$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/043db50e-d504-35e2-a949-f1fdfd29043a.roa File: 043db50e-d504-35e2-a949-f1fdfd29043a.roa (raw, json) Hash identifier: psdPHQxMhrY8AmOdGVL17FcVgc1pBP4UXgZx7O4EuP0= Subject key identifier: AC:39:0D:FC:37:55:71:4C:0E:B0:A0:FC:F0:08:D7:16:2B:5B:FC:AE Certificate issuer: /CN=7db346f0-17b1-4b0d-942b-291f70e18910 Certificate serial: 010D0C9F4328584B1C36C0800A946C3A2BEF8180 Authority key identifier: 4D:B3:C5:05:6C:88:DD:EA:E8:26:74:75:4A:EA:75:38:D5:7A:4B:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/043db50e-d504-35e2-a949-f1fdfd29043a.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 40317 IP address blocks: 2605:5e00::/32 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/7db346f0-17b1-4b0d-942b-291f70e18910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/7db346f0-17b1-4b0d-942b-291f70e18910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:c0:80:0a:94:6c:3a:2b:ef:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7db346f0-17b1-4b0d-942b-291f70e18910 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=48ab9217-983d-4186-8347-318ec3cdd360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d5:2f:ae:20:0f:9e:62:b7:38:12:dc:8d:eb: 74:9b:92:a9:17:32:ea:3a:57:72:70:72:71:de:62: 4a:7d:84:72:27:d7:05:01:54:62:82:37:8b:cb:d3: cd:46:9e:1e:04:7e:66:f9:f3:59:96:b8:1c:f2:c0: 9b:2e:ca:0e:2e:67:cc:29:bd:2f:a1:0b:c6:83:c8: fc:07:8b:c8:f7:ec:30:08:b8:ba:42:22:98:93:81: e0:f6:3d:f0:99:7a:d2:54:47:5a:da:ea:98:d6:f3: 2d:4b:fd:59:73:db:fa:43:49:ae:3f:6d:6d:0e:fd: d7:f0:33:a1:ed:85:fe:2f:f5:cd:90:65:37:09:2a: c8:99:80:31:0f:0e:a3:6c:87:1b:41:ef:5e:d1:de: c5:36:53:b6:4a:a1:f3:cf:0c:48:fe:0c:f8:8b:62: 2b:dc:4f:06:76:e0:c8:2f:c8:2d:0e:e8:72:b6:0d: 9a:cb:00:4e:f3:02:83:06:60:a2:8c:c9:c2:51:62: dd:98:1d:01:5f:6e:5b:96:88:3c:8d:c2:df:d4:ad: 49:a9:59:3c:a0:61:aa:3f:b8:33:d7:91:c5:bb:31: c8:6a:41:8e:d7:66:1f:ee:ce:77:bd:9e:58:d1:55: d5:8e:8b:d6:d9:58:af:c4:67:b1:1f:d0:1f:8c:fc: 4a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:39:0D:FC:37:55:71:4C:0E:B0:A0:FC:F0:08:D7:16:2B:5B:FC:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/043db50e-d504-35e2-a949-f1fdfd29043a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/7db346f0-17b1-4b0d-942b-291f70e18910.crl X509v3 Authority Key Identifier: keyid:4D:B3:C5:05:6C:88:DD:EA:E8:26:74:75:4A:EA:75:38:D5:7A:4B:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910.cer sbgp-ipAddrBlock: critical IPv6: 2605:5e00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:4e:8e:08:43:a8:a2:13:f3:63:5a:e8:15:c7:b3:da:70:9e: e9:bd:c3:89:6a:54:44:e6:c5:c6:ec:02:59:7e:3a:01:a3:50: e9:5d:d5:25:ac:77:18:7c:37:5b:35:91:d7:10:c6:7c:83:73: 95:7b:7e:a6:3c:a8:1b:05:57:a3:4e:78:ab:0a:e9:fd:28:e8: 8e:2a:6b:68:39:fa:1a:6f:a2:00:4e:5a:92:54:47:b4:e6:46: 80:ad:83:88:e6:e1:8e:47:4e:34:4f:06:df:f1:9e:11:a9:19: 26:51:bb:74:a7:2c:75:0d:cd:47:21:98:4c:27:56:76:c5:d8: eb:f4:ec:33:c7:62:7a:00:69:63:31:3a:00:e3:67:6c:4e:0c: 7d:23:e6:62:c9:77:55:c8:1f:e0:0a:1e:4b:8d:2b:ec:de:a3: dd:03:30:94:ae:13:5c:c7:36:04:fd:eb:67:93:53:cb:0b:ab: cd:2a:e8:80:17:09:d0:49:5a:91:3c:30:b7:b1:b4:ce:bb:78: 36:19:78:f6:16:44:e4:55:52:48:46:97:09:c9:95:f1:38:eb: 20:6e:ce:db:99:1a:1e:6a:eb:e0:5d:46:01:8a:c1:25:6a:04: c8:46:30:72:80:5c:84:2c:85:35:4c:50:5f:9d:7a:77:bd:8a: a4:70:9e:54 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEscNsCACpRsOivvgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2RiMzQ2ZjAtMTdiMS00YjBkLTk0MmItMjkxZjcwZTE4 OTEwMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk NDhhYjkyMTctOTgzZC00MTg2LTgzNDctMzE4ZWMzY2RkMzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9UvriAPnmK3OBLcjet0m5KpFzLqOldycHJx 3mJKfYRyJ9cFAVRigjeLy9PNRp4eBH5m+fNZlrgc8sCbLsoOLmfMKb0voQvGg8j8 B4vI9+wwCLi6QiKYk4Hg9j3wmXrSVEda2uqY1vMtS/1Zc9v6Q0muP21tDv3X8DOh 7YX+L/XNkGU3CSrImYAxDw6jbIcbQe9e0d7FNlO2SqHzzwxI/gz4i2Ir3E8GduDI L8gtDuhytg2aywBO8wKDBmCijMnCUWLdmB0BX25blog8jcLf1K1JqVk8oGGqP7gz 15HFuzHIakGO12Yf7s53vZ5Y0VXVjovW2VivxGexH9AfjPxK0QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKw5Dfw3VXFMDrCg/PAI1xYrW/yuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83ZGIz NDZmMC0xN2IxLTRiMGQtOTQyYi0yOTFmNzBlMTg5MTAvMDQzZGI1MGUtZDUwNC0z NWUyLWE5NDktZjFmZGZkMjkwNDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvN2RiMzQ2ZjAtMTdiMS00YjBkLTk0 MmItMjkxZjcwZTE4OTEwLzdkYjM0NmYwLTE3YjEtNGIwZC05NDJiLTI5MWY3MGUx ODkxMC5jcmwwHwYDVR0jBBgwFoAUTbPFBWyI3eroJnR1Sup1ONV6S1gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83ZGIzNDZmMC0xN2IxLTRiMGQtOTQyYi0yOTFm NzBlMTg5MTAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgVeADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBwTo4IQ6iiE/NjWugVx7PacJ7pvcOJalRE5sXG7AJZfjoBo1DpXdUl rHcYfDdbNZHXEMZ8g3OVe36mPKgbBVejTnirCun9KOiOKmtoOfoab6IATlqSVEe0 5kaArYOI5uGOR040Twbf8Z4RqRkmUbt0pyx1Dc1HIZhMJ1Z2xdjr9Owzx2J6AGlj MToA42dsTgx9I+ZiyXdVyB/gCh5LjSvs3qPdAzCUrhNcxzYE/etnk1PLC6vNKuiA FwnQSVqRPDC3sbTOu3g2GXj2FkTkVVJIRpcJyZXxOOsgbs7bmRoeauvgXUYBisEl agTIRjBygFyELIU1TFBfnXp3vYqkcJ5U -----END CERTIFICATE-----Generated at Sat Oct 11 15:16:44 2025 by rpki-client