$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/122a38f0-6d8c-3454-a578-41aad32b181b.roa File: 122a38f0-6d8c-3454-a578-41aad32b181b.roa (raw, json) Hash identifier: Vbrk4XPXI7u26zmRokVCmMBhXawWX/HW32NVTksgF5Y= Subject key identifier: D4:A2:D4:BF:EE:67:36:29:AA:73:1A:90:7F:57:B6:84:73:36:99:18 Certificate issuer: /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf Certificate serial: 010D0C9F4328584B0CDC2C939701485506DD8818 Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/122a38f0-6d8c-3454-a578-41aad32b181b.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 271 IP address blocks: 2607:f8f0:16c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:2c:93:97:01:48:55:06:dd:88:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=27c4b81b-3930-4c01-83e7-65e05b211ce1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ab:5f:ab:ae:fa:92:47:a5:be:b4:b6:d5:24: 31:b4:f6:c5:48:ef:6c:1c:ec:f2:37:e8:0c:f2:01: 9a:c4:ea:76:45:91:d7:a6:fa:c0:0c:cf:55:44:d1: 95:1c:84:dc:53:02:50:47:d9:8f:00:98:b2:b5:e1: 94:99:61:f3:10:e8:13:e1:a9:f9:f0:8f:22:7e:9d: 79:1a:91:0c:48:ec:3d:b2:cf:13:95:e0:c6:ac:c5: 7f:28:a5:30:ce:3b:52:5c:08:a2:22:5c:ee:42:5a: 56:8e:dc:a9:72:2b:7d:31:44:d0:35:0d:57:21:55: 18:15:9b:37:0b:05:11:6f:46:8f:ee:f6:de:1a:b2: 43:21:8f:6f:ae:b3:a7:62:64:a8:e6:fd:0e:dc:a4: 92:a3:ac:e5:a1:c3:4f:0b:61:25:b5:fc:49:36:c8: a8:7d:df:eb:fb:5e:37:eb:02:30:8d:8d:26:c2:d6: af:07:11:2f:1f:bd:04:bf:17:d0:44:03:a9:e8:02: 9e:1f:7d:2c:c9:c2:00:e2:d7:b7:af:50:b1:44:42: 48:c7:21:1e:5f:f1:15:9e:cc:e9:32:7e:d5:2d:9c: 56:84:54:8c:e4:1e:40:99:dc:e6:60:f3:d2:26:88: 1d:84:ae:86:b9:f8:da:6b:78:5c:df:c9:92:4f:7e: e1:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:A2:D4:BF:EE:67:36:29:AA:73:1A:90:7F:57:B6:84:73:36:99:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/122a38f0-6d8c-3454-a578-41aad32b181b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl X509v3 Authority Key Identifier: keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8f0:16c1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:71:6a:a1:23:fb:b9:3a:8b:3f:a4:22:77:91:9d:8d:72:89: 36:fb:ff:de:2c:3a:da:9d:8a:2d:c5:09:87:14:a8:c7:ed:f2: b9:fb:27:91:7d:91:5f:2e:a8:99:fc:77:ba:0f:a0:06:14:47: cc:35:a0:fb:e3:36:4b:28:a7:b7:d6:4c:f7:21:44:43:6e:30: 33:65:dd:d1:19:35:ee:c7:2d:6b:3b:35:84:28:c4:6c:b1:d0: 0d:3c:cd:f4:c4:61:48:71:fe:e4:be:b6:0c:96:1b:63:a8:4a: 94:cd:30:57:92:f9:89:3e:80:0c:30:7d:cb:22:12:b3:0d:12: fc:cf:73:e1:3a:a2:4c:8a:79:38:64:5e:62:09:17:70:be:2a: 9f:9c:aa:e5:d2:fb:ea:6c:3b:7b:2a:c0:65:bd:a7:75:90:b0: 98:d6:8f:61:90:a0:81:ca:e6:72:e8:7a:a4:2a:43:ba:0a:41: a7:5d:08:47:f9:e5:62:82:52:74:fe:a7:6c:0d:31:05:c8:41: 07:22:1d:1e:4b:ab:27:fb:c5:47:4e:c0:eb:e5:b4:5f:a3:64: 0d:e2:bd:81:43:9f:78:a8:7a:48:3e:8c:15:03:03:1f:23:c0: ec:75:2f:ad:62:d7:97:9b:37:27:dd:cf:8c:20:3e:f6:24:0e: 87:70:12:9b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsM3CyTlwFIVQbdiBgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTZhYjUwMWItNmM2OS00NmE0LWI5MjQtYTA5YjY4Y2Ux OGNmMB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk MjdjNGI4MWItMzkzMC00YzAxLTgzZTctNjVlMDViMjExY2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6tfq676kkelvrS21SQxtPbFSO9sHOzyN+gM 8gGaxOp2RZHXpvrADM9VRNGVHITcUwJQR9mPAJiyteGUmWHzEOgT4an58I8ifp15 GpEMSOw9ss8TleDGrMV/KKUwzjtSXAiiIlzuQlpWjtypcit9MUTQNQ1XIVUYFZs3 CwURb0aP7vbeGrJDIY9vrrOnYmSo5v0O3KSSo6zlocNPC2EltfxJNsiofd/r+143 6wIwjY0mwtavBxEvH70EvxfQRAOp6AKeH30sycIA4te3r1CxREJIxyEeX/EVnszp Mn7VLZxWhFSM5B5AmdzmYPPSJogdhK6Gufjaa3hc38mST37hRwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNSi1L/uZzYpqnMakH9XtoRzNpkYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFi NTAxYi02YzY5LTQ2YTQtYjkyNC1hMDliNjhjZTE4Y2YvMTIyYTM4ZjAtNmQ4Yy0z NDU0LWE1NzgtNDFhYWQzMmIxODFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTZhYjUwMWItNmM2OS00NmE0LWI5 MjQtYTA5YjY4Y2UxOGNmL2U2YWI1MDFiLTZjNjktNDZhNC1iOTI0LWEwOWI2OGNl MThjZi5jcmwwHwYDVR0jBBgwFoAU3NJzqCd+YUhl0UFSipG2IBCnAF4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFiNTAxYi02YzY5LTQ2YTQtYjkyNC1hMDli NjhjZTE4Y2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf48BbB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACpxaqEj+7k6iz+kIneRnY1yiTb7/94sOtqdii3FCYcUqMft8rn7 J5F9kV8uqJn8d7oPoAYUR8w1oPvjNksop7fWTPchRENuMDNl3dEZNe7HLWs7NYQo xGyx0A08zfTEYUhx/uS+tgyWG2OoSpTNMFeS+Yk+gAwwfcsiErMNEvzPc+E6okyK eThkXmIJF3C+Kp+cquXS++psO3sqwGW9p3WQsJjWj2GQoIHK5nLoeqQqQ7oKQadd CEf55WKCUnT+p2wNMQXIQQciHR5Lqyf7xUdOwOvltF+jZA3ivYFDn3ioekg+jBUD Ax8jwOx1L61i15ebNyfdz4wgPvYkDodwEps= -----END CERTIFICATE-----Generated at Sat Oct 11 02:43:14 2025 by rpki-client