$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f8ffd4ba-11b7-4c10-9a14-2850086d1269/7c9e3d2a-e6e2-381c-b17a-7d09b62fcc80.roa File: 7c9e3d2a-e6e2-381c-b17a-7d09b62fcc80.roa (raw, json) Hash identifier: fG/LFQ1C9+2mFSiZsOpkXMODYC5rb2JJY9tQv5UGo60= Subject key identifier: BE:B2:45:0A:6F:33:85:30:65:DA:4B:1D:A7:5A:EB:DB:F0:7C:E8:D5 Certificate issuer: /CN=f8ffd4ba-11b7-4c10-9a14-2850086d1269 Certificate serial: 010D0C9F4328584B3556E38EF2C1FE1CE002C480 Authority key identifier: E9:4F:AA:B0:4A:25:49:EF:B7:29:CB:C7:75:2F:28:44:8D:4C:EC:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f8ffd4ba-11b7-4c10-9a14-2850086d1269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f8ffd4ba-11b7-4c10-9a14-2850086d1269/7c9e3d2a-e6e2-381c-b17a-7d09b62fcc80.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 10546 IP address blocks: 2605:c8c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f8ffd4ba-11b7-4c10-9a14-2850086d1269/f8ffd4ba-11b7-4c10-9a14-2850086d1269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f8ffd4ba-11b7-4c10-9a14-2850086d1269/f8ffd4ba-11b7-4c10-9a14-2850086d1269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f8ffd4ba-11b7-4c10-9a14-2850086d1269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:e3:8e:f2:c1:fe:1c:e0:02:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8ffd4ba-11b7-4c10-9a14-2850086d1269 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=9680c73d-28ab-4053-9c33-91122cb0c71c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:79:d0:99:4e:a5:93:40:9a:ec:23:1a:bd:d8: 6e:89:26:81:4b:2a:41:c1:97:c5:5c:d3:fe:33:53: d3:32:56:3c:c1:14:ed:c6:37:c2:6e:6c:77:2b:62: 03:af:d5:40:48:5b:0a:9a:df:1b:f8:a8:2a:d1:22: 56:fd:51:f4:1b:3e:96:9e:10:9c:6c:da:3d:6b:4a: 67:44:74:77:56:f7:a9:b1:0b:43:d1:ba:82:f9:d1: 8c:b0:eb:f6:b2:01:06:f1:b8:f7:74:2c:b0:c7:94: 49:5a:65:31:c5:4c:c9:8f:73:f4:07:dd:93:50:84: 7e:28:b1:63:a6:82:35:31:ba:10:50:79:c6:c9:04: a1:6e:ca:77:f8:b9:03:10:1e:09:70:20:41:3d:3c: 57:ea:83:fc:ab:8f:cc:85:0b:c4:4f:c6:11:8f:f7: de:2d:9b:1f:c8:59:b8:4c:92:87:90:cd:54:37:73: 92:99:7f:25:dc:a2:18:21:e2:60:0e:84:0a:78:ac: f4:06:c2:02:2b:46:21:2f:63:1c:ee:e4:a9:31:37: 5f:33:72:e9:13:8a:d6:e1:11:0d:ba:46:c1:6e:a1: e6:18:03:b7:9b:47:e2:ac:f7:a0:47:ca:0c:ec:29: c1:34:3c:9a:b3:70:d9:61:ce:09:76:28:f4:c8:f7: ca:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:B2:45:0A:6F:33:85:30:65:DA:4B:1D:A7:5A:EB:DB:F0:7C:E8:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f8ffd4ba-11b7-4c10-9a14-2850086d1269/7c9e3d2a-e6e2-381c-b17a-7d09b62fcc80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f8ffd4ba-11b7-4c10-9a14-2850086d1269/f8ffd4ba-11b7-4c10-9a14-2850086d1269.crl X509v3 Authority Key Identifier: keyid:E9:4F:AA:B0:4A:25:49:EF:B7:29:CB:C7:75:2F:28:44:8D:4C:EC:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f8ffd4ba-11b7-4c10-9a14-2850086d1269.cer sbgp-ipAddrBlock: critical IPv6: 2605:c8c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:4b:24:d0:32:38:e6:c3:1b:fe:ad:53:63:5d:8a:f7:60:08: a5:16:e3:76:f6:ca:7b:f0:0f:b3:d8:d9:c5:c9:57:71:ee:b1: 8e:65:f0:27:10:94:71:71:ab:a8:71:a7:03:c1:06:a2:e9:46: a7:64:95:bf:0e:5c:7a:a4:61:83:e4:9c:92:0c:53:51:1a:98: 8d:92:f6:50:b1:13:c5:36:b8:4e:12:4e:1c:8f:e8:84:c8:90: 9d:17:74:40:63:74:9b:1d:06:86:49:0f:42:c8:e1:52:6c:9e: cc:af:5a:62:ad:7c:4f:f7:78:9d:d4:a1:d0:d1:87:39:2a:b0: aa:f7:d8:ac:38:20:8d:84:fc:96:2d:f7:8e:21:ec:0a:78:c2: 8e:8b:82:4d:64:75:8a:ee:8b:31:93:c4:94:d1:5f:7a:2c:44: 70:f7:05:3f:15:57:08:a6:eb:63:98:ae:32:1b:e2:b1:df:5e: ba:12:cd:4a:dc:63:de:6b:30:72:1b:fc:1a:ea:1d:df:d5:6e: b8:4a:b7:0e:cb:5a:03:22:16:5e:31:3a:59:58:4a:97:21:49: 1f:aa:3f:bc:d3:15:a8:76:98:6a:32:96:2a:47:37:78:12:1c: 66:25:88:91:74:56:e6:27:8e:f0:cd:12:d3:51:93:6e:e7:6a: 4f:ee:11:2d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEs1VuOO8sH+HOACxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhmZmQ0YmEtMTFiNy00YzEwLTlhMTQtMjg1MDA4NmQx MjY5MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk OTY4MGM3M2QtMjhhYi00MDUzLTljMzMtOTExMjJjYjBjNzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHnQmU6lk0Ca7CMavdhuiSaBSypBwZfFXNP+ M1PTMlY8wRTtxjfCbmx3K2IDr9VASFsKmt8b+Kgq0SJW/VH0Gz6WnhCcbNo9a0pn RHR3VvepsQtD0bqC+dGMsOv2sgEG8bj3dCywx5RJWmUxxUzJj3P0B92TUIR+KLFj poI1MboQUHnGyQShbsp3+LkDEB4JcCBBPTxX6oP8q4/MhQvET8YRj/feLZsfyFm4 TJKHkM1UN3OSmX8l3KIYIeJgDoQKeKz0BsICK0YhL2Mc7uSpMTdfM3LpE4rW4REN ukbBbqHmGAO3m0firPegR8oM7CnBNDyas3DZYc4Jdij0yPfK1QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFL6yRQpvM4UwZdpLHada69vwfOjVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mOGZm ZDRiYS0xMWI3LTRjMTAtOWExNC0yODUwMDg2ZDEyNjkvN2M5ZTNkMmEtZTZlMi0z ODFjLWIxN2EtN2QwOWI2MmZjYzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjhmZmQ0YmEtMTFiNy00YzEwLTlh MTQtMjg1MDA4NmQxMjY5L2Y4ZmZkNGJhLTExYjctNGMxMC05YTE0LTI4NTAwODZk MTI2OS5jcmwwHwYDVR0jBBgwFoAU6U+qsEolSe+3KcvHdS8oRI1M7IEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mOGZmZDRiYS0xMWI3LTRjMTAtOWExNC0yODUw MDg2ZDEyNjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXIwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBuSyTQMjjmwxv+rVNjXYr3YAilFuN29sp78A+z2NnFyVdx7rGOZfAn EJRxcauocacDwQai6UanZJW/Dlx6pGGD5JySDFNRGpiNkvZQsRPFNrhOEk4cj+iE yJCdF3RAY3SbHQaGSQ9CyOFSbJ7Mr1pirXxP93id1KHQ0Yc5KrCq99isOCCNhPyW LfeOIewKeMKOi4JNZHWK7osxk8SU0V96LERw9wU/FVcIputjmK4yG+Kx3166Es1K 3GPeazByG/wa6h3f1W64SrcOy1oDIhZeMTpZWEqXIUkfqj+80xWodphqMpYqRzd4 EhxmJYiRdFbmJ47wzRLTUZNu52pP7hEt -----END CERTIFICATE-----Generated at Sat Oct 11 11:28:56 2025 by rpki-client