$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/13605885-3c3e-35e1-a02e-809f13053162.roa File: 13605885-3c3e-35e1-a02e-809f13053162.roa (raw, json) Hash identifier: DHKrRDNXl2LV1aVw1On9t5WbCMvsANg71te39pj4OZ8= Subject key identifier: B1:6B:46:16:D8:A2:D5:AA:BB:09:65:0D:28:21:9F:AC:67:8E:04:0B Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584B0B76CE3CDE3886DA2C30FAA0 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/13605885-3c3e-35e1-a02e-809f13053162.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 11404 IP address blocks: 2607:8100::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:ce:3c:de:38:86:da:2c:30:fa:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=11a212eb-5874-4b6b-9483-96c41eb2f008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:67:66:ff:ed:25:83:2a:a3:3b:f8:e2:a0:7d: 32:da:09:49:92:24:ee:20:0b:8e:27:2d:44:78:de: 7a:ba:c2:a5:56:ee:35:cd:52:87:ee:d6:20:de:a0: e6:99:60:a5:c9:05:a7:34:43:d4:d0:3c:82:65:e5: 2d:c9:70:33:86:fd:4a:ec:20:1f:c8:b3:29:6f:d7: 75:7a:5f:00:52:98:fd:14:06:bd:6e:2e:66:8a:a8: 2f:72:1a:90:f9:3c:7d:da:6a:95:6b:dc:a5:85:fe: 33:1a:0d:fc:28:8f:27:2f:41:69:91:cb:b3:8e:bd: 3e:a4:68:6b:44:33:62:ea:8d:9c:88:fc:c9:22:11: ca:08:c1:0a:00:c6:b6:d8:29:2a:49:9d:60:55:be: 0a:d8:9d:ef:ee:28:4e:72:dc:0d:f6:57:85:8d:17: b4:70:da:09:51:31:a9:e8:ed:35:cd:79:9e:60:50: 31:23:0f:ce:f3:46:9e:52:c7:e4:d7:be:4c:76:dc: 25:cc:2a:60:23:4c:68:a7:a1:49:66:67:cc:f6:05: b5:a6:fb:00:01:35:36:35:aa:21:07:40:c7:a0:3e: 04:9e:28:53:de:8c:da:79:7a:fe:b6:75:8b:ab:1c: 2d:52:ff:6b:f6:da:0e:31:e8:f1:a0:fe:4b:7e:f9: b6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:6B:46:16:D8:A2:D5:AA:BB:09:65:0D:28:21:9F:AC:67:8E:04:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/13605885-3c3e-35e1-a02e-809f13053162.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv6: 2607:8100::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:fc:3c:57:76:bf:ba:94:51:98:2e:d5:99:17:d0:28:20:71: 6f:3a:f3:99:42:b6:71:38:e4:e8:8f:76:d0:3f:d0:6e:2c:7f: 06:66:e9:ed:a0:f3:de:70:2b:9f:ee:ac:8b:3a:98:e7:9f:50: b8:bb:69:b1:8b:24:e2:4e:ef:8b:32:49:92:cd:a9:77:97:2b: a2:f5:7a:a7:7f:4f:a4:80:26:88:c9:f4:ed:47:0c:ea:8f:e1: 33:4e:25:51:48:1d:26:aa:e9:04:40:dc:17:87:18:1e:cd:67: d6:1b:e8:5d:00:f8:06:a8:f8:46:5c:cd:ba:c8:74:1e:44:74: bd:58:ad:38:5c:c0:5f:6c:f7:61:b6:b1:38:d0:b7:ee:81:b8: eb:fd:9f:48:77:dd:8a:d2:f3:18:59:0e:ff:8f:d0:d0:14:dd: 27:03:2a:45:8f:f5:10:a6:9e:3b:df:42:41:b2:0c:fa:89:ea: 6a:6a:bb:09:ad:e7:3d:d9:ea:18:b5:99:78:04:08:ac:a7:f3: b2:54:4b:e4:6c:00:3a:d6:e3:3b:3c:25:f0:ad:79:e7:b1:bd: 7c:5b:32:3b:d9:64:cf:59:db:b6:f4:7a:63:07:31:03:ba:20: 86:87:f7:73:83:86:94:d3:77:c7:eb:a6:8a:a4:72:cb:99:a9: 6c:44:07:33 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsLds483jiG2iww+qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk MTFhMjEyZWItNTg3NC00YjZiLTk0ODMtOTZjNDFlYjJmMDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWdm/+0lgyqjO/jioH0y2glJkiTuIAuOJy1E eN56usKlVu41zVKH7tYg3qDmmWClyQWnNEPU0DyCZeUtyXAzhv1K7CAfyLMpb9d1 el8AUpj9FAa9bi5miqgvchqQ+Tx92mqVa9ylhf4zGg38KI8nL0Fpkcuzjr0+pGhr RDNi6o2ciPzJIhHKCMEKAMa22CkqSZ1gVb4K2J3v7ihOctwN9leFjRe0cNoJUTGp 6O01zXmeYFAxIw/O80aeUsfk175MdtwlzCpgI0xop6FJZmfM9gW1pvsAATU2Naoh B0DHoD4EnihT3ozaeXr+tnWLqxwtUv9r9toOMejxoP5Lfvm2NQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLFrRhbYotWquwllDSghn6xnjgQLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMTM2MDU4ODUtM2MzZS0z NWUxLWEwMmUtODA5ZjEzMDUzMTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgeBADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB9/DxXdr+6lFGYLtWZF9AoIHFvOvOZQrZxOOToj3bQP9BuLH8GZunt oPPecCuf7qyLOpjnn1C4u2mxiyTiTu+LMkmSzal3lyui9Xqnf0+kgCaIyfTtRwzq j+EzTiVRSB0mqukEQNwXhxgezWfWG+hdAPgGqPhGXM26yHQeRHS9WK04XMBfbPdh trE40Lfugbjr/Z9Id92K0vMYWQ7/j9DQFN0nAypFj/UQpp4730JBsgz6iepqarsJ rec92eoYtZl4BAisp/OyVEvkbAA61uM7PCXwrXnnsb18WzI72WTPWdu29HpjBzED uiCGh/dzg4aU03fH66aKpHLLmalsRAcz -----END CERTIFICATE-----Generated at Wed Nov 5 08:58:44 2025 by rpki-client