$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/1cdc08f9-9a58-3f7a-aea2-713c294b41ea.roa File: 1cdc08f9-9a58-3f7a-aea2-713c294b41ea.roa (raw, json) Hash identifier: nDnclSA2Ep4OJMFgddxliMyz/1yD07XUBwmeSYICtuU= Subject key identifier: D2:08:4A:11:AC:45:36:61:C1:56:B2:71:9D:26:CA:5D:CE:36:7A:28 Certificate issuer: /CN=b71baebf-1a7d-40e5-90c9-370c088ebc71 Certificate serial: 010D0C9F4328584B25FC362C4C7A20C25BBC34E0 Authority key identifier: AB:1F:DE:B3:29:CA:4F:D4:72:C5:96:28:DF:07:D7:DC:BD:C1:11:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/1cdc08f9-9a58-3f7a-aea2-713c294b41ea.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 395388 IP address blocks: 2620:c2:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/b71baebf-1a7d-40e5-90c9-370c088ebc71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/b71baebf-1a7d-40e5-90c9-370c088ebc71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:36:2c:4c:7a:20:c2:5b:bc:34:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b71baebf-1a7d-40e5-90c9-370c088ebc71 Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=3287ee7e-73da-4484-8c4e-a4616343935c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fa:4c:51:a3:94:62:87:7e:4c:2f:44:52:e5: c1:c4:69:d2:86:6a:fa:6d:26:84:97:6f:d3:ee:fe: 29:c4:28:21:e1:9c:eb:8b:12:7e:22:d5:a5:ce:d1: 54:d6:06:52:75:a0:89:da:68:d8:de:6e:af:5a:b7: 4d:a4:df:c6:a7:79:45:f7:15:df:4e:09:48:ae:b4: d5:a2:fb:8d:c0:ad:66:88:db:e9:3a:dc:7a:cd:c0: 72:a1:df:41:f5:62:88:e0:f8:42:58:d6:d5:8b:c7: d3:65:32:4a:e7:99:47:05:34:1d:5b:ba:94:84:f0: 6e:ba:34:d1:e9:ce:e5:2d:55:72:b2:f1:91:ce:7e: 22:b2:80:78:69:c6:8c:3b:7b:2c:6c:42:95:36:ff: 12:fe:99:c7:dd:d8:e2:a0:2b:40:a2:86:6e:4f:d5: 97:57:af:f1:c4:fa:c4:52:15:3b:9a:a8:11:be:e4: cc:27:ca:c2:56:8a:fd:06:96:b1:e7:51:22:a5:e4: 18:77:46:f5:82:25:63:9a:e8:03:ab:9c:2e:0c:91: 9a:27:47:88:d1:31:d3:6c:23:0a:26:fb:7f:bf:62: 5c:c7:ef:10:eb:66:d6:b0:86:f2:8a:cb:29:45:09: 13:ca:67:37:56:c4:d2:7d:ec:17:9c:59:ab:0b:d1: 1c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:08:4A:11:AC:45:36:61:C1:56:B2:71:9D:26:CA:5D:CE:36:7A:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/1cdc08f9-9a58-3f7a-aea2-713c294b41ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/b71baebf-1a7d-40e5-90c9-370c088ebc71.crl X509v3 Authority Key Identifier: keyid:AB:1F:DE:B3:29:CA:4F:D4:72:C5:96:28:DF:07:D7:DC:BD:C1:11:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71.cer sbgp-ipAddrBlock: critical IPv6: 2620:c2:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:2d:85:cd:cf:dc:32:9f:5c:60:59:cc:28:76:3f:05:89:50: 52:73:e6:02:3c:2d:21:fa:a1:f5:3b:df:c8:0c:77:82:db:75: 79:83:7d:ef:08:df:c6:48:a5:f7:9d:90:5b:7c:9f:22:8a:27: b4:77:5a:a3:55:40:50:1a:4c:ba:63:66:60:b2:06:0c:ec:14: 9a:6a:fb:48:13:f0:1e:77:cd:e9:ac:8d:99:0b:e1:8d:ef:7d: 78:00:c0:8e:09:21:b7:4c:43:8d:66:54:5c:75:02:5a:f6:81: 6c:ab:e6:5f:b6:8e:29:2b:8f:af:aa:fc:f5:ca:4c:1c:d7:ac: 51:57:85:dd:06:88:24:c9:d3:14:38:e4:c0:8c:11:41:12:ce: 1c:3a:bb:38:73:e3:fd:eb:c7:1a:aa:47:15:72:b0:a6:1e:17: ab:0b:27:82:cb:90:0e:33:f9:bd:f2:32:a9:82:36:c0:12:03: 2e:42:c1:89:e4:b7:e7:59:da:32:5d:73:69:f4:39:50:f5:17: 0b:e7:e3:87:ba:3d:64:6b:bd:6f:ca:e7:6f:c3:f6:5b:b2:63: c4:7b:0b:66:97:b7:21:0e:5c:dd:66:ea:85:d9:42:b9:6d:ed: 50:5c:97:96:51:2c:f8:d1:83:0a:2f:9f:12:04:b3:34:ec:54: db:16:b3:53 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsl/DYsTHogwlu8NOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjcxYmFlYmYtMWE3ZC00MGU1LTkwYzktMzcwYzA4OGVi YzcxMB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk MzI4N2VlN2UtNzNkYS00NDg0LThjNGUtYTQ2MTYzNDM5MzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPpMUaOUYod+TC9EUuXBxGnShmr6bSaEl2/T 7v4pxCgh4ZzrixJ+ItWlztFU1gZSdaCJ2mjY3m6vWrdNpN/Gp3lF9xXfTglIrrTV ovuNwK1miNvpOtx6zcByod9B9WKI4PhCWNbVi8fTZTJK55lHBTQdW7qUhPBuujTR 6c7lLVVysvGRzn4isoB4acaMO3ssbEKVNv8S/pnH3djioCtAooZuT9WXV6/xxPrE UhU7mqgRvuTMJ8rCVor9Bpax51EipeQYd0b1giVjmugDq5wuDJGaJ0eI0THTbCMK Jvt/v2Jcx+8Q62bWsIbyisspRQkTymc3VsTSfewXnFmrC9EcmwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNIIShGsRTZhwVaycZ0myl3ONnooMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNzFi YWViZi0xYTdkLTQwZTUtOTBjOS0zNzBjMDg4ZWJjNzEvMWNkYzA4ZjktOWE1OC0z ZjdhLWFlYTItNzEzYzI5NGI0MWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjcxYmFlYmYtMWE3ZC00MGU1LTkw YzktMzcwYzA4OGViYzcxL2I3MWJhZWJmLTFhN2QtNDBlNS05MGM5LTM3MGMwODhl YmM3MS5jcmwwHwYDVR0jBBgwFoAUqx/esynKT9RyxZYo3wfX3L3BEScwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNzFiYWViZi0xYTdkLTQwZTUtOTBjOS0zNzBj MDg4ZWJjNzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAwiAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIgthc3P3DKfXGBZzCh2PwWJUFJz5gI8LSH6ofU738gMd4LbdXmD fe8I38ZIpfedkFt8nyKKJ7R3WqNVQFAaTLpjZmCyBgzsFJpq+0gT8B53zemsjZkL 4Y3vfXgAwI4JIbdMQ41mVFx1Alr2gWyr5l+2jikrj6+q/PXKTBzXrFFXhd0GiCTJ 0xQ45MCMEUESzhw6uzhz4/3rxxqqRxVysKYeF6sLJ4LLkA4z+b3yMqmCNsASAy5C wYnkt+dZ2jJdc2n0OVD1Fwvn44e6PWRrvW/K52/D9luyY8R7C2aXtyEOXN1m6oXZ Qrlt7VBcl5ZRLPjRgwovnxIEszTsVNsWs1M= -----END CERTIFICATE-----Generated at Wed Oct 8 21:17:00 2025 by rpki-client