$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/c212f2f7-10a0-305d-a60a-eca4e1430a94.roa File: c212f2f7-10a0-305d-a60a-eca4e1430a94.roa (raw, json) Hash identifier: Jn2zkKV+rqHOqBhdmvOXDF28Aznwh4aucA9R5iYZn7M= Subject key identifier: E6:7A:42:50:1D:16:94:01:34:D6:0E:0C:DB:AD:E9:02:05:64:42:3F Certificate issuer: /CN=0ad2b3c4-a64c-4afd-b0df-103361339550 Certificate serial: 010D0C9F4328584B4D11DA3E90F12B7E1D7B6540 Authority key identifier: B8:DE:C1:C3:64:52:F0:42:07:DB:3E:84:A4:35:F9:05:C1:BF:3B:6E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/c212f2f7-10a0-305d-a60a-eca4e1430a94.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 11287 IP address blocks: 2607:1d80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/0ad2b3c4-a64c-4afd-b0df-103361339550.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/0ad2b3c4-a64c-4afd-b0df-103361339550.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:da:3e:90:f1:2b:7e:1d:7b:65:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ad2b3c4-a64c-4afd-b0df-103361339550 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=95a44ea2-51a3-440f-b948-97c6b7d197a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9a:a6:2b:83:cc:08:17:87:e9:ec:ac:6a:4f: 7b:ea:96:8d:4d:31:b9:99:1f:8c:0e:f8:38:fa:db: 19:ff:78:44:15:d1:22:b5:a1:85:7c:af:3e:0a:26: 6e:e7:00:3f:df:c7:e9:d0:46:af:60:24:33:91:de: 82:e2:74:22:f7:d2:29:64:32:fc:23:f0:e1:ff:2f: 8f:9e:69:75:cb:a7:f4:1c:f9:a1:56:4e:d2:d8:9e: 1e:fb:83:c5:98:e9:d6:2a:1d:e5:d5:1b:2e:fc:2b: 98:f8:9c:3b:88:66:10:d4:d9:3d:5f:81:80:54:64: 66:49:3c:c0:6e:75:9b:6d:84:a4:95:5f:3a:8e:cd: f6:99:05:9a:d4:93:ca:01:8f:41:96:6a:03:3a:42: 8f:2f:40:48:b0:38:1b:10:9b:35:1c:2c:0a:8a:92: 27:67:90:12:f0:04:db:06:07:9b:13:e2:6f:14:b2: 5d:eb:34:9f:ab:b9:dd:3a:3f:0b:c2:c5:3c:81:66: 3e:2f:5f:7e:a3:b8:ce:7e:87:59:bb:3a:ed:76:c9: e7:28:07:89:e6:e7:a2:b1:9a:f3:3b:e0:1d:82:2d: f0:cd:f4:2b:79:7c:26:e6:06:34:33:0f:92:f3:e5: eb:54:31:64:98:76:15:fd:e7:e7:0e:32:c2:ee:97: 78:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:7A:42:50:1D:16:94:01:34:D6:0E:0C:DB:AD:E9:02:05:64:42:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/c212f2f7-10a0-305d-a60a-eca4e1430a94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/0ad2b3c4-a64c-4afd-b0df-103361339550.crl X509v3 Authority Key Identifier: keyid:B8:DE:C1:C3:64:52:F0:42:07:DB:3E:84:A4:35:F9:05:C1:BF:3B:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550.cer sbgp-ipAddrBlock: critical IPv6: 2607:1d80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:d9:08:be:6f:7d:d4:5b:72:1e:88:74:fc:2a:a6:85:d9:96: a9:fe:ff:c2:51:f1:e6:de:fd:a6:a4:c4:2c:1d:b7:06:91:10: b5:ba:53:92:d7:2c:0f:a6:85:5d:37:c8:53:48:d6:12:b5:2a: 01:be:fd:c4:5d:84:5b:35:78:d7:c9:17:ca:38:89:d9:38:f7: 08:2c:25:53:c4:8b:b8:b5:f8:f1:13:8a:bf:c6:cc:8a:c5:23: ca:1a:18:a4:ec:f3:e4:11:b0:d4:28:30:88:bd:12:39:bc:59: f4:c9:3b:4f:e6:53:a7:60:94:60:85:1d:ed:bb:eb:b6:1f:ad: 35:58:74:d2:90:75:cf:80:e5:6e:03:83:18:ee:66:e4:cc:66: 83:06:d2:4a:62:85:79:e7:f2:b6:c4:cb:1b:6f:6c:cf:79:09: d0:cc:a2:c0:a6:ea:ab:24:19:49:96:41:c6:df:87:16:91:b0: a3:77:0f:e9:b7:a6:d6:1e:4b:14:b2:08:37:af:e3:73:c5:5c: 51:eb:22:be:71:1a:63:f0:36:a8:e1:d5:9b:42:28:e6:a6:05: 15:4f:ae:a0:94:1e:67:3f:19:8e:94:06:21:b7:11:74:7c:3e: e3:dc:86:18:f1:d6:8e:e6:45:d9:33:ad:a5:1f:c0:32:99:88: 04:a0:aa:df -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtNEdo+kPErfh17ZUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFkMmIzYzQtYTY0Yy00YWZkLWIwZGYtMTAzMzYxMzM5 NTUwMB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk OTVhNDRlYTItNTFhMy00NDBmLWI5NDgtOTdjNmI3ZDE5N2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5qmK4PMCBeH6eysak976paNTTG5mR+MDvg4 +tsZ/3hEFdEitaGFfK8+CiZu5wA/38fp0EavYCQzkd6C4nQi99IpZDL8I/Dh/y+P nml1y6f0HPmhVk7S2J4e+4PFmOnWKh3l1Rsu/CuY+Jw7iGYQ1Nk9X4GAVGRmSTzA bnWbbYSklV86js32mQWa1JPKAY9BlmoDOkKPL0BIsDgbEJs1HCwKipInZ5AS8ATb BgebE+JvFLJd6zSfq7ndOj8LwsU8gWY+L19+o7jOfodZuzrtdsnnKAeJ5ueisZrz O+Adgi3wzfQreXwm5gY0Mw+S8+XrVDFkmHYV/efnDjLC7pd4JwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOZ6QlAdFpQBNNYODNut6QIFZEI/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYWQy YjNjNC1hNjRjLTRhZmQtYjBkZi0xMDMzNjEzMzk1NTAvYzIxMmYyZjctMTBhMC0z MDVkLWE2MGEtZWNhNGUxNDMwYTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGFkMmIzYzQtYTY0Yy00YWZkLWIw ZGYtMTAzMzYxMzM5NTUwLzBhZDJiM2M0LWE2NGMtNGFmZC1iMGRmLTEwMzM2MTMz OTU1MC5jcmwwHwYDVR0jBBgwFoAUuN7Bw2RS8EIH2z6EpDX5BcG/O24wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYWQyYjNjNC1hNjRjLTRhZmQtYjBkZi0xMDMz NjEzMzk1NTAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcdgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBo2Qi+b33UW3IeiHT8KqaF2Zap/v/CUfHm3v2mpMQsHbcGkRC1ulOS 1ywPpoVdN8hTSNYStSoBvv3EXYRbNXjXyRfKOInZOPcILCVTxIu4tfjxE4q/xsyK xSPKGhik7PPkEbDUKDCIvRI5vFn0yTtP5lOnYJRghR3tu+u2H601WHTSkHXPgOVu A4MY7mbkzGaDBtJKYoV55/K2xMsbb2zPeQnQzKLApuqrJBlJlkHG34cWkbCjdw/p t6bWHksUsgg3r+NzxVxR6yK+cRpj8Dao4dWbQijmpgUVT66glB5nPxmOlAYhtxF0 fD7j3IYY8daO5kXZM62lH8AymYgEoKrf -----END CERTIFICATE-----Generated at Fri Oct 10 03:52:07 2025 by rpki-client