$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/a4288eed-4f4e-30fd-b1d7-a516b085f2b0.roa File: a4288eed-4f4e-30fd-b1d7-a516b085f2b0.roa (raw, json) Hash identifier: tfG4X7SYsVoWM65VoWHdUOCUqrdVHT6VhJayJm+428s= Subject key identifier: B6:94:9E:37:1B:A8:D2:C3:DB:0A:49:19:BC:00:96:67:23:EA:AA:B7 Certificate issuer: /CN=0f9ce8be-7bbe-418b-b78e-42de894133a5 Certificate serial: 010D0C9F4328584B0746C1FA984201E044C85380 Authority key identifier: CA:8B:BF:41:3F:38:3E:71:B6:B5:15:C5:D1:9B:67:D6:D4:60:B2:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/a4288eed-4f4e-30fd-b1d7-a516b085f2b0.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 394056 IP address blocks: 2607:3640::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:c1:fa:98:42:01:e0:44:c8:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f9ce8be-7bbe-418b-b78e-42de894133a5 Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=1b096c0a-166c-4712-80cc-a1ca70369990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a8:0c:a2:02:48:54:09:02:86:65:f9:2c:7e: ea:d6:22:34:bf:9f:14:ff:cd:9f:ec:85:12:87:37: 36:b8:37:90:06:06:97:49:8c:42:3b:bf:9e:f7:94: d4:5d:bc:7e:05:62:3e:85:4f:09:fd:fb:8e:aa:b4: be:95:3f:87:2c:79:90:78:4c:eb:c9:28:ba:4f:64: 35:ab:28:21:6d:5d:80:66:c5:7b:bc:9e:a6:70:43: 0d:b8:ad:6a:b4:0e:28:26:54:b6:a0:06:b5:02:33: d2:f0:e9:94:f4:56:cb:4b:eb:97:7a:7f:16:55:bd: 0b:2f:fd:9c:44:bd:ea:70:64:fe:29:df:00:72:27: bd:34:3a:3a:2e:29:35:36:9b:88:80:3b:0e:6d:4d: f1:ec:18:fe:80:c0:27:da:01:0d:66:ae:69:4c:57: e8:91:8e:f7:ac:19:a9:77:9c:e2:46:7a:34:18:f1: 57:8e:4f:b8:2e:c4:71:1c:3f:94:86:8b:4a:b0:b1: 6b:ff:03:e1:13:29:c1:7d:e9:b0:03:a0:16:1f:4d: 84:3f:4e:8f:5a:29:cc:7b:7c:ad:54:c8:33:0c:44: ef:60:96:fe:71:b9:53:1b:79:55:a5:b6:c0:90:9b: a8:1b:b8:14:ed:79:01:0f:4d:c9:93:2c:52:5a:c4: 49:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:94:9E:37:1B:A8:D2:C3:DB:0A:49:19:BC:00:96:67:23:EA:AA:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/a4288eed-4f4e-30fd-b1d7-a516b085f2b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.crl X509v3 Authority Key Identifier: keyid:CA:8B:BF:41:3F:38:3E:71:B6:B5:15:C5:D1:9B:67:D6:D4:60:B2:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer sbgp-ipAddrBlock: critical IPv6: 2607:3640::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:87:5c:ec:fc:7b:ed:39:09:7d:13:33:42:35:5e:01:25:09: ad:1e:9c:6c:c6:58:c1:ef:b5:00:48:92:2c:f7:f2:9f:60:df: cf:b0:63:e4:a6:88:ce:2c:ec:c2:39:08:94:42:ab:a8:0c:8a: fc:4b:16:db:c0:ad:6a:f8:34:6b:6c:ec:5f:e9:a7:fe:f9:6c: fa:09:6e:f0:c4:9b:b3:c5:dc:a9:1c:7a:7f:46:46:7d:99:c9: 70:4f:b3:d7:93:5c:24:2f:38:c1:9c:98:38:3f:09:d0:17:cd: 71:67:1b:0a:a2:88:49:a7:d1:63:03:7f:3b:72:2f:40:8f:c4: f1:66:cc:4e:70:16:ba:ab:44:0d:36:54:df:59:cd:1d:79:5e: 92:51:4f:e6:b6:a7:23:bc:f6:0a:9c:60:a5:2f:96:7b:68:29: 85:9e:1e:76:e8:fe:3a:4e:73:87:a1:bd:7f:2a:b9:7a:69:27: b7:2b:32:c4:86:30:93:8c:74:f3:d5:d2:34:ba:52:b1:01:64: f0:5a:fa:b4:2b:c0:b8:92:77:f9:a6:06:9e:c1:8d:0e:a8:54: 24:0a:eb:57:b5:c2:2d:20:0c:78:c9:3c:28:17:da:8e:ac:35: 7f:78:25:0b:d1:87:66:10:3e:4a:a0:b7:ee:d9:8d:8a:0a:21: 2a:c0:7b:9c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsHRsH6mEIB4ETIU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGY5Y2U4YmUtN2JiZS00MThiLWI3OGUtNDJkZTg5NDEz M2E1MB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk MWIwOTZjMGEtMTY2Yy00NzEyLTgwY2MtYTFjYTcwMzY5OTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoagMogJIVAkChmX5LH7q1iI0v58U/82f7IUS hzc2uDeQBgaXSYxCO7+e95TUXbx+BWI+hU8J/fuOqrS+lT+HLHmQeEzrySi6T2Q1 qyghbV2AZsV7vJ6mcEMNuK1qtA4oJlS2oAa1AjPS8OmU9FbLS+uXen8WVb0LL/2c RL3qcGT+Kd8Acie9NDo6Lik1NpuIgDsObU3x7Bj+gMAn2gENZq5pTFfokY73rBmp d5ziRno0GPFXjk+4LsRxHD+UhotKsLFr/wPhEynBfemwA6AWH02EP06PWinMe3yt VMgzDETvYJb+cblTG3lVpbbAkJuoG7gU7XkBD03JkyxSWsRJywIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLaUnjcbqNLD2wpJGbwAlmcj6qq3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZjlj ZThiZS03YmJlLTQxOGItYjc4ZS00MmRlODk0MTMzYTUvYTQyODhlZWQtNGY0ZS0z MGZkLWIxZDctYTUxNmIwODVmMmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGY5Y2U4YmUtN2JiZS00MThiLWI3 OGUtNDJkZTg5NDEzM2E1LzBmOWNlOGJlLTdiYmUtNDE4Yi1iNzhlLTQyZGU4OTQx MzNhNS5jcmwwHwYDVR0jBBgwFoAUyou/QT84PnG2tRXF0Ztn1tRgssYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wZjljZThiZS03YmJlLTQxOGItYjc4ZS00MmRl ODk0MTMzYTUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgc2QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBFh1zs/HvtOQl9EzNCNV4BJQmtHpxsxljB77UASJIs9/KfYN/PsGPk pojOLOzCOQiUQquoDIr8SxbbwK1q+DRrbOxf6af++Wz6CW7wxJuzxdypHHp/RkZ9 mclwT7PXk1wkLzjBnJg4PwnQF81xZxsKoohJp9FjA387ci9Aj8TxZsxOcBa6q0QN NlTfWc0deV6SUU/mtqcjvPYKnGClL5Z7aCmFnh526P46TnOHob1/Krl6aSe3KzLE hjCTjHTz1dI0ulKxAWTwWvq0K8C4knf5pgaewY0OqFQkCutXtcItIAx4yTwoF9qO rDV/eCUL0YdmED5KoLfu2Y2KCiEqwHuc -----END CERTIFICATE-----Generated at Wed Oct 8 19:42:34 2025 by rpki-client