oe+X953Chcp xCH71uOSMzYWE4NqnKpToCzAey3ib/bcfAwCl94oHJDqvw0nqJJRDFkBOBnwU+cL QOALlBxKTBQ9f/hvFdGuT/2I7kRkyipCQhXZaXW0e/q0rvqMPwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFL0TIbElwuUzXXUnkAZT+5ua+wh8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvODgxYTljOGYtN2U0ZC0z OTQxLTk5OWUtZWRlMzhmNTA4Zjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgf3UJAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAF3btZVWuKd6XWhyaqm1ICfJogoX0rIWkKDX1QDH14OaqmsJg00o4 Phc2NSXk0NRKEfMahERGVrHROUDsKQgrXjpOxZyDTdAW6e5LJlwx9UPK0TW8RN6g FgXlq6e21YiI/dzjHUjpObYkTobOPcEaPVNhh9nEDC8EKcf3k5/H2rYC9PuAINH+ ThTmcMHprh5kfTGSZrqn7NRbcFZF9PLTyzpfd9avl7Ay30evHqziH8QOmFuUE3oX xLMAOSQDSAVXOM+U8xX3BxSZR5DKdvlj/YOtlcVTdAb2GqFeY9HXAaaZ3Kxrfz+n PyWHmo+H5uoJgCGyVlLe/vy4jpfu2GDYMw== -----END CERTIFICATE-----Generated at Wed Nov 5 01:17:13 2025 by rpki-client