$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/048a3109-db11-313b-a682-3462d66d1f6a.roa File: 048a3109-db11-313b-a682-3462d66d1f6a.roa (raw, json) Hash identifier: tE8uwqdePqVwQRmsLmnfAkEusjlfAd/KNlg6A8CMA3E= Subject key identifier: 00:5D:0F:A7:23:C7:62:D6:34:14:E5:1B:F3:64:5B:32:19:24:90:56 Certificate issuer: /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf Certificate serial: 010D0C9F4328584B1806E2C4CA7FF960C7553300 Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/048a3109-db11-313b-a682-3462d66d1f6a.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 271 IP address blocks: 2607:f8f0:204::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:e2:c4:ca:7f:f9:60:c7:55:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=d3c538d0-34d9-416e-ba3b-1586352d652d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:bd:48:ae:47:c0:56:a4:e3:a2:35:fc:14:3f: 32:58:62:e0:d0:1d:ce:28:ee:e6:c2:42:1d:f4:64: 84:a2:cf:04:d9:8b:0d:72:e6:cd:37:d8:b0:e3:ef: ad:c0:31:31:46:cb:98:43:93:8b:fd:8a:78:02:30: 13:cf:8d:3a:38:8f:04:7d:1e:43:96:de:a5:97:8b: ec:42:68:3e:cf:20:05:21:34:9d:df:b0:94:68:29: 5a:30:5e:4d:c6:53:0e:f5:6e:d9:ea:78:14:c8:56: 1b:7a:96:9c:40:19:79:ae:a5:c3:bb:10:db:9d:e5: 70:66:3d:f4:6c:fe:c3:80:8e:0b:7c:56:14:01:4b: af:ed:46:ae:db:9c:c3:b6:5b:29:9b:e3:8d:9c:3b: fb:7c:e8:2c:a2:61:c3:d0:7c:59:8b:30:13:e9:eb: c1:2b:81:7c:40:cd:ad:6c:c3:b5:ca:c0:d4:35:8b: 20:04:48:23:7c:ee:92:57:0d:fa:3e:d4:fa:e2:bd: 89:c7:ce:24:63:d0:39:08:57:96:d5:a0:bd:8c:f9: 84:db:17:65:ef:3d:33:9f:4b:f5:8b:d7:40:ba:eb: 3a:66:4b:84:a2:f5:38:f8:fe:92:4f:20:d8:ec:58: e6:49:3b:e8:ee:0f:d0:c4:9e:95:04:2c:98:32:03: 5a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:5D:0F:A7:23:C7:62:D6:34:14:E5:1B:F3:64:5B:32:19:24:90:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/048a3109-db11-313b-a682-3462d66d1f6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl X509v3 Authority Key Identifier: keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8f0:204::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:5f:aa:6c:07:72:b4:36:64:39:b7:02:0f:b4:54:8f:6b:e8: ca:fb:27:67:95:bf:f1:84:f4:87:63:38:2e:4f:57:43:7b:a2: e5:e0:40:12:6b:13:79:f1:4b:e7:53:3c:f3:15:b8:bb:35:5b: 6b:b9:d2:f9:14:3e:a7:a9:5c:20:37:20:6e:7c:ea:71:51:29: 10:8d:04:f1:00:a4:6c:c5:47:95:fe:35:c4:94:30:41:a0:04: 47:31:27:66:ab:07:53:d6:3d:f8:dc:50:f1:b4:3d:ba:79:f3: a3:5a:c3:f8:13:8a:ad:b7:09:9d:e2:c7:19:b3:7c:ec:fb:e2: 15:fa:76:25:5f:4b:93:1c:1b:25:3c:43:fa:d9:ec:f3:9f:1e: ca:95:bc:46:52:d9:ef:22:7d:33:a5:09:3f:4f:ee:8b:36:9b: 27:12:98:d6:ec:bb:4b:7f:9f:82:9b:9d:dc:49:14:e8:b8:bd: 79:ba:bb:06:3d:5e:2e:80:38:d8:70:ce:f9:56:73:3d:1d:c6: 67:5d:6a:34:da:32:51:a7:a5:53:86:98:2e:a3:43:52:59:5c: 37:3a:ea:e9:3f:03:48:73:96:a8:04:fc:a5:c4:83:fb:41:3a: 70:45:c6:a1:a3:34:44:a1:c7:9a:65:fa:d6:e0:41:34:64:64: 8e:04:81:d2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsYBuLEyn/5YMdVMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTZhYjUwMWItNmM2OS00NmE0LWI5MjQtYTA5YjY4Y2Ux OGNmMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk ZDNjNTM4ZDAtMzRkOS00MTZlLWJhM2ItMTU4NjM1MmQ2NTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAib1IrkfAVqTjojX8FD8yWGLg0B3OKO7mwkId 9GSEos8E2YsNcubNN9iw4++twDExRsuYQ5OL/Yp4AjATz406OI8EfR5Dlt6ll4vs Qmg+zyAFITSd37CUaClaMF5NxlMO9W7Z6ngUyFYbepacQBl5rqXDuxDbneVwZj30 bP7DgI4LfFYUAUuv7Uau25zDtlspm+ONnDv7fOgsomHD0HxZizAT6evBK4F8QM2t bMO1ysDUNYsgBEgjfO6SVw36PtT64r2Jx84kY9A5CFeW1aC9jPmE2xdl7z0zn0v1 i9dAuus6ZkuEovU4+P6STyDY7FjmSTvo7g/QxJ6VBCyYMgNacwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFABdD6cjx2LWNBTlG/NkWzIZJJBWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFi NTAxYi02YzY5LTQ2YTQtYjkyNC1hMDliNjhjZTE4Y2YvMDQ4YTMxMDktZGIxMS0z MTNiLWE2ODItMzQ2MmQ2NmQxZjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTZhYjUwMWItNmM2OS00NmE0LWI5 MjQtYTA5YjY4Y2UxOGNmL2U2YWI1MDFiLTZjNjktNDZhNC1iOTI0LWEwOWI2OGNl MThjZi5jcmwwHwYDVR0jBBgwFoAU3NJzqCd+YUhl0UFSipG2IBCnAF4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFiNTAxYi02YzY5LTQ2YTQtYjkyNC1hMDli NjhjZTE4Y2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf48AIE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG5fqmwHcrQ2ZDm3Ag+0VI9r6Mr7J2eVv/GE9IdjOC5PV0N7ouXg QBJrE3nxS+dTPPMVuLs1W2u50vkUPqepXCA3IG586nFRKRCNBPEApGzFR5X+NcSU MEGgBEcxJ2arB1PWPfjcUPG0Pbp586Naw/gTiq23CZ3ixxmzfOz74hX6diVfS5Mc GyU8Q/rZ7POfHsqVvEZS2e8ifTOlCT9P7os2mycSmNbsu0t/n4KbndxJFOi4vXm6 uwY9Xi6AONhwzvlWcz0dxmddajTaMlGnpVOGmC6jQ1JZXDc66uk/A0hzlqgE/KXE g/tBOnBFxqGjNEShx5pl+tbgQTRkZI4EgdI= -----END CERTIFICATE-----Generated at Sat Oct 11 02:45:50 2025 by rpki-client