$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/8c09e973-5d24-3d82-a469-8d31297278a5.roa File: 8c09e973-5d24-3d82-a469-8d31297278a5.roa (raw, json) Hash identifier: CQ8lp0620U5lFDTrv4nXx2RUbXTKALQMxK1u3LFQ4Xg= Subject key identifier: 42:F1:9E:C1:28:00:EE:77:60:62:3B:7D:5D:BE:6B:7F:80:40:D1:05 Certificate issuer: /CN=1fec04c2-2b6c-4e9a-8062-e420ac1a257a Certificate serial: 010D0C9F4328584BA5023D58D9B9D879E6F03780 Authority key identifier: DA:A6:FB:CD:8D:FF:22:68:C4:1E:BA:AC:CE:80:24:86:BD:CD:D3:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/8c09e973-5d24-3d82-a469-8d31297278a5.roa Signing time: Sun 26 Oct 2025 01:00:31 +0000 ROA not before: Sun 26 Oct 2025 01:00:31 +0000 ROA not after: Sat 24 Jan 2026 02:00:31 +0000 asID: 25996 IP address blocks: 2607:f330:2000::/44 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a5:02:3d:58:d9:b9:d8:79:e6:f0:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fec04c2-2b6c-4e9a-8062-e420ac1a257a Validity Not Before: Oct 26 01:00:31 2025 GMT Not After : Jan 24 02:00:31 2026 GMT Subject: CN=981a8ae0-a333-4b25-803a-83f29f57c88b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:8f:68:1c:39:4a:34:49:c6:c5:9b:e6:fa:b7: d4:06:f0:6b:04:f8:c5:72:e9:11:a6:a3:00:55:1d: b4:82:0e:ee:f4:50:20:8f:91:7d:d2:bb:4a:14:8e: c1:22:e6:e2:e3:b6:06:94:4b:e9:a6:6f:09:6a:6d: 0f:9d:e7:37:9b:6f:a3:37:3d:42:c5:c9:59:1b:49: e8:55:cf:35:0a:34:68:a9:e6:ac:09:01:e0:5d:e0: 7f:5d:95:8a:3b:e1:ca:45:2b:1e:a8:ff:4d:46:bd: 2d:b6:71:5e:e2:d5:9b:aa:61:d1:6d:0a:c4:1a:54: 42:6c:09:ef:40:ba:b0:c1:36:b0:ce:18:4a:57:53: c7:2b:7a:38:8b:0e:77:f2:e5:68:a2:65:d0:57:e3: 39:02:f0:dd:de:1f:66:1c:b3:19:1b:a4:04:a9:e5: 20:ec:10:ba:e5:d1:71:71:12:c5:9f:55:cc:ae:70: 56:87:b4:93:43:36:1e:e9:ec:84:0a:42:9a:d2:b0: ee:ba:e7:d2:21:c8:a1:8f:d0:41:7e:76:29:2a:8d: 1d:fa:ef:d5:04:bf:ea:0e:f4:9b:63:bd:a7:a4:8f: b9:8d:7f:59:5b:b7:c6:5f:69:72:95:40:03:20:8a: 19:dd:cc:62:13:0e:86:5c:4e:8e:f8:f7:66:6f:ec: 7d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F1:9E:C1:28:00:EE:77:60:62:3B:7D:5D:BE:6B:7F:80:40:D1:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/8c09e973-5d24-3d82-a469-8d31297278a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.crl X509v3 Authority Key Identifier: keyid:DA:A6:FB:CD:8D:FF:22:68:C4:1E:BA:AC:CE:80:24:86:BD:CD:D3:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.cer sbgp-ipAddrBlock: critical IPv6: 2607:f330:2000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:d0:c7:8a:8e:7e:a1:0f:f4:24:e1:02:4c:b7:e5:a6:bd:24: b0:d0:7e:7b:91:58:91:4e:19:9c:a0:2b:bc:e8:a4:dc:43:05: a7:64:fb:72:fd:60:a6:50:f9:4a:8c:77:23:e3:03:d8:e9:86: 16:f4:3d:ec:5d:4c:f7:51:d6:36:e4:94:6f:e1:74:2a:0a:20: f2:af:cc:82:44:fb:a9:77:c3:00:00:68:01:a7:23:00:cf:bd: 8d:4b:b6:29:e1:f6:d0:48:46:b8:6a:9d:4a:9d:28:8e:e1:20: 5d:e4:90:0f:e2:9d:dd:c2:06:5c:d1:e0:8b:95:e1:fc:90:a2: 63:91:4a:a6:f7:e5:37:e5:0e:45:bf:2c:76:a0:0b:a6:2b:e5: 25:06:6d:8f:84:2d:da:72:c0:d0:66:35:1c:ea:af:aa:fd:9f: 47:1a:df:67:0c:5b:72:7e:a4:25:04:98:1e:95:49:ab:61:08: 1c:80:b0:77:24:a1:25:ea:be:e4:61:42:e4:27:a1:40:d9:a6: 5b:a4:30:ee:09:ba:ee:c5:c4:a3:30:49:32:40:54:56:ac:0f: 5a:22:dc:61:40:13:a9:e5:61:27:11:20:ca:a1:95:5c:3b:c9: 22:47:76:a4:53:26:55:7f:06:07:94:79:86:3f:70:cc:b2:45: bd:97:c6:ff -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEulAj1Y2bnYeebwN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZlYzA0YzItMmI2Yy00ZTlhLTgwNjItZTQyMGFjMWEy NTdhMB4XDTI1MTAyNjAxMDAzMVoXDTI2MDEyNDAyMDAzMVowLzEtMCsGA1UEAxMk OTgxYThhZTAtYTMzMy00YjI1LTgwM2EtODNmMjlmNTdjODhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgo9oHDlKNEnGxZvm+rfUBvBrBPjFcukRpqMA VR20gg7u9FAgj5F90rtKFI7BIubi47YGlEvppm8Jam0Pnec3m2+jNz1CxclZG0no Vc81CjRoqeasCQHgXeB/XZWKO+HKRSseqP9NRr0ttnFe4tWbqmHRbQrEGlRCbAnv QLqwwTawzhhKV1PHK3o4iw538uVoomXQV+M5AvDd3h9mHLMZG6QEqeUg7BC65dFx cRLFn1XMrnBWh7STQzYe6eyECkKa0rDuuufSIcihj9BBfnYpKo0d+u/VBL/qDvSb Y72npI+5jX9ZW7fGX2lylUADIIoZ3cxiEw6GXE6O+Pdmb+x9fwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFELxnsEoAO53YGI7fV2+a3+AQNEFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xZmVj MDRjMi0yYjZjLTRlOWEtODA2Mi1lNDIwYWMxYTI1N2EvOGMwOWU5NzMtNWQyNC0z ZDgyLWE0NjktOGQzMTI5NzI3OGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWZlYzA0YzItMmI2Yy00ZTlhLTgw NjItZTQyMGFjMWEyNTdhLzFmZWMwNGMyLTJiNmMtNGU5YS04MDYyLWU0MjBhYzFh MjU3YS5jcmwwHwYDVR0jBBgwFoAU2qb7zY3/ImjEHrqszoAkhr3N00QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xZmVjMDRjMi0yYjZjLTRlOWEtODA2Mi1lNDIw YWMxYTI1N2EuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgfzMCAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABzQx4qOfqEP9CThAky35aa9JLDQfnuRWJFOGZygK7zopNxDBadk +3L9YKZQ+UqMdyPjA9jphhb0PexdTPdR1jbklG/hdCoKIPKvzIJE+6l3wwAAaAGn IwDPvY1Ltinh9tBIRrhqnUqdKI7hIF3kkA/ind3CBlzR4IuV4fyQomORSqb35Tfl DkW/LHagC6Yr5SUGbY+ELdpywNBmNRzqr6r9n0ca32cMW3J+pCUEmB6VSathCByA sHckoSXqvuRhQuQnoUDZplukMO4Juu7FxKMwSTJAVFasD1oi3GFAE6nlYScRIMqh lVw7ySJHdqRTJlV/BgeUeYY/cMyyRb2Xxv8= -----END CERTIFICATE-----Generated at Wed Nov 5 11:06:03 2025 by rpki-client