$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/64c77c06-2a0b-39b6-96f9-5abf73d4255d.roa File: 64c77c06-2a0b-39b6-96f9-5abf73d4255d.roa (raw, json) Hash identifier: ON7ciberF7pMr+Mzpw+8Wz/1wVNw5afg/i5MNeSQ5P8= Subject key identifier: 17:BE:5E:5C:FD:2F:78:61:87:A4:26:26:98:8E:07:3A:DD:35:AA:4B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD739470F8CD34847F4100 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/64c77c06-2a0b-39b6-96f9-5abf73d4255d.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 2607:f8b0:480f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:73:94:70:f8:cd:34:84:7f:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=280915cd-ad31-4aea-b507-1571c5b23509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:68:e2:b0:a7:18:1e:aa:78:7b:bd:5b:73:32: 1c:dd:bf:76:c0:13:0d:85:fb:de:84:96:43:7b:2a: 1c:5b:2e:52:0f:97:2c:75:66:05:22:fa:5d:8a:16: 65:74:66:52:66:52:07:98:91:35:fc:a0:0c:e8:a3: 21:25:58:ae:05:71:a6:75:9d:46:7c:a1:92:c4:84: e8:9a:4e:7e:ba:cc:7a:a6:b3:71:2e:38:fd:24:ca: 19:af:f0:60:3b:32:9e:3f:a9:87:33:ce:01:09:03: 06:31:5c:51:fc:f0:b5:46:0f:f5:a3:ea:2d:6a:28: 95:09:b0:05:cc:0a:c6:4d:3c:78:b3:3e:1e:de:c3: 3c:6e:99:1d:22:eb:e8:b5:e8:87:79:ec:95:9c:41: 5f:b6:9c:c6:db:d5:19:3d:ae:45:bc:20:78:47:39: b2:41:18:54:68:ec:65:cb:39:41:59:ff:9a:d7:51: 48:df:e0:8b:79:4e:c9:2b:b9:d7:26:ec:2e:53:47: f9:27:34:5d:3d:46:c7:aa:c5:46:13:7c:31:0e:4c: 18:72:a9:35:36:36:73:4b:0e:0a:e7:1f:d3:05:3c: da:e7:bc:5d:ab:82:c0:cd:37:01:09:d2:b3:d0:61: 5b:6f:9d:7a:62:87:54:fd:55:b8:0c:90:19:ab:48: 68:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:BE:5E:5C:FD:2F:78:61:87:A4:26:26:98:8E:07:3A:DD:35:AA:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/64c77c06-2a0b-39b6-96f9-5abf73d4255d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8b0:480f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:67:60:6a:f4:ef:9c:0c:df:38:69:5c:4b:ea:a2:27:2b:09: fd:c5:22:36:7d:fb:c6:55:54:5a:e2:d6:96:98:81:cf:1f:0a: a4:d3:bf:5b:91:f0:ff:59:d7:01:ea:55:03:83:49:16:f4:50: f5:6c:5e:d5:49:0d:eb:c8:a9:fb:4c:7b:fd:f0:66:56:4b:82: 5c:68:63:15:0c:5c:18:dc:12:9d:26:38:d6:5f:f0:f6:17:f4: 2e:3e:1d:e2:16:bd:9e:63:1b:e1:14:30:ad:cb:d8:b1:c2:0f: 10:e1:9c:66:9a:dc:f1:d2:e8:5a:e6:22:36:cf:59:d7:69:ed: bf:b3:20:af:bf:13:c9:77:93:a6:a5:68:45:c7:e9:cd:9f:0d: 75:30:8f:0b:e7:27:e6:db:8b:dc:a1:eb:f8:32:5d:f9:c0:d7: 31:2b:6b:22:af:5d:18:b5:34:a7:e5:6a:4b:36:8d:36:6a:50: 48:45:ba:1f:92:44:30:58:e7:5a:e3:7b:31:2e:fe:c2:22:fd: 8e:81:57:38:76:42:5c:7c:ee:34:59:7a:d1:a4:62:89:1b:5b: f9:2b:85:41:3c:45:a7:06:e9:c1:5b:b6:76:55:95:5f:d6:94: 1b:00:23:6b:d7:5e:da:dd:cd:26:43:7c:ab:0c:d0:ce:25:25: de:9c:1c:d3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzXOUcPjNNIR/QQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MjgwOTE1Y2QtYWQzMS00YWVhLWI1MDctMTU3MWM1YjIzNTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmjisKcYHqp4e71bczIc3b92wBMNhfvehJZD eyocWy5SD5csdWYFIvpdihZldGZSZlIHmJE1/KAM6KMhJViuBXGmdZ1GfKGSxITo mk5+usx6prNxLjj9JMoZr/BgOzKeP6mHM84BCQMGMVxR/PC1Rg/1o+otaiiVCbAF zArGTTx4sz4e3sM8bpkdIuvoteiHeeyVnEFftpzG29UZPa5FvCB4RzmyQRhUaOxl yzlBWf+a11FI3+CLeU7JK7nXJuwuU0f5JzRdPUbHqsVGE3wxDkwYcqk1NjZzSw4K 5x/TBTza57xdq4LAzTcBCdKz0GFbb516YodU/VW4DJAZq0hoxwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBe+Xlz9L3hhh6QmJpiOBzrdNapLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjRjNzdjMDYtMmEwYi0z OWI2LTk2ZjktNWFiZjczZDQyNTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf4sEgP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK5nYGr075wM3zhpXEvqoicrCf3FIjZ9+8ZVVFri1paYgc8fCqTT v1uR8P9Z1wHqVQODSRb0UPVsXtVJDevIqftMe/3wZlZLglxoYxUMXBjcEp0mONZf 8PYX9C4+HeIWvZ5jG+EUMK3L2LHCDxDhnGaa3PHS6FrmIjbPWddp7b+zIK+/E8l3 k6alaEXH6c2fDXUwjwvnJ+bbi9yh6/gyXfnA1zErayKvXRi1NKflaks2jTZqUEhF uh+SRDBY51rjezEu/sIi/Y6BVzh2Qlx87jRZetGkYokbW/krhUE8RacG6cFbtnZV lV/WlBsAI2vXXtrdzSZDfKsM0M4lJd6cHNM= -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:02 2025 by rpki-client