$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aab14d56-7fc6-3bfb-9185-b854cf74e081.roa File: aab14d56-7fc6-3bfb-9185-b854cf74e081.roa (raw, json) Hash identifier: hojBNh0NBZ4s81EBTY+roAXH7CUX/3JNXk6frd27Y3w= Subject key identifier: FE:07:F7:30:AC:D3:FA:F8:71:52:04:26:F0:86:70:7F:7F:64:DF:D4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD73D94896DFF4EDED4D00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aab14d56-7fc6-3bfb-9185-b854cf74e081.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 2607:f8b0:400d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:73:d9:48:96:df:f4:ed:ed:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=1dc5d5f4-2cfc-47cd-8eb3-1938fab68c81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7e:a9:5b:21:85:53:01:82:d9:67:63:3e:93: 51:7e:a6:63:3f:49:f6:d4:7b:82:d8:af:41:36:3d: af:20:23:24:c3:1d:69:3d:9b:c7:09:45:af:56:72: c4:8b:1f:e0:19:7b:bd:99:56:be:8d:be:9e:c3:8d: 5e:ac:2e:fa:69:97:ed:57:eb:15:0f:a9:6f:6a:00: 1d:a3:91:1a:cf:9c:de:7a:5e:65:70:1c:9d:b4:e8: b8:c5:de:7e:5c:89:63:5f:38:a8:89:aa:ac:ee:20: fd:e4:a5:84:8d:40:69:fc:9c:c2:c6:2c:e4:ca:bf: 3e:20:85:44:66:98:2b:37:3b:97:8d:2a:2c:43:0a: cb:0b:53:ac:32:b1:87:8b:0b:96:60:b6:f0:74:40: 72:a6:1e:13:b7:2b:12:36:a8:18:f8:2c:df:47:23: d1:c7:f6:4f:54:23:97:48:0d:98:da:9f:e1:17:58: 8c:36:12:9e:1e:c6:ce:16:df:ca:ac:4b:48:8e:0f: f9:37:0a:53:46:68:5f:af:7a:22:f8:7c:f7:cc:17: b7:ab:29:14:b2:9d:eb:53:83:21:ef:19:1f:2e:6c: db:88:32:35:44:ec:e4:60:df:35:0a:11:5d:77:75: 64:ca:5c:5e:87:e1:6f:a3:d0:49:9f:bc:c0:bf:0b: 04:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:07:F7:30:AC:D3:FA:F8:71:52:04:26:F0:86:70:7F:7F:64:DF:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aab14d56-7fc6-3bfb-9185-b854cf74e081.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8b0:400d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:15:cb:a4:dd:f7:24:f3:fb:6f:26:f3:be:71:64:07:4a:5f: 9f:6f:dd:19:01:55:62:1c:82:d3:5f:89:f4:88:da:38:6c:41: e4:ba:a1:1a:d9:9d:3d:70:d5:49:ad:11:fc:e9:52:f0:08:c5: a1:ea:c1:9f:8f:b3:f4:de:48:63:12:52:f9:4f:f4:5e:82:ff: 23:5c:eb:e0:53:63:69:1e:71:be:5f:d5:d2:1e:e5:df:35:cd: 7e:48:ab:0e:30:6b:8a:0f:75:54:9c:c8:03:67:7e:47:de:c0: 34:13:52:c0:ae:46:36:9e:ec:06:82:22:8d:ae:8f:af:52:bf: 42:2c:72:6f:25:5a:9a:9a:b2:04:c4:7e:fa:20:54:02:62:87: 88:21:2d:b4:5f:d6:b3:f7:3f:81:01:b0:c6:fb:b6:d8:d5:c0: f3:ba:31:0b:4a:06:93:49:01:3f:f8:cb:b1:25:b0:e8:3a:1d: 10:aa:12:c1:1b:ec:d3:cb:1e:e4:62:6c:df:7a:70:e5:91:70: 7d:28:9f:94:76:a1:2a:55:99:f6:c2:9e:69:59:ff:2d:11:85: ef:ce:6a:93:fe:9d:f1:f5:1b:72:a9:d7:c7:2c:64:9b:7a:f8: e3:7d:0c:3a:1b:66:bd:65:59:1a:d8:d9:93:6a:52:6a:78:b8: 7a:2f:97:ad -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzXPZSJbf9O3tTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MWRjNWQ1ZjQtMmNmYy00N2NkLThlYjMtMTkzOGZhYjY4YzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmn6pWyGFUwGC2WdjPpNRfqZjP0n21HuC2K9B Nj2vICMkwx1pPZvHCUWvVnLEix/gGXu9mVa+jb6ew41erC76aZftV+sVD6lvagAd o5Eaz5zeel5lcBydtOi4xd5+XIljXzioiaqs7iD95KWEjUBp/JzCxizkyr8+IIVE ZpgrNzuXjSosQwrLC1OsMrGHiwuWYLbwdEByph4TtysSNqgY+CzfRyPRx/ZPVCOX SA2Y2p/hF1iMNhKeHsbOFt/KrEtIjg/5NwpTRmhfr3oi+Hz3zBe3qykUsp3rU4Mh 7xkfLmzbiDI1ROzkYN81ChFdd3Vkylxeh+Fvo9BJn7zAvwsEXQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP4H9zCs0/r4cVIEJvCGcH9/ZN/UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWFiMTRkNTYtN2ZjNi0z YmZiLTkxODUtYjg1NGNmNzRlMDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf4sEAN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAoVy6Td9yTz+28m875xZAdKX59v3RkBVWIcgtNfifSI2jhsQeS6 oRrZnT1w1UmtEfzpUvAIxaHqwZ+Ps/TeSGMSUvlP9F6C/yNc6+BTY2kecb5f1dIe 5d81zX5Iqw4wa4oPdVScyANnfkfewDQTUsCuRjae7AaCIo2uj69Sv0Iscm8lWpqa sgTEfvogVAJih4ghLbRf1rP3P4EBsMb7ttjVwPO6MQtKBpNJAT/4y7ElsOg6HRCq EsEb7NPLHuRibN96cOWRcH0on5R2oSpVmfbCnmlZ/y0Rhe/OapP+nfH1G3Kp18cs ZJt6+ON9DDobZr1lWRrY2ZNqUmp4uHovl60= -----END CERTIFICATE-----Generated at Tue Nov 4 21:40:45 2025 by rpki-client