$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7253783d-7f55-32b9-a22d-7d952f8e056c.roa File: 7253783d-7f55-32b9-a22d-7d952f8e056c.roa (raw, json) Hash identifier: prFNuXfFjoiJtRZJ7IwXYSh9v97T0PM3zA46Altrgx4= Subject key identifier: 15:49:46:6F:8F:5A:FF:BE:BA:94:10:B1:6F:8D:D7:BA:39:61:72:29 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CE3469C958C05AF4156280 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7253783d-7f55-32b9-a22d-7d952f8e056c.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 2607:f8b0:4002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:34:69:c9:58:c0:5a:f4:15:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=c5fdb47c-de52-4b17-8ace-63bf9b2e17b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2f:e3:3f:6f:cd:b8:9a:5a:09:b1:79:17:e4: f6:8c:72:63:1a:86:13:d4:87:5f:23:38:1a:9a:81: 95:d5:33:66:ba:37:77:71:75:09:2a:e9:ba:5b:71: 7a:3c:5f:70:c2:30:08:19:bf:a0:a0:a3:66:96:10: 8f:ac:67:65:e3:44:41:09:f3:ba:5d:20:cc:19:1c: 7f:c9:6d:a3:de:0e:40:a9:eb:9a:59:19:00:49:27: f3:ed:56:6f:0a:b7:a1:2b:05:67:73:46:a0:c7:ea: b1:51:7f:0a:dd:2a:fc:25:e0:37:a2:dc:16:27:59: 91:84:49:e9:d7:b5:10:bb:94:8e:6a:53:66:09:98: 93:04:13:93:04:65:03:09:56:21:d9:3a:3e:e3:6e: 7f:29:0a:b8:da:11:06:74:8a:be:f5:69:ff:56:f7: 1a:ea:9c:6a:0c:6a:1b:17:93:bc:ae:b0:f7:47:0c: a5:3b:87:ac:f3:26:e5:e0:4d:89:8a:26:56:1c:7f: e5:a3:9d:e1:aa:60:3e:ad:35:9a:8c:e2:86:85:fb: a8:45:6e:ff:a6:be:c8:b6:18:fb:75:b6:f2:a0:7e: f3:50:60:db:6f:2c:40:39:95:5b:b1:c5:32:75:a5: aa:fa:c7:95:44:3d:6f:f5:40:e3:6b:70:fe:3a:d6: 28:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:49:46:6F:8F:5A:FF:BE:BA:94:10:B1:6F:8D:D7:BA:39:61:72:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7253783d-7f55-32b9-a22d-7d952f8e056c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8b0:4002::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:82:f8:53:fc:07:b5:7e:d9:48:6c:a6:ce:52:0f:ca:fd:b6: 82:06:72:f2:6a:6e:81:ef:34:0e:70:0f:8d:35:8b:84:a9:20: a1:23:02:a7:70:61:05:78:05:27:00:f1:4b:92:05:46:9c:d6: 2e:0d:9f:4b:a5:59:4e:42:55:fa:73:e7:65:35:7b:5e:8e:7b: 0c:38:02:2e:fc:85:de:66:4c:19:e7:bd:bc:63:dd:d4:5e:b9: ca:74:c0:4b:57:11:4f:3a:ca:ab:8c:1e:5b:26:ae:2a:14:66: 66:d6:5d:52:aa:a5:24:f1:71:19:1e:ca:61:d2:48:d2:9a:12: 4d:a0:a4:24:91:23:53:31:7b:08:87:b6:04:d2:58:c2:8c:ab: 09:fc:19:0e:06:03:2f:54:90:fd:12:9e:25:ca:5f:18:8c:ec: a6:9e:db:53:b3:59:1a:73:b9:7f:ee:52:c3:e0:e6:ac:70:f0: 87:e2:d8:e1:43:97:75:87:01:83:99:6b:bf:35:4d:c9:92:31: 22:9d:1d:6f:ab:82:09:f6:45:a1:34:5a:59:94:be:11:03:2c: eb:cf:9f:92:69:e9:c3:18:2a:2a:e3:82:94:36:cf:81:7d:79: 72:92:fd:bb:f6:4b:97:3e:07:d1:23:ed:85:45:c3:7a:b9:aa: 1f:80:6e:82 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzjRpyVjAWvQVYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YzVmZGI0N2MtZGU1Mi00YjE3LThhY2UtNjNiZjliMmUxN2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1C/jP2/NuJpaCbF5F+T2jHJjGoYT1IdfIzga moGV1TNmujd3cXUJKum6W3F6PF9wwjAIGb+goKNmlhCPrGdl40RBCfO6XSDMGRx/ yW2j3g5AqeuaWRkASSfz7VZvCrehKwVnc0agx+qxUX8K3Sr8JeA3otwWJ1mRhEnp 17UQu5SOalNmCZiTBBOTBGUDCVYh2To+425/KQq42hEGdIq+9Wn/Vvca6pxqDGob F5O8rrD3RwylO4es8ybl4E2JiiZWHH/lo53hqmA+rTWajOKGhfuoRW7/pr7Ithj7 dbbyoH7zUGDbbyxAOZVbscUydaWq+seVRD1v9UDja3D+OtYojQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBVJRm+PWv++upQQsW+N17o5YXIpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzI1Mzc4M2QtN2Y1NS0z MmI5LWEyMmQtN2Q5NTJmOGUwNTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf4sEAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADiC+FP8B7V+2Uhsps5SD8r9toIGcvJqboHvNA5wD401i4SpIKEj AqdwYQV4BScA8UuSBUac1i4Nn0ulWU5CVfpz52U1e16Oeww4Ai78hd5mTBnnvbxj 3dReucp0wEtXEU86yquMHlsmrioUZmbWXVKqpSTxcRkeymHSSNKaEk2gpCSRI1Mx ewiHtgTSWMKMqwn8GQ4GAy9UkP0SniXKXxiM7Kae21OzWRpzuX/uUsPg5qxw8Ifi 2OFDl3WHAYOZa781TcmSMSKdHW+rggn2RaE0WlmUvhEDLOvPn5Jp6cMYKirjgpQ2 z4F9eXKS/bv2S5c+B9Ej7YVFw3q5qh+AboI= -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:09 2025 by rpki-client