$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/db07585b-020b-33f3-a0f7-688ba5615a1b.roa File: db07585b-020b-33f3-a0f7-688ba5615a1b.roa (raw, json) Hash identifier: AGRfx59zaeGSzXSyJyDuoab4566cnfRWOwsHKn0OqcU= Subject key identifier: EF:DC:BC:F8:AF:3D:D1:50:E1:58:F4:33:AC:4D:A1:B7:D0:2E:25:F7 Certificate issuer: /CN=d12ff9c7-ced8-4cc2-b3d5-adf1859a808c Certificate serial: 010D0C9F4328584B004BE0A90ABF90880B676E98 Authority key identifier: 5A:CD:BF:B9:70:80:A4:AA:F3:8E:B8:58:29:11:41:07:9C:EE:FD:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/db07585b-020b-33f3-a0f7-688ba5615a1b.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 14618 IP address blocks: 2620:121:5040::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4b:e0:a9:0a:bf:90:88:0b:67:6e:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d12ff9c7-ced8-4cc2-b3d5-adf1859a808c Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=5cef7c9c-c15e-4eaf-9f1f-3d6a218f22c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a4:b0:0d:41:45:9f:6f:89:f2:5d:92:3b:c8: 7f:4f:24:f5:25:99:bf:f0:96:34:1e:a3:fd:c0:00: d0:4f:25:94:0a:fb:54:61:76:7d:4c:ed:a5:52:b6: 6a:bb:1d:66:5a:24:ef:69:4a:07:49:3c:d1:c9:a0: bc:98:cd:54:66:80:af:14:2e:e5:38:ca:a8:61:2d: 6a:b8:85:ee:ba:a0:b4:a5:46:7a:01:21:44:67:d1: 61:f5:8f:3c:c4:02:89:13:44:3b:4a:4f:0c:f2:0e: 48:ba:97:ea:36:bf:24:d3:c0:4d:00:16:0e:a9:a8: f3:d9:3b:09:e7:c8:e6:8b:0c:af:cb:4d:0f:3d:96: 66:c9:de:b5:89:6b:ac:32:be:eb:a5:ae:a2:c4:c1: 11:51:aa:2f:a6:dd:34:7b:09:88:a0:55:ae:92:6d: 11:ce:52:b3:7d:9d:8f:51:d3:0d:02:8a:46:1d:d6: d3:1a:9a:d8:bc:98:fa:ee:01:0c:cc:bf:ea:49:22: 01:27:ec:eb:9b:6e:b4:08:ff:1c:a7:0c:3c:10:0e: b7:9f:98:01:e0:81:b1:7b:64:1a:56:c9:45:e0:29: d0:23:83:a0:25:03:fe:63:a8:b2:14:3d:f0:d2:11: 70:d4:41:b6:d4:a6:ba:49:b1:80:d8:06:f4:25:b2: 88:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:DC:BC:F8:AF:3D:D1:50:E1:58:F4:33:AC:4D:A1:B7:D0:2E:25:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/db07585b-020b-33f3-a0f7-688ba5615a1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.crl X509v3 Authority Key Identifier: keyid:5A:CD:BF:B9:70:80:A4:AA:F3:8E:B8:58:29:11:41:07:9C:EE:FD:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer sbgp-ipAddrBlock: critical IPv6: 2620:121:5040::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:e8:27:b2:19:b6:19:7a:50:41:02:08:3b:e5:96:39:2a:3d: 99:ea:f8:b6:f2:9c:d4:86:f7:bc:80:e0:7a:d2:2f:42:49:7d: a7:c2:fe:ff:41:f1:9e:07:29:c8:d4:c9:e6:33:c3:58:2d:91: 3f:1c:3d:09:6a:a8:4b:b4:77:bf:a8:c0:25:b4:86:68:24:82: bc:fd:28:73:1b:2a:88:e8:d9:b6:8b:ae:9c:64:9a:ce:8b:82: 86:a0:40:89:d0:ee:96:c4:b4:88:59:19:0c:bf:73:e9:bc:43: 9a:e3:eb:a9:b9:01:8a:19:e4:9b:55:53:94:16:66:3a:04:33: b1:c6:a8:8b:48:30:6b:b5:c0:40:10:e7:9e:60:fd:5b:75:f7: 44:fe:c9:2a:81:8b:0e:91:93:ef:89:68:ef:84:6e:b0:9e:b6: b5:b8:59:d2:81:ef:02:9f:c3:e5:09:2a:b1:c8:6a:0e:5a:cf: 79:32:70:37:10:dd:e9:5f:61:65:4b:b6:d8:7f:c8:7e:b1:bb: 3c:9f:f4:98:d9:e1:64:81:46:e7:b3:e0:43:b3:24:1e:e7:f2: 9d:8e:5f:47:be:93:d6:6a:09:d3:19:6d:e6:ca:8e:f2:2d:93: bd:08:6f:f9:d0:40:a6:a7:3c:3b:3c:7d:89:a8:9c:28:a5:7d: c9:69:4f:ec -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsAS+CpCr+QiAtnbpgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDEyZmY5YzctY2VkOC00Y2MyLWIzZDUtYWRmMTg1OWE4 MDhjMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk NWNlZjdjOWMtYzE1ZS00ZWFmLTlmMWYtM2Q2YTIxOGYyMmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqSwDUFFn2+J8l2SO8h/TyT1JZm/8JY0HqP9 wADQTyWUCvtUYXZ9TO2lUrZqux1mWiTvaUoHSTzRyaC8mM1UZoCvFC7lOMqoYS1q uIXuuqC0pUZ6ASFEZ9Fh9Y88xAKJE0Q7Sk8M8g5IupfqNr8k08BNABYOqajz2TsJ 58jmiwyvy00PPZZmyd61iWusMr7rpa6ixMERUaovpt00ewmIoFWukm0RzlKzfZ2P UdMNAopGHdbTGprYvJj67gEMzL/qSSIBJ+zrm260CP8cpww8EA63n5gB4IGxe2Qa VslF4CnQI4OgJQP+Y6iyFD3w0hFw1EG21Ka6SbGA2Ab0JbKI9QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO/cvPivPdFQ4Vj0M6xNobfQLiX3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kMTJm ZjljNy1jZWQ4LTRjYzItYjNkNS1hZGYxODU5YTgwOGMvZGIwNzU4NWItMDIwYi0z M2YzLWEwZjctNjg4YmE1NjE1YTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDEyZmY5YzctY2VkOC00Y2MyLWIz ZDUtYWRmMTg1OWE4MDhjL2QxMmZmOWM3LWNlZDgtNGNjMi1iM2Q1LWFkZjE4NTlh ODA4Yy5jcmwwHwYDVR0jBBgwFoAUWs2/uXCApKrzjrhYKRFBB5zu/dcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kMTJmZjljNy1jZWQ4LTRjYzItYjNkNS1hZGYx ODU5YTgwOGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABIVBA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKvoJ7IZthl6UEECCDvlljkqPZnq+LbynNSG97yA4HrSL0JJfafC /v9B8Z4HKcjUyeYzw1gtkT8cPQlqqEu0d7+owCW0hmgkgrz9KHMbKojo2baLrpxk ms6LgoagQInQ7pbEtIhZGQy/c+m8Q5rj66m5AYoZ5JtVU5QWZjoEM7HGqItIMGu1 wEAQ555g/Vt190T+ySqBiw6Rk++JaO+EbrCetrW4WdKB7wKfw+UJKrHIag5az3ky cDcQ3elfYWVLtth/yH6xuzyf9JjZ4WSBRuez4EOzJB7n8p2OX0e+k9ZqCdMZbebK jvItk70Ib/nQQKanPDs8fYmonCilfclpT+w= -----END CERTIFICATE-----Generated at Thu Oct 9 20:04:37 2025 by rpki-client