$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/dfd0fa5d-0e8c-3bcc-9785-16dd7771ec4b.roa File: dfd0fa5d-0e8c-3bcc-9785-16dd7771ec4b.roa (raw, json) Hash identifier: yohhIG3InxJ/L9tRq96oDwcp3RoN9HqUwCSa1nobNM8= Subject key identifier: 6B:19:C2:BC:0E:DE:07:E3:1B:15:05:2F:DB:E1:80:7D:89:12:A9:0A Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F4328584BA667AF57E70CD183D0E35E80 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/dfd0fa5d-0e8c-3bcc-9785-16dd7771ec4b.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 14618 IP address blocks: 2607:fcf0:10a0::/44 maxlen: 48 2607:fcf0:20a0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:af:57:e7:0c:d1:83:d0:e3:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=f43781cf-1a91-4df3-b293-9746b8a8047c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ff:5f:89:71:55:99:fd:5d:46:cd:be:44:4d: 9d:85:e0:49:03:81:f3:ea:56:2e:5a:75:7c:aa:e0: b6:a3:55:62:69:9e:3a:f3:3c:5a:8b:f6:2d:44:d0: b9:64:5c:55:c4:1b:88:bb:3f:17:45:7d:c0:10:2a: ab:5b:e1:f9:6f:eb:19:1d:91:89:c3:5e:34:ce:bd: 2a:33:81:6f:d5:7d:9a:b8:86:6f:a2:fb:b6:f7:01: 5f:48:5a:b8:3f:2b:ba:33:70:cb:0d:1e:dd:5a:b5: 65:89:b7:7b:2b:cb:4d:0d:fd:21:ea:a3:37:79:52: 41:57:b2:d6:44:1b:40:2a:09:83:44:b4:b7:58:b1: 27:49:53:d1:3b:9b:31:a1:cf:2c:d7:d9:65:18:85: 14:5f:3a:82:c2:fa:12:e1:ed:3d:f4:fd:17:02:e5: 85:70:bc:e9:5a:b2:f7:c0:2d:30:80:69:cd:29:91: a3:a4:56:fd:b2:4b:c3:bb:41:97:b7:64:86:89:cc: fd:6e:8a:a4:65:ac:7f:48:0f:67:f5:06:c3:77:9d: 5a:54:0a:c4:c4:14:4c:b3:d5:25:d3:5b:09:ec:ff: 20:f0:c8:2a:a4:78:12:85:e2:e2:fd:ea:b4:97:57: db:ac:06:4e:c3:db:2a:c6:28:93:27:3b:2f:98:46: 87:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:19:C2:BC:0E:DE:07:E3:1B:15:05:2F:DB:E1:80:7D:89:12:A9:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/dfd0fa5d-0e8c-3bcc-9785-16dd7771ec4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv6: 2607:fcf0:10a0::/44 2607:fcf0:20a0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:ab:a3:3e:53:77:7e:14:1c:90:51:bd:9c:d4:53:88:76:12: 0a:a9:23:a4:b8:13:9c:3a:61:f6:e5:ce:49:c5:fe:5d:5c:4f: 05:8f:d6:24:f0:a5:d5:64:67:58:5d:59:5b:b2:fb:1a:6e:a2: 35:35:66:f7:c5:18:62:b2:e2:b6:a9:e6:d1:64:82:8d:35:bf: b8:b0:ac:79:b3:32:e5:4d:ff:cb:67:02:74:ae:fd:9b:93:f8: 76:e0:65:07:9c:bb:50:39:73:25:0f:2a:23:2c:36:bd:f2:62: 06:58:9a:4c:0c:02:b2:9c:ca:d4:ff:5c:33:f3:78:05:18:64: 4a:91:7d:d3:42:6b:93:20:e1:89:c7:dc:84:f9:0a:33:d8:50: fc:aa:c9:7c:ad:98:0c:4d:34:a2:c8:31:31:78:17:d4:d6:ca: 9e:1c:8a:e3:bb:7b:55:d3:ce:9e:d4:f3:38:80:ba:67:1d:a1: 20:a5:e9:4b:f2:91:72:77:ab:ae:a8:6a:75:be:b6:1e:8e:ba: 5c:23:8b:40:06:2f:d4:bc:d3:91:45:5f:a9:6c:eb:cd:50:7b: ee:af:bd:a1:59:14:46:b0:7e:8a:3e:af:43:9c:da:29:f0:2c: 33:c1:6c:59:40:07:a0:d5:a1:44:b1:3c:3d:13:97:49:92:32: 30:ab:dc:24 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEumZ69X5wzRg9DjXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk ZjQzNzgxY2YtMWE5MS00ZGYzLWIyOTMtOTc0NmI4YTgwNDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgP9fiXFVmf1dRs2+RE2dheBJA4Hz6lYuWnV8 quC2o1ViaZ468zxai/YtRNC5ZFxVxBuIuz8XRX3AECqrW+H5b+sZHZGJw140zr0q M4Fv1X2auIZvovu29wFfSFq4Pyu6M3DLDR7dWrVlibd7K8tNDf0h6qM3eVJBV7LW RBtAKgmDRLS3WLEnSVPRO5sxoc8s19llGIUUXzqCwvoS4e099P0XAuWFcLzpWrL3 wC0wgGnNKZGjpFb9skvDu0GXt2SGicz9boqkZax/SA9n9QbDd51aVArExBRMs9Ul 01sJ7P8g8MgqpHgSheLi/eq0l1fbrAZOw9sqxiiTJzsvmEaH+wIDAQABo4IDYTCC A10wHQYDVR0OBBYEFGsZwrwO3gfjGxUFL9vhgH2JEqkKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvZGZkMGZhNWQtMGU4Yy0z YmNjLTk3ODUtMTZkZDc3NzFlYzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEJgf88BCg AwcEJgf88CCgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAKuroz5Td34UHJBRvZzUU4h2EgqpI6S4E5w6Yfbl zknF/l1cTwWP1iTwpdVkZ1hdWVuy+xpuojU1ZvfFGGKy4rap5tFkgo01v7iwrHmz MuVN/8tnAnSu/ZuT+HbgZQecu1A5cyUPKiMsNr3yYgZYmkwMArKcytT/XDPzeAUY ZEqRfdNCa5Mg4YnH3IT5CjPYUPyqyXytmAxNNKLIMTF4F9TWyp4ciuO7e1XTzp7U 8ziAumcdoSCl6UvykXJ3q66oanW+th6Oulwji0AGL9S805FFX6ls681Qe+6vvaFZ FEawfoo+r0Oc2inwLDPBbFlAB6DVoUSxPD0Tl0mSMjCr3CQ= -----END CERTIFICATE-----Generated at Wed Nov 5 14:06:56 2025 by rpki-client