$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/1085d183-4a39-3c43-abf3-8719482aa95a.roa File: 1085d183-4a39-3c43-abf3-8719482aa95a.roa (raw, json) Hash identifier: nrKMyOKMYEVwtKDr0RLqZzOolXKVusjg09W/cb1hBB0= Subject key identifier: 20:26:0C:AE:7F:1E:AC:41:62:1B:FA:62:0C:91:4A:97:9F:D8:84:6F Certificate issuer: /CN=f16b1ed2-491f-4ed7-be99-59b20310c475 Certificate serial: 010D0C9F4328584BAEC7BDA8A94FA7D586218F80 Authority key identifier: 10:63:9B:2C:4A:02:6A:D8:33:C9:71:22:24:52:5C:80:BE:6C:AB:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/1085d183-4a39-3c43-abf3-8719482aa95a.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 11924 IP address blocks: 2607:faa0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/f16b1ed2-491f-4ed7-be99-59b20310c475.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/f16b1ed2-491f-4ed7-be99-59b20310c475.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:bd:a8:a9:4f:a7:d5:86:21:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f16b1ed2-491f-4ed7-be99-59b20310c475 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=4561284c-b083-4c78-9838-88b142545236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c6:89:d8:88:5c:95:8f:69:1d:1b:d8:01:b8: 86:a9:eb:dc:9e:70:51:00:2e:f6:83:02:ae:a0:9c: 7d:09:2a:fd:ea:59:19:75:f2:d8:e9:eb:f0:3c:43: a1:01:b5:92:7d:20:da:2a:1e:7d:7b:82:03:31:a1: a2:2d:03:d3:28:2b:8d:58:9f:16:69:df:1f:17:c5: 25:36:fc:3a:4f:fa:3c:af:8e:fd:b3:07:f5:0f:04: a4:af:8f:ac:d3:80:e1:b9:a5:62:bd:de:99:2e:5e: 76:8c:31:51:f5:9f:c3:58:cd:a5:7c:5e:85:0b:fc: ec:fc:ee:b9:c3:1d:3f:d5:3a:77:2e:b5:21:e3:b3: b5:97:9d:66:99:b0:82:6f:4a:85:6a:7e:a7:fb:1c: 32:c0:d1:05:3d:aa:ea:7b:7b:78:f4:c4:0b:ec:ea: d3:bc:38:0f:50:23:af:56:52:59:b5:1a:05:1f:79: 16:6f:b0:b3:d5:00:01:9c:ed:78:84:fe:a6:62:45: 3c:d1:e4:a3:79:d0:c7:cc:11:9e:5f:72:f0:ae:f6: 7e:33:91:01:5c:ee:47:b1:8d:45:7a:46:b3:f0:d8: 31:b4:e5:19:88:f6:b7:da:e5:e1:85:0d:c9:1f:e1: 5e:6a:1f:d6:87:f3:44:3d:c6:56:b0:77:57:2f:b5: f5:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:26:0C:AE:7F:1E:AC:41:62:1B:FA:62:0C:91:4A:97:9F:D8:84:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/1085d183-4a39-3c43-abf3-8719482aa95a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/f16b1ed2-491f-4ed7-be99-59b20310c475.crl X509v3 Authority Key Identifier: keyid:10:63:9B:2C:4A:02:6A:D8:33:C9:71:22:24:52:5C:80:BE:6C:AB:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475.cer sbgp-ipAddrBlock: critical IPv6: 2607:faa0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:0c:db:f2:67:52:93:76:21:2d:1f:4c:b3:4b:5e:7b:d9:91: dc:86:82:cc:ca:34:1a:f2:fb:95:7c:02:2d:ca:64:19:64:fc: d4:c6:ae:fa:ab:ba:3b:fd:97:cc:68:80:6c:7e:f0:ea:11:1d: c4:bb:a4:98:39:74:81:4a:79:92:91:b2:92:33:0d:17:ec:0f: d1:21:1b:6d:9b:e5:e5:0f:1f:23:e7:96:e0:a1:bd:cd:09:1a: 0d:6d:ee:35:a5:bf:02:b1:98:d5:80:52:6f:b9:2d:ba:b6:09: 01:78:cc:90:21:40:d9:8d:37:f6:97:e9:8e:67:6d:ba:6e:de: e2:a3:9e:e4:17:32:66:16:73:59:fa:64:92:77:f6:41:21:34: 35:2f:41:a8:12:24:7c:98:7d:55:5d:30:bb:5d:f1:86:75:2f: 02:e9:fb:17:d7:43:b9:3a:af:ab:0c:47:47:7c:36:b9:f0:9f: 25:50:35:5e:71:02:79:ae:98:92:83:7e:05:0f:e0:d4:f3:0d: 02:f1:28:fc:2a:bf:74:4b:32:92:b1:1a:a6:25:ae:7b:ef:56: af:d2:76:61:56:5e:6b:cd:e2:4d:39:12:28:16:40:e6:05:b0: 80:ce:6c:5e:7d:13:20:af:ba:14:8f:5e:84:d1:d1:e6:16:6d: 4f:1c:3e:84 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuux72oqU+n1YYhj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjE2YjFlZDItNDkxZi00ZWQ3LWJlOTktNTliMjAzMTBj NDc1MB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk NDU2MTI4NGMtYjA4My00Yzc4LTk4MzgtODhiMTQyNTQ1MjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMaJ2IhclY9pHRvYAbiGqevcnnBRAC72gwKu oJx9CSr96lkZdfLY6evwPEOhAbWSfSDaKh59e4IDMaGiLQPTKCuNWJ8Wad8fF8Ul Nvw6T/o8r479swf1DwSkr4+s04DhuaVivd6ZLl52jDFR9Z/DWM2lfF6FC/zs/O65 wx0/1Tp3LrUh47O1l51mmbCCb0qFan6n+xwywNEFParqe3t49MQL7OrTvDgPUCOv VlJZtRoFH3kWb7Cz1QABnO14hP6mYkU80eSjedDHzBGeX3LwrvZ+M5EBXO5HsY1F ekaz8NgxtOUZiPa32uXhhQ3JH+Feah/Wh/NEPcZWsHdXL7X1iwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCAmDK5/HqxBYhv6YgyRSpef2IRvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mMTZi MWVkMi00OTFmLTRlZDctYmU5OS01OWIyMDMxMGM0NzUvMTA4NWQxODMtNGEzOS0z YzQzLWFiZjMtODcxOTQ4MmFhOTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjE2YjFlZDItNDkxZi00ZWQ3LWJl OTktNTliMjAzMTBjNDc1L2YxNmIxZWQyLTQ5MWYtNGVkNy1iZTk5LTU5YjIwMzEw YzQ3NS5jcmwwHwYDVR0jBBgwFoAUEGObLEoCatgzyXEiJFJcgL5sq9YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mMTZiMWVkMi00OTFmLTRlZDctYmU5OS01OWIy MDMxMGM0NzUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf6oDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBDDNvyZ1KTdiEtH0yzS1572ZHchoLMyjQa8vuVfAItymQZZPzUxq76 q7o7/ZfMaIBsfvDqER3Eu6SYOXSBSnmSkbKSMw0X7A/RIRttm+XlDx8j55bgob3N CRoNbe41pb8CsZjVgFJvuS26tgkBeMyQIUDZjTf2l+mOZ226bt7io57kFzJmFnNZ +mSSd/ZBITQ1L0GoEiR8mH1VXTC7XfGGdS8C6fsX10O5Oq+rDEdHfDa58J8lUDVe cQJ5rpiSg34FD+DU8w0C8Sj8Kr90SzKSsRqmJa5771av0nZhVl5rzeJNORIoFkDm BbCAzmxefRMgr7oUj16E0dHmFm1PHD6E -----END CERTIFICATE-----Generated at Wed Nov 5 12:37:02 2025 by rpki-client