$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/f7136cc7-d2bd-3bf4-9341-6a3bce87fa3b.roa File: f7136cc7-d2bd-3bf4-9341-6a3bce87fa3b.roa (raw, json) Hash identifier: XfAj2NFoVbCKjdFhq7caTUAwsiqd7syYFthINYJTHXw= Subject key identifier: 40:F8:DD:8A:D7:8D:E0:90:83:F3:2F:D4:58:BF:C6:E1:B7:C9:93:16 Certificate issuer: /CN=dbda8ea2-a168-4a8b-b01b-21a421e7130e Certificate serial: 010D0C9F4328584B74274F78717FF64F215BEA40 Authority key identifier: AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/f7136cc7-d2bd-3bf4-9341-6a3bce87fa3b.roa Signing time: Wed 08 Oct 2025 13:00:37 +0000 ROA not before: Wed 08 Oct 2025 13:00:37 +0000 ROA not after: Tue 06 Jan 2026 14:00:37 +0000 asID: 65012 IP address blocks: 2607:9bc0:1020::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:27:4f:78:71:7f:f6:4f:21:5b:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbda8ea2-a168-4a8b-b01b-21a421e7130e Validity Not Before: Oct 8 13:00:37 2025 GMT Not After : Jan 6 14:00:37 2026 GMT Subject: CN=11d1bdf2-3cdb-4675-b4ea-e00ac5f57ee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:17:1a:dd:54:9e:15:d6:95:dc:4e:e7:be:d7: 3f:f8:26:da:59:94:80:d0:ae:86:58:e3:1e:15:22: 94:43:76:3f:9c:b2:b8:9c:c7:88:80:f0:d4:58:f8: 4f:86:6b:32:c8:05:6b:3c:a6:12:8f:6d:37:42:4e: fb:c6:15:f9:ea:d0:df:3a:4c:45:65:76:28:c6:68: 20:63:10:43:87:d6:6a:75:fb:42:42:50:7f:d6:76: 39:c4:18:dc:0a:26:76:da:43:3e:dd:0b:b9:6a:58: 97:f4:e7:4e:ba:05:66:72:aa:08:dc:14:c0:d4:00: b8:b0:ca:a3:bd:b3:bc:0b:e2:6e:49:8a:20:86:9c: f8:54:bb:95:93:de:4c:0f:50:18:98:76:c8:0b:5b: a9:a1:86:51:db:62:b8:f9:59:e9:71:51:18:3a:0f: 95:f9:f0:4f:25:38:55:3c:85:26:a7:d8:85:2f:15: 1e:79:2f:11:a0:3b:89:2f:13:68:dc:0b:e4:48:23: 47:60:80:ea:25:49:aa:eb:51:ca:4c:3d:1f:82:57: 05:be:74:5c:c1:1c:e0:3f:76:98:5d:05:3a:c2:2d: 16:0b:b6:6d:49:ca:cb:6d:ef:9c:bb:d3:06:4c:ce: ed:04:87:34:31:32:b9:1f:46:39:f2:9e:2a:01:4c: c3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F8:DD:8A:D7:8D:E0:90:83:F3:2F:D4:58:BF:C6:E1:B7:C9:93:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/f7136cc7-d2bd-3bf4-9341-6a3bce87fa3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.crl X509v3 Authority Key Identifier: keyid:AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer sbgp-ipAddrBlock: critical IPv6: 2607:9bc0:1020::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:6e:01:9b:a4:14:72:74:88:fb:77:ca:f0:8c:7c:ec:5c:55: 60:22:5b:8c:54:b8:61:ac:e6:11:45:3a:5e:71:16:5e:eb:76: 1e:ce:e5:44:7b:f0:b1:f1:4e:26:2c:1e:fe:45:1b:b0:18:d3: 3a:b2:15:16:31:89:88:08:69:cf:93:4c:c1:1c:2c:eb:27:f9: 60:7d:55:2f:ce:3b:94:c2:88:e6:d5:cd:2c:2c:2f:d0:c6:5c: d1:1d:5b:4a:22:c8:a2:be:ee:72:cd:12:25:6f:a9:36:10:1b: da:0d:aa:5a:d2:27:cd:c5:39:ca:60:cd:9a:7a:7f:e5:54:72: c0:35:c2:3f:fd:cc:32:f1:62:b9:c4:fe:dc:5c:fe:a2:76:b9: ae:5c:2b:1a:92:36:ef:33:b6:2d:9b:92:af:7e:85:f0:87:cd: ec:18:aa:2a:97:f7:c0:ac:f3:a3:fb:69:8c:de:bc:9e:d1:e9: a6:aa:3c:6b:80:72:75:7d:6a:74:dc:6f:c5:1e:b3:25:f7:e3: 76:0a:e3:d1:bf:cc:c9:ee:cb:b0:31:ed:7f:57:80:fa:87:05: cf:b5:9d:1c:dd:a3:5e:b5:d8:e8:9b:a6:46:35:74:6a:dd:0b: ae:7c:a6:4b:2f:dc:20:33:20:bd:0e:5e:68:a2:1a:60:a7:ec: 59:fc:40:91 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt0J094cX/2TyFb6kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGJkYThlYTItYTE2OC00YThiLWIwMWItMjFhNDIxZTcx MzBlMB4XDTI1MTAwODEzMDAzN1oXDTI2MDEwNjE0MDAzN1owLzEtMCsGA1UEAxMk MTFkMWJkZjItM2NkYi00Njc1LWI0ZWEtZTAwYWM1ZjU3ZWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRca3VSeFdaV3E7nvtc/+CbaWZSA0K6GWOMe FSKUQ3Y/nLK4nMeIgPDUWPhPhmsyyAVrPKYSj203Qk77xhX56tDfOkxFZXYoxmgg YxBDh9ZqdftCQlB/1nY5xBjcCiZ22kM+3Qu5aliX9OdOugVmcqoI3BTA1AC4sMqj vbO8C+JuSYoghpz4VLuVk95MD1AYmHbIC1upoYZR22K4+VnpcVEYOg+V+fBPJThV PIUmp9iFLxUeeS8RoDuJLxNo3AvkSCNHYIDqJUmq61HKTD0fglcFvnRcwRzgP3aY XQU6wi0WC7ZtScrLbe+cu9MGTM7tBIc0MTK5H0Y58p4qAUzDUQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFED43YrXjeCQg/Mv1Fi/xuG3yZMWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYmRh OGVhMi1hMTY4LTRhOGItYjAxYi0yMWE0MjFlNzEzMGUvZjcxMzZjYzctZDJiZC0z YmY0LTkzNDEtNmEzYmNlODdmYTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGJkYThlYTItYTE2OC00YThiLWIw MWItMjFhNDIxZTcxMzBlL2RiZGE4ZWEyLWExNjgtNGE4Yi1iMDFiLTIxYTQyMWU3 MTMwZS5jcmwwHwYDVR0jBBgwFoAUr/w7HHl4MT3z8v6+TaRLIToIXqUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYmRhOGVhMi1hMTY4LTRhOGItYjAxYi0yMWE0 MjFlNzEzMGUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgebwBAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKJuAZukFHJ0iPt3yvCMfOxcVWAiW4xUuGGs5hFFOl5xFl7rdh7O 5UR78LHxTiYsHv5FG7AY0zqyFRYxiYgIac+TTMEcLOsn+WB9VS/OO5TCiObVzSws L9DGXNEdW0oiyKK+7nLNEiVvqTYQG9oNqlrSJ83FOcpgzZp6f+VUcsA1wj/9zDLx YrnE/txc/qJ2ua5cKxqSNu8zti2bkq9+hfCHzewYqiqX98Cs86P7aYzevJ7R6aaq PGuAcnV9anTcb8UesyX343YK49G/zMnuy7Ax7X9XgPqHBc+1nRzdo1612OibpkY1 dGrdC658pksv3CAzIL0OXmiiGmCn7Fn8QJE= -----END CERTIFICATE-----Generated at Sun Oct 12 00:17:15 2025 by rpki-client