$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/d4b35916-c5f4-39c1-b8ca-6daadd961177.roa File: d4b35916-c5f4-39c1-b8ca-6daadd961177.roa (raw, json) Hash identifier: oVuFGt2gBigrgmMyzD9iG3T4LC5V4U9qxMpnuBZouSc= Subject key identifier: F8:75:AD:F6:A0:E2:A1:89:89:4A:DB:01:55:65:B4:75:A8:57:4F:4B Certificate issuer: /CN=d0677001-b062-4999-89f9-d882893f5a1c Certificate serial: 010D0C9F4328584B44B1C1FD32BE6816C80E0340 Authority key identifier: 2F:00:EF:E4:1F:8E:3A:6C:90:45:AF:9D:8B:60:4B:70:D9:F4:B5:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/d4b35916-c5f4-39c1-b8ca-6daadd961177.roa Signing time: Sun 21 Sep 2025 13:00:42 +0000 ROA not before: Sun 21 Sep 2025 13:00:42 +0000 ROA not after: Sat 20 Dec 2025 14:00:42 +0000 asID: 27628 IP address blocks: 2607:ee00::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/d0677001-b062-4999-89f9-d882893f5a1c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/d0677001-b062-4999-89f9-d882893f5a1c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:44:b1:c1:fd:32:be:68:16:c8:0e:03:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0677001-b062-4999-89f9-d882893f5a1c Validity Not Before: Sep 21 13:00:42 2025 GMT Not After : Dec 20 14:00:42 2025 GMT Subject: CN=086dfd05-f081-4e94-9fd6-337e9ac3e8fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:25:cd:6a:2a:94:2e:9a:a6:17:28:36:5b:70: 23:4f:91:28:df:e7:67:eb:aa:67:2c:ac:7f:0e:c2: 3d:65:f3:6b:ce:df:c2:37:d8:bc:7f:43:e3:b2:20: 59:a5:86:c0:3b:32:ef:55:48:23:2b:08:76:31:54: 96:4d:6e:b4:2e:25:34:e0:7d:0e:b0:e9:eb:bd:ee: 8f:ae:24:aa:ad:13:30:8a:20:83:4d:f0:0e:bd:f3: 03:af:c0:41:24:47:9a:cc:90:9a:51:7e:80:10:41: 64:03:a4:c3:7a:2a:0e:0e:8d:b2:b1:b5:d3:dd:4d: 59:d9:cb:8d:53:98:24:32:c1:e1:16:6f:5b:b7:ba: 21:b7:9e:64:28:25:be:d3:86:2e:00:b7:2e:d0:b3: 6b:4f:6d:0b:9f:15:88:87:ef:90:7c:ca:88:ee:77: e7:3f:4a:23:1c:f3:7b:c3:d2:5c:5b:dd:24:75:12: 5a:02:18:0d:bb:dd:e4:50:37:e0:53:e5:c1:2a:9a: 6d:35:e2:08:15:0d:48:81:46:28:00:40:6b:a5:3f: ee:b5:3a:b5:6c:ab:66:b6:03:25:3a:25:60:24:51: 8b:40:87:6d:e1:4b:1c:2f:95:0e:db:cf:e4:b6:6a: d7:65:33:90:ca:6b:df:e0:14:64:c4:3d:2c:b8:d7: ba:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:75:AD:F6:A0:E2:A1:89:89:4A:DB:01:55:65:B4:75:A8:57:4F:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/d4b35916-c5f4-39c1-b8ca-6daadd961177.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/d0677001-b062-4999-89f9-d882893f5a1c.crl X509v3 Authority Key Identifier: keyid:2F:00:EF:E4:1F:8E:3A:6C:90:45:AF:9D:8B:60:4B:70:D9:F4:B5:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c.cer sbgp-ipAddrBlock: critical IPv6: 2607:ee00::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:72:28:c4:26:04:a6:c6:92:25:af:7c:e1:59:ed:2e:22:c0: b2:21:f8:36:61:84:98:1a:80:a1:71:fa:3a:3a:c5:7a:65:d8: 8b:2e:6a:1c:3d:28:ea:43:b1:47:0c:f8:e8:63:9d:ee:a5:81: 18:16:12:ca:d1:b6:d6:5e:86:7b:ef:6a:e0:4a:0f:46:a8:17: 50:b1:63:ee:8e:d5:ba:16:bb:27:6d:36:03:6a:b5:de:96:f5: 66:02:f6:00:0c:2b:5a:0e:29:dc:26:15:0c:62:5e:69:dc:04: 74:e3:36:77:d3:b0:ef:83:ee:bd:34:10:f0:b0:98:77:e2:e2: 7f:68:0e:64:58:1e:3c:f9:f7:78:14:a7:c9:6d:6b:22:0f:ab: 30:ba:9f:32:12:d6:64:13:25:30:cf:d1:f0:87:2f:4d:d1:f5: 99:fa:6c:02:63:ec:4b:66:51:7b:de:45:bd:4b:d4:a5:a3:b1: cc:df:8e:2b:cc:2f:7e:28:25:ff:d0:fc:e7:05:45:b3:39:9f: e9:de:e9:20:76:84:68:4a:e4:4d:e7:83:0a:b2:2a:8f:11:23: ca:76:87:6c:4e:82:8d:23:cf:ed:fe:46:97:97:ae:c1:a6:2f: ea:74:1b:9b:98:ef:25:e8:16:07:51:77:6b:2a:a3:68:66:1f: 55:8c:65:d6 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtEscH9Mr5oFsgOA0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDA2NzcwMDEtYjA2Mi00OTk5LTg5ZjktZDg4Mjg5M2Y1 YTFjMB4XDTI1MDkyMTEzMDA0MloXDTI1MTIyMDE0MDA0MlowLzEtMCsGA1UEAxMk MDg2ZGZkMDUtZjA4MS00ZTk0LTlmZDYtMzM3ZTlhYzNlOGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyXNaiqULpqmFyg2W3AjT5Eo3+dn66pnLKx/ DsI9ZfNrzt/CN9i8f0PjsiBZpYbAOzLvVUgjKwh2MVSWTW60LiU04H0OsOnrve6P riSqrRMwiiCDTfAOvfMDr8BBJEeazJCaUX6AEEFkA6TDeioODo2ysbXT3U1Z2cuN U5gkMsHhFm9bt7oht55kKCW+04YuALcu0LNrT20LnxWIh++QfMqI7nfnP0ojHPN7 w9JcW90kdRJaAhgNu93kUDfgU+XBKpptNeIIFQ1IgUYoAEBrpT/utTq1bKtmtgMl OiVgJFGLQIdt4UscL5UO28/ktmrXZTOQymvf4BRkxD0suNe6GQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPh1rfag4qGJiUrbAVVltHWoV09LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kMDY3 NzAwMS1iMDYyLTQ5OTktODlmOS1kODgyODkzZjVhMWMvZDRiMzU5MTYtYzVmNC0z OWMxLWI4Y2EtNmRhYWRkOTYxMTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDA2NzcwMDEtYjA2Mi00OTk5LTg5 ZjktZDg4Mjg5M2Y1YTFjL2QwNjc3MDAxLWIwNjItNDk5OS04OWY5LWQ4ODI4OTNm NWExYy5jcmwwHwYDVR0jBBgwFoAULwDv5B+OOmyQRa+di2BLcNn0tSkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kMDY3NzAwMS1iMDYyLTQ5OTktODlmOS1kODgy ODkzZjVhMWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgfuAAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAhnIoxCYEpsaSJa984VntLiLAsiH4NmGEmBqAoXH6OjrFemXYiy5q HD0o6kOxRwz46GOd7qWBGBYSytG21l6Ge+9q4EoPRqgXULFj7o7Vuha7J202A2q1 3pb1ZgL2AAwrWg4p3CYVDGJeadwEdOM2d9Ow74PuvTQQ8LCYd+Lif2gOZFgePPn3 eBSnyW1rIg+rMLqfMhLWZBMlMM/R8IcvTdH1mfpsAmPsS2ZRe95FvUvUpaOxzN+O K8wvfigl/9D85wVFszmf6d7pIHaEaErkTeeDCrIqjxEjynaHbE6CjSPP7f5Gl5eu waYv6nQbm5jvJegWB1F3ayqjaGYfVYxl1g== -----END CERTIFICATE-----Generated at Thu Oct 9 08:52:29 2025 by rpki-client