$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/7ee28a40-8cc6-3784-ab6c-7741c7816572.roa File: 7ee28a40-8cc6-3784-ab6c-7741c7816572.roa (raw, json) Hash identifier: L0nJMnXXS4rkQ8qhMbtSEjnjJ5FQZiSx9uCsbVriZlo= Subject key identifier: 84:78:D4:10:A3:B1:FE:04:B9:BE:25:C1:58:91:23:3D:27:47:21:14 Certificate issuer: /CN=a8f47e3e-2561-4b79-b332-ee8a11ea0619 Certificate serial: 010D0C9F4328584B21CC3417E05825FF13CC28FC Authority key identifier: 5B:16:04:C9:4C:53:8A:AD:AD:E1:DB:D5:C0:B9:C9:9F:7B:6C:AB:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/7ee28a40-8cc6-3784-ab6c-7741c7816572.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 396982 IP address blocks: 2620:ce:e000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/a8f47e3e-2561-4b79-b332-ee8a11ea0619.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/a8f47e3e-2561-4b79-b332-ee8a11ea0619.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:34:17:e0:58:25:ff:13:cc:28:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8f47e3e-2561-4b79-b332-ee8a11ea0619 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=92708df5-4720-4639-bcbb-acee7979e46e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fc:89:59:99:c5:cb:c4:53:c7:2e:47:46:7e: 8c:a8:aa:16:c6:62:2d:79:9a:20:5e:92:21:5e:4a: f5:8a:c7:6c:a0:0e:a8:4e:2f:5c:a1:f9:32:59:88: 62:e9:88:a0:b4:a6:e9:ff:5c:b6:ce:c9:fa:89:2c: fc:2b:08:f1:52:92:55:6f:50:d7:80:ed:ff:58:d1: 7f:1f:c3:76:3b:b4:3b:07:32:2a:e0:04:0c:e0:a9: 36:28:4e:28:5b:a6:13:01:0c:11:de:c6:19:29:a7: 93:50:67:fb:b6:a8:08:21:42:81:ab:32:69:dc:63: f7:1b:47:08:e6:f4:f7:5d:9c:b0:5d:0f:51:86:d0: 25:8b:eb:b9:61:d0:cd:fc:b0:c9:59:57:0c:34:5d: be:e0:09:f8:4a:48:96:25:5f:cc:f1:00:01:f8:08: 72:0c:39:c4:76:b1:3b:93:88:18:a1:0a:b2:bc:cf: 17:e7:ae:7f:4f:f6:f4:c4:52:bb:d1:9c:54:b7:22: d5:4c:0d:88:1b:b1:d2:a3:38:ad:42:5c:24:01:9e: 96:70:e6:bc:cf:28:ea:7b:53:13:86:87:6f:41:55: 52:6e:38:f0:1d:fb:6e:39:3c:1b:84:e0:58:1f:fc: 14:25:0d:7a:01:63:70:db:70:5c:48:b5:c2:91:8a: 63:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:78:D4:10:A3:B1:FE:04:B9:BE:25:C1:58:91:23:3D:27:47:21:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/7ee28a40-8cc6-3784-ab6c-7741c7816572.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/a8f47e3e-2561-4b79-b332-ee8a11ea0619.crl X509v3 Authority Key Identifier: keyid:5B:16:04:C9:4C:53:8A:AD:AD:E1:DB:D5:C0:B9:C9:9F:7B:6C:AB:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619.cer sbgp-ipAddrBlock: critical IPv6: 2620:ce:e000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:70:34:7a:e7:71:4c:6f:fb:3c:92:30:fb:91:e1:83:28:87: 48:e1:51:de:65:38:97:c5:5e:0c:1e:2e:f5:ea:71:fc:bc:be: 0b:91:65:33:05:2a:fa:91:5c:8d:a3:18:f0:e0:d1:2f:af:26: a7:64:8f:08:d7:ed:71:27:99:44:08:6e:fd:04:17:ee:bc:14: db:17:90:d7:48:da:4d:c5:c6:53:be:49:42:96:d3:5b:60:05: 41:90:f9:f3:c2:11:20:fd:e6:6f:17:1d:52:2c:54:72:32:34: f0:d8:b8:a1:22:ca:72:15:95:2c:00:48:b2:25:e3:62:ec:71: 7f:70:96:82:bf:05:c9:f6:ad:32:ed:c9:12:95:54:52:62:db: b3:3f:85:02:99:db:61:cc:3d:9d:a8:40:ef:8c:f3:5a:3e:f0: 8e:2c:65:c4:20:df:5a:c1:45:bc:11:e0:b1:ca:da:6e:52:7e: 2a:9f:37:22:35:fd:73:65:25:a4:a9:4e:3c:c7:7c:13:36:42: 30:b5:15:35:12:37:c0:2e:de:f8:71:75:84:2f:46:d9:a2:4b: b7:8d:a4:bb:c4:56:c9:97:2e:a2:da:a3:24:5f:66:b1:75:84: 79:12:8f:9d:2c:9e:75:2b:1d:09:d6:be:76:59:e1:16:1d:18: 82:c9:ac:6a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEshzDQX4Fgl/xPMKPwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYThmNDdlM2UtMjU2MS00Yjc5LWIzMzItZWU4YTExZWEw NjE5MB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk OTI3MDhkZjUtNDcyMC00NjM5LWJjYmItYWNlZTc5NzllNDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufyJWZnFy8RTxy5HRn6MqKoWxmIteZogXpIh Xkr1isdsoA6oTi9cofkyWYhi6YigtKbp/1y2zsn6iSz8KwjxUpJVb1DXgO3/WNF/ H8N2O7Q7BzIq4AQM4Kk2KE4oW6YTAQwR3sYZKaeTUGf7tqgIIUKBqzJp3GP3G0cI 5vT3XZywXQ9RhtAli+u5YdDN/LDJWVcMNF2+4An4SkiWJV/M8QAB+AhyDDnEdrE7 k4gYoQqyvM8X565/T/b0xFK70ZxUtyLVTA2IG7HSozitQlwkAZ6WcOa8zyjqe1MT hodvQVVSbjjwHftuOTwbhOBYH/wUJQ16AWNw23BcSLXCkYpjDQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIR41BCjsf4Eub4lwViRIz0nRyEUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hOGY0 N2UzZS0yNTYxLTRiNzktYjMzMi1lZThhMTFlYTA2MTkvN2VlMjhhNDAtOGNjNi0z Nzg0LWFiNmMtNzc0MWM3ODE2NTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYThmNDdlM2UtMjU2MS00Yjc5LWIz MzItZWU4YTExZWEwNjE5L2E4ZjQ3ZTNlLTI1NjEtNGI3OS1iMzMyLWVlOGExMWVh MDYxOS5jcmwwHwYDVR0jBBgwFoAUWxYEyUxTiq2t4dvVwLnJn3tsqzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hOGY0N2UzZS0yNTYxLTRiNzktYjMzMi1lZThh MTFlYTA2MTkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAAzuAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHxwNHrncUxv+zySMPuR4YMoh0jhUd5lOJfFXgweLvXqcfy8vguR ZTMFKvqRXI2jGPDg0S+vJqdkjwjX7XEnmUQIbv0EF+68FNsXkNdI2k3FxlO+SUKW 01tgBUGQ+fPCESD95m8XHVIsVHIyNPDYuKEiynIVlSwASLIl42LscX9wloK/Bcn2 rTLtyRKVVFJi27M/hQKZ22HMPZ2oQO+M81o+8I4sZcQg31rBRbwR4LHK2m5Sfiqf NyI1/XNlJaSpTjzHfBM2QjC1FTUSN8Au3vhxdYQvRtmiS7eNpLvEVsmXLqLaoyRf ZrF1hHkSj50snnUrHQnWvnZZ4RYdGILJrGo= -----END CERTIFICATE-----Generated at Fri Oct 10 03:57:15 2025 by rpki-client