$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/02490b1e-0527-346f-a427-fa83c48a1597.roa File: 02490b1e-0527-346f-a427-fa83c48a1597.roa (raw, json) Hash identifier: 0fNDRBiBPtfFD2jJeJ2NITWhLe9wRRrS6ycCqYtwoas= Subject key identifier: D3:27:B2:A7:70:72:F4:0B:03:BF:0A:91:FE:51:19:48:79:7A:A4:B4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD7791BD38876F8AAE88C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/02490b1e-0527-346f-a427-fa83c48a1597.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 2607:f8b0:400c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:77:91:bd:38:87:6f:8a:ae:88:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=bce6bb60-723a-476f-bb49-3759f115a6c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:96:3d:dc:90:28:7a:12:73:77:a2:a8:e2:f6: 53:1e:9b:b7:d9:3e:fe:bc:fb:7f:54:af:ea:0a:de: 24:37:9a:3c:aa:f9:04:c3:69:60:5e:ae:74:16:40: a1:1d:8e:b4:00:3f:a9:04:3e:93:ff:16:f9:1a:aa: d3:bf:09:f4:a0:8a:74:a3:94:d4:b5:c4:cf:9e:6d: 77:e4:43:08:2c:0c:38:96:ff:dd:88:59:e7:e9:6e: a5:36:13:46:59:b3:3d:bc:59:55:e7:df:a7:5b:1e: 8f:22:8e:05:bc:a8:34:43:5e:5d:3f:04:0c:cb:9e: 8c:db:ab:2c:06:11:6e:dc:d3:50:d7:d9:70:ec:f7: 48:4a:b2:9e:2c:e4:7c:66:d6:cd:43:bd:b8:4d:c5: ac:18:56:c8:cd:45:45:9c:ab:b3:61:e4:96:93:0e: 93:18:b1:d3:21:d9:0a:cf:77:f5:36:ef:35:80:42: 2c:b2:4b:92:77:8d:14:26:a1:47:f3:96:ad:34:59: cf:b3:6f:89:ef:82:98:56:a4:8a:2d:f8:84:82:c6: 5a:4c:90:27:aa:ed:d1:0a:f1:5f:c1:fd:23:ab:74: 8a:71:61:27:8f:38:e8:3c:db:56:2a:be:40:57:d0: 59:bd:79:d9:47:36:42:77:fb:52:e3:a6:d4:94:20: 16:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:27:B2:A7:70:72:F4:0B:03:BF:0A:91:FE:51:19:48:79:7A:A4:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/02490b1e-0527-346f-a427-fa83c48a1597.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8b0:400c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:ae:5d:09:44:77:a1:3f:ec:a4:dc:19:69:7e:7f:3c:c9:fe: 1a:ce:c0:41:f0:31:d1:43:3f:73:3e:7f:e6:42:97:96:90:23: ad:14:d0:27:51:3f:fe:6c:95:a5:5b:14:9e:e5:c5:ca:de:1e: 79:e4:24:bf:50:f9:2a:41:b0:ca:c6:ad:3d:65:a5:dc:ac:b2: 06:ba:dd:6d:f6:90:2a:47:0a:7d:5e:5e:b1:5e:d4:5d:4a:c0: 60:38:45:5a:61:e8:2d:fa:e4:3d:21:8b:05:3b:90:23:b9:4b: 6b:80:06:0b:3e:14:80:12:a3:12:a7:de:a0:c3:6c:83:b2:28: ce:f1:e1:9e:25:f4:f8:4f:16:8e:64:7a:5b:39:ad:15:03:4c: 88:62:96:1e:b8:04:2c:4e:03:1f:b7:eb:b5:39:b1:ca:8d:33: 69:fc:97:9d:51:cc:23:4a:7c:11:4b:63:cd:60:d1:8c:d7:80: cd:6d:a7:d4:00:66:d4:5d:29:59:b3:02:15:e7:61:f9:d5:aa: 79:22:b1:04:4d:6e:4f:67:92:b4:8e:8c:3c:3d:b6:b2:6a:41: 45:d3:dc:2a:04:ab:78:20:d7:4c:26:2d:5e:13:97:2b:a0:13: a0:6b:1d:52:a6:06:fa:be:b6:ed:cc:f5:27:02:5e:a2:6d:9d: 2d:56:ec:bb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzXeRvTiHb4quiMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YmNlNmJiNjAtNzIzYS00NzZmLWJiNDktMzc1OWYxMTVhNmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJY93JAoehJzd6Ko4vZTHpu32T7+vPt/VK/q Ct4kN5o8qvkEw2lgXq50FkChHY60AD+pBD6T/xb5GqrTvwn0oIp0o5TUtcTPnm13 5EMILAw4lv/diFnn6W6lNhNGWbM9vFlV59+nWx6PIo4FvKg0Q15dPwQMy56M26ss BhFu3NNQ19lw7PdISrKeLOR8ZtbNQ724TcWsGFbIzUVFnKuzYeSWkw6TGLHTIdkK z3f1Nu81gEIsskuSd40UJqFH85atNFnPs2+J74KYVqSKLfiEgsZaTJAnqu3RCvFf wf0jq3SKcWEnjzjoPNtWKr5AV9BZvXnZRzZCd/tS46bUlCAWzwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNMnsqdwcvQLA78Kkf5RGUh5eqS0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDI0OTBiMWUtMDUyNy0z NDZmLWE0MjctZmE4M2M0OGExNTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf4sEAM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADOuXQlEd6E/7KTcGWl+fzzJ/hrOwEHwMdFDP3M+f+ZCl5aQI60U 0CdRP/5slaVbFJ7lxcreHnnkJL9Q+SpBsMrGrT1lpdyssga63W32kCpHCn1eXrFe 1F1KwGA4RVph6C365D0hiwU7kCO5S2uABgs+FIASoxKn3qDDbIOyKM7x4Z4l9PhP Fo5kels5rRUDTIhilh64BCxOAx+367U5scqNM2n8l51RzCNKfBFLY81g0YzXgM1t p9QAZtRdKVmzAhXnYfnVqnkisQRNbk9nkrSOjDw9trJqQUXT3CoEq3gg10wmLV4T lyugE6BrHVKmBvq+tu3M9ScCXqJtnS1W7Ls= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:44 2025 by rpki-client