$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1355dbab-64c6-3d3a-bbe2-e2d8b209fa5f.roa File: 1355dbab-64c6-3d3a-bbe2-e2d8b209fa5f.roa (raw, json) Hash identifier: pb4cZGejgKsTsFzJXu3GjwK8ikRv4VicRtxkKX/V4Cs= Subject key identifier: 12:DE:E1:25:87:4E:8D:68:00:E0:D3:2F:38:BA:70:07:1E:CF:A2:27 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD74C74428FA4BE0ACA280 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1355dbab-64c6-3d3a-bbe2-e2d8b209fa5f.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 2607:f8b0:4010::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:74:c7:44:28:fa:4b:e0:ac:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=4ed4490e-3b7d-41c9-b8db-f34ffcf61f4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bc:c0:15:b0:f8:b6:13:d2:03:62:cd:2b:3e: 86:56:12:30:09:34:27:8f:34:a1:f5:55:0b:77:df: c4:9d:1e:31:2f:51:2d:32:c2:26:53:6e:9a:c3:a8: 17:fd:4d:3e:74:88:d8:7f:67:e2:ee:c1:24:c8:84: a1:bd:fb:72:6c:45:fe:f1:72:b9:24:25:9a:ab:09: 9a:f2:14:97:c9:76:71:ee:92:aa:ce:94:b1:92:3e: 54:c5:e3:24:29:ac:5c:d5:00:27:a8:46:e0:3a:ce: e2:5e:f2:3b:8f:27:b9:34:02:a3:40:b1:32:56:f5: 8e:f3:fe:2d:8c:35:0a:8b:98:fb:78:ad:a1:96:ea: 2c:0a:93:d1:23:8c:b8:6e:05:1a:30:4e:d4:3d:d4: 0d:70:02:6a:e8:ea:0c:45:e9:f8:25:f7:a1:6b:39: 9b:b7:0e:ac:d4:4a:50:72:ba:33:4f:b6:dc:2c:43: b9:a0:fb:04:ee:af:c5:7e:e9:d7:57:59:fb:50:c1: 0e:b0:4c:86:a4:81:61:e3:9a:3a:32:66:99:b0:ef: 8b:2f:88:4f:c2:5a:45:c9:39:09:25:c2:47:f2:fd: 1a:44:41:34:5c:cc:2e:09:b4:78:bc:f4:cc:34:5c: 47:c5:76:e1:a7:3e:bd:a4:20:e1:bb:a7:65:98:d7: ce:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:DE:E1:25:87:4E:8D:68:00:E0:D3:2F:38:BA:70:07:1E:CF:A2:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1355dbab-64c6-3d3a-bbe2-e2d8b209fa5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8b0:4010::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:f5:9d:3c:ac:5e:ee:dd:e5:09:aa:45:9a:25:80:c4:38:c5: df:e6:17:6a:70:26:3b:be:fd:e3:06:de:d9:4e:6e:7c:8b:17: 0a:45:58:6f:a9:ef:97:5c:b7:13:1e:d7:eb:e9:51:84:4b:d1: 23:9f:ee:d2:ce:18:d7:bb:78:00:68:94:62:8d:ab:56:1c:35: d7:ae:82:11:63:e0:07:cc:f3:d3:71:d3:49:ba:96:8b:b7:41: 34:04:71:85:47:b0:3c:d1:d3:53:2c:15:b7:0e:ad:cb:95:21: f0:7b:19:96:c4:58:2c:3a:1e:40:1b:5a:57:4a:d8:6c:c8:44: eb:5c:2b:ce:42:e8:f8:72:fb:c3:72:af:de:b3:c4:6a:82:4d: ad:bb:85:44:6a:9a:56:5d:19:8f:22:4e:92:55:c6:cd:5e:fd: 0c:c2:b5:7c:f4:ba:a5:4a:4e:35:b2:5d:b6:56:e7:b6:d0:f2: ad:df:30:58:7c:66:ef:7b:24:28:a5:7e:a7:34:d2:99:87:9c: 9d:bc:b7:d5:8e:08:27:64:77:9b:e4:f1:a0:2b:48:2f:48:7b: 6c:41:58:ef:38:f1:02:01:94:18:62:9b:be:b1:2d:96:b3:48: d4:70:01:37:ce:d8:2c:24:57:eb:a9:87:57:c3:3c:05:25:38: f3:4d:d4:0a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzXTHRCj6S+CsooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NGVkNDQ5MGUtM2I3ZC00MWM5LWI4ZGItZjM0ZmZjZjYxZjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7zAFbD4thPSA2LNKz6GVhIwCTQnjzSh9VUL d9/EnR4xL1EtMsImU26aw6gX/U0+dIjYf2fi7sEkyIShvftybEX+8XK5JCWaqwma 8hSXyXZx7pKqzpSxkj5UxeMkKaxc1QAnqEbgOs7iXvI7jye5NAKjQLEyVvWO8/4t jDUKi5j7eK2hluosCpPRI4y4bgUaME7UPdQNcAJq6OoMRen4Jfehazmbtw6s1EpQ crozT7bcLEO5oPsE7q/FfunXV1n7UMEOsEyGpIFh45o6MmaZsO+LL4hPwlpFyTkJ JcJH8v0aREE0XMwuCbR4vPTMNFxHxXbhpz69pCDhu6dlmNfOfQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBLe4SWHTo1oAODTLzi6cAcez6InMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTM1NWRiYWItNjRjNi0z ZDNhLWJiZTItZTJkOGIyMDlmYTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf4sEAQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIr1nTysXu7d5QmqRZolgMQ4xd/mF2pwJju+/eMG3tlObnyLFwpF WG+p75dctxMe1+vpUYRL0SOf7tLOGNe7eABolGKNq1YcNdeughFj4AfM89Nx00m6 lou3QTQEcYVHsDzR01MsFbcOrcuVIfB7GZbEWCw6HkAbWldK2GzIROtcK85C6Phy +8Nyr96zxGqCTa27hURqmlZdGY8iTpJVxs1e/QzCtXz0uqVKTjWyXbZW57bQ8q3f MFh8Zu97JCilfqc00pmHnJ28t9WOCCdkd5vk8aArSC9Ie2xBWO848QIBlBhim76x LZazSNRwATfO2CwkV+uph1fDPAUlOPNN1Ao= -----END CERTIFICATE-----Generated at Tue Nov 4 23:24:18 2025 by rpki-client