$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/a0664a04-65f3-3769-8cf8-3417add96a9b.roa File: a0664a04-65f3-3769-8cf8-3417add96a9b.roa (raw, json) Hash identifier: OjglR1wtDuFqU8rAmTBqyDnBOjLB7iY2tju8TX+Oi2w= Subject key identifier: 35:DE:37:20:FF:C6:AE:A5:CE:DD:E3:34:4E:1B:83:AB:DA:37:B1:85 Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Certificate serial: 010D0C9F4328584B36BC4C7BAC869766AF4B2080 Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/a0664a04-65f3-3769-8cf8-3417add96a9b.roa Signing time: Tue 16 Sep 2025 13:00:41 +0000 ROA not before: Tue 16 Sep 2025 13:00:41 +0000 ROA not after: Mon 15 Dec 2025 14:00:41 +0000 asID: 14500 IP address blocks: 2607:72c0:200::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:36:bc:4c:7b:ac:86:97:66:af:4b:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Validity Not Before: Sep 16 13:00:41 2025 GMT Not After : Dec 15 14:00:41 2025 GMT Subject: CN=2ba080cf-413f-48d1-9e53-6f01d96a167e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fd:a2:4f:8a:a8:b9:12:ef:ae:5c:7a:ff:bf: b6:9b:d5:c6:0f:1e:c6:a6:26:76:9b:02:e9:6f:f7: c1:34:2c:cc:16:cb:13:d2:c1:9d:b7:d4:5a:ac:47: 0d:67:4c:b3:74:a9:4a:2a:66:b0:2a:c0:79:13:7b: 60:13:d5:4c:2a:2d:aa:c0:8d:3e:3c:6e:ce:ba:11: 5f:7c:55:b8:d2:01:fd:9d:dc:7f:6a:1c:ac:17:df: af:1f:50:1b:47:e5:f6:74:d2:3e:f7:28:d1:d6:c3: 17:f4:88:26:52:d6:f0:16:fd:76:98:11:49:8e:b5: d7:67:43:6a:24:96:32:f8:41:e9:fb:fd:8b:34:e6: ca:dc:c3:7e:66:ee:1a:94:ac:75:6c:4a:02:e5:fb: 75:4e:33:22:6b:85:9d:ff:18:bf:9e:87:f3:b5:64: 0d:9a:55:3c:5d:bf:04:1d:e4:2d:8d:a8:35:ac:8d: 57:ee:34:70:6e:1a:98:31:58:20:82:11:2a:2a:4f: 74:78:4a:08:91:81:86:a9:a0:8c:f3:32:02:45:fe: 9d:b7:45:55:34:ac:e8:90:80:ca:54:e6:70:13:48: a9:aa:d3:bb:8f:e6:eb:07:ec:bd:a3:c0:3b:af:73: ae:f0:33:28:13:b9:05:51:96:9e:df:3a:33:51:a9: 5a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:DE:37:20:FF:C6:AE:A5:CE:DD:E3:34:4E:1B:83:AB:DA:37:B1:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/a0664a04-65f3-3769-8cf8-3417add96a9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl X509v3 Authority Key Identifier: keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer sbgp-ipAddrBlock: critical IPv6: 2607:72c0:200::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:31:d7:3c:ec:7c:75:8e:ec:6e:32:32:2f:66:e6:d4:57:6e: 74:e1:f8:f3:34:fa:bb:d7:54:ed:15:23:b6:3a:67:88:f6:91: ca:c1:d9:74:38:01:ee:18:8f:e1:3a:9f:ba:4a:e1:0a:8a:7a: 04:ca:ec:87:22:63:0f:99:3a:b0:f5:ce:73:f3:bc:f2:62:c0: 9d:81:f3:1b:ac:a0:8c:2a:58:e6:84:b2:bf:de:2a:74:0a:7e: 92:5e:8d:bc:99:5f:ed:d6:82:8e:e5:69:4e:0a:85:eb:c2:1c: 37:46:91:f5:28:c6:d7:83:dc:ed:32:75:49:35:3a:c3:9a:5a: 26:03:47:01:4e:80:24:6b:d9:25:49:9f:5b:15:a7:e5:dc:56: 38:33:a3:01:f6:b7:2b:b3:2a:55:14:3f:f8:ae:d1:fc:8e:d4: 22:fb:77:6f:f5:f0:fd:8a:04:96:39:63:48:4b:e2:2a:d1:70: 91:33:4d:55:ab:86:5c:44:8a:5e:60:fe:cd:83:9c:d6:30:2e: 72:07:5f:d4:2b:da:2f:e8:38:ea:ad:6b:32:37:d1:4a:f2:11: f9:de:ed:ee:a0:bb:24:9a:1b:e0:e5:a2:0c:b9:7c:1b:ec:8b: 1b:cd:91:c5:53:b6:b7:4c:ae:5f:70:85:76:39:b4:b8:7b:de: 9e:a2:06:a8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs2vEx7rIaXZq9LIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2 ZDQ3MB4XDTI1MDkxNjEzMDA0MVoXDTI1MTIxNTE0MDA0MVowLzEtMCsGA1UEAxMk MmJhMDgwY2YtNDEzZi00OGQxLTllNTMtNmYwMWQ5NmExNjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/2iT4qouRLvrlx6/7+2m9XGDx7GpiZ2mwLp b/fBNCzMFssT0sGdt9RarEcNZ0yzdKlKKmawKsB5E3tgE9VMKi2qwI0+PG7OuhFf fFW40gH9ndx/ahysF9+vH1AbR+X2dNI+9yjR1sMX9IgmUtbwFv12mBFJjrXXZ0Nq JJYy+EHp+/2LNObK3MN+Zu4alKx1bEoC5ft1TjMia4Wd/xi/nofztWQNmlU8Xb8E HeQtjag1rI1X7jRwbhqYMVggghEqKk90eEoIkYGGqaCM8zICRf6dt0VVNKzokIDK VOZwE0ipqtO7j+brB+y9o8A7r3Ou8DMoE7kFUZae3zozUala7QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDXeNyD/xq6lzt3jNE4bg6vaN7GFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5 YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvYTA2NjRhMDQtNjVmMy0z NzY5LThjZjgtMzQxN2FkZDk2YTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3 MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk NzcwZDZkNDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgdywAIA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHsx1zzsfHWO7G4yMi9m5tRXbnTh+PM0+rvXVO0VI7Y6Z4j2kcrB 2XQ4Ae4Yj+E6n7pK4QqKegTK7IciYw+ZOrD1znPzvPJiwJ2B8xusoIwqWOaEsr/e KnQKfpJejbyZX+3Wgo7laU4KhevCHDdGkfUoxteD3O0ydUk1OsOaWiYDRwFOgCRr 2SVJn1sVp+XcVjgzowH2tyuzKlUUP/iu0fyO1CL7d2/18P2KBJY5Y0hL4irRcJEz TVWrhlxEil5g/s2DnNYwLnIHX9Qr2i/oOOqtazI30UryEfne7e6guySaG+Dlogy5 fBvsixvNkcVTtrdMrl9whXY5tLh73p6iBqg= -----END CERTIFICATE-----Generated at Wed Nov 5 22:13:34 2025 by rpki-client