$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/064bb556-40a8-3b7a-9c55-3217f244b17d.roa File: 064bb556-40a8-3b7a-9c55-3217f244b17d.roa (raw, json) Hash identifier: aav5N2oXpaIpS1f/1vjvVvDlZ3wkPiAHVQc27sc/L8U= Subject key identifier: D3:5E:CC:C0:B6:56:4D:D5:44:A7:66:E7:2E:83:FA:70:EE:FE:3A:DD Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584B970CF2B3FAFF2B0459BE4A80 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/064bb556-40a8-3b7a-9c55-3217f244b17d.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 205544 IP address blocks: 2607:f5b5:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:f2:b3:fa:ff:2b:04:59:be:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=a802d2b1-5d28-403e-a0e3-924e80893026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4b:f5:80:72:97:b9:aa:32:02:16:16:72:28: 3b:5d:0c:2f:e6:75:bf:fe:e5:1b:f4:68:e0:e9:65: c8:23:ac:0c:65:35:fb:70:01:d0:4c:7f:59:55:60: ff:51:cb:91:ee:e3:f2:87:5a:9e:97:bb:44:a9:85: a9:88:66:e0:2a:3b:ed:e7:e0:b8:82:a0:16:19:88: cc:a9:cf:46:13:ee:bd:73:1c:fe:8d:68:f5:0e:56: 06:53:b2:c8:c3:c5:fe:f0:a9:3c:82:b5:02:d2:6a: 5a:48:68:a3:5f:80:54:ea:1e:c7:cf:65:e9:ac:e6: fe:98:1d:39:a8:0d:28:20:3d:bb:b7:7a:79:5e:fd: 3e:cb:65:36:cb:bc:d2:f2:e6:4d:f9:c0:3d:7e:4f: 65:36:2c:96:0b:9f:6a:99:7b:19:25:7f:c1:a7:cb: 70:c6:9e:94:de:f6:af:b4:b7:fc:30:34:22:01:e1: 6b:16:c7:86:b1:36:86:4b:0b:1d:37:24:58:24:b0: 56:f8:5e:ad:f2:51:6c:9f:34:41:4c:d8:03:ba:9e: 50:38:e2:ec:f6:b0:d0:54:c0:77:a8:75:43:81:2f: d2:ff:91:5b:87:f2:2f:26:a0:c4:23:5b:69:0c:43: ec:ad:b2:17:53:4d:e7:b6:15:d2:f6:e3:69:dc:a8: 6e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:5E:CC:C0:B6:56:4D:D5:44:A7:66:E7:2E:83:FA:70:EE:FE:3A:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/064bb556-40a8-3b7a-9c55-3217f244b17d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv6: 2607:f5b5:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:54:96:cc:da:fe:01:aa:a0:77:02:7c:90:7b:00:14:83:d3: 8d:f9:de:ea:6f:6f:6e:f7:72:84:c5:b3:0f:34:09:8f:e3:db: e2:4e:ba:9d:c4:c9:32:3f:cb:7e:84:92:80:8b:00:a2:c1:b6: 81:fb:96:7a:fa:97:e0:c0:5f:37:f8:c3:6e:01:bd:67:87:fc: 54:5c:69:40:8f:45:50:41:89:90:02:58:9b:1d:1e:ea:ab:0c: 5a:8e:d4:b1:fe:91:95:6a:70:bc:cc:a6:c1:ee:2a:d1:50:22: 7d:d6:b1:a9:d4:73:b3:f8:26:21:c7:fe:96:b5:24:c1:36:a5: fe:e0:92:ae:54:46:bb:d9:49:e1:77:c0:e4:69:82:04:a3:69: d8:c6:fe:bf:d9:7d:c6:08:ec:1a:94:0a:98:c6:62:f8:4a:2e: db:76:d9:f1:71:47:87:7e:f3:af:d0:c6:18:4e:c1:6c:2b:ac: 69:f9:7f:7c:21:2e:98:b0:70:ed:f4:53:a5:d9:d0:6b:72:06: 70:5e:4f:b7:f2:61:00:4e:e8:b3:76:6f:e2:d8:5e:ec:84:32: 3b:47:a3:61:34:c4:10:2a:81:d7:de:75:a4:bb:b5:84:09:f8: 4e:4e:a4:d9:8e:fb:74:00:2a:20:e8:13:7d:14:ec:22:ca:73: 1f:4c:03:8b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuXDPKz+v8rBFm+SoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk YTgwMmQyYjEtNWQyOC00MDNlLWEwZTMtOTI0ZTgwODkzMDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUv1gHKXuaoyAhYWcig7XQwv5nW//uUb9Gjg 6WXII6wMZTX7cAHQTH9ZVWD/UcuR7uPyh1qel7tEqYWpiGbgKjvt5+C4gqAWGYjM qc9GE+69cxz+jWj1DlYGU7LIw8X+8Kk8grUC0mpaSGijX4BU6h7Hz2XprOb+mB05 qA0oID27t3p5Xv0+y2U2y7zS8uZN+cA9fk9lNiyWC59qmXsZJX/Bp8twxp6U3vav tLf8MDQiAeFrFseGsTaGSwsdNyRYJLBW+F6t8lFsnzRBTNgDup5QOOLs9rDQVMB3 qHVDgS/S/5Fbh/IvJqDEI1tpDEPsrbIXU03nthXS9uNp3Khu6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNNezMC2Vk3VRKdm5y6D+nDu/jrdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMDY0YmI1NTYtNDBhOC0z YjdhLTljNTUtMzIxN2YyNDRiMTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf1tQAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIFUlsza/gGqoHcCfJB7ABSD04353upvb273coTFsw80CY/j2+JO up3EyTI/y36EkoCLAKLBtoH7lnr6l+DAXzf4w24BvWeH/FRcaUCPRVBBiZACWJsd HuqrDFqO1LH+kZVqcLzMpsHuKtFQIn3WsanUc7P4JiHH/pa1JME2pf7gkq5URrvZ SeF3wORpggSjadjG/r/ZfcYI7BqUCpjGYvhKLtt22fFxR4d+86/QxhhOwWwrrGn5 f3whLpiwcO30U6XZ0GtyBnBeT7fyYQBO6LN2b+LYXuyEMjtHo2E0xBAqgdfedaS7 tYQJ+E5OpNmO+3QAKiDoE30U7CLKcx9MA4s= -----END CERTIFICATE-----Generated at Wed Nov 5 01:19:08 2025 by rpki-client