$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/887cba21-5728-3b95-9ab6-0cfc8921eab1.roa File: 887cba21-5728-3b95-9ab6-0cfc8921eab1.roa (raw, json) Hash identifier: N6FKuciL0/pCEf8jwbT3TQHRKWu/V9HG4aqn64gVMjg= Subject key identifier: 01:C3:DC:AD:16:AB:9F:29:28:5F:0C:8B:07:4A:2D:B7:20:0B:A5:53 Certificate issuer: /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078 Certificate serial: 010D0C9F4328584B33F19EDD0B79C833CF8ABE80 Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/887cba21-5728-3b95-9ab6-0cfc8921eab1.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 2152 IP address blocks: 2607:cc80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:9e:dd:0b:79:c8:33:cf:8a:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078 Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=39c0356a-b55d-431b-b467-208b98b4d971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:64:18:60:37:75:8e:89:9c:f9:3e:7c:90:a8: 68:ef:7d:4d:62:4a:9a:fa:00:d1:c4:7f:e9:96:84: 6c:c4:b5:43:db:d8:55:76:76:a1:29:71:55:b7:22: 87:2a:a5:96:69:7e:4e:ad:3d:93:7b:12:d5:0f:c6: 78:ba:6b:f9:a8:43:e2:62:ec:f9:9b:64:c9:2b:b9: ed:c8:ac:29:73:59:e8:43:92:80:e3:72:c0:81:bb: 36:9f:05:81:70:01:50:98:fd:15:65:60:92:52:97: 74:20:d6:45:78:b2:f3:66:e4:fb:30:c9:4a:97:cd: b9:a2:5e:fd:c8:9a:45:cc:a4:e0:5b:be:22:3c:74: 1b:a2:5e:20:f6:07:99:9c:02:e5:0e:16:7f:bc:65: ea:7c:16:dd:eb:1c:d8:c9:15:14:83:41:6b:5c:76: 71:67:06:98:f3:d0:ac:50:2a:42:00:10:67:8b:33: 56:3c:3b:66:10:d6:f8:ab:f2:6d:78:20:6c:90:f4: 51:a3:5e:02:fc:0d:04:70:dd:1c:ee:61:e5:62:22: c6:4e:c7:79:a1:ed:3f:34:a9:ec:30:db:70:c4:79: 8a:ef:a9:c4:26:8a:51:52:e5:57:44:73:37:99:0e: cf:97:af:2d:cb:51:73:db:40:9b:fd:ab:f3:ac:b2: 60:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:C3:DC:AD:16:AB:9F:29:28:5F:0C:8B:07:4A:2D:B7:20:0B:A5:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/887cba21-5728-3b95-9ab6-0cfc8921eab1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl X509v3 Authority Key Identifier: keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer sbgp-ipAddrBlock: critical IPv6: 2607:cc80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:04:5e:d4:c1:b3:f1:a8:c9:d4:72:79:8a:03:3c:31:92:3c: a2:7f:17:ff:f1:1a:0c:53:c5:42:87:2a:f0:69:e3:1e:08:ff: ae:a7:82:fe:b8:fb:03:2e:12:51:73:ed:59:12:f5:05:fa:b6: 87:46:a4:f1:25:52:e5:b4:32:ba:31:af:1f:04:b3:a4:6c:34: dc:a3:52:d6:26:c4:86:60:52:4e:f9:60:b2:92:1c:10:e6:ac: 29:5d:e9:08:28:a2:55:fc:9c:1d:72:e3:04:31:54:b7:fc:db: 26:96:b1:6c:fc:e1:c0:20:8a:0b:da:d8:d2:06:56:9d:e6:0a: 26:9a:d0:b4:20:f4:9c:ea:e7:71:fe:cf:2e:ed:62:1e:25:ae: cf:fb:1b:ca:c5:47:1f:bd:bb:10:36:8a:af:39:a2:a3:e0:8a: 1c:e7:01:7b:c3:6c:10:8f:41:19:39:57:6d:d2:d2:b4:92:c6: 91:0f:aa:63:87:3e:9b:d3:58:5c:82:e0:9f:b9:ae:32:18:5c: 75:d2:a4:8b:84:32:83:1b:0e:a6:8b:ef:d3:14:36:30:00:b1: cf:5a:12:95:73:14:3a:38:84:c2:0b:7b:1a:99:2a:c5:a0:fd: 49:e9:49:73:48:b4:7d:a9:d3:17:74:20:ca:b8:3d:c4:0a:71: 2b:ef:3f:19 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsz8Z7dC3nIM8+KvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE1ZDNmZGItN2MyZC00MzkwLWE3MmYtZmE0NmYwMmY0 MDc4MB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk MzljMDM1NmEtYjU1ZC00MzFiLWI0NjctMjA4Yjk4YjRkOTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2QYYDd1jomc+T58kKho731NYkqa+gDRxH/p loRsxLVD29hVdnahKXFVtyKHKqWWaX5OrT2TexLVD8Z4umv5qEPiYuz5m2TJK7nt yKwpc1noQ5KA43LAgbs2nwWBcAFQmP0VZWCSUpd0INZFeLLzZuT7MMlKl825ol79 yJpFzKTgW74iPHQbol4g9geZnALlDhZ/vGXqfBbd6xzYyRUUg0FrXHZxZwaY89Cs UCpCABBnizNWPDtmENb4q/JteCBskPRRo14C/A0EcN0c7mHlYiLGTsd5oe0/NKns MNtwxHmK76nEJopRUuVXRHM3mQ7Pl68ty1Fz20Cb/avzrLJgywIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAHD3K0Wq58pKF8MiwdKLbcgC6VTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMTVk M2ZkYi03YzJkLTQzOTAtYTcyZi1mYTQ2ZjAyZjQwNzgvODg3Y2JhMjEtNTcyOC0z Yjk1LTlhYjYtMGNmYzg5MjFlYWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTE1ZDNmZGItN2MyZC00MzkwLWE3 MmYtZmE0NmYwMmY0MDc4L2UxNWQzZmRiLTdjMmQtNDM5MC1hNzJmLWZhNDZmMDJm NDA3OC5jcmwwHwYDVR0jBBgwFoAUEMqrDaYVw2cS3TXs0nMj95zDq7AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lMTVkM2ZkYi03YzJkLTQzOTAtYTcyZi1mYTQ2 ZjAyZjQwNzguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfMgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBDBF7UwbPxqMnUcnmKAzwxkjyifxf/8RoMU8VChyrwaeMeCP+up4L+ uPsDLhJRc+1ZEvUF+raHRqTxJVLltDK6Ma8fBLOkbDTco1LWJsSGYFJO+WCykhwQ 5qwpXekIKKJV/JwdcuMEMVS3/NsmlrFs/OHAIIoL2tjSBlad5gommtC0IPSc6udx /s8u7WIeJa7P+xvKxUcfvbsQNoqvOaKj4Ioc5wF7w2wQj0EZOVdt0tK0ksaRD6pj hz6b01hcguCfua4yGFx10qSLhDKDGw6mi+/TFDYwALHPWhKVcxQ6OITCC3samSrF oP1J6UlzSLR9qdMXdCDKuD3ECnEr7z8Z -----END CERTIFICATE-----Generated at Wed Nov 5 09:30:51 2025 by rpki-client