$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/387b8a97-889c-48cd-b72e-4329cc21745b/131ef14c-4202-31aa-a2b5-69b4a64a3be0.roa File: 131ef14c-4202-31aa-a2b5-69b4a64a3be0.roa (raw, json) Hash identifier: ssprMCAtW/4Z2wirqrrz9U/VlpJK8mcf6YwPcgqiQws= Subject key identifier: C2:CA:F1:C2:49:47:8F:BC:54:98:9C:39:3E:40:D7:39:CF:6C:69:27 Certificate issuer: /CN=387b8a97-889c-48cd-b72e-4329cc21745b Certificate serial: 010D0C9F4328584AFAB683A9EF076DB9E56C4940 Authority key identifier: B1:70:09:21:ED:33:25:24:3C:22:B1:A2:3C:B0:84:F7:2E:7C:54:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/387b8a97-889c-48cd-b72e-4329cc21745b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/387b8a97-889c-48cd-b72e-4329cc21745b/131ef14c-4202-31aa-a2b5-69b4a64a3be0.roa Signing time: Tue 26 Aug 2025 01:00:32 +0000 ROA not before: Tue 26 Aug 2025 01:00:32 +0000 ROA not after: Mon 24 Nov 2025 02:00:32 +0000 asID: 396530 IP address blocks: 2607:a6c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/387b8a97-889c-48cd-b72e-4329cc21745b/387b8a97-889c-48cd-b72e-4329cc21745b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/387b8a97-889c-48cd-b72e-4329cc21745b/387b8a97-889c-48cd-b72e-4329cc21745b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/387b8a97-889c-48cd-b72e-4329cc21745b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fa:b6:83:a9:ef:07:6d:b9:e5:6c:49:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=387b8a97-889c-48cd-b72e-4329cc21745b Validity Not Before: Aug 26 01:00:32 2025 GMT Not After : Nov 24 02:00:32 2025 GMT Subject: CN=2193c05d-e8df-4788-90d2-5b69c5318f28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:07:d9:b5:a6:dd:bf:61:1f:b9:88:90:59:5d: a9:1a:7d:59:e4:17:e5:3e:34:31:36:cf:66:c2:84: df:cc:d7:d4:c1:e3:44:78:80:60:bb:60:13:b4:70: e6:d3:0d:0e:cb:be:08:5c:e9:17:dc:de:40:a2:94: 5f:42:de:c0:9f:26:8c:2b:f9:02:95:8e:df:1e:39: 41:06:dc:d9:c7:61:a1:45:2e:77:d7:26:cb:de:6f: 0f:dd:e0:d2:ac:29:e4:cc:dd:58:77:6a:0d:d7:86: 88:f2:54:4d:29:e3:b4:db:d2:1b:87:1a:e2:87:56: f9:2b:b4:e6:34:0d:8f:c1:8b:85:7e:ff:33:17:22: 8f:ea:0a:27:0a:56:ff:ce:27:ee:54:52:f1:71:0a: 39:9e:e3:ff:c5:ff:f4:cc:fe:42:27:10:6e:68:ea: d7:05:7c:c6:93:d1:fc:8f:77:0a:01:42:40:df:15: 88:9d:09:74:44:40:a9:96:22:1e:a5:49:f0:5d:e1: 92:97:4d:63:1a:90:69:2a:c8:f8:94:2a:37:43:89: fa:3c:1b:16:52:76:a6:91:41:25:28:a1:cb:ca:4d: d2:24:08:50:10:d6:44:6d:03:f2:89:42:05:1d:8f: d9:01:99:c8:59:e8:8b:50:ca:09:91:1c:8d:e9:62: c0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:CA:F1:C2:49:47:8F:BC:54:98:9C:39:3E:40:D7:39:CF:6C:69:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/387b8a97-889c-48cd-b72e-4329cc21745b/131ef14c-4202-31aa-a2b5-69b4a64a3be0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/387b8a97-889c-48cd-b72e-4329cc21745b/387b8a97-889c-48cd-b72e-4329cc21745b.crl X509v3 Authority Key Identifier: keyid:B1:70:09:21:ED:33:25:24:3C:22:B1:A2:3C:B0:84:F7:2E:7C:54:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/387b8a97-889c-48cd-b72e-4329cc21745b.cer sbgp-ipAddrBlock: critical IPv6: 2607:a6c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:85:8e:1e:4e:7a:6e:59:de:71:3a:7e:4e:59:00:c5:f9:1a: 57:64:a3:a6:ff:82:78:06:ca:06:68:58:28:29:a9:e3:17:43: c2:a4:c8:a8:15:b1:fb:51:45:ef:3e:3b:3a:4c:be:07:70:bf: b8:65:30:98:0f:7e:0d:0e:9f:d3:f6:3b:a9:26:9a:b9:2f:15: 1b:98:c0:24:c4:c5:cc:ff:e7:fb:44:34:a5:5c:40:32:9b:49: e8:1e:87:19:bc:e6:19:9b:83:cb:81:f0:92:fc:a4:14:ea:83: 13:31:40:0d:e6:b4:29:c7:f8:25:42:ad:a3:b8:fa:44:ce:c0: 30:11:e3:37:db:5d:62:9f:0e:e7:97:75:73:3d:f9:23:1b:f8: 53:92:0e:9c:2a:43:bf:e5:eb:30:88:32:87:bc:dd:c0:d4:5c: d9:dd:ea:29:00:79:59:c5:94:87:d8:c5:96:d4:20:88:1a:51: 7b:0a:be:2c:a8:08:f3:35:c8:94:1b:40:f9:36:cf:21:d3:ed: 01:94:de:4d:8f:98:13:ee:3b:98:64:56:a6:8e:ba:27:a2:d9: fd:64:53:48:92:2a:64:6e:21:44:c6:a8:e6:3b:95:37:8c:80: bf:49:3f:53:55:ec:1b:fd:67:67:18:41:9b:37:40:55:30:07: aa:fa:ff:f8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEr6toOp7wdtueVsSUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg3YjhhOTctODg5Yy00OGNkLWI3MmUtNDMyOWNjMjE3 NDViMB4XDTI1MDgyNjAxMDAzMloXDTI1MTEyNDAyMDAzMlowLzEtMCsGA1UEAxMk MjE5M2MwNWQtZThkZi00Nzg4LTkwZDItNWI2OWM1MzE4ZjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAfZtabdv2EfuYiQWV2pGn1Z5BflPjQxNs9m woTfzNfUweNEeIBgu2ATtHDm0w0Oy74IXOkX3N5AopRfQt7AnyaMK/kClY7fHjlB BtzZx2GhRS531ybL3m8P3eDSrCnkzN1Yd2oN14aI8lRNKeO029Ibhxrih1b5K7Tm NA2PwYuFfv8zFyKP6gonClb/zifuVFLxcQo5nuP/xf/0zP5CJxBuaOrXBXzGk9H8 j3cKAUJA3xWInQl0RECpliIepUnwXeGSl01jGpBpKsj4lCo3Q4n6PBsWUnamkUEl KKHLyk3SJAhQENZEbQPyiUIFHY/ZAZnIWeiLUMoJkRyN6WLAkwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMLK8cJJR4+8VJicOT5A1znPbGknMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zODdi OGE5Ny04ODljLTQ4Y2QtYjcyZS00MzI5Y2MyMTc0NWIvMTMxZWYxNGMtNDIwMi0z MWFhLWEyYjUtNjliNGE2NGEzYmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMzg3YjhhOTctODg5Yy00OGNkLWI3 MmUtNDMyOWNjMjE3NDViLzM4N2I4YTk3LTg4OWMtNDhjZC1iNzJlLTQzMjljYzIx NzQ1Yi5jcmwwHwYDVR0jBBgwFoAUsXAJIe0zJSQ8IrGiPLCE9y58VIowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zODdiOGE5Ny04ODljLTQ4Y2QtYjcyZS00MzI5 Y2MyMTc0NWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgemwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBnhY4eTnpuWd5xOn5OWQDF+RpXZKOm/4J4BsoGaFgoKanjF0PCpMio FbH7UUXvPjs6TL4HcL+4ZTCYD34NDp/T9jupJpq5LxUbmMAkxMXM/+f7RDSlXEAy m0noHocZvOYZm4PLgfCS/KQU6oMTMUAN5rQpx/glQq2juPpEzsAwEeM3211inw7n l3VzPfkjG/hTkg6cKkO/5eswiDKHvN3A1FzZ3eopAHlZxZSH2MWW1CCIGlF7Cr4s qAjzNciUG0D5Ns8h0+0BlN5Nj5gT7juYZFamjronotn9ZFNIkipkbiFExqjmO5U3 jIC/ST9TVewb/WdnGEGbN0BVMAeq+v/4 -----END CERTIFICATE-----Generated at Fri Oct 10 22:34:42 2025 by rpki-client