$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/076b6bee-971b-3650-8751-6f4ad5853575.roa File: 076b6bee-971b-3650-8751-6f4ad5853575.roa (raw, json) Hash identifier: 9lx+QsqQrR5RUurZ74F1BLGlfPmoIuVhf1mzVR5se04= Subject key identifier: 75:1C:67:C9:DB:E4:EE:B4:53:CA:87:16:AE:29:6A:81:03:A3:FE:12 Certificate issuer: /CN=0605680b-ca76-43b6-81d9-2ac50993c59e Certificate serial: 010D0C9F4328584B3556E666704DF1B1B2667B80 Authority key identifier: 49:48:66:C9:D8:4D:D9:14:35:F0:D0:67:A8:07:5B:30:95:FA:F4:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/076b6bee-971b-3650-8751-6f4ad5853575.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 11758 IP address blocks: 2607:f920::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/0605680b-ca76-43b6-81d9-2ac50993c59e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/0605680b-ca76-43b6-81d9-2ac50993c59e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:e6:66:70:4d:f1:b1:b2:66:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0605680b-ca76-43b6-81d9-2ac50993c59e Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=d691b3d4-edd7-4161-87cd-c3c0185c6be9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:86:5b:bb:6b:b2:93:04:bb:8e:cb:cf:a9:20: eb:46:f9:d3:5e:20:32:d6:19:3c:e8:7c:9c:06:29: 79:18:fc:49:30:a7:1b:59:3b:17:b4:eb:94:b9:b5: 7f:b2:bc:d2:b6:6e:17:31:1c:93:8b:4e:b8:b4:80: f0:28:00:87:35:17:40:dd:09:96:98:08:59:ae:49: 86:44:9d:92:38:77:a1:44:d8:2a:10:42:39:d5:26: a9:b9:70:21:78:83:79:ca:ee:1a:42:dc:d9:99:85: 00:ef:d2:bc:34:13:80:fc:00:32:95:0c:53:57:56: c0:13:9d:fe:8b:7e:bc:37:55:a7:08:37:65:aa:cf: b7:2a:3b:11:cd:45:64:32:95:57:1b:f1:1a:e0:c2: 12:54:a7:a9:e2:95:1e:bb:16:04:28:b2:97:96:ac: 9f:e6:16:11:c9:39:31:c2:37:9f:50:d3:e6:57:b3: 3d:94:9e:02:4f:31:aa:a1:f3:c6:c3:a4:a3:b5:cb: a2:b2:e3:07:57:8d:eb:6d:46:49:df:e4:c5:c6:12: cc:ab:bb:8c:30:c6:0e:53:d5:f9:0a:79:94:25:96: b9:8b:f9:64:3c:3b:de:10:9f:a1:d8:4c:b4:c3:de: e6:c9:a3:98:d5:00:9f:6e:40:34:0e:dc:2f:55:e9: a8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:1C:67:C9:DB:E4:EE:B4:53:CA:87:16:AE:29:6A:81:03:A3:FE:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/076b6bee-971b-3650-8751-6f4ad5853575.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/0605680b-ca76-43b6-81d9-2ac50993c59e.crl X509v3 Authority Key Identifier: keyid:49:48:66:C9:D8:4D:D9:14:35:F0:D0:67:A8:07:5B:30:95:FA:F4:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e.cer sbgp-ipAddrBlock: critical IPv6: 2607:f920::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:96:53:91:73:a9:6b:06:e6:f4:05:f3:bb:58:ac:b0:a3:74: 83:b3:7c:5d:32:72:8a:e1:95:89:f0:f8:39:74:5d:8c:44:d0: ea:52:2b:6a:39:96:94:3e:76:3f:b4:b9:73:35:7e:ce:76:73: 00:5c:f2:aa:1f:99:7d:cf:1a:6c:45:26:67:76:eb:bf:bd:e7: 1f:12:ac:4b:80:ff:c4:a6:c2:ad:bd:4b:86:d1:f1:ca:03:f3: cb:9e:66:4a:3e:ca:31:3b:4f:30:1e:2d:8f:ae:5a:cd:fc:ea: 46:0e:a6:69:7e:36:df:0f:fb:56:d5:c6:4f:fc:8f:41:73:b5: 36:90:b3:82:95:5e:e6:18:da:d6:11:3c:09:4e:6e:17:db:a0: 45:c6:35:10:a5:f0:7b:cc:6e:19:9c:b1:54:58:8f:34:95:cb: 9d:41:4b:48:41:af:80:35:95:4d:2c:23:c6:6b:bc:00:d2:e3: fa:bd:3a:ed:c1:be:6f:c6:9c:31:e3:57:ed:23:22:ef:0f:79: d4:73:78:f5:a4:f6:cc:34:93:85:1a:97:a2:3c:d1:61:62:50: e9:e1:7c:ff:25:27:a9:f7:2b:14:b8:89:3c:d6:ec:06:c2:9b: 59:00:e7:e4:e1:f1:63:a1:58:7b:8b:bd:14:51:ef:52:79:18: 8a:7b:27:7f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEs1VuZmcE3xsbJme4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDYwNTY4MGItY2E3Ni00M2I2LTgxZDktMmFjNTA5OTNj NTllMB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk ZDY5MWIzZDQtZWRkNy00MTYxLTg3Y2QtYzNjMDE4NWM2YmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYZbu2uykwS7jsvPqSDrRvnTXiAy1hk86Hyc Bil5GPxJMKcbWTsXtOuUubV/srzStm4XMRyTi064tIDwKACHNRdA3QmWmAhZrkmG RJ2SOHehRNgqEEI51SapuXAheIN5yu4aQtzZmYUA79K8NBOA/AAylQxTV1bAE53+ i368N1WnCDdlqs+3KjsRzUVkMpVXG/Ea4MISVKep4pUeuxYEKLKXlqyf5hYRyTkx wjefUNPmV7M9lJ4CTzGqofPGw6SjtcuisuMHV43rbUZJ3+TFxhLMq7uMMMYOU9X5 CnmUJZa5i/lkPDveEJ+h2Ey0w97myaOY1QCfbkA0DtwvVemoeQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHUcZ8nb5O60U8qHFq4paoEDo/4SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wNjA1 NjgwYi1jYTc2LTQzYjYtODFkOS0yYWM1MDk5M2M1OWUvMDc2YjZiZWUtOTcxYi0z NjUwLTg3NTEtNmY0YWQ1ODUzNTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDYwNTY4MGItY2E3Ni00M2I2LTgx ZDktMmFjNTA5OTNjNTllLzA2MDU2ODBiLWNhNzYtNDNiNi04MWQ5LTJhYzUwOTkz YzU5ZS5jcmwwHwYDVR0jBBgwFoAUSUhmydhN2RQ18NBnqAdbMJX69FwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wNjA1NjgwYi1jYTc2LTQzYjYtODFkOS0yYWM1 MDk5M2M1OWUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf5IDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAxllORc6lrBub0BfO7WKywo3SDs3xdMnKK4ZWJ8Pg5dF2MRNDqUitq OZaUPnY/tLlzNX7OdnMAXPKqH5l9zxpsRSZnduu/vecfEqxLgP/EpsKtvUuG0fHK A/PLnmZKPsoxO08wHi2PrlrN/OpGDqZpfjbfD/tW1cZP/I9Bc7U2kLOClV7mGNrW ETwJTm4X26BFxjUQpfB7zG4ZnLFUWI80lcudQUtIQa+ANZVNLCPGa7wA0uP6vTrt wb5vxpwx41ftIyLvD3nUc3j1pPbMNJOFGpeiPNFhYlDp4Xz/JSep9ysUuIk81uwG wptZAOfk4fFjoVh7i70UUe9SeRiKeyd/ -----END CERTIFICATE-----Generated at Sat Oct 11 10:28:44 2025 by rpki-client