$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d8018ebf-ceb4-3b29-8bd1-7a74a422407b.roa File: d8018ebf-ceb4-3b29-8bd1-7a74a422407b.roa (raw, json) Hash identifier: tg61zCOFLyJVUktSdTHiL+tFBd0Ttzw9OO0XMO8iaDU= Subject key identifier: 8F:F9:65:DD:4D:93:8C:00:49:60:0B:0F:07:BE:48:8F:B4:38:BE:0C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CE335180D29F8401C07A00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d8018ebf-ceb4-3b29-8bd1-7a74a422407b.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 2607:f8b0:4012::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:33:51:80:d2:9f:84:01:c0:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=b8c8a274-b473-4bb9-9e82-6d7e002bc8a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a3:ca:9e:b7:01:53:4d:e1:f9:19:4e:ae:17: c5:29:b2:94:16:93:67:0d:15:ec:75:6d:e9:1e:2c: 0c:9c:05:32:d2:7a:28:81:fd:d3:5c:76:e1:3c:2c: cf:07:25:09:c0:c1:6d:a3:4a:e9:2f:1b:95:8d:c8: a8:0f:85:cb:84:8e:65:2b:06:e8:38:45:77:1c:70: f4:44:fb:df:91:12:fc:70:43:36:44:29:5a:ad:02: d9:cf:67:d8:92:98:74:87:cb:b1:78:58:cc:aa:dd: a2:c5:a5:8c:49:6d:33:8e:c9:7d:2e:a1:7b:ae:d2: 7f:49:50:44:bb:5e:ff:4e:37:fa:1e:e2:6f:2c:c7: 71:24:93:ba:53:c9:9e:af:df:a3:d7:87:5a:fa:51: f1:5a:82:f4:b7:49:5c:25:6f:b4:48:ae:25:fd:ab: 40:c0:66:88:96:29:83:d8:a8:74:44:e0:13:7a:52: 3b:7c:70:40:36:8f:18:76:96:95:f9:08:44:b2:e9: 98:91:a9:43:b2:43:3c:2a:13:56:e0:19:51:c7:a5: 88:eb:ea:ab:c5:6e:a4:1a:1e:4f:a0:15:31:cc:fe: 9f:84:62:f6:ec:86:f6:5e:b8:c4:32:36:94:1f:81: c6:b7:55:b8:27:59:de:ea:52:48:5b:c3:fe:e5:29: 01:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F9:65:DD:4D:93:8C:00:49:60:0B:0F:07:BE:48:8F:B4:38:BE:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d8018ebf-ceb4-3b29-8bd1-7a74a422407b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8b0:4012::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:83:60:b8:85:84:96:e6:e1:e9:66:00:0e:3c:ff:7d:65:fd: 15:a7:d7:9c:2e:e4:04:c5:73:57:14:f2:cc:d3:da:2e:4b:bf: 58:f6:a6:54:36:b7:ee:b8:30:d5:95:77:8c:f5:63:90:78:f6: 4b:67:75:bf:d2:2b:78:9c:3c:36:f8:77:f2:ac:b4:6a:ac:4d: 08:ce:1f:1e:c8:cc:f6:7b:89:77:ac:f7:fd:a5:0b:1d:f9:3a: d0:3b:53:e1:b3:8b:62:4c:e5:4c:13:58:40:c1:94:b3:8a:2d: 87:aa:6e:aa:b3:f2:13:c5:3a:31:87:fc:b8:53:ad:22:19:a1: e6:c1:67:09:f5:1a:63:1d:66:62:4e:54:8e:4a:31:a9:3d:7b: ad:95:20:2a:6b:d6:b2:54:ce:7a:55:e5:1b:cb:e9:c4:d6:e1: 40:55:03:db:7b:fb:01:d8:13:d9:13:41:df:9d:ec:50:2a:c2: c0:5a:99:d9:87:fa:75:93:ee:96:ca:06:82:d9:e8:01:77:5d: 95:e5:f5:36:88:80:c3:4b:95:45:57:13:8d:95:b8:2f:77:68: c7:21:5f:1c:6f:c3:2e:5a:26:7e:a6:19:4c:44:5c:85:66:e5: 0c:7f:d6:a6:d3:1f:d9:7c:4e:65:75:55:b3:26:13:25:a3:24: ae:f4:19:04 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzjNRgNKfhAHAegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YjhjOGEyNzQtYjQ3My00YmI5LTllODItNmQ3ZTAwMmJjOGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqPKnrcBU03h+RlOrhfFKbKUFpNnDRXsdW3p HiwMnAUy0noogf3TXHbhPCzPByUJwMFto0rpLxuVjcioD4XLhI5lKwboOEV3HHD0 RPvfkRL8cEM2RClarQLZz2fYkph0h8uxeFjMqt2ixaWMSW0zjsl9LqF7rtJ/SVBE u17/Tjf6HuJvLMdxJJO6U8mer9+j14da+lHxWoL0t0lcJW+0SK4l/atAwGaIlimD 2Kh0ROATelI7fHBANo8YdpaV+QhEsumYkalDskM8KhNW4BlRx6WI6+qrxW6kGh5P oBUxzP6fhGL27Ib2XrjEMjaUH4HGt1W4J1ne6lJIW8P+5SkBZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI/5Zd1Nk4wASWALDwe+SI+0OL4MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDgwMThlYmYtY2ViNC0z YjI5LThiZDEtN2E3NGE0MjI0MDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf4sEAS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEiDYLiFhJbm4elmAA48/31l/RWn15wu5ATFc1cU8szT2i5Lv1j2 plQ2t+64MNWVd4z1Y5B49ktndb/SK3icPDb4d/KstGqsTQjOHx7IzPZ7iXes9/2l Cx35OtA7U+Gzi2JM5UwTWEDBlLOKLYeqbqqz8hPFOjGH/LhTrSIZoebBZwn1GmMd ZmJOVI5KMak9e62VICpr1rJUznpV5RvL6cTW4UBVA9t7+wHYE9kTQd+d7FAqwsBa mdmH+nWT7pbKBoLZ6AF3XZXl9TaIgMNLlUVXE42VuC93aMchXxxvwy5aJn6mGUxE XIVm5Qx/1qbTH9l8TmV1VbMmEyWjJK70GQQ= -----END CERTIFICATE-----Generated at Fri Oct 17 08:44:58 2025 by rpki-client