$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d12e5708-1aaf-3a48-be6d-c36976cf0409.roa File: d12e5708-1aaf-3a48-be6d-c36976cf0409.roa (raw, json) Hash identifier: pyL2zLIJ4LTz9tbjyAWx1exmsySnYqB2g49gSnmbxi4= Subject key identifier: 22:2B:9C:43:CF:ED:1A:64:B5:71:67:F8:35:0A:77:3C:5A:25:E7:B1 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584B970CF2C7770D50B9A425B0A0 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d12e5708-1aaf-3a48-be6d-c36976cf0409.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 396362 IP address blocks: 2607:f5b5:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:f2:c7:77:0d:50:b9:a4:25:b0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=b2aa31cf-3578-410f-928a-90053f60061f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:36:b4:24:c2:1a:06:c8:8d:30:a3:20:d6:09: e3:a3:c5:13:9c:55:8c:c8:c1:fd:cc:c1:17:b2:06: 91:a5:a7:0f:09:26:a6:b0:8c:66:f2:eb:c8:5c:64: 50:0e:a4:b3:8a:c1:ca:11:89:a9:ca:dd:ab:b1:87: 73:52:eb:c9:0c:93:a1:eb:d2:fb:f9:cd:5a:2a:3d: 78:3a:91:fb:8e:54:25:aa:a5:0c:cc:32:d9:74:44: 0f:b5:ad:a0:69:f1:1e:28:fa:3c:82:f2:ec:a7:69: f3:02:89:aa:4c:05:d7:d3:ad:82:d1:2a:cc:d3:51: f8:02:65:4f:e1:c8:1b:64:4f:38:51:05:a9:78:4e: 99:8f:1c:08:a0:28:86:69:95:12:c2:26:b9:a1:75: 00:0a:75:24:6a:fa:7a:27:ff:d3:72:64:dc:bc:15: ef:62:e6:f5:fd:ad:f2:66:d3:6a:23:9f:a3:fb:9d: 90:8f:8c:9f:39:dd:a4:2b:2e:03:95:0c:22:df:0f: a4:25:81:57:48:81:ce:6d:21:6a:1f:3f:ca:f2:06: cf:e9:ba:aa:8c:a9:66:96:cc:b8:22:6a:65:7e:58: 6f:42:a4:2f:da:12:ed:db:a7:0c:9b:20:08:a1:a9: 8a:58:9d:ce:56:e2:fc:f9:7a:41:4d:1c:52:34:60: 69:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:2B:9C:43:CF:ED:1A:64:B5:71:67:F8:35:0A:77:3C:5A:25:E7:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d12e5708-1aaf-3a48-be6d-c36976cf0409.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv6: 2607:f5b5:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:df:4b:28:0e:c0:7f:17:39:15:ad:d7:7e:3d:ae:d2:72:de: fd:d6:36:a1:9d:7f:44:95:27:c4:be:be:b1:c7:0d:21:a4:79: b9:ab:cb:38:f5:e4:39:e5:8b:ce:2a:8e:e7:58:c1:eb:ac:0f: 31:de:16:65:3f:07:f3:19:0c:b2:51:99:44:af:c4:2a:e0:f5: a6:9f:49:4e:b9:26:38:2b:43:a4:e4:ba:df:8d:c2:d7:38:1a: e6:d1:78:86:42:a2:0a:17:18:ae:fb:72:0b:ce:73:18:e8:3a: 2d:f3:2e:14:e2:4d:39:5b:48:5a:4c:31:07:65:18:9f:de:4a: 0b:b0:df:cb:24:2b:d7:a7:eb:1f:e6:b1:fe:7c:fe:c3:df:54: 9f:54:89:33:1a:fa:ca:ca:6b:f8:98:d2:31:78:92:fb:eb:53: 4c:11:38:22:7c:d3:11:d9:0a:fa:43:97:55:92:d4:6e:7f:9e: 07:e4:ba:6c:98:ec:27:22:1c:c3:0a:af:28:0e:f8:a0:9d:2d: 06:ec:a9:27:63:3c:e4:0e:85:09:ac:07:78:cc:97:83:a4:85: 80:bd:d8:80:75:b0:4c:ff:96:6a:45:6c:a8:39:ff:ea:1c:23: f3:ee:e1:0a:b8:c3:01:03:2c:87:0d:e5:d5:ab:a8:03:1c:91: 6e:28:b2:a0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuXDPLHdw1QuaQlsKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk YjJhYTMxY2YtMzU3OC00MTBmLTkyOGEtOTAwNTNmNjAwNjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDa0JMIaBsiNMKMg1gnjo8UTnFWMyMH9zMEX sgaRpacPCSamsIxm8uvIXGRQDqSzisHKEYmpyt2rsYdzUuvJDJOh69L7+c1aKj14 OpH7jlQlqqUMzDLZdEQPta2gafEeKPo8gvLsp2nzAomqTAXX062C0SrM01H4AmVP 4cgbZE84UQWpeE6ZjxwIoCiGaZUSwia5oXUACnUkavp6J//TcmTcvBXvYub1/a3y ZtNqI5+j+52Qj4yfOd2kKy4DlQwi3w+kJYFXSIHObSFqHz/K8gbP6bqqjKlmlsy4 ImplflhvQqQv2hLt26cMmyAIoamKWJ3OVuL8+XpBTRxSNGBpawIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCIrnEPP7RpktXFn+DUKdzxaJeexMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvZDEyZTU3MDgtMWFhZi0z YTQ4LWJlNmQtYzM2OTc2Y2YwNDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf1tQAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJDfSygOwH8XORWt1349rtJy3v3WNqGdf0SVJ8S+vrHHDSGkebmr yzj15Dnli84qjudYweusDzHeFmU/B/MZDLJRmUSvxCrg9aafSU65JjgrQ6Tkut+N wtc4GubReIZCogoXGK77cgvOcxjoOi3zLhTiTTlbSFpMMQdlGJ/eSguw38skK9en 6x/msf58/sPfVJ9UiTMa+srKa/iY0jF4kvvrU0wROCJ80xHZCvpDl1WS1G5/ngfk umyY7CciHMMKrygO+KCdLQbsqSdjPOQOhQmsB3jMl4OkhYC92IB1sEz/lmpFbKg5 /+ocI/Pu4Qq4wwEDLIcN5dWrqAMckW4osqA= -----END CERTIFICATE-----Generated at Wed Nov 5 15:11:14 2025 by rpki-client