$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/87bdc898-7b8c-3958-b3df-9f8cfce1ab1c.roa File: 87bdc898-7b8c-3958-b3df-9f8cfce1ab1c.roa (raw, json) Hash identifier: lhC2j8RVFeXB9mbHg++HYFxw2wC6dzorZ6e8SI/jSL8= Subject key identifier: 89:E2:AA:50:28:DA:D7:E9:C0:43:B2:0C:B4:48:E3:1C:56:86:9A:AF Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584B970CF3A6CCE92AF31ABF0EB8 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/87bdc898-7b8c-3958-b3df-9f8cfce1ab1c.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 7203 IP address blocks: 2607:f5b5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:f3:a6:cc:e9:2a:f3:1a:bf:0e:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=333ea22a-8d39-4558-a21f-7266c7246d19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:af:09:75:7f:7d:3e:0d:67:31:f9:cc:07:1c: 1d:dd:ec:a1:be:9a:e6:22:af:41:d0:fd:fe:0c:ca: 6c:7c:3e:65:6c:e7:c5:69:32:c0:3b:b8:56:51:07: ed:a7:e1:6e:d7:db:d9:50:9b:5f:a1:e4:81:2f:6f: 2a:ca:8d:86:b7:d1:2d:33:9b:99:d8:f1:04:25:62: 15:ca:34:e6:bb:62:6c:b5:a8:bb:8f:39:40:4a:2f: 51:38:d9:5e:8c:cc:47:c3:8a:51:47:29:84:d9:2a: 37:16:7d:77:be:94:52:7a:13:22:8d:f3:62:83:58: b1:12:54:f3:40:af:6b:85:e0:de:3c:05:77:a4:6b: 87:48:c0:45:cb:90:eb:5b:62:9f:90:04:41:db:58: 38:2b:6d:59:92:27:e4:7d:8b:4e:c9:2a:03:16:48: 11:48:c3:a5:f6:a5:72:77:4d:b2:23:c3:ef:63:42: 51:ba:e0:bb:19:22:31:af:58:67:30:06:50:63:bb: cb:64:71:c2:a8:2a:9c:5a:5e:76:8c:bd:85:d4:26: 4f:fb:1d:14:37:2d:c0:73:9c:60:c0:e4:e4:c2:56: 46:b5:23:6f:98:02:06:42:ed:ea:06:8d:3a:a9:78: 91:ca:ff:14:35:63:45:fe:0f:65:0e:ee:78:a6:29: 71:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:E2:AA:50:28:DA:D7:E9:C0:43:B2:0C:B4:48:E3:1C:56:86:9A:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/87bdc898-7b8c-3958-b3df-9f8cfce1ab1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv6: 2607:f5b5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:76:e3:ae:08:fc:d1:84:25:2f:aa:e8:ba:ec:e9:07:a7:f5: b1:ee:1c:e4:83:f0:8e:78:5f:03:1c:3d:46:cb:6b:fc:55:47: 82:0c:8c:12:e3:70:b1:ef:e7:5e:70:11:d5:a2:60:87:c8:11: 0d:28:91:f1:08:ee:77:85:00:a8:20:eb:42:d7:70:b8:50:69: 70:27:90:e3:aa:77:0f:2e:fe:42:b8:1e:94:d3:9f:b9:38:66: a2:87:52:b6:92:dd:6b:05:0a:ae:e5:68:fa:a0:73:76:63:3e: 60:02:dd:06:2e:81:83:46:75:98:53:2f:23:4a:44:b6:cf:3f: e6:86:f8:6e:d3:a3:d1:17:a0:58:f5:15:0c:c0:8c:ae:d6:95: 5c:8d:45:1d:8e:08:bd:45:80:9a:1a:97:fa:ff:ec:f9:48:3b: a0:3c:cb:4a:c9:ed:5d:55:86:7a:25:26:3a:87:1f:41:2c:e6: bf:8c:77:b5:f3:57:75:cd:b4:ea:4d:44:88:ca:fb:ef:91:93: e1:eb:6e:2b:b8:22:66:21:cf:af:93:1f:99:be:81:57:a0:b0: 81:65:e2:c1:be:2f:11:8e:c2:45:e4:84:d9:52:42:e8:79:07: f2:f5:49:b5:e1:37:06:d4:b6:00:ea:56:71:35:d9:3b:2f:8b: 82:64:a7:fa -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuXDPOmzOkq8xq/DrgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk MzMzZWEyMmEtOGQzOS00NTU4LWEyMWYtNzI2NmM3MjQ2ZDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg68JdX99Pg1nMfnMBxwd3eyhvprmIq9B0P3+ DMpsfD5lbOfFaTLAO7hWUQftp+Fu19vZUJtfoeSBL28qyo2Gt9EtM5uZ2PEEJWIV yjTmu2Jstai7jzlASi9RONlejMxHw4pRRymE2So3Fn13vpRSehMijfNig1ixElTz QK9rheDePAV3pGuHSMBFy5DrW2KfkARB21g4K21ZkifkfYtOySoDFkgRSMOl9qVy d02yI8PvY0JRuuC7GSIxr1hnMAZQY7vLZHHCqCqcWl52jL2F1CZP+x0UNy3Ac5xg wOTkwlZGtSNvmAIGQu3qBo06qXiRyv8UNWNF/g9lDu54pilxywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIniqlAo2tfpwEOyDLRI4xxWhpqvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvODdiZGM4OTgtN2I4Yy0z OTU4LWIzZGYtOWY4Y2ZjZTFhYjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf1tQAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMB2464I/NGEJS+q6Lrs6Qen9bHuHOSD8I54XwMcPUbLa/xVR4IM jBLjcLHv515wEdWiYIfIEQ0okfEI7neFAKgg60LXcLhQaXAnkOOqdw8u/kK4HpTT n7k4ZqKHUraS3WsFCq7laPqgc3ZjPmAC3QYugYNGdZhTLyNKRLbPP+aG+G7To9EX oFj1FQzAjK7WlVyNRR2OCL1FgJoal/r/7PlIO6A8y0rJ7V1VhnolJjqHH0Es5r+M d7XzV3XNtOpNRIjK+++Rk+Hrbiu4ImYhz6+TH5m+gVegsIFl4sG+LxGOwkXkhNlS Quh5B/L1SbXhNwbUtgDqVnE12Tsvi4Jkp/o= -----END CERTIFICATE-----Generated at Tue Nov 4 23:07:42 2025 by rpki-client