$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/23fbc0e5-a66a-390c-ade4-63c07acf6025.roa File: 23fbc0e5-a66a-390c-ade4-63c07acf6025.roa (raw, json) Hash identifier: nrgNSoMOKf9B/ZnYNcTWKkFLMvdU5sR0JtHiYjHyVA8= Subject key identifier: 5A:DF:88:91:20:43:97:EC:03:34:75:9A:6F:31:08:61:EC:AB:0A:CA Certificate issuer: /CN=007561fe-4b04-417a-b423-349b8b4b047d Certificate serial: 010D0C9F4328584B4E7717E1A6C1CA1FFF058780 Authority key identifier: 6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/23fbc0e5-a66a-390c-ade4-63c07acf6025.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 19651 IP address blocks: 2602:f9ec:fad::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:17:e1:a6:c1:ca:1f:ff:05:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=007561fe-4b04-417a-b423-349b8b4b047d Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=173022cf-cb1f-4856-8698-75f5889692c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:af:ce:a6:32:ca:63:0c:77:92:ec:26:8c:89: ba:1d:f8:2a:e0:8b:e3:78:fd:8e:45:e2:20:32:c8: 74:5c:3d:b4:95:ef:4e:a9:17:ec:64:2e:04:ea:7b: d4:b2:a4:3e:17:6c:73:7b:4b:b6:9e:b0:69:5f:dc: 0e:c4:07:87:b2:1b:4c:4a:3e:bd:2c:e6:b9:83:d2: 4a:45:5d:8a:36:2b:34:c7:bd:9b:f8:74:ed:6f:1d: 38:47:fb:e8:be:f2:87:03:25:45:c9:a1:c7:60:6d: 12:f1:d5:61:41:eb:af:2e:31:74:06:55:13:01:a4: e2:45:56:bd:50:00:54:f0:80:0a:73:0f:fb:b8:c8: aa:ab:c4:8d:a0:40:c8:a7:0e:90:0b:f4:d6:22:1e: 6b:56:76:67:e5:20:a1:d0:91:17:89:f5:58:5a:19: f0:bb:d9:8a:99:0d:e2:6f:27:70:ce:40:a8:1a:64: 72:c0:c4:2c:cb:1f:52:1c:73:da:b9:a1:04:a9:97: 2e:32:2b:5b:05:9f:b0:76:ae:0c:12:ce:4a:b0:dc: 32:87:88:70:56:17:e0:4c:9f:36:c8:8f:20:b6:ca: 2c:d9:56:9d:e4:6b:6e:b8:9f:91:95:32:c6:3a:a9: d2:0e:1c:98:28:d6:12:0b:d5:07:a7:cd:40:05:76: cd:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:DF:88:91:20:43:97:EC:03:34:75:9A:6F:31:08:61:EC:AB:0A:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/23fbc0e5-a66a-390c-ade4-63c07acf6025.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl X509v3 Authority Key Identifier: keyid:6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer sbgp-ipAddrBlock: critical IPv6: 2602:f9ec:fad::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:49:eb:f2:2b:40:e5:cc:14:7c:b9:0e:20:f6:63:4b:eb:9f: 38:aa:21:1c:a2:01:49:94:80:1e:9d:88:93:75:ee:06:bc:6b: 3b:8e:5a:ea:c1:90:ae:f0:9d:f3:fc:a5:f5:c6:da:51:28:df: 14:b5:5a:3a:d8:37:b1:1f:ff:35:86:24:ff:2d:4f:b0:a1:98: ac:86:85:e9:07:c4:e5:e0:cf:52:b9:69:9c:bc:35:14:ed:64: 5d:aa:58:fd:d4:60:a7:8c:07:a9:fa:34:f5:84:f8:73:4e:e9: 4d:14:b9:58:2f:eb:a1:73:5b:88:db:30:6f:79:15:26:5c:d3: 8c:2c:c1:e3:2b:2c:30:7b:41:eb:c7:8c:18:49:8d:b6:9a:1a: 26:23:1c:8b:be:ec:d1:c3:f8:4f:cf:95:bb:d1:a1:02:8a:a5: 7b:0f:fa:64:10:b6:b2:90:ff:24:c3:40:c5:b3:de:8d:14:2c: ff:1b:8d:91:0b:bb:d7:ed:27:97:8a:b8:8d:6b:c2:e3:c0:b0: ee:31:52:06:ec:a0:68:6f:0a:17:c0:7a:23:bc:3f:15:43:3f: 97:92:f0:bd:a0:c7:60:cf:fd:29:ae:d7:1c:0e:6d:7e:44:b3: a4:97:53:65:08:7e:ba:4f:1e:0c:9a:57:04:65:27:78:ad:ed: ed:cd:aa:23 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtOdxfhpsHKH/8Fh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA3NTYxZmUtNGIwNC00MTdhLWI0MjMtMzQ5YjhiNGIw NDdkMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk MTczMDIyY2YtY2IxZi00ODU2LTg2OTgtNzVmNTg4OTY5MmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoa/OpjLKYwx3kuwmjIm6Hfgq4IvjeP2OReIg Msh0XD20le9OqRfsZC4E6nvUsqQ+F2xze0u2nrBpX9wOxAeHshtMSj69LOa5g9JK RV2KNis0x72b+HTtbx04R/vovvKHAyVFyaHHYG0S8dVhQeuvLjF0BlUTAaTiRVa9 UABU8IAKcw/7uMiqq8SNoEDIpw6QC/TWIh5rVnZn5SCh0JEXifVYWhnwu9mKmQ3i bydwzkCoGmRywMQsyx9SHHPauaEEqZcuMitbBZ+wdq4MEs5KsNwyh4hwVhfgTJ82 yI8gtsos2Vad5GtuuJ+RlTLGOqnSDhyYKNYSC9UHp81ABXbN4QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFrfiJEgQ5fsAzR1mm8xCGHsqwrKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wMDc1 NjFmZS00YjA0LTQxN2EtYjQyMy0zNDliOGI0YjA0N2QvMjNmYmMwZTUtYTY2YS0z OTBjLWFkZTQtNjNjMDdhY2Y2MDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDA3NTYxZmUtNGIwNC00MTdhLWI0 MjMtMzQ5YjhiNGIwNDdkLzAwNzU2MWZlLTRiMDQtNDE3YS1iNDIzLTM0OWI4YjRi MDQ3ZC5jcmwwHwYDVR0jBBgwFoAUam3UldcOa/DEVubcc/Wc40Ocg3UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wMDc1NjFmZS00YjA0LTQxN2EtYjQyMy0zNDli OGI0YjA0N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL57A+t MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEBJ6/IrQOXMFHy5DiD2Y0vrnziqIRyiAUmUgB6diJN17ga8azuO WurBkK7wnfP8pfXG2lEo3xS1WjrYN7Ef/zWGJP8tT7ChmKyGhekHxOXgz1K5aZy8 NRTtZF2qWP3UYKeMB6n6NPWE+HNO6U0UuVgv66FzW4jbMG95FSZc04wsweMrLDB7 QevHjBhJjbaaGiYjHIu+7NHD+E/PlbvRoQKKpXsP+mQQtrKQ/yTDQMWz3o0ULP8b jZELu9ftJ5eKuI1rwuPAsO4xUgbsoGhvChfAeiO8PxVDP5eS8L2gx2DP/Smu1xwO bX5Es6SXU2UIfrpPHgyaVwRlJ3it7e3NqiM= -----END CERTIFICATE-----Generated at Sat Oct 11 17:59:07 2025 by rpki-client