$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/90d904a0-dea4-319a-a1cf-1e858687b196.roa File: 90d904a0-dea4-319a-a1cf-1e858687b196.roa (raw, json) Hash identifier: FDSZ1n9ttw+2U5IsGnXTjc2z1eqrSLgIJ9QElIguRGc= Subject key identifier: DB:2B:B1:8C:E7:A6:C9:C4:AA:11:99:B9:42:9D:91:20:0F:FC:F6:76 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CE36BB5CBD6CC083FEB940 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/90d904a0-dea4-319a-a1cf-1e858687b196.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 2607:f8b0:4006::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:36:bb:5c:bd:6c:c0:83:fe:b9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=c945aae5-1299-41ff-a988-6b4e62348bdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6b:71:50:48:b3:50:23:bb:93:70:e7:a3:bc: 4f:64:55:1f:08:bd:fe:79:15:2b:61:5f:68:b2:2b: 98:2f:4d:b2:29:f0:dd:d1:52:74:26:71:9b:46:cf: f5:8c:51:89:7a:c8:5b:03:cb:9c:1e:a1:59:68:d8: ed:f2:95:89:ea:c8:37:70:57:86:f3:ce:b3:96:94: 91:0d:40:cb:ad:5c:ae:63:50:5f:24:6b:23:72:d2: 5a:a6:85:63:02:bd:04:91:27:fa:d9:81:30:15:42: ba:11:dd:76:70:9b:f5:28:ac:ed:df:1b:55:a1:f3: a0:2f:5e:e8:63:1d:7b:10:3a:67:d6:23:a7:c7:76: cd:90:ca:8f:30:80:c1:1c:8b:52:60:c9:a8:d1:33: 43:5b:97:41:55:ef:e9:74:c0:57:4c:5b:93:be:6d: 5a:61:55:a5:e7:c2:24:af:64:7a:65:f6:08:85:df: c8:92:13:58:84:e2:06:6a:4c:cf:d2:4c:a6:a0:93: f5:1a:81:e4:d7:7b:1d:89:28:01:76:29:48:9b:aa: 23:ff:0b:1b:c1:d1:10:52:ce:ce:a8:a5:90:31:b7: a7:0a:16:1f:7f:5f:2e:a7:b8:92:e2:92:71:17:5e: cf:01:ab:eb:d3:b9:07:2b:f4:f1:fa:1c:4c:91:22: 30:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:2B:B1:8C:E7:A6:C9:C4:AA:11:99:B9:42:9D:91:20:0F:FC:F6:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/90d904a0-dea4-319a-a1cf-1e858687b196.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8b0:4006::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:d5:1a:51:31:c0:41:9a:0b:5c:ff:37:9a:5a:de:5a:9c:5b: 7f:3a:b2:88:f6:8e:43:e8:7a:f8:ba:8b:99:53:4a:8c:61:d9: d2:a6:17:0e:70:b1:4e:be:8e:f7:c1:a1:a0:3a:2e:7e:53:ab: 26:19:98:ca:3b:76:59:d1:23:fb:36:1b:33:08:9d:5f:00:65: 4e:88:ec:68:bc:7a:fb:0b:e9:aa:a0:13:23:9e:68:bd:1d:fa: dd:f2:ef:3d:20:95:18:ce:d7:37:a0:0f:f4:e7:b1:ef:d7:48: 9f:ad:81:52:cf:79:0c:04:c0:4e:3f:08:72:dc:a1:68:f1:e3: d3:9d:9b:fb:2c:19:ce:50:1a:96:e8:1f:07:40:c4:44:d2:24: 3d:98:96:d1:79:9a:f7:83:e9:12:bc:74:98:d6:20:8d:46:82: 4e:0c:01:9e:76:48:5b:25:92:a2:37:d2:c0:36:da:2f:94:77: 26:ae:db:2d:d5:75:99:16:c7:4d:0b:56:01:ac:18:1a:60:f5: e2:e7:65:f7:fa:43:c1:8a:a3:63:d7:da:29:26:6f:c1:fe:b6: 64:eb:cd:65:43:c5:95:29:f5:ac:9d:36:07:e1:99:d2:63:9c: ce:bb:2c:f9:ec:a3:1a:7f:4e:f5:90:60:ea:92:9b:7b:04:6c: 60:f4:20:6b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzja7XL1swIP+uUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk Yzk0NWFhZTUtMTI5OS00MWZmLWE5ODgtNmI0ZTYyMzQ4YmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmtxUEizUCO7k3Dno7xPZFUfCL3+eRUrYV9o siuYL02yKfDd0VJ0JnGbRs/1jFGJeshbA8ucHqFZaNjt8pWJ6sg3cFeG886zlpSR DUDLrVyuY1BfJGsjctJapoVjAr0EkSf62YEwFUK6Ed12cJv1KKzt3xtVofOgL17o Yx17EDpn1iOnx3bNkMqPMIDBHItSYMmo0TNDW5dBVe/pdMBXTFuTvm1aYVWl58Ik r2R6ZfYIhd/IkhNYhOIGakzP0kymoJP1GoHk13sdiSgBdilIm6oj/wsbwdEQUs7O qKWQMbenChYff18up7iS4pJxF17PAavr07kHK/Tx+hxMkSIwgQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNsrsYznpsnEqhGZuUKdkSAP/PZ2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTBkOTA0YTAtZGVhNC0z MTlhLWExY2YtMWU4NTg2ODdiMTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf4sEAG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACvVGlExwEGaC1z/N5pa3lqcW386soj2jkPoevi6i5lTSoxh2dKm Fw5wsU6+jvfBoaA6Ln5TqyYZmMo7dlnRI/s2GzMInV8AZU6I7Gi8evsL6aqgEyOe aL0d+t3y7z0glRjO1zegD/Tnse/XSJ+tgVLPeQwEwE4/CHLcoWjx49Odm/ssGc5Q GpboHwdAxETSJD2YltF5mveD6RK8dJjWII1Ggk4MAZ52SFslkqI30sA22i+Udyau 2y3VdZkWx00LVgGsGBpg9eLnZff6Q8GKo2PX2ikmb8H+tmTrzWVDxZUp9aydNgfh mdJjnM67LPnsoxp/TvWQYOqSm3sEbGD0IGs= -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:33 2025 by rpki-client