$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3/20a33a85-4e35-3679-9268-4da82cc7e935.roa File: 20a33a85-4e35-3679-9268-4da82cc7e935.roa (raw, json) Hash identifier: 5wTCJzsdPUzB1MafnpYBkJUz6VbAwEqZiDYwkghPYAw= Subject key identifier: B7:8F:81:42:F3:91:01:5A:2D:3A:FE:D1:7F:24:82:AE:A8:B8:E6:D9 Certificate issuer: /CN=08b22b46-d56e-4ead-a5fc-58eb07123cf3 Certificate serial: 010D0C9F4328584BB2F832F66D5941C2C5027400 Authority key identifier: D1:E2:1F:03:18:3C:44:09:DF:EC:E5:C6:70:1E:00:1E:9A:F7:F3:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3/20a33a85-4e35-3679-9268-4da82cc7e935.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 23026 IP address blocks: 2607:6100:1005::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3/08b22b46-d56e-4ead-a5fc-58eb07123cf3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3/08b22b46-d56e-4ead-a5fc-58eb07123cf3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:32:f6:6d:59:41:c2:c5:02:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08b22b46-d56e-4ead-a5fc-58eb07123cf3 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=f57ae88c-1eaa-4c57-87ae-615d9bced975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:df:87:45:af:15:98:c5:8f:06:01:b3:d0:31: ad:f6:58:12:b0:1d:a6:c9:5a:c4:c2:88:8f:6e:8a: bd:17:35:90:df:55:e8:3c:52:40:08:f2:37:d7:77: 31:24:1c:e5:91:8a:aa:15:e2:f1:bc:2a:57:73:3e: e2:73:24:74:b2:97:45:c4:29:89:af:7a:e9:b9:f5: 57:c9:78:d8:19:dd:9f:ec:46:bf:51:9b:7c:4d:1a: 33:63:c5:cd:24:e0:f4:c3:ff:f6:6f:f5:1a:cb:ac: 8d:98:7e:bb:87:3c:c5:1b:35:d0:a9:4f:eb:da:50: f2:32:56:c7:75:fc:71:2d:23:87:1f:04:a1:36:05: 80:95:8f:6a:2b:70:04:3d:cb:63:ac:89:d2:75:1e: ce:ea:ef:7e:42:26:a5:25:fa:67:3a:3a:6b:24:77: 3f:89:ef:87:9a:21:15:05:0d:66:28:93:d0:53:b0: 52:0e:25:c1:78:41:1f:f9:02:a8:5b:d1:46:2c:78: a1:08:08:dc:48:43:37:28:33:16:1e:bd:39:6a:7d: 67:c2:cd:48:f5:b3:ec:72:fe:9f:5a:e4:b1:1f:8b: 4d:88:0e:f1:25:74:94:79:bf:f3:7b:82:0f:f2:d6: eb:a4:25:21:77:c8:81:db:06:e7:5d:13:73:d0:d7: fb:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:8F:81:42:F3:91:01:5A:2D:3A:FE:D1:7F:24:82:AE:A8:B8:E6:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3/20a33a85-4e35-3679-9268-4da82cc7e935.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3/08b22b46-d56e-4ead-a5fc-58eb07123cf3.crl X509v3 Authority Key Identifier: keyid:D1:E2:1F:03:18:3C:44:09:DF:EC:E5:C6:70:1E:00:1E:9A:F7:F3:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3.cer sbgp-ipAddrBlock: critical IPv6: 2607:6100:1005::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:16:cf:4c:8d:b7:c8:12:bb:16:f0:fa:03:bb:29:71:67:a9: 60:10:3d:c4:68:8a:51:9b:61:53:eb:33:3b:3c:92:bc:7f:17: c2:e4:eb:52:a3:30:90:4e:5e:b2:25:74:db:1c:07:98:fe:62: 91:05:25:65:25:b2:93:34:f0:8f:f6:04:a1:dc:e2:6c:cc:55: 8c:3e:13:94:5f:d7:15:dc:24:81:7e:1e:a5:ee:69:fc:19:ed: a0:87:af:ac:24:d5:b7:f8:8f:cd:ba:e0:b2:df:9f:73:39:47: 17:5d:f7:36:c7:ad:f9:b1:8e:80:ff:26:2e:77:b9:ae:18:0e: 24:aa:09:1d:fa:57:9d:5e:3f:a9:43:35:a7:93:6f:63:46:e2: 31:41:7a:33:0e:35:82:b1:13:a3:e3:85:b7:48:43:23:5e:ca: a3:77:8b:c1:08:19:00:7d:f2:79:ae:49:18:eb:e1:b7:1d:cb: 34:1a:14:ae:53:17:40:56:b9:bf:bf:ba:41:c5:fe:49:9d:98: 09:d9:0d:fa:21:92:97:07:dd:81:ac:fd:d0:fa:9a:da:3b:dc: 24:ff:9d:23:7d:bd:60:b5:6b:72:4b:74:53:4a:91:8c:e1:3f: 0b:ff:2d:23:67:90:cd:2d:ed:d0:60:db:0c:12:92:eb:00:91: 20:a0:7a:7d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuy+DL2bVlBwsUCdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDhiMjJiNDYtZDU2ZS00ZWFkLWE1ZmMtNThlYjA3MTIz Y2YzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk ZjU3YWU4OGMtMWVhYS00YzU3LTg3YWUtNjE1ZDliY2VkOTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9+HRa8VmMWPBgGz0DGt9lgSsB2myVrEwoiP boq9FzWQ31XoPFJACPI313cxJBzlkYqqFeLxvCpXcz7icyR0spdFxCmJr3rpufVX yXjYGd2f7Ea/UZt8TRozY8XNJOD0w//2b/Uay6yNmH67hzzFGzXQqU/r2lDyMlbH dfxxLSOHHwShNgWAlY9qK3AEPctjrInSdR7O6u9+QialJfpnOjprJHc/ie+HmiEV BQ1mKJPQU7BSDiXBeEEf+QKoW9FGLHihCAjcSEM3KDMWHr05an1nws1I9bPscv6f WuSxH4tNiA7xJXSUeb/ze4IP8tbrpCUhd8iB2wbnXRNz0Nf72QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLePgULzkQFaLTr+0X8kgq6ouObZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wOGIy MmI0Ni1kNTZlLTRlYWQtYTVmYy01OGViMDcxMjNjZjMvMjBhMzNhODUtNGUzNS0z Njc5LTkyNjgtNGRhODJjYzdlOTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMDhiMjJiNDYtZDU2ZS00ZWFkLWE1 ZmMtNThlYjA3MTIzY2YzLzA4YjIyYjQ2LWQ1NmUtNGVhZC1hNWZjLTU4ZWIwNzEy M2NmMy5jcmwwHwYDVR0jBBgwFoAU0eIfAxg8RAnf7OXGcB4AHpr382QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wOGIyMmI0Ni1kNTZlLTRlYWQtYTVmYy01OGVi MDcxMjNjZjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgdhABAF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEAWz0yNt8gSuxbw+gO7KXFnqWAQPcRoilGbYVPrMzs8krx/F8Lk 61KjMJBOXrIldNscB5j+YpEFJWUlspM08I/2BKHc4mzMVYw+E5Rf1xXcJIF+HqXu afwZ7aCHr6wk1bf4j8264LLfn3M5Rxdd9zbHrfmxjoD/Ji53ua4YDiSqCR36V51e P6lDNaeTb2NG4jFBejMONYKxE6PjhbdIQyNeyqN3i8EIGQB98nmuSRjr4bcdyzQa FK5TF0BWub+/ukHF/kmdmAnZDfohkpcH3YGs/dD6mto73CT/nSN9vWC1a3JLdFNK kYzhPwv/LSNnkM0t7dBg2wwSkusAkSCgen0= -----END CERTIFICATE-----Generated at Wed Nov 5 15:20:18 2025 by rpki-client