$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9cf7850d-5a61-3ceb-86f8-0be244f76344.roa File: 9cf7850d-5a61-3ceb-86f8-0be244f76344.roa (raw, json) Hash identifier: ncrXLp1wqKpB9f/kCW7RlDs9ombW5I5y9/N/e2woPoU= Subject key identifier: 3B:2E:CA:F6:EA:F0:C3:B7:7F:F3:4B:A9:AA:01:8F:69:FB:6D:D9:64 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CE35795DB94F883DAAF8C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9cf7850d-5a61-3ceb-86f8-0be244f76344.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 2607:f8b0:400b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:35:79:5d:b9:4f:88:3d:aa:f8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=7ab909e5-dcbe-4cbd-a6c3-36c3067e9abc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7d:59:42:de:95:b4:80:48:00:b1:51:aa:61: 61:d1:78:a5:b3:b7:c9:03:d4:ad:f5:b1:7f:8c:2b: ea:06:2e:e8:8b:2c:d2:12:0a:e3:16:f3:70:eb:7a: 72:a4:d9:b1:e3:3d:cb:30:e3:30:e6:a2:d8:12:06: d2:d0:a8:be:34:58:20:47:44:a0:5a:e8:8e:84:5e: 5c:7c:a9:71:e0:ff:b3:5e:79:e2:d8:44:31:ea:78: cd:6c:6f:11:19:e9:b0:e1:6a:6a:4e:26:5e:a0:6c: 01:a0:ca:8b:7b:bb:4a:a8:dd:14:2f:30:49:5b:17: c1:4d:b5:f5:7e:00:f2:30:83:14:cf:ac:35:91:86: 9b:19:c2:3c:33:fc:72:fc:b4:39:dd:e6:0a:ec:3f: ee:58:3d:17:f8:b5:3f:b7:45:34:04:8a:ba:a5:ee: 01:ab:24:ac:c6:83:e4:eb:5e:0e:c1:ae:17:64:b4: 6c:4a:7f:ed:0c:32:c8:e0:c4:ec:7c:cb:11:40:2b: 6c:36:b0:06:20:05:6a:05:51:e2:56:cd:cb:84:a7: fe:3c:fb:47:33:51:c2:6b:34:2f:96:64:ad:39:7d: f2:d3:ca:da:70:c2:54:2d:1a:a8:c2:ae:48:f9:e5: d6:0a:9f:76:8a:d2:a4:99:49:82:c1:9a:c1:ba:f2: 2b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:2E:CA:F6:EA:F0:C3:B7:7F:F3:4B:A9:AA:01:8F:69:FB:6D:D9:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9cf7850d-5a61-3ceb-86f8-0be244f76344.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8b0:400b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:ec:8c:80:f1:e8:87:ad:5e:f4:ca:34:62:d3:b8:c8:38:36: 52:6b:8a:ce:4d:e3:fa:12:49:25:f4:0c:fe:96:ef:a9:78:b3: 33:cc:dc:ca:b2:14:ec:aa:b4:af:8c:30:2a:af:dd:46:23:8a: 7a:82:50:b4:8e:a5:63:cb:72:d6:c2:0f:79:86:48:bc:7a:05: 68:32:4c:b1:c4:22:58:1e:d1:ba:a1:a1:c7:d8:44:ac:e0:b9: 8e:d0:c3:2e:aa:29:d4:ab:7f:0a:f1:c2:62:8c:ae:61:ec:9a: db:35:d1:af:b0:17:d5:da:e7:8a:b5:4b:27:23:ec:d6:e5:d9: 99:01:37:43:96:55:19:d7:65:5b:c8:76:fc:e5:35:e1:15:b0: 3c:9e:26:2b:53:53:84:a6:04:8c:a4:b1:25:60:62:85:73:d8: 67:72:c3:6c:5d:c8:ef:5f:0a:f4:bb:9c:89:8f:a6:8d:3a:b6: 25:7f:a7:0e:62:39:ba:b7:da:d4:98:64:5f:e3:61:c5:e7:b8: 35:7e:3a:01:2e:74:0f:d2:31:13:ba:7d:54:95:d7:c9:ff:fc: 55:07:9d:8a:07:f5:52:6b:0d:87:ea:d0:cb:db:ca:45:10:39: 0b:ed:e2:12:a6:e1:17:53:8a:e4:76:22:b5:d2:37:c8:ef:bd: e5:84:6d:b7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzjV5XblPiD2q+MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk N2FiOTA5ZTUtZGNiZS00Y2JkLWE2YzMtMzZjMzA2N2U5YWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAln1ZQt6VtIBIALFRqmFh0Xils7fJA9St9bF/ jCvqBi7oiyzSEgrjFvNw63pypNmx4z3LMOMw5qLYEgbS0Ki+NFggR0SgWuiOhF5c fKlx4P+zXnni2EQx6njNbG8RGemw4WpqTiZeoGwBoMqLe7tKqN0ULzBJWxfBTbX1 fgDyMIMUz6w1kYabGcI8M/xy/LQ53eYK7D/uWD0X+LU/t0U0BIq6pe4BqySsxoPk 614Owa4XZLRsSn/tDDLI4MTsfMsRQCtsNrAGIAVqBVHiVs3LhKf+PPtHM1HCazQv lmStOX3y08racMJULRqowq5I+eXWCp92itKkmUmCwZrBuvIrWwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDsuyvbq8MO3f/NLqaoBj2n7bdlkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWNmNzg1MGQtNWE2MS0z Y2ViLTg2ZjgtMGJlMjQ0Zjc2MzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf4sEAL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKrsjIDx6IetXvTKNGLTuMg4NlJris5N4/oSSSX0DP6W76l4szPM 3MqyFOyqtK+MMCqv3UYjinqCULSOpWPLctbCD3mGSLx6BWgyTLHEIlge0bqhocfY RKzguY7Qwy6qKdSrfwrxwmKMrmHsmts10a+wF9Xa54q1Sycj7Nbl2ZkBN0OWVRnX ZVvIdvzlNeEVsDyeJitTU4SmBIyksSVgYoVz2Gdyw2xdyO9fCvS7nImPpo06tiV/ pw5iObq32tSYZF/jYcXnuDV+OgEudA/SMRO6fVSV18n//FUHnYoH9VJrDYfq0Mvb ykUQOQvt4hKm4RdTiuR2IrXSN8jvveWEbbc= -----END CERTIFICATE-----Generated at Fri Oct 17 08:44:59 2025 by rpki-client