$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c0b3cf56-6277-3d22-8721-823b8d83b6e5.roa File: c0b3cf56-6277-3d22-8721-823b8d83b6e5.roa (raw, json) Hash identifier: Y/3hVN4GBvKQLOCUBEnq/V2tUhiG85XM8G6W5znJ1DA= Subject key identifier: 85:70:68:86:A2:57:EE:F3:68:FA:29:C2:29:B0:09:6A:CE:BE:E0:02 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584BA23790C71E6BC3C8EACB6640 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c0b3cf56-6277-3d22-8721-823b8d83b6e5.roa Signing time: Sat 25 Oct 2025 01:00:31 +0000 ROA not before: Sat 25 Oct 2025 01:00:31 +0000 ROA not after: Fri 23 Jan 2026 02:00:31 +0000 asID: 23473 IP address blocks: 2607:f750:2b00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a2:37:90:c7:1e:6b:c3:c8:ea:cb:66:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 25 01:00:31 2025 GMT Not After : Jan 23 02:00:31 2026 GMT Subject: CN=d89f17e0-0237-40b9-9383-473c0c0f743d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:46:b3:a1:2a:60:1b:f4:1b:13:69:b8:d3:50: 59:7a:79:c2:ac:9d:82:d2:63:ad:dc:47:a1:b7:6d: ba:e9:ed:8d:3a:f0:25:34:02:2d:5c:ac:38:de:ab: f8:93:2c:f1:db:15:bf:c4:3d:2b:ce:84:21:b0:b7: 08:6c:91:aa:5e:79:0a:f9:da:5e:f8:d3:54:00:31: af:38:dd:fa:58:14:96:dd:db:72:fa:9e:7f:1e:30: 4b:6a:df:4b:ec:5b:71:38:a1:3b:c4:1c:af:1c:90: 88:43:34:19:d2:38:be:38:8b:a7:3d:af:01:b0:e0: 47:d8:52:b3:ac:86:f8:4b:3a:2e:1a:dd:b7:b3:c7: 7e:71:14:75:04:6d:7f:c3:8e:10:f0:ca:29:dc:4c: d5:1c:bd:cc:b3:bd:69:ce:7e:fa:3f:c6:98:fc:d9: 46:ac:bd:36:b9:fc:d7:5d:d6:9a:2e:0e:cf:4c:24: f0:72:17:27:42:21:4c:0a:6e:33:33:da:ae:9c:2b: 53:cc:f0:16:02:ca:b1:f3:9f:c6:82:6b:d1:8c:65: 81:58:ae:e2:29:a2:6e:4d:ad:f3:42:ec:3c:f5:ed: 71:83:64:8d:ff:92:57:74:71:a2:cc:9a:b1:43:47: 5d:17:1f:25:48:7c:59:cd:ed:4b:67:91:53:ca:35: 23:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:70:68:86:A2:57:EE:F3:68:FA:29:C2:29:B0:09:6A:CE:BE:E0:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c0b3cf56-6277-3d22-8721-823b8d83b6e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv6: 2607:f750:2b00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:71:54:5c:d3:cd:2e:b5:ff:14:1d:89:e3:3c:8b:78:31:8c: 6e:1c:e7:44:eb:17:84:df:51:1a:07:c3:16:78:db:de:4d:f0: 2c:a6:b0:47:5d:7e:c4:6b:cc:31:0b:d3:4c:3b:9a:4f:3c:f5: a2:c0:9d:f9:0f:2f:67:f0:42:11:99:0c:56:0c:96:a2:a8:e1: bd:42:74:8b:ff:2b:b5:bb:af:27:90:88:74:f6:75:3e:f1:c1: d9:0a:d9:86:1d:6b:92:fa:39:f8:8f:aa:eb:53:22:b2:53:e2: b9:24:f8:36:46:b3:6c:e4:32:78:2a:ab:2c:3e:df:71:da:90: 4a:08:a2:b6:24:38:07:6e:fd:c3:9d:32:aa:ba:e9:9c:9a:c5: 50:24:ec:b9:b3:95:22:eb:97:eb:c3:3a:88:7d:d4:05:e9:7a: 48:0a:a2:68:0e:85:e3:62:8a:ab:ee:d5:32:91:a9:e5:7c:9b: 3d:d4:31:de:cc:cc:ff:75:60:be:0c:9a:4b:ed:49:10:06:92: 17:93:16:36:7f:c8:f9:69:e7:43:67:07:9c:a6:37:21:25:1c: d0:30:0a:25:16:92:fd:af:fd:65:2d:d5:a6:70:1e:71:4e:41: ea:cc:dd:50:55:95:11:1a:20:f8:10:9a:1a:50:20:c2:91:56: e4:59:eb:27 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuiN5DHHmvDyOrLZkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTAyNTAxMDAzMVoXDTI2MDEyMzAyMDAzMVowLzEtMCsGA1UEAxMk ZDg5ZjE3ZTAtMDIzNy00MGI5LTkzODMtNDczYzBjMGY3NDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUazoSpgG/QbE2m401BZennCrJ2C0mOt3Eeh t2266e2NOvAlNAItXKw43qv4kyzx2xW/xD0rzoQhsLcIbJGqXnkK+dpe+NNUADGv ON36WBSW3dty+p5/HjBLat9L7FtxOKE7xByvHJCIQzQZ0ji+OIunPa8BsOBH2FKz rIb4SzouGt23s8d+cRR1BG1/w44Q8Mop3EzVHL3Ms71pzn76P8aY/NlGrL02ufzX XdaaLg7PTCTwchcnQiFMCm4zM9qunCtTzPAWAsqx85/GgmvRjGWBWK7iKaJuTa3z Quw89e1xg2SN/5JXdHGizJqxQ0ddFx8lSHxZze1LZ5FTyjUjLQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIVwaIaiV+7zaPopwimwCWrOvuACMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYzBiM2NmNTYtNjI3Ny0z ZDIyLTg3MjEtODIzYjhkODNiNmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgf3UCsw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAG3FUXNPNLrX/FB2J4zyLeDGMbhznROsXhN9RGgfDFnjb3k3wLKaw R11+xGvMMQvTTDuaTzz1osCd+Q8vZ/BCEZkMVgyWoqjhvUJ0i/8rtbuvJ5CIdPZ1 PvHB2QrZhh1rkvo5+I+q61MislPiuST4NkazbOQyeCqrLD7fcdqQSgiitiQ4B279 w50yqrrpnJrFUCTsubOVIuuX68M6iH3UBel6SAqiaA6F42KKq+7VMpGp5XybPdQx 3szM/3VgvgyaS+1JEAaSF5MWNn/I+WnnQ2cHnKY3ISUc0DAKJRaS/a/9ZS3VpnAe cU5B6szdUFWVERog+BCaGlAgwpFW5FnrJw== -----END CERTIFICATE-----Generated at Wed Nov 5 19:05:08 2025 by rpki-client