$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4/36b03146-dd73-3248-be37-0da714d40fd5.roa File: 36b03146-dd73-3248-be37-0da714d40fd5.roa (raw, json) Hash identifier: CatNAQSZCJ11a08Dxe22X+TSqZeZE4g2ysobd2fJhxk= Subject key identifier: 7D:A5:E3:FC:7A:91:21:EC:CD:3A:58:8B:CD:5E:A4:09:AD:D3:BD:D4 Certificate issuer: /CN=0cf53e58-6557-450f-832c-9baa5c99cca4 Certificate serial: 010D0C9F4328584BB2F7BAA6ECA698ADB1C474A0 Authority key identifier: 9D:12:7B:B3:E3:C3:F4:64:BC:E1:32:60:ED:35:87:5D:E7:FA:47:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4/36b03146-dd73-3248-be37-0da714d40fd5.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 16509 IP address blocks: 2607:f250:e000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4/0cf53e58-6557-450f-832c-9baa5c99cca4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4/0cf53e58-6557-450f-832c-9baa5c99cca4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:ba:a6:ec:a6:98:ad:b1:c4:74:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cf53e58-6557-450f-832c-9baa5c99cca4 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=a25ba773-c6a5-4fde-9e07-f3b54b7054d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:49:c3:f9:4d:73:89:f4:ba:f4:50:3c:6a:a5: fc:fc:5b:f6:b6:6e:75:8e:d8:8f:aa:70:c9:bc:43: 64:9b:b1:fc:aa:d6:03:03:89:26:29:7e:b7:ac:bd: a9:c0:61:e4:b0:aa:84:f9:dd:6b:d0:22:33:fa:22: 12:e8:29:44:41:57:71:07:45:16:a0:d2:fa:5d:a3: a4:85:87:2c:31:12:0c:a7:b9:40:aa:5b:60:20:8f: 5a:d2:05:78:cf:80:e7:2b:0d:78:6b:43:d6:50:77: 64:46:ff:0c:b7:8a:6b:93:dd:81:73:b7:b8:8d:be: e5:ae:17:82:f4:31:ae:5a:76:56:77:d4:c3:ff:d6: ca:42:9b:ff:57:f7:0e:b7:f0:2b:df:ea:2a:7d:44: 76:ce:53:b1:6d:7d:af:d4:3d:06:28:da:9c:f9:d5: 1b:18:d8:70:4b:bf:f9:16:f8:fd:8c:7b:fe:6b:8e: 69:ba:f6:60:d3:bc:fe:1c:aa:8d:ac:94:3b:29:54: b0:bd:44:44:a1:22:13:80:c4:8d:03:74:18:c1:87: cb:e9:f8:6f:7f:15:39:84:10:b0:87:fe:74:30:90: 51:84:f4:a6:d9:5f:fe:98:01:44:4c:43:29:3b:fc: 59:ef:6c:c1:8b:58:10:61:49:45:66:d5:ec:91:02: e5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A5:E3:FC:7A:91:21:EC:CD:3A:58:8B:CD:5E:A4:09:AD:D3:BD:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4/36b03146-dd73-3248-be37-0da714d40fd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4/0cf53e58-6557-450f-832c-9baa5c99cca4.crl X509v3 Authority Key Identifier: keyid:9D:12:7B:B3:E3:C3:F4:64:BC:E1:32:60:ED:35:87:5D:E7:FA:47:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4.cer sbgp-ipAddrBlock: critical IPv6: 2607:f250:e000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:58:4c:5a:16:8d:40:ca:b1:43:13:79:ce:bc:32:22:d4:f6: ea:2a:ad:5b:8d:f7:53:93:40:94:45:8f:f3:93:c8:85:db:aa: 85:1c:4f:cb:7c:fa:33:22:4d:85:62:f4:15:17:82:3b:d3:5a: 54:c6:33:0b:22:43:45:a2:9b:5a:06:f0:1d:d1:be:d1:cf:39: c2:e8:ad:75:dc:f5:9e:5d:c6:aa:31:c6:0f:26:75:4f:9a:23: 08:d3:59:0f:86:2e:25:15:6c:f7:b9:ca:af:1c:ed:8a:91:d3: 36:34:d8:58:9f:08:53:bc:19:47:2f:55:c4:fc:b8:b4:08:16: bd:10:06:9a:66:e2:72:75:99:f2:f2:1f:f5:a4:bd:33:0b:11: bb:09:17:a9:9c:0e:49:df:d9:6f:e4:6b:8b:ee:ea:0e:8b:c0: 29:a7:50:ce:ba:0f:fd:28:50:18:82:cc:66:23:1f:11:38:4d: f8:ec:80:48:3a:11:53:9e:ff:a8:d1:8e:99:9f:2d:3d:4a:3a: 27:34:d3:4e:23:92:ad:06:77:8d:45:c8:1e:46:53:fd:75:17: d9:2c:81:0d:67:2f:dd:85:b6:33:67:36:17:0a:d8:e4:8f:91: c2:d0:e6:0b:1e:e6:9d:74:b3:a7:e1:28:a9:d0:e6:08:30:c5: 8a:e6:c8:ef -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuy97qm7KaYrbHEdKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGNmNTNlNTgtNjU1Ny00NTBmLTgzMmMtOWJhYTVjOTlj Y2E0MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk YTI1YmE3NzMtYzZhNS00ZmRlLTllMDctZjNiNTRiNzA1NGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0nD+U1zifS69FA8aqX8/Fv2tm51jtiPqnDJ vENkm7H8qtYDA4kmKX63rL2pwGHksKqE+d1r0CIz+iIS6ClEQVdxB0UWoNL6XaOk hYcsMRIMp7lAqltgII9a0gV4z4DnKw14a0PWUHdkRv8Mt4prk92Bc7e4jb7lrheC 9DGuWnZWd9TD/9bKQpv/V/cOt/Ar3+oqfUR2zlOxbX2v1D0GKNqc+dUbGNhwS7/5 Fvj9jHv+a45puvZg07z+HKqNrJQ7KVSwvUREoSITgMSNA3QYwYfL6fhvfxU5hBCw h/50MJBRhPSm2V/+mAFETEMpO/xZ72zBi1gQYUlFZtXskQLl2QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH2l4/x6kSHszTpYi81epAmt073UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wY2Y1 M2U1OC02NTU3LTQ1MGYtODMyYy05YmFhNWM5OWNjYTQvMzZiMDMxNDYtZGQ3My0z MjQ4LWJlMzctMGRhNzE0ZDQwZmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGNmNTNlNTgtNjU1Ny00NTBmLTgz MmMtOWJhYTVjOTljY2E0LzBjZjUzZTU4LTY1NTctNDUwZi04MzJjLTliYWE1Yzk5 Y2NhNC5jcmwwHwYDVR0jBBgwFoAUnRJ7s+PD9GS84TJg7TWHXef6R1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wY2Y1M2U1OC02NTU3LTQ1MGYtODMyYy05YmFh NWM5OWNjYTQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgfyUOAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI5YTFoWjUDKsUMTec68MiLU9uoqrVuN91OTQJRFj/OTyIXbqoUc T8t8+jMiTYVi9BUXgjvTWlTGMwsiQ0Wim1oG8B3RvtHPOcLorXXc9Z5dxqoxxg8m dU+aIwjTWQ+GLiUVbPe5yq8c7YqR0zY02FifCFO8GUcvVcT8uLQIFr0QBppm4nJ1 mfLyH/WkvTMLEbsJF6mcDknf2W/ka4vu6g6LwCmnUM66D/0oUBiCzGYjHxE4Tfjs gEg6EVOe/6jRjpmfLT1KOic0004jkq0Gd41FyB5GU/11F9ksgQ1nL92FtjNnNhcK 2OSPkcLQ5gse5p10s6fhKKnQ5ggwxYrmyO8= -----END CERTIFICATE-----Generated at Wed Nov 5 05:46:40 2025 by rpki-client