$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/eff7112a-0e0c-38ca-a585-11b4292bfa1d.roa File: eff7112a-0e0c-38ca-a585-11b4292bfa1d.roa (raw, json) Hash identifier: DS/MkmyPmeAateFEiEVeqY1k1t1rgcC/QISLdVuMPY0= Subject key identifier: 9F:F6:A8:A6:EF:EE:BD:F0:41:BC:F3:BA:8B:5C:09:1F:DB:DB:E7:C1 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584B0B76D0CC49639FEFC2BEE680 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/eff7112a-0e0c-38ca-a585-11b4292bfa1d.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 54858 IP address blocks: 2001:1868::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:d0:cc:49:63:9f:ef:c2:be:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=d3f075a1-05c2-4cfd-af2d-5b15a4250dca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f1:78:70:3b:85:8e:33:36:50:17:b7:2c:42: 7b:32:2d:ea:c9:df:2a:51:e9:bd:ab:3c:0c:91:dd: 76:9e:63:7f:c6:0a:69:72:2f:04:e2:4b:ac:cd:91: 40:08:da:b3:08:8c:f5:64:58:b0:46:c1:d4:7d:26: f6:54:a2:a2:8a:4e:c1:01:1f:df:0d:37:3d:c2:80: 35:6c:3f:da:49:c1:b0:23:f0:1f:b8:bb:86:5a:8e: 1f:b7:65:f9:cb:07:b2:80:4a:cf:f2:0d:85:3e:66: 65:16:6b:ea:83:95:8d:ff:ec:14:0f:7d:5e:a7:2f: 9d:a0:8c:da:59:46:1e:0c:d5:a3:cf:a4:49:98:f4: 62:8d:48:59:24:64:14:2d:18:f8:ce:ed:3f:9b:a8: 8e:b6:24:65:5c:dd:a4:1b:5a:f1:01:b8:cf:02:8f: a4:da:44:e0:c5:2e:05:51:ad:bc:2f:59:65:71:0a: c8:1d:40:1f:8b:27:74:0c:94:6f:4e:81:33:44:d0: 8a:7f:4f:73:c6:28:94:42:07:e5:eb:9f:9a:0a:1a: 0d:b7:62:96:5c:e9:54:59:e0:79:ba:74:33:d1:0a: d0:46:1a:7b:1b:d6:94:73:ae:b2:46:81:3d:e6:66: a3:64:7e:9c:9c:72:99:32:b5:d3:ab:5f:ad:ab:f1: 6f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F6:A8:A6:EF:EE:BD:F0:41:BC:F3:BA:8B:5C:09:1F:DB:DB:E7:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/eff7112a-0e0c-38ca-a585-11b4292bfa1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv6: 2001:1868::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:cb:c1:5e:a4:a3:47:1a:b5:85:c0:35:f7:86:40:e4:01:99: ae:87:47:06:17:aa:1f:c1:42:5a:af:d9:78:d9:4d:de:49:56: 01:f9:a3:21:20:80:5d:a8:97:56:5e:14:f2:26:46:04:49:d8: 1c:f6:d0:34:4a:52:84:ec:f1:4e:a7:46:d2:87:5e:0a:50:ae: 64:bf:50:7c:5a:41:f1:93:6c:5e:a1:a6:79:e4:40:08:26:44: d7:d2:0d:76:79:fa:09:f1:33:29:b5:e4:f1:61:e5:ca:1e:60: 37:35:29:cc:8c:26:74:4c:57:dc:36:c2:2c:60:42:75:bd:92: 1b:cc:c9:69:aa:10:3d:60:86:d9:78:db:14:20:03:a4:2d:21: 3f:95:f6:1f:b3:0c:c1:06:f7:a0:60:6f:ef:cd:24:cd:21:e5: ea:12:fd:cd:b8:ca:e7:0f:be:74:45:f6:65:f3:29:da:13:29: 49:ed:c8:1c:05:67:dc:ca:ac:e1:fc:c2:4e:1c:79:89:ea:23: 95:0a:2e:78:b1:e1:37:52:e7:b3:39:39:4d:0a:dc:32:5c:29: 0e:b6:88:6e:3a:99:39:7a:6e:cf:ad:ef:17:6b:fc:3f:96:6a: 4e:1d:c9:ac:61:a3:69:55:14:c8:39:45:09:65:41:2a:15:fe: e0:02:31:54 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsLdtDMSWOf78K+5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk ZDNmMDc1YTEtMDVjMi00Y2ZkLWFmMmQtNWIxNWE0MjUwZGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vF4cDuFjjM2UBe3LEJ7Mi3qyd8qUem9qzwM kd12nmN/xgppci8E4kuszZFACNqzCIz1ZFiwRsHUfSb2VKKiik7BAR/fDTc9woA1 bD/aScGwI/AfuLuGWo4ft2X5yweygErP8g2FPmZlFmvqg5WN/+wUD31epy+doIza WUYeDNWjz6RJmPRijUhZJGQULRj4zu0/m6iOtiRlXN2kG1rxAbjPAo+k2kTgxS4F Ua28L1llcQrIHUAfiyd0DJRvToEzRNCKf09zxiiUQgfl65+aChoNt2KWXOlUWeB5 unQz0QrQRhp7G9aUc66yRoE95majZH6cnHKZMrXTq1+tq/Fv7wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJ/2qKbv7r3wQbzzuotcCR/b2+fBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZWZmNzExMmEtMGUwYy0z OGNhLWE1ODUtMTFiNDI5MmJmYTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEYaDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBiy8FepKNHGrWFwDX3hkDkAZmuh0cGF6ofwUJar9l42U3eSVYB+aMh IIBdqJdWXhTyJkYESdgc9tA0SlKE7PFOp0bSh14KUK5kv1B8WkHxk2xeoaZ55EAI JkTX0g12efoJ8TMpteTxYeXKHmA3NSnMjCZ0TFfcNsIsYEJ1vZIbzMlpqhA9YIbZ eNsUIAOkLSE/lfYfswzBBvegYG/vzSTNIeXqEv3NuMrnD750RfZl8ynaEylJ7cgc BWfcyqzh/MJOHHmJ6iOVCi54seE3UuezOTlNCtwyXCkOtohuOpk5em7Pre8Xa/w/ lmpOHcmsYaNpVRTIOUUJZUEqFf7gAjFU -----END CERTIFICATE-----Generated at Fri Oct 10 21:34:45 2025 by rpki-client