$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/165f5246-1b48-3ea5-943a-619c03146706.roa File: 165f5246-1b48-3ea5-943a-619c03146706.roa (raw, json) Hash identifier: UrDlOXl4RA1J/wMLRtA9SPs3cGVnkPEe/0xs974d8Yo= Subject key identifier: C5:CF:8D:62:EB:E8:15:22:E0:8C:E8:60:5F:B0:72:B1:16:4C:47:57 Certificate issuer: /CN=dbda8ea2-a168-4a8b-b01b-21a421e7130e Certificate serial: 010D0C9F4328584B74274D94E4B7C66C45ECA1C0 Authority key identifier: AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/165f5246-1b48-3ea5-943a-619c03146706.roa Signing time: Wed 08 Oct 2025 13:00:37 +0000 ROA not before: Wed 08 Oct 2025 13:00:37 +0000 ROA not after: Tue 06 Jan 2026 14:00:37 +0000 asID: 65012 IP address blocks: 2607:9bc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:27:4d:94:e4:b7:c6:6c:45:ec:a1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbda8ea2-a168-4a8b-b01b-21a421e7130e Validity Not Before: Oct 8 13:00:37 2025 GMT Not After : Jan 6 14:00:37 2026 GMT Subject: CN=7efda651-3947-4ce7-9799-2a7181c8a9e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ea:33:f9:9a:e4:34:fe:12:84:52:77:20:28: 6e:50:df:78:19:bd:ea:a6:d6:fc:e5:49:17:3c:e6: cd:4f:74:85:74:62:09:8b:84:de:21:11:c5:c0:ba: ba:a2:57:88:14:39:b3:17:bb:a1:22:e1:52:12:5f: ae:d7:19:da:9c:8a:d9:ef:1c:62:71:be:23:ce:8a: 5c:b7:16:b0:6a:7f:70:7b:63:31:e6:8c:51:94:7b: dd:ea:17:ed:2c:5f:21:6d:1f:91:d1:47:df:c5:7c: 6b:64:61:68:00:50:00:18:de:49:4b:cc:62:15:67: c8:9f:4a:db:c4:2e:67:44:6b:6d:29:e1:d8:95:73: b3:88:9a:ac:96:53:32:7c:f4:ed:1b:7b:27:56:d2: e9:ed:93:17:0c:64:03:e5:5e:73:e9:3a:2d:a6:e5: 1b:59:40:b6:b7:e4:15:42:45:ff:98:76:ae:9a:c8: 51:50:a9:b6:25:0b:bb:99:1d:97:83:d9:ef:58:de: e6:66:56:b8:2f:4a:03:e4:70:3d:df:60:dc:38:de: 5f:bb:aa:b5:fc:90:ae:54:35:4f:b4:e5:01:f4:79: 55:2b:ca:ab:18:d8:c3:ba:71:86:6d:ec:2e:a0:7e: e8:c9:50:f9:01:8b:57:0d:28:de:e0:57:b8:ed:27: 80:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:CF:8D:62:EB:E8:15:22:E0:8C:E8:60:5F:B0:72:B1:16:4C:47:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/165f5246-1b48-3ea5-943a-619c03146706.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.crl X509v3 Authority Key Identifier: keyid:AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer sbgp-ipAddrBlock: critical IPv6: 2607:9bc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:84:74:97:4a:59:4c:7d:6a:f1:c7:e0:1c:93:6b:6f:c0:35: 06:58:fe:fd:63:3c:7d:d3:a6:ce:f7:e6:ce:73:f4:a7:48:46: ce:0e:0e:76:10:08:c4:ac:fc:39:f0:f5:0e:d6:21:db:db:5d: 30:88:e6:64:48:51:14:a2:b8:df:5c:f6:59:21:af:d4:dc:67: 01:93:94:6a:7d:3e:fa:56:42:b6:1a:39:f1:c9:2b:12:87:82: 3d:66:92:cd:67:90:db:18:a8:52:0b:e4:02:ef:6d:17:73:b5: e1:d7:53:22:fb:1a:c8:6a:3a:64:11:cc:6c:79:49:21:eb:b6: 0f:e9:6e:67:f4:fc:78:01:4b:63:d7:cd:cb:49:2f:64:ec:5f: f5:23:06:00:1d:ed:9c:8a:bd:76:7e:41:0b:4d:83:7d:4b:2f: a2:25:49:be:75:bc:e4:67:97:ca:a8:06:1e:97:7c:7a:44:53: aa:ea:96:be:80:6d:51:f3:8a:f9:99:bf:25:ee:33:de:f7:15: 18:51:a4:93:61:7e:b6:40:a2:0f:e7:6b:1f:c7:dd:1d:b6:1f: 96:8c:72:a9:08:37:5e:d7:01:bf:02:ee:42:df:6e:76:d7:08: 8e:1c:e0:00:cf:f4:25:a0:52:85:ed:1e:e2:c4:00:3c:fe:42: 93:4e:b1:89 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt0J02U5LfGbEXsocAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGJkYThlYTItYTE2OC00YThiLWIwMWItMjFhNDIxZTcx MzBlMB4XDTI1MTAwODEzMDAzN1oXDTI2MDEwNjE0MDAzN1owLzEtMCsGA1UEAxMk N2VmZGE2NTEtMzk0Ny00Y2U3LTk3OTktMmE3MTgxYzhhOWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleoz+ZrkNP4ShFJ3IChuUN94Gb3qptb85UkX PObNT3SFdGIJi4TeIRHFwLq6oleIFDmzF7uhIuFSEl+u1xnanIrZ7xxicb4jzopc txawan9we2Mx5oxRlHvd6hftLF8hbR+R0UffxXxrZGFoAFAAGN5JS8xiFWfIn0rb xC5nRGttKeHYlXOziJqsllMyfPTtG3snVtLp7ZMXDGQD5V5z6TotpuUbWUC2t+QV QkX/mHaumshRUKm2JQu7mR2Xg9nvWN7mZla4L0oD5HA932DcON5fu6q1/JCuVDVP tOUB9HlVK8qrGNjDunGGbewuoH7oyVD5AYtXDSje4Fe47SeAOQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMXPjWLr6BUi4IzoYF+wcrEWTEdXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYmRh OGVhMi1hMTY4LTRhOGItYjAxYi0yMWE0MjFlNzEzMGUvMTY1ZjUyNDYtMWI0OC0z ZWE1LTk0M2EtNjE5YzAzMTQ2NzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGJkYThlYTItYTE2OC00YThiLWIw MWItMjFhNDIxZTcxMzBlL2RiZGE4ZWEyLWExNjgtNGE4Yi1iMDFiLTIxYTQyMWU3 MTMwZS5jcmwwHwYDVR0jBBgwFoAUr/w7HHl4MT3z8v6+TaRLIToIXqUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYmRhOGVhMi1hMTY4LTRhOGItYjAxYi0yMWE0 MjFlNzEzMGUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgebwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCVhHSXSllMfWrxx+Ack2tvwDUGWP79Yzx906bO9+bOc/SnSEbODg52 EAjErPw58PUO1iHb210wiOZkSFEUorjfXPZZIa/U3GcBk5RqfT76VkK2GjnxySsS h4I9ZpLNZ5DbGKhSC+QC720Xc7Xh11Mi+xrIajpkEcxseUkh67YP6W5n9Px4AUtj 183LSS9k7F/1IwYAHe2cir12fkELTYN9Sy+iJUm+dbzkZ5fKqAYel3x6RFOq6pa+ gG1R84r5mb8l7jPe9xUYUaSTYX62QKIP52sfx90dth+WjHKpCDde1wG/Au5C3252 1wiOHOAAz/QloFKF7R7ixAA8/kKTTrGJ -----END CERTIFICATE-----Generated at Sun Oct 12 00:19:31 2025 by rpki-client