$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/908a8323-dcd2-3e13-af20-3f4ed232c666.roa File: 908a8323-dcd2-3e13-af20-3f4ed232c666.roa (raw, json) Hash identifier: /F9U8UKpzqZEdCHSv0d+cbVUWO5GsF+WoZLApV+yAns= Subject key identifier: 25:F4:F3:EE:72:CB:3B:D6:21:86:82:C0:56:8F:82:4E:8A:FE:5D:9B Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584B5FC179705E98069497AF6800 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/908a8323-dcd2-3e13-af20-3f4ed232c666.roa Signing time: Wed 01 Oct 2025 05:39:19 +0000 ROA not before: Wed 01 Oct 2025 05:39:19 +0000 ROA not after: Tue 30 Dec 2025 06:39:19 +0000 asID: 54994 IP address blocks: 2607:3f40:ff21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:c1:79:70:5e:98:06:94:97:af:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Oct 1 05:39:19 2025 GMT Not After : Dec 30 06:39:19 2025 GMT Subject: CN=12d51dea-06ea-4168-9058-79debd08edf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:28:f3:05:a6:68:06:73:52:fe:3a:0c:05:3f: ae:5a:23:97:a9:1a:2c:15:37:df:74:db:58:08:d9: 08:20:46:c4:e3:9e:b7:1e:be:98:d9:2a:67:6e:87: 4d:a0:e3:ff:33:8c:ac:55:d0:f7:7d:1a:47:e7:48: 12:7a:c5:45:59:50:86:dd:15:b4:e9:85:cd:5b:1d: 7c:98:1b:4f:3a:9e:81:6f:78:dd:6e:80:e1:e1:c8: ea:c5:1a:44:c7:f6:45:83:e2:80:9c:44:f2:4f:a6: db:1e:80:93:d4:5e:24:bd:c9:47:77:23:27:82:db: 8c:e3:57:c9:77:f1:f1:73:d2:22:ed:64:3b:b5:b4: 53:4b:3a:1d:ae:8f:5f:0a:4a:c9:2f:1b:42:6f:c9: d6:f6:a9:9b:d5:42:d5:af:78:f7:99:d0:c6:3d:32: 29:ae:a0:8f:c2:45:ed:3b:b6:b8:80:8d:09:90:6e: cb:ef:25:c9:79:e9:2f:cb:81:49:a0:d2:8b:5f:71: ce:64:df:e4:8b:4a:d5:a5:59:47:fe:71:48:75:e3: c4:d9:c5:c0:ca:39:54:0d:a2:9f:22:0f:4a:43:29: 55:e6:3a:9c:bb:c3:f9:0d:0f:ab:27:d7:42:24:9b: 34:f6:45:71:a7:1e:5a:58:11:95:8b:b9:46:44:0c: da:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F4:F3:EE:72:CB:3B:D6:21:86:82:C0:56:8F:82:4E:8A:FE:5D:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/908a8323-dcd2-3e13-af20-3f4ed232c666.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv6: 2607:3f40:ff21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:dd:eb:35:51:23:75:98:fd:52:6c:1e:e1:8d:77:67:02:69: 86:ac:f9:14:24:38:0b:ac:82:e1:11:80:0e:bd:1e:5a:d8:65: eb:86:8a:2f:6c:eb:8d:03:69:af:0f:2c:52:64:d0:ee:57:fc: b7:54:28:c6:a5:df:5e:d2:41:f6:96:8b:50:db:c4:3b:b4:7c: 97:5a:e0:4a:ae:8f:ec:1e:6a:07:2c:c7:92:80:c2:76:54:d0: 89:e4:50:db:8a:c1:b9:33:bd:50:eb:3c:89:7c:d1:f9:6d:bf: fe:b9:ed:72:77:01:10:d1:5a:05:52:43:ae:64:15:73:c1:1e: f0:1e:03:2d:d0:7a:7c:dd:f4:b8:12:1f:97:56:8b:2c:d4:98: c4:b5:58:0d:1e:d8:82:d1:cd:bc:67:52:dd:5d:cf:26:f5:a5: e4:2d:ab:98:16:b1:b2:ca:2f:81:40:be:35:95:6d:49:39:0d: 43:5f:d2:e8:2a:e5:e0:6e:91:ae:80:fa:57:4b:18:a8:df:3b: a7:a4:d9:af:80:35:10:b1:84:ec:3e:39:74:b9:94:1f:65:73: bc:10:55:0a:a8:5b:ed:3b:97:27:94:12:c1:72:19:59:a4:b9: c8:96:42:e0:8b:16:cf:79:b3:34:b3:f7:b4:d4:95:16:c7:5e: fe:41:a4:b1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtfwXlwXpgGlJevaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MTAwMTA1MzkxOVoXDTI1MTIzMDA2MzkxOVowLzEtMCsGA1UEAxMk MTJkNTFkZWEtMDZlYS00MTY4LTkwNTgtNzlkZWJkMDhlZGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCjzBaZoBnNS/joMBT+uWiOXqRosFTffdNtY CNkIIEbE4563Hr6Y2SpnbodNoOP/M4ysVdD3fRpH50gSesVFWVCG3RW06YXNWx18 mBtPOp6Bb3jdboDh4cjqxRpEx/ZFg+KAnETyT6bbHoCT1F4kvclHdyMngtuM41fJ d/Hxc9Ii7WQ7tbRTSzodro9fCkrJLxtCb8nW9qmb1ULVr3j3mdDGPTIprqCPwkXt O7a4gI0JkG7L7yXJeekvy4FJoNKLX3HOZN/ki0rVpVlH/nFIdePE2cXAyjlUDaKf Ig9KQylV5jqcu8P5DQ+rJ9dCJJs09kVxpx5aWBGVi7lGRAzaDwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCX08+5yyzvWIYaCwFaPgk6K/l2bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvOTA4YTgzMjMtZGNkMi0z ZTEzLWFmMjAtM2Y0ZWQyMzJjNjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgc/QP8h MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHXd6zVRI3WY/VJsHuGNd2cCaYas+RQkOAusguERgA69HlrYZeuG ii9s640Daa8PLFJk0O5X/LdUKMal317SQfaWi1DbxDu0fJda4Equj+weagcsx5KA wnZU0InkUNuKwbkzvVDrPIl80fltv/657XJ3ARDRWgVSQ65kFXPBHvAeAy3Qenzd 9LgSH5dWiyzUmMS1WA0e2ILRzbxnUt1dzyb1peQtq5gWsbLKL4FAvjWVbUk5DUNf 0ugq5eBuka6A+ldLGKjfO6ek2a+ANRCxhOw+OXS5lB9lc7wQVQqoW+07lyeUEsFy GVmkuciWQuCLFs95szSz97TUlRbHXv5BpLE= -----END CERTIFICATE-----Generated at Tue Nov 4 23:04:31 2025 by rpki-client