$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/09168c7f-7549-3339-b932-1c95b7c42c0d.roa File: 09168c7f-7549-3339-b932-1c95b7c42c0d.roa (raw, json) Hash identifier: JAazuFep1cCw3l31bLZhOywJ8ZNIyTruqx/nTzKXDTk= Subject key identifier: 21:84:92:44:17:BE:A7:9D:D5:F1:9E:32:79:1F:E0:7C:DF:9D:28:01 Certificate issuer: /CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61 Certificate serial: 010D0C9F4328584B110C111E3F6734B70017ECA0 Authority key identifier: F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/09168c7f-7549-3339-b932-1c95b7c42c0d.roa Signing time: Wed 03 Sep 2025 01:00:33 +0000 ROA not before: Wed 03 Sep 2025 01:00:33 +0000 ROA not after: Tue 02 Dec 2025 02:00:33 +0000 asID: 14090 IP address blocks: 2607:faa8::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:0c:11:1e:3f:67:34:b7:00:17:ec:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61 Validity Not Before: Sep 3 01:00:33 2025 GMT Not After : Dec 2 02:00:33 2025 GMT Subject: CN=51eb7ff7-fc99-487a-91c8-c24785f3319f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:33:cf:f9:4e:ec:4f:03:53:04:77:69:d0:1a: db:fb:c3:f7:74:87:4c:52:b3:39:62:bb:92:6e:30: 4d:60:08:ac:de:23:ac:40:6f:f0:1c:30:a2:32:02: 93:00:d6:9d:22:68:67:d1:ed:45:d3:24:8d:67:ac: 49:57:7a:db:62:d6:09:50:91:93:65:d1:e7:aa:8c: 8a:6c:a6:44:0a:f7:89:72:85:a0:94:fa:2e:dd:3f: 7d:2f:6a:57:94:2a:73:89:3f:0b:08:57:01:8b:7e: d8:88:f9:83:b2:61:c7:5c:77:0e:e4:8b:cc:54:7e: 90:b7:31:42:02:7b:cd:fc:67:8a:27:7c:3e:9e:48: 15:40:32:96:7a:bb:7e:fb:c7:5f:ba:7b:1a:83:ca: 96:62:bb:ae:ba:33:62:ae:45:a4:cf:cf:16:38:c4: ee:1d:b5:b8:75:f0:2a:cf:9b:d6:18:06:8b:be:c5: f5:45:bb:9a:20:53:be:5d:14:78:48:a3:0f:68:f0: e4:ae:ec:34:38:75:5b:26:d9:98:0c:ab:1e:fa:0e: a5:94:c7:4e:f8:27:8d:7a:0f:65:4b:94:fd:41:d5: 18:ef:65:e6:4b:70:49:a2:8f:3c:89:94:40:15:c5: 00:4d:b8:5f:44:ba:82:e2:ad:09:bc:20:0e:f3:78: 84:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:84:92:44:17:BE:A7:9D:D5:F1:9E:32:79:1F:E0:7C:DF:9D:28:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/09168c7f-7549-3339-b932-1c95b7c42c0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl X509v3 Authority Key Identifier: keyid:F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer sbgp-ipAddrBlock: critical IPv6: 2607:faa8::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:73:d4:d9:19:e6:48:94:ad:9d:e5:5e:07:c1:61:9c:e7:a6: 9c:46:0d:3e:fa:f0:d1:fb:69:39:4b:95:06:1e:83:d0:89:11: df:16:77:ac:82:4e:c9:c7:09:5d:b0:55:0c:8d:7c:4b:92:5c: 0d:6a:aa:1a:a0:25:8d:95:ad:64:11:be:1f:66:c4:45:55:80: e6:b2:63:d0:39:49:6f:d5:c5:a1:dd:4d:36:94:12:d9:c2:bd: b1:8e:77:f4:e1:09:68:90:b9:82:32:c8:30:0b:a1:7d:f8:04: 16:68:82:f3:87:01:64:55:ae:03:6b:d4:09:c7:39:e6:b1:21: 4b:83:bc:10:37:7e:52:a6:8f:dd:ef:37:6e:e9:cc:84:35:6d: 36:08:3c:57:f9:d4:6d:5a:df:9c:43:e9:67:d4:fb:61:28:d9: 91:34:a2:80:64:ed:15:9d:57:3e:29:1d:61:32:99:ef:90:de: f8:20:c6:13:d6:94:19:65:18:23:7b:e4:20:c9:06:26:6a:c0: 32:0a:36:02:5b:90:9c:ba:18:83:c0:6b:e8:8d:fa:d4:0a:c2: 91:62:5c:43:f2:03:53:b5:3e:8d:0f:71:43:37:78:ee:2c:d6: 02:b2:af:52:9c:04:57:55:97:d1:62:84:56:3d:6a:9e:d9:8c: ba:98:cf:1b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsRDBEeP2c0twAX7KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRhN2Q1YzAtZWVjOS00MjVjLWE1NzQtNmViOWRkNGVk ZTYxMB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk NTFlYjdmZjctZmM5OS00ODdhLTkxYzgtYzI0Nzg1ZjMzMTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjPP+U7sTwNTBHdp0Brb+8P3dIdMUrM5YruS bjBNYAis3iOsQG/wHDCiMgKTANadImhn0e1F0ySNZ6xJV3rbYtYJUJGTZdHnqoyK bKZECveJcoWglPou3T99L2pXlCpziT8LCFcBi37YiPmDsmHHXHcO5IvMVH6QtzFC AnvN/GeKJ3w+nkgVQDKWert++8dfunsag8qWYruuujNirkWkz88WOMTuHbW4dfAq z5vWGAaLvsX1RbuaIFO+XRR4SKMPaPDkruw0OHVbJtmYDKse+g6llMdO+CeNeg9l S5T9QdUY72XmS3BJoo88iZRAFcUATbhfRLqC4q0JvCAO83iENwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCGEkkQXvqed1fGeMnkf4HzfnSgBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3 ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5ZGQ0ZWRlNjEvMDkxNjhjN2YtNzU0OS0z MzM5LWI5MzItMWM5NWI3YzQyYzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWRhN2Q1YzAtZWVjOS00MjVjLWE1 NzQtNmViOWRkNGVkZTYxLzVkYTdkNWMwLWVlYzktNDI1Yy1hNTc0LTZlYjlkZDRl ZGU2MS5jcmwwHwYDVR0jBBgwFoAU8QWcju/aWUH6JtOjabaF+gQ8dhswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5 ZGQ0ZWRlNjEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf6qDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB+c9TZGeZIlK2d5V4HwWGc56acRg0++vDR+2k5S5UGHoPQiRHfFnes gk7JxwldsFUMjXxLklwNaqoaoCWNla1kEb4fZsRFVYDmsmPQOUlv1cWh3U02lBLZ wr2xjnf04QlokLmCMsgwC6F9+AQWaILzhwFkVa4Da9QJxznmsSFLg7wQN35Spo/d 7zdu6cyENW02CDxX+dRtWt+cQ+ln1PthKNmRNKKAZO0VnVc+KR1hMpnvkN74IMYT 1pQZZRgje+QgyQYmasAyCjYCW5CcuhiDwGvojfrUCsKRYlxD8gNTtT6ND3FDN3ju LNYCsq9SnARXVZfRYoRWPWqe2Yy6mM8b -----END CERTIFICATE-----Generated at Wed Nov 5 01:11:48 2025 by rpki-client