$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/ca889b93-a3f7-3af4-b7ce-31ac27f8fe75.roa File: ca889b93-a3f7-3af4-b7ce-31ac27f8fe75.roa (raw, json) Hash identifier: S42ARadx6GzuSuMS9SrjYGRl6Y/lsQV5IRwgyz1atxQ= Subject key identifier: B7:63:14:92:C6:00:5A:48:D1:F2:34:DF:F5:FB:08:B0:6F:04:DC:BA Certificate issuer: /CN=dbda8ea2-a168-4a8b-b01b-21a421e7130e Certificate serial: 010D0C9F4328584B742756DA3FE23DFB65C79680 Authority key identifier: AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/ca889b93-a3f7-3af4-b7ce-31ac27f8fe75.roa Signing time: Wed 08 Oct 2025 13:00:37 +0000 ROA not before: Wed 08 Oct 2025 13:00:37 +0000 ROA not after: Tue 06 Jan 2026 14:00:37 +0000 asID: 4473 IP address blocks: 2607:9bc0:1020::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:27:56:da:3f:e2:3d:fb:65:c7:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbda8ea2-a168-4a8b-b01b-21a421e7130e Validity Not Before: Oct 8 13:00:37 2025 GMT Not After : Jan 6 14:00:37 2026 GMT Subject: CN=4b932ee7-5a75-47f6-be75-4558fbbe8a8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:23:0b:55:e3:5e:20:92:d8:ac:aa:7c:ad:2b: a4:65:4f:b6:de:dc:de:f2:8a:bb:b4:45:c2:c2:b3: 60:1e:f1:e2:d8:85:0c:c9:99:1d:71:2e:2e:55:9e: 36:de:b4:2c:35:5c:0c:fc:c8:5a:8f:fd:88:4e:5d: d4:de:fb:f4:7b:35:e2:f9:da:4b:f9:c3:ac:de:95: 13:d6:f2:ad:11:fd:bf:fc:f8:66:2e:a9:48:bd:50: 41:66:cf:97:69:dc:4a:ab:eb:f3:22:81:4c:60:2d: 28:a6:ef:78:63:7f:0b:c2:63:85:8c:d3:0a:1a:24: 7a:17:c6:cf:e6:36:a2:15:3d:75:f6:8c:6d:f1:97: 5e:c2:6f:dd:3e:06:ec:da:ad:d7:90:fa:7a:de:31: 79:61:7b:a0:5a:b9:89:04:88:d3:ed:88:d2:ab:a7: e0:6c:c8:7f:00:f2:22:b5:0f:74:91:da:1d:e6:a3: 29:4f:59:ec:82:74:a1:54:38:66:41:79:31:18:30: 10:a0:f1:b1:3c:aa:6c:e4:30:a1:9e:ab:ea:0c:19: 31:91:e6:c3:79:7d:bf:ee:bd:ce:7a:67:10:01:c9: 9a:fb:a6:e9:c9:8d:6a:10:e3:d4:74:1d:fe:e0:9b: f0:71:33:0d:d9:94:8f:87:0a:2f:b2:50:b1:73:6f: 8f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:63:14:92:C6:00:5A:48:D1:F2:34:DF:F5:FB:08:B0:6F:04:DC:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/ca889b93-a3f7-3af4-b7ce-31ac27f8fe75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.crl X509v3 Authority Key Identifier: keyid:AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer sbgp-ipAddrBlock: critical IPv6: 2607:9bc0:1020::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:66:78:c1:9a:92:de:ab:82:f5:41:71:57:c7:c9:a5:4e:ff: b7:d9:cc:b9:da:fd:2a:d6:14:a3:c9:ee:b0:26:6d:2a:c4:1a: 48:70:85:45:c7:1c:33:ca:51:eb:09:16:9f:85:8f:5c:29:67: c4:05:d4:35:31:f4:64:ad:71:7e:c4:46:e0:ab:98:bd:06:90: d1:f1:f6:61:3f:05:2b:03:0d:b7:1d:89:16:d3:28:b2:cf:70: 50:f0:9e:84:a9:c9:b8:47:58:01:99:0f:52:48:e0:ab:96:07: 64:9b:93:a3:c9:0b:4b:f5:31:83:04:b1:91:85:26:0e:61:5c: de:62:5f:98:4c:f1:3b:ac:c4:d1:d7:43:ed:78:8e:44:55:e6: 70:bd:2a:5a:be:b2:0b:69:1b:a8:21:f5:a6:fc:76:16:c8:e9: 44:81:cd:84:2f:5b:8e:39:92:65:16:d4:0e:00:03:f9:20:85: 52:77:d4:77:c7:ca:f2:f1:14:5f:47:51:8d:d6:1a:71:9e:f4: d4:67:26:4d:a7:17:17:74:13:44:8f:d1:41:2f:db:a8:23:50: 51:96:e4:ca:54:2a:9d:5c:07:dc:36:2b:39:ac:65:92:58:84: 6c:e1:51:93:f5:ee:bf:5d:7c:c7:d5:67:23:a2:50:e6:71:14: e8:ba:31:89 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt0J1baP+I9+2XHloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGJkYThlYTItYTE2OC00YThiLWIwMWItMjFhNDIxZTcx MzBlMB4XDTI1MTAwODEzMDAzN1oXDTI2MDEwNjE0MDAzN1owLzEtMCsGA1UEAxMk NGI5MzJlZTctNWE3NS00N2Y2LWJlNzUtNDU1OGZiYmU4YThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCMLVeNeIJLYrKp8rSukZU+23tze8oq7tEXC wrNgHvHi2IUMyZkdcS4uVZ423rQsNVwM/Mhaj/2ITl3U3vv0ezXi+dpL+cOs3pUT 1vKtEf2//PhmLqlIvVBBZs+XadxKq+vzIoFMYC0opu94Y38LwmOFjNMKGiR6F8bP 5jaiFT119oxt8Zdewm/dPgbs2q3XkPp63jF5YXugWrmJBIjT7YjSq6fgbMh/APIi tQ90kdod5qMpT1nsgnShVDhmQXkxGDAQoPGxPKps5DChnqvqDBkxkebDeX2/7r3O emcQAcma+6bpyY1qEOPUdB3+4JvwcTMN2ZSPhwovslCxc2+PCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLdjFJLGAFpI0fI03/X7CLBvBNy6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYmRh OGVhMi1hMTY4LTRhOGItYjAxYi0yMWE0MjFlNzEzMGUvY2E4ODliOTMtYTNmNy0z YWY0LWI3Y2UtMzFhYzI3ZjhmZTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGJkYThlYTItYTE2OC00YThiLWIw MWItMjFhNDIxZTcxMzBlL2RiZGE4ZWEyLWExNjgtNGE4Yi1iMDFiLTIxYTQyMWU3 MTMwZS5jcmwwHwYDVR0jBBgwFoAUr/w7HHl4MT3z8v6+TaRLIToIXqUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYmRhOGVhMi1hMTY4LTRhOGItYjAxYi0yMWE0 MjFlNzEzMGUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgebwBAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA9meMGakt6rgvVBcVfHyaVO/7fZzLna/SrWFKPJ7rAmbSrEGkhw hUXHHDPKUesJFp+Fj1wpZ8QF1DUx9GStcX7ERuCrmL0GkNHx9mE/BSsDDbcdiRbT KLLPcFDwnoSpybhHWAGZD1JI4KuWB2Sbk6PJC0v1MYMEsZGFJg5hXN5iX5hM8Tus xNHXQ+14jkRV5nC9Klq+sgtpG6gh9ab8dhbI6USBzYQvW445kmUW1A4AA/kghVJ3 1HfHyvLxFF9HUY3WGnGe9NRnJk2nFxd0E0SP0UEv26gjUFGW5MpUKp1cB9w2Kzms ZZJYhGzhUZP17r9dfMfVZyOiUOZxFOi6MYk= -----END CERTIFICATE-----Generated at Sat Oct 11 19:28:26 2025 by rpki-client