$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/48f1ac8d-8045-3e33-88f3-9f090e91cb46.roa File: 48f1ac8d-8045-3e33-88f3-9f090e91cb46.roa (raw, json) Hash identifier: lY40IFLzB+1OqBcG8hoUirZvbV+FXZxsikT+KoLPy7c= Subject key identifier: 5F:3C:40:F7:12:B9:50:AD:45:EC:DC:9B:87:76:DE:F6:92:60:38:1F Certificate issuer: /CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c Certificate serial: 010D0C9F4328584B95A79CC077D66DA797366F70 Authority key identifier: C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/48f1ac8d-8045-3e33-88f3-9f090e91cb46.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7029 IP address blocks: 2607:340::/29 maxlen: 29 2607:348::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:9c:c0:77:d6:6d:a7:97:36:6f:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=7acb30f0-441b-4ea3-bf78-04e01f0cd338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:bc:99:11:f8:71:85:47:81:5a:17:e6:0e:c1: 9b:fd:76:7d:80:c8:1f:66:61:65:7f:33:0f:d9:12: c9:66:59:0b:61:9d:12:a2:10:4c:d4:c4:2f:93:d9: 43:e3:30:f6:98:eb:0b:83:43:a8:b7:2e:57:96:92: 06:b2:2b:12:f3:06:ed:2c:38:43:25:dd:29:1d:ec: f4:c1:ad:be:c7:2a:ee:d1:08:b2:08:52:de:12:11: fd:11:f2:a3:54:40:f4:27:06:c3:8e:e9:9f:b7:59: af:73:f1:3d:b7:cc:98:0b:bd:12:a9:e7:eb:6a:ed: 11:d5:e8:2a:ce:b3:12:65:fc:4d:13:7c:3c:76:14: 17:11:c5:b5:23:20:78:d6:8d:6a:aa:da:2e:30:0a: 35:94:95:0b:6a:90:83:4a:bf:45:b6:9f:c7:2c:f7: 53:12:82:61:29:26:ff:2d:81:d9:a5:d6:51:7d:a7: 98:cf:7c:b9:e9:c3:e9:5f:9b:41:5f:30:bb:a9:14: 4a:b1:bb:f3:70:7c:eb:21:1d:5e:83:a3:1c:42:4e: ac:58:26:7b:0a:e7:1b:50:36:dc:76:e2:f4:1b:ba: 93:03:85:b1:ce:e3:43:4b:68:eb:a1:6f:28:4a:f3: 1d:09:4b:50:20:41:6f:72:39:71:e4:2f:9f:a9:27: 6e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:3C:40:F7:12:B9:50:AD:45:EC:DC:9B:87:76:DE:F6:92:60:38:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/48f1ac8d-8045-3e33-88f3-9f090e91cb46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl X509v3 Authority Key Identifier: keyid:C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer sbgp-ipAddrBlock: critical IPv6: 2607:340::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:0a:df:4e:7d:b1:c7:71:02:16:d9:6d:26:3a:cd:9b:e1:d6: 6b:1e:b5:c2:64:a3:2e:63:71:c4:95:02:fc:d8:48:42:96:39: 29:ce:fa:b8:71:d8:61:e5:72:d0:d0:b1:5d:8e:61:64:86:c8: 02:ef:5c:2b:ce:0d:c5:19:3d:3d:67:59:f9:dd:86:71:4b:f6: 1f:f1:3d:31:56:b0:fe:b6:d6:a4:de:6c:c6:1f:b5:fd:7d:9a: b9:e9:be:1f:47:a2:d5:57:0c:3b:6f:1b:62:e5:73:b5:9d:98: ba:46:8f:e1:b7:19:51:68:6c:6a:4a:de:88:90:f7:40:19:38: 8b:c8:56:e0:87:2d:72:cd:12:db:d0:89:e4:ea:29:4f:28:78: 86:59:2a:3b:cd:44:fe:26:2c:58:8f:12:a2:f2:39:ba:df:33: 39:90:aa:4b:31:c0:26:af:40:0e:e0:1c:3c:05:80:38:e5:15: ce:96:1d:8a:3f:cf:51:52:e8:3d:d2:28:74:8d:7f:48:8b:9a: 86:ad:3b:a9:42:be:cf:6e:96:1c:9d:db:3f:75:f4:fa:45:51: 48:44:17:6c:42:ba:dd:f2:69:a6:e9:e5:78:5c:0b:bb:7e:86: f7:81:69:c9:bb:7d:a7:df:c6:3e:18:b2:71:6c:98:52:07:b3: 01:8a:fd:43 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuVp5zAd9Ztp5c2b3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhM2I4YmEtYWM3ZS00ZTBlLTg5MWMtYWEyMGU1ZmU0 NDJjMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk N2FjYjMwZjAtNDQxYi00ZWEzLWJmNzgtMDRlMDFmMGNkMzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7yZEfhxhUeBWhfmDsGb/XZ9gMgfZmFlfzMP 2RLJZlkLYZ0SohBM1MQvk9lD4zD2mOsLg0Ooty5XlpIGsisS8wbtLDhDJd0pHez0 wa2+xyru0QiyCFLeEhH9EfKjVED0JwbDjumft1mvc/E9t8yYC70Sqefrau0R1egq zrMSZfxNE3w8dhQXEcW1IyB41o1qqtouMAo1lJULapCDSr9Ftp/HLPdTEoJhKSb/ LYHZpdZRfaeYz3y56cPpX5tBXzC7qRRKsbvzcHzrIR1eg6McQk6sWCZ7CucbUDbc duL0G7qTA4WxzuNDS2jroW8oSvMdCUtQIEFvcjlx5C+fqSduFQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFF88QPcSuVCtRezcm4d23vaSYDgfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wOWEz YjhiYS1hYzdlLTRlMGUtODkxYy1hYTIwZTVmZTQ0MmMvNDhmMWFjOGQtODA0NS0z ZTMzLTg4ZjMtOWYwOTBlOTFjYjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDlhM2I4YmEtYWM3ZS00ZTBlLTg5 MWMtYWEyMGU1ZmU0NDJjLzA5YTNiOGJhLWFjN2UtNGUwZS04OTFjLWFhMjBlNWZl NDQyYy5jcmwwHwYDVR0jBBgwFoAUxFLvKSfy7FpRPMFy1nO9HjkFlSYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wOWEzYjhiYS1hYzdlLTRlMGUtODkxYy1hYTIw ZTVmZTQ0MmMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgcDQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCLCt9OfbHHcQIW2W0mOs2b4dZrHrXCZKMuY3HElQL82EhCljkpzvq4 cdhh5XLQ0LFdjmFkhsgC71wrzg3FGT09Z1n53YZxS/Yf8T0xVrD+ttak3mzGH7X9 fZq56b4fR6LVVww7bxti5XO1nZi6Ro/htxlRaGxqSt6IkPdAGTiLyFbghy1yzRLb 0Ink6ilPKHiGWSo7zUT+JixYjxKi8jm63zM5kKpLMcAmr0AO4Bw8BYA45RXOlh2K P89RUug90ih0jX9Ii5qGrTupQr7PbpYcnds/dfT6RVFIRBdsQrrd8mmm6eV4XAu7 fob3gWnJu32n38Y+GLJxbJhSB7MBiv1D -----END CERTIFICATE-----Generated at Tue Nov 4 19:22:30 2025 by rpki-client