$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/72d42e77-d5f3-3941-a9ef-754b641d0ac9.roa File: 72d42e77-d5f3-3941-a9ef-754b641d0ac9.roa (raw, json) Hash identifier: htcNKPEeoq7q958Sa3y5xhJQmBT07E62ISt67K8V7ls= Subject key identifier: F5:F1:EC:A4:D5:EB:9D:7B:15:27:76:BB:5E:F2:85:F8:7E:95:23:0A Certificate issuer: /CN=9eee3662-bee3-410a-9cb1-559a07ce6a9c Certificate serial: 010D0C9F4328584B0B76D5E49506D4F9CD22BA80 Authority key identifier: 62:5E:5D:D6:AA:8D:AD:0C:90:3F:B0:31:38:6D:1E:33:51:89:D1:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/72d42e77-d5f3-3941-a9ef-754b641d0ac9.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 29789 IP address blocks: 2001:18b8::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:d5:e4:95:06:d4:f9:cd:22:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9eee3662-bee3-410a-9cb1-559a07ce6a9c Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=25b147c2-78a3-41f0-808d-e04b6975500f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2b:0b:83:a2:ad:c3:fa:71:b0:2c:20:1b:77: ff:99:b0:8a:14:2b:ab:29:e5:97:a1:ab:43:e3:f1: 6b:9e:03:81:c7:93:18:71:53:a1:6f:a3:2d:b8:61: 48:9d:8c:f4:5e:d0:7b:cf:ff:ed:f2:b4:a2:82:c1: ba:ee:51:6f:bd:05:67:b0:53:ba:00:6b:10:95:4c: 1e:f9:b0:fe:48:95:94:8e:76:7b:80:01:dd:c8:2f: 7c:37:a3:15:bc:73:37:fb:15:ea:b3:47:a6:7d:3c: 1a:35:98:2f:c3:19:03:cd:0e:8f:79:c1:fa:35:44: 78:4d:ff:8c:7d:cc:bd:df:60:57:3d:eb:00:54:2c: b9:a7:e1:eb:68:42:e4:2d:6e:6a:90:9e:e1:8e:1a: c5:57:c4:17:8b:a2:9d:f8:99:ba:c4:fe:3d:4e:65: 0d:fd:fc:ae:a0:5c:57:26:f9:ac:b8:51:b1:c0:0a: 1c:09:22:15:9e:78:38:89:68:c0:b8:d9:09:86:dc: 1b:ca:ed:25:7d:51:ff:aa:82:0a:2e:a4:06:7e:64: 31:ac:9c:e4:bf:0c:cf:8c:c4:94:2f:22:ce:e3:0a: 7b:e0:6c:ab:3e:9d:05:2d:60:ca:e4:41:f1:a3:20: 5c:22:a7:0f:98:3c:42:d6:32:c7:e8:6f:9f:c0:c1: f7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:F1:EC:A4:D5:EB:9D:7B:15:27:76:BB:5E:F2:85:F8:7E:95:23:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/72d42e77-d5f3-3941-a9ef-754b641d0ac9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.crl X509v3 Authority Key Identifier: keyid:62:5E:5D:D6:AA:8D:AD:0C:90:3F:B0:31:38:6D:1E:33:51:89:D1:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer sbgp-ipAddrBlock: critical IPv6: 2001:18b8::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:29:d0:0f:af:31:62:85:ab:6c:5a:4f:d0:e1:1f:3b:a3:a5: 61:c8:c0:66:b8:cc:bc:47:d1:dc:5e:44:0a:25:17:97:d0:3e: 8f:12:64:16:f0:01:00:5e:a2:0b:6e:f5:fa:bb:8c:1b:44:06: 7a:45:da:9b:00:c1:f8:9e:0f:1f:52:f7:85:05:63:5b:9c:5f: d6:5b:93:08:ad:e5:19:51:3b:19:38:ed:1e:df:97:f2:21:6d: b8:30:f2:6f:31:6e:11:7d:5b:f5:76:08:78:0e:5e:91:a6:39: 2a:ea:35:25:6e:03:a7:59:3c:8e:7b:1a:15:5b:82:32:f2:e1: d3:89:87:81:b6:29:b3:52:b5:d3:17:3e:67:bb:61:94:57:20: d5:75:0d:d3:8b:d4:89:7c:e5:ac:b9:a1:9c:0a:37:12:49:b8: 85:ad:de:c2:e9:0a:84:d7:ca:24:e7:dc:b7:1c:6a:47:63:d8: 2b:c4:f1:25:d2:eb:9f:93:c2:1e:85:35:51:b6:9d:6d:03:2e: d6:5a:a9:9e:03:51:7f:2f:f4:2c:05:74:6c:fe:be:ee:95:e8: 80:51:63:eb:ee:1a:59:d5:3d:ac:c2:03:f2:e6:d5:54:fb:c4: 84:0b:08:b3:d0:b9:a9:94:4c:e3:8f:36:6e:52:f0:9d:25:8e: 4c:5e:6b:8c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsLdtXklQbU+c0iuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWVlZTM2NjItYmVlMy00MTBhLTljYjEtNTU5YTA3Y2U2 YTljMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk MjViMTQ3YzItNzhhMy00MWYwLTgwOGQtZTA0YjY5NzU1MDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjysLg6Ktw/pxsCwgG3f/mbCKFCurKeWXoatD 4/FrngOBx5MYcVOhb6MtuGFInYz0XtB7z//t8rSigsG67lFvvQVnsFO6AGsQlUwe +bD+SJWUjnZ7gAHdyC98N6MVvHM3+xXqs0emfTwaNZgvwxkDzQ6PecH6NUR4Tf+M fcy932BXPesAVCy5p+HraELkLW5qkJ7hjhrFV8QXi6Kd+Jm6xP49TmUN/fyuoFxX JvmsuFGxwAocCSIVnng4iWjAuNkJhtwbyu0lfVH/qoIKLqQGfmQxrJzkvwzPjMSU LyLO4wp74GyrPp0FLWDK5EHxoyBcIqcPmDxC1jLH6G+fwMH3DQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPXx7KTV6517FSd2u17yhfh+lSMKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85ZWVl MzY2Mi1iZWUzLTQxMGEtOWNiMS01NTlhMDdjZTZhOWMvNzJkNDJlNzctZDVmMy0z OTQxLWE5ZWYtNzU0YjY0MWQwYWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWVlZTM2NjItYmVlMy00MTBhLTlj YjEtNTU5YTA3Y2U2YTljLzllZWUzNjYyLWJlZTMtNDEwYS05Y2IxLTU1OWEwN2Nl NmE5Yy5jcmwwHwYDVR0jBBgwFoAUYl5d1qqNrQyQP7AxOG0eM1GJ0fowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85ZWVlMzY2Mi1iZWUzLTQxMGEtOWNiMS01NTlh MDdjZTZhOWMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEYuDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCZKdAPrzFihatsWk/Q4R87o6VhyMBmuMy8R9HcXkQKJReX0D6PEmQW 8AEAXqILbvX6u4wbRAZ6RdqbAMH4ng8fUveFBWNbnF/WW5MIreUZUTsZOO0e35fy IW24MPJvMW4RfVv1dgh4Dl6Rpjkq6jUlbgOnWTyOexoVW4Iy8uHTiYeBtimzUrXT Fz5nu2GUVyDVdQ3Ti9SJfOWsuaGcCjcSSbiFrd7C6QqE18ok59y3HGpHY9grxPEl 0uufk8IehTVRtp1tAy7WWqmeA1F/L/QsBXRs/r7uleiAUWPr7hpZ1T2swgPy5tVU +8SECwiz0LmplEzjjzZuUvCdJY5MXmuM -----END CERTIFICATE-----Generated at Fri Oct 10 19:54:22 2025 by rpki-client