$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/a4e2a382-bfea-30b8-ab33-629003a09699.roa File: a4e2a382-bfea-30b8-ab33-629003a09699.roa (raw, json) Hash identifier: Z6cIB5m7Il9Ra825X2gWOMtwqiHp2aVDA9ch5A3UG4A= Subject key identifier: FF:47:5A:F8:D8:12:59:E2:24:62:A9:52:57:77:C6:0F:AB:21:3E:DF Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584B7DECC3F52E85AD55F0579180 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/a4e2a382-bfea-30b8-ab33-629003a09699.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 54994 IP address blocks: 2607:3f40:ff25::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:c3:f5:2e:85:ad:55:f0:57:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=e6b2a96c-7042-4b03-aaa5-4f36347a1669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:9d:42:1d:54:96:f4:96:98:ab:80:d5:d0:56: 01:79:b9:dd:7d:a1:3e:43:b6:48:e9:2c:48:92:93: cf:b6:f4:91:2e:fb:1c:78:1f:6a:1b:dd:cd:ff:59: d0:c2:9d:3d:42:c2:75:26:8a:6e:eb:38:7c:5f:d9: e5:20:5e:f8:29:7c:75:02:e0:e7:39:ff:e2:45:b0: b5:83:72:8f:54:c1:88:e3:bb:5d:c6:8f:cc:d5:2d: 27:00:a8:79:47:56:2b:72:5b:f3:04:7c:98:42:65: 97:26:fe:5d:87:48:86:7a:5e:13:c1:ff:6e:ad:b9: a8:e7:21:71:13:5f:4e:a3:3e:cc:53:55:61:11:4c: 3f:e6:ec:b7:34:e1:7b:01:0a:6c:ce:4f:43:33:0d: df:46:d7:57:22:7b:17:42:14:57:2a:4a:1b:af:b8: 01:64:fd:de:8d:c9:07:cb:4a:b2:4a:7a:ba:19:df: 27:32:36:b5:7b:94:c5:59:3a:07:bc:07:13:95:68: fc:c1:15:4a:17:5c:c4:df:24:fa:25:29:dc:0d:5b: 28:17:66:84:e3:a1:47:73:b4:5c:b1:b8:7c:d3:46: 69:90:ce:e7:17:ff:34:bf:a2:86:d6:90:6a:c7:60: 0f:c8:b0:7f:39:bc:1d:e1:89:30:d3:84:4e:71:16: a9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:47:5A:F8:D8:12:59:E2:24:62:A9:52:57:77:C6:0F:AB:21:3E:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/a4e2a382-bfea-30b8-ab33-629003a09699.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv6: 2607:3f40:ff25::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:76:58:cf:3b:16:8a:0d:f4:a8:d5:07:b9:dc:ca:f3:d8:17: 0e:e2:77:79:ce:c2:90:99:18:3a:d1:35:69:7f:87:2a:00:cc: 13:15:76:0c:c2:46:f2:a9:25:8d:8e:50:a2:4e:fc:f9:18:32: 7c:be:1a:44:a7:50:16:25:e9:19:0f:00:7f:17:6c:30:85:b7: a0:2c:c4:b2:aa:d8:db:c3:df:bf:03:7a:39:d1:55:27:ae:97: 31:db:39:48:49:71:ed:51:f3:cb:5b:23:ad:b6:1a:27:c3:72: 94:e7:ce:92:10:22:6c:60:3d:c1:d2:1f:b8:7e:43:0e:62:8a: 29:00:65:a9:81:e3:94:cd:ef:93:78:85:73:d8:74:c4:73:6d: fd:e5:40:03:1b:45:82:1f:b7:e1:c6:be:08:d2:ab:ca:78:d5: 26:73:4e:fa:c4:9f:38:f7:db:4a:38:9d:e9:16:1a:b3:12:87: 52:b9:ad:03:33:97:91:75:d7:ad:ac:6f:97:2c:9d:ea:d9:10: 07:a6:32:d5:73:c0:48:78:9a:28:f2:01:10:73:c1:a7:94:72: 87:7f:20:58:6c:5f:19:d1:18:44:00:52:51:27:67:82:ad:89: 59:23:76:8b:f5:0f:52:e1:58:0f:e7:09:5d:3d:73:ed:17:2b: 29:0c:47:07 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt97MP1LoWtVfBXkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk ZTZiMmE5NmMtNzA0Mi00YjAzLWFhYTUtNGYzNjM0N2ExNjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh51CHVSW9JaYq4DV0FYBebndfaE+Q7ZI6SxI kpPPtvSRLvsceB9qG93N/1nQwp09QsJ1Jopu6zh8X9nlIF74KXx1AuDnOf/iRbC1 g3KPVMGI47tdxo/M1S0nAKh5R1YrclvzBHyYQmWXJv5dh0iGel4Twf9urbmo5yFx E19Ooz7MU1VhEUw/5uy3NOF7AQpszk9DMw3fRtdXInsXQhRXKkobr7gBZP3ejckH y0qySnq6Gd8nMja1e5TFWToHvAcTlWj8wRVKF1zE3yT6JSncDVsoF2aE46FHc7Rc sbh800ZpkM7nF/80v6KG1pBqx2APyLB/Obwd4Ykw04ROcRap1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP9HWvjYElniJGKpUld3xg+rIT7fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvYTRlMmEzODItYmZlYS0z MGI4LWFiMzMtNjI5MDAzYTA5Njk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgc/QP8l MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH12WM87FooN9KjVB7ncyvPYFw7id3nOwpCZGDrRNWl/hyoAzBMV dgzCRvKpJY2OUKJO/PkYMny+GkSnUBYl6RkPAH8XbDCFt6AsxLKq2NvD378DejnR VSeulzHbOUhJce1R88tbI622GifDcpTnzpIQImxgPcHSH7h+Qw5iiikAZamB45TN 75N4hXPYdMRzbf3lQAMbRYIft+HGvgjSq8p41SZzTvrEnzj320o4nekWGrMSh1K5 rQMzl5F1162sb5csnerZEAemMtVzwEh4mijyARBzwaeUcod/IFhsXxnRGEQAUlEn Z4KtiVkjdov1D1LhWA/nCV09c+0XKykMRwc= -----END CERTIFICATE-----Generated at Wed Nov 5 04:25:06 2025 by rpki-client