$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/2e7fedc6-4231-3453-9c5a-bd24e5304959.roa File: 2e7fedc6-4231-3453-9c5a-bd24e5304959.roa (raw, json) Hash identifier: MaBktNZkyKzFnqhGeNR6HDbp5y10niBRvuenaOAwj1E= Subject key identifier: 15:E0:59:10:1D:5D:28:AB:18:02:6A:3E:00:22:66:10:00:68:EB:05 Certificate issuer: /CN=7a2be303-4525-4433-b220-b1c6b5052945 Certificate serial: 010D0C9F4328584BAA979CE41AFA2AF5A8F82C80 Authority key identifier: 70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/2e7fedc6-4231-3453-9c5a-bd24e5304959.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 64269 IP address blocks: 2604:28c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:9c:e4:1a:fa:2a:f5:a8:f8:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a2be303-4525-4433-b220-b1c6b5052945 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=caba1b35-befa-4f3f-94a5-2a87244b7216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:3c:de:57:59:ba:ba:68:38:8d:db:bf:f1:34: 43:22:1f:3d:5a:99:ce:c3:94:1e:29:c8:23:e6:ca: 3c:d7:40:05:4d:9e:6e:19:7c:e7:11:69:dd:ec:a6: b6:c2:e4:02:0b:cc:d0:6b:44:3a:92:6c:06:8f:fc: 67:7d:60:38:57:36:4c:38:97:80:96:ac:74:74:1f: 3a:ed:7c:c3:ce:66:ad:89:9d:75:f7:d2:3d:06:42: e9:c4:6b:49:04:cc:0f:45:0e:57:f4:26:3c:81:c9: 6f:aa:7b:a9:6e:40:89:b6:3f:ca:d6:74:0a:75:fe: 9f:37:22:e3:b9:48:3e:5f:70:5e:30:77:1e:07:8b: 35:89:e6:97:58:35:7d:dd:d0:19:bf:9b:3c:a8:13: 9a:09:96:af:02:91:96:0f:de:74:09:2f:c8:57:51: e2:4b:71:36:36:03:2c:f2:fc:86:47:11:99:bb:4d: 5a:8b:15:12:56:37:61:6a:43:64:eb:eb:2d:06:c2: 7d:22:98:a9:4b:74:2d:52:e7:fe:e7:a4:02:bc:c9: b4:d5:c1:92:85:bd:93:fa:f4:fe:02:95:2a:39:d9: be:11:43:e5:d0:08:72:bc:75:ec:14:77:e5:95:bf: 61:ab:cc:59:2a:17:f2:ee:57:c6:18:bc:18:f9:c4: e8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:E0:59:10:1D:5D:28:AB:18:02:6A:3E:00:22:66:10:00:68:EB:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/2e7fedc6-4231-3453-9c5a-bd24e5304959.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl X509v3 Authority Key Identifier: keyid:70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer sbgp-ipAddrBlock: critical IPv6: 2604:28c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:9d:09:c8:58:51:61:ee:70:a4:f2:a1:c2:9f:d9:ab:84:24: 8a:3b:54:eb:6f:54:71:ee:c4:d6:bb:f6:0e:0a:a1:0d:4d:c5: 67:06:81:c3:b8:73:8c:54:ba:bc:a1:80:7a:28:00:59:fa:80: 3b:67:e4:ad:cb:c7:61:d9:2d:b6:f3:cf:4d:c2:e9:fa:a5:46: fd:21:88:eb:68:2f:c0:fe:dc:9b:f9:a5:e0:6d:4a:4a:df:a5: 8b:b3:a4:e3:4c:7b:f9:2f:17:b0:32:0c:4a:f6:d8:0e:c1:79: 2d:bb:f3:dd:18:0c:17:ff:02:4a:51:b2:a7:00:b0:cc:12:51: 9c:6e:f2:56:a6:22:b1:8a:95:15:e1:08:8f:8d:ff:37:40:ed: dd:e5:8c:bb:b0:7a:58:26:97:fa:2a:cd:20:51:26:18:40:e3: dd:31:65:3e:0c:56:45:41:38:3a:8f:38:97:88:d8:33:13:07: 81:aa:26:82:d3:b8:55:07:f3:46:f2:30:41:14:b8:b8:25:43: fb:bf:a0:e0:69:07:3e:06:67:38:08:2d:e5:00:a2:09:7a:be: 6f:e0:32:71:cb:ba:78:88:27:a6:e9:47:ca:9c:a4:1f:ca:fa: 5c:f7:5c:03:63:61:ae:17:dc:6e:ae:19:95:fb:7b:27:e4:e0: 2c:2e:fc:59 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuql5zkGvoq9aj4LIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EyYmUzMDMtNDUyNS00NDMzLWIyMjAtYjFjNmI1MDUy OTQ1MB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk Y2FiYTFiMzUtYmVmYS00ZjNmLTk0YTUtMmE4NzI0NGI3MjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jzeV1m6umg4jdu/8TRDIh89WpnOw5QeKcgj 5so810AFTZ5uGXznEWnd7Ka2wuQCC8zQa0Q6kmwGj/xnfWA4VzZMOJeAlqx0dB86 7XzDzmatiZ1199I9BkLpxGtJBMwPRQ5X9CY8gclvqnupbkCJtj/K1nQKdf6fNyLj uUg+X3BeMHceB4s1ieaXWDV93dAZv5s8qBOaCZavApGWD950CS/IV1HiS3E2NgMs 8vyGRxGZu01aixUSVjdhakNk6+stBsJ9IpipS3QtUuf+56QCvMm01cGShb2T+vT+ ApUqOdm+EUPl0AhyvHXsFHfllb9hq8xZKhfy7lfGGLwY+cToiQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBXgWRAdXSirGAJqPgAiZhAAaOsFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJi ZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2YjUwNTI5NDUvMmU3ZmVkYzYtNDIzMS0z NDUzLTljNWEtYmQyNGU1MzA0OTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2EyYmUzMDMtNDUyNS00NDMzLWIy MjAtYjFjNmI1MDUyOTQ1LzdhMmJlMzAzLTQ1MjUtNDQzMy1iMjIwLWIxYzZiNTA1 Mjk0NS5jcmwwHwYDVR0jBBgwFoAUcB/v7q15UMvEYiozrSRlUmV13rIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJiZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2 YjUwNTI5NDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQowDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBjnQnIWFFh7nCk8qHCn9mrhCSKO1Trb1Rx7sTWu/YOCqENTcVnBoHD uHOMVLq8oYB6KABZ+oA7Z+Sty8dh2S22889Nwun6pUb9IYjraC/A/tyb+aXgbUpK 36WLs6TjTHv5LxewMgxK9tgOwXktu/PdGAwX/wJKUbKnALDMElGcbvJWpiKxipUV 4QiPjf83QO3d5Yy7sHpYJpf6Ks0gUSYYQOPdMWU+DFZFQTg6jziXiNgzEweBqiaC 07hVB/NG8jBBFLi4JUP7v6DgaQc+Bmc4CC3lAKIJer5v4DJxy7p4iCem6UfKnKQf yvpc91wDY2GuF9xurhmV+3sn5OAsLvxZ -----END CERTIFICATE-----Generated at Wed Nov 5 09:41:42 2025 by rpki-client