$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/daf96070-358c-3dc7-bf23-2e15b668b39e.roa File: daf96070-358c-3dc7-bf23-2e15b668b39e.roa (raw, json) Hash identifier: kiAznOlLwWzn/NYn5Z1zWrt9PTt3d/0qG0zITKgdatA= Subject key identifier: DA:2A:0F:B5:C6:2E:54:39:7C:3C:4B:33:F5:1A:88:CC:48:3C:60:79 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584B970CF3DD922240DB0D721C80 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/daf96070-358c-3dc7-bf23-2e15b668b39e.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 59253 IP address blocks: 2607:f5b5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:f3:dd:92:22:40:db:0d:72:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=fd991787-7e8e-423d-9958-54bded9549d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ee:8f:43:db:58:05:25:cf:d8:1a:9e:32:dd: c8:b3:7d:c5:eb:85:a1:c7:14:37:53:a9:91:bb:60: 0f:3f:bd:f3:57:81:c9:6d:54:6b:9b:ea:78:01:a0: 3f:bf:05:5c:d9:91:7f:25:3a:17:50:d2:52:3b:6a: c6:b9:7b:2e:20:98:57:32:c5:46:65:4e:af:7c:19: 8f:74:66:e4:00:f2:96:40:e4:a1:5a:4b:d6:91:d1: b4:26:db:b5:4a:6a:d2:78:f4:ec:d0:da:cf:02:07: bb:8f:83:b1:2f:4a:2b:26:32:3b:bb:30:1d:cd:12: bd:94:e0:5c:fa:04:19:a3:36:27:ea:41:2d:06:98: ca:53:c7:18:34:d3:82:7a:2f:51:a2:98:97:80:10: d6:b9:e3:28:25:af:6c:51:03:da:f3:ce:b8:82:af: 92:46:fb:66:e9:3f:ae:12:4c:ab:ad:51:7d:2a:52: 3a:dc:01:8d:ba:b9:eb:ae:4f:2e:35:5f:e6:99:6c: a0:b6:77:a1:52:4e:aa:47:c8:1c:61:0a:8d:70:a0: ff:7b:4e:9c:22:a2:64:20:5b:a8:b2:6f:1b:68:d8: ba:d1:ab:ef:a7:3e:bf:99:31:2d:4f:2a:f6:67:82: 5a:0b:f1:7d:f0:29:03:e3:ba:44:1b:f9:6d:61:32: 84:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:2A:0F:B5:C6:2E:54:39:7C:3C:4B:33:F5:1A:88:CC:48:3C:60:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/daf96070-358c-3dc7-bf23-2e15b668b39e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv6: 2607:f5b5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:84:1c:57:31:26:98:a2:14:d1:6f:dd:17:95:82:f4:05:ca: 03:ee:34:ba:c8:5b:16:11:09:85:2d:c3:4b:c8:ef:b9:2a:f5: 65:d6:14:ed:80:29:02:54:17:d6:fd:7c:1d:ca:f3:08:bf:23: 07:e0:45:ae:71:3f:a3:51:79:1d:d4:67:86:79:94:38:3b:dd: eb:d0:2e:e4:0c:d6:03:25:b6:00:fc:f6:d1:60:1c:f3:96:9f: 77:91:d6:1f:ec:53:05:16:f4:95:51:03:9d:8b:45:fd:71:ea: a0:f8:59:32:35:aa:09:78:71:97:aa:56:b2:37:2a:ee:17:9b: d8:d0:51:39:60:3b:fd:f1:4e:f9:db:b8:8b:00:32:2e:47:26: 39:c4:ab:10:ac:92:f7:62:1b:c9:0d:56:13:dc:f8:68:27:8d: 95:b6:a4:dd:01:b1:36:77:83:03:93:2a:d2:ca:88:8b:70:73: 96:12:9f:77:30:00:a7:1f:22:0a:ca:30:98:b0:8a:2d:91:95: 69:dc:81:91:16:33:99:da:96:f4:68:64:2f:b2:87:06:98:d5: 1e:77:4f:79:db:f4:d6:79:c3:74:48:30:66:05:6a:76:e2:72: 93:67:f4:bb:6b:92:3d:89:50:1b:b3:ad:c5:c1:92:8e:e5:6c: 18:d6:4b:37 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuXDPPdkiJA2w1yHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk ZmQ5OTE3ODctN2U4ZS00MjNkLTk5NTgtNTRiZGVkOTU0OWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+6PQ9tYBSXP2BqeMt3Is33F64WhxxQ3U6mR u2APP73zV4HJbVRrm+p4AaA/vwVc2ZF/JToXUNJSO2rGuXsuIJhXMsVGZU6vfBmP dGbkAPKWQOShWkvWkdG0Jtu1SmrSePTs0NrPAge7j4OxL0orJjI7uzAdzRK9lOBc +gQZozYn6kEtBpjKU8cYNNOCei9RopiXgBDWueMoJa9sUQPa8864gq+SRvtm6T+u EkyrrVF9KlI63AGNurnrrk8uNV/mmWygtnehUk6qR8gcYQqNcKD/e06cIqJkIFuo sm8baNi60avvpz6/mTEtTyr2Z4JaC/F98CkD47pEG/ltYTKEaQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNoqD7XGLlQ5fDxLM/UaiMxIPGB5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvZGFmOTYwNzAtMzU4Yy0z ZGM3LWJmMjMtMmUxNWI2NjhiMzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf1tQAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACqEHFcxJpiiFNFv3ReVgvQFygPuNLrIWxYRCYUtw0vI77kq9WXW FO2AKQJUF9b9fB3K8wi/IwfgRa5xP6NReR3UZ4Z5lDg73evQLuQM1gMltgD89tFg HPOWn3eR1h/sUwUW9JVRA52LRf1x6qD4WTI1qgl4cZeqVrI3Ku4Xm9jQUTlgO/3x TvnbuIsAMi5HJjnEqxCskvdiG8kNVhPc+GgnjZW2pN0BsTZ3gwOTKtLKiItwc5YS n3cwAKcfIgrKMJiwii2RlWncgZEWM5nalvRoZC+yhwaY1R53T3nb9NZ5w3RIMGYF anbicpNn9Ltrkj2JUBuzrcXBko7lbBjWSzc= -----END CERTIFICATE-----Generated at Wed Nov 5 02:54:16 2025 by rpki-client