$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65b40bd5-5bac-4926-93a3-fd16c7c31445/19cefa01-5aa3-3c92-af6e-8b84b5ab306e.roa File: 19cefa01-5aa3-3c92-af6e-8b84b5ab306e.roa (raw, json) Hash identifier: DqBfO2MvFKz8ZH4ufxCbkNh/hlkE8sTVarqlOgsWawA= Subject key identifier: 07:72:B2:C5:63:E9:3A:B2:F3:E1:31:36:E2:75:89:D6:A3:54:BD:8B Certificate issuer: /CN=65b40bd5-5bac-4926-93a3-fd16c7c31445 Certificate serial: 010D0C9F4328584B1AD1802A4E5EE0A2222BD0C0 Authority key identifier: 37:DC:87:18:3B:B3:7C:17:41:53:1C:63:6B:18:62:08:05:1E:52:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65b40bd5-5bac-4926-93a3-fd16c7c31445.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65b40bd5-5bac-4926-93a3-fd16c7c31445/19cefa01-5aa3-3c92-af6e-8b84b5ab306e.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 32712 IP address blocks: 2607:8840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65b40bd5-5bac-4926-93a3-fd16c7c31445/65b40bd5-5bac-4926-93a3-fd16c7c31445.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65b40bd5-5bac-4926-93a3-fd16c7c31445/65b40bd5-5bac-4926-93a3-fd16c7c31445.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65b40bd5-5bac-4926-93a3-fd16c7c31445.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:80:2a:4e:5e:e0:a2:22:2b:d0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65b40bd5-5bac-4926-93a3-fd16c7c31445 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=0f68da53-2d5c-4f66-b1d4-b1df8db65b94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:31:9e:bc:86:36:e3:be:9a:d9:12:b7:87:19: 57:04:6a:18:b6:38:fa:b6:05:c0:44:97:41:81:9e: 2d:e1:93:9c:ac:86:e4:2f:51:b6:2c:e2:cd:f8:0a: f5:dd:66:b2:fa:42:2d:ab:10:df:e1:9b:c2:bc:8b: b3:71:bf:54:81:6e:d9:80:79:82:93:8f:d3:17:26: 60:1f:2c:6f:95:b5:13:c3:d1:67:03:e2:df:c6:13: 36:2b:4b:bb:43:d9:b3:89:2f:f2:9d:10:73:c5:76: 57:28:67:72:ba:84:3b:81:3f:e5:7f:72:f2:c8:37: 29:07:f3:a7:12:d2:75:0d:12:69:aa:8f:20:0e:77: ab:47:d4:98:1e:11:8b:da:e1:a0:b1:a4:ae:31:19: b5:2a:06:8b:7f:57:77:db:af:36:e7:34:4a:92:54: 71:fb:cc:aa:05:47:86:93:fa:fd:08:ea:48:82:74: b6:92:77:1d:1e:49:e5:fa:15:2c:ca:92:5b:2d:31: cf:14:bb:31:c1:d8:52:e2:ca:b4:ac:20:e5:10:33: ad:3c:8f:d1:74:dc:76:c3:e7:28:b5:fa:98:25:66: e0:09:8c:4d:bd:05:ed:f8:7b:2c:3e:63:c1:3b:ce: 82:ea:59:24:02:8d:c3:92:db:89:43:3c:05:34:4c: 31:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:72:B2:C5:63:E9:3A:B2:F3:E1:31:36:E2:75:89:D6:A3:54:BD:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65b40bd5-5bac-4926-93a3-fd16c7c31445/19cefa01-5aa3-3c92-af6e-8b84b5ab306e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65b40bd5-5bac-4926-93a3-fd16c7c31445/65b40bd5-5bac-4926-93a3-fd16c7c31445.crl X509v3 Authority Key Identifier: keyid:37:DC:87:18:3B:B3:7C:17:41:53:1C:63:6B:18:62:08:05:1E:52:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65b40bd5-5bac-4926-93a3-fd16c7c31445.cer sbgp-ipAddrBlock: critical IPv6: 2607:8840::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:0a:d2:87:81:cd:d3:08:99:f4:5e:cb:07:64:61:78:04:a1: 1a:88:ef:80:c7:7e:a1:3b:84:cd:32:50:29:0d:71:b2:7b:5d: a2:36:0d:ad:78:9d:0c:d7:41:22:c8:93:dc:90:5b:03:f0:13: e7:eb:5f:bf:f0:37:2c:51:4d:4d:51:65:80:f4:46:3d:b0:5e: 01:b7:e3:e8:58:ab:c5:c8:f8:9f:b1:47:96:5a:8e:35:cd:eb: 56:40:c4:ea:7e:a3:cc:2a:ca:f8:ec:a5:bb:93:32:65:23:c7: 7c:b4:ce:fd:e0:39:d0:cd:c7:d5:83:c6:a6:10:3b:fa:de:a6: fc:38:3f:8d:c4:4d:80:a5:1e:99:b4:99:34:fa:d6:3d:5b:27: 0b:09:66:9d:2e:4d:a8:b6:bc:16:72:c8:22:b5:3e:21:87:76: b0:05:e8:58:00:1e:4c:d4:c9:7d:83:d4:ef:17:0c:c3:2d:a4: 65:50:cb:8f:8e:61:95:2e:da:0a:39:bd:d2:85:3b:00:b3:9b: a1:cc:31:bc:f0:f1:1c:01:e4:b7:ac:fa:e3:48:c1:be:92:d6: a4:12:80:97:e0:3f:d8:0e:43:f1:33:c9:23:8c:fa:9e:75:30: 73:90:98:12:90:16:81:5b:a5:5f:9a:d5:73:2c:ad:53:77:81: ac:c8:19:a8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsa0YAqTl7goiIr0MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjViNDBiZDUtNWJhYy00OTI2LTkzYTMtZmQxNmM3YzMx NDQ1MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk MGY2OGRhNTMtMmQ1Yy00ZjY2LWIxZDQtYjFkZjhkYjY1Yjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8DGevIY2476a2RK3hxlXBGoYtjj6tgXARJdB gZ4t4ZOcrIbkL1G2LOLN+Ar13Way+kItqxDf4ZvCvIuzcb9UgW7ZgHmCk4/TFyZg HyxvlbUTw9FnA+LfxhM2K0u7Q9mziS/ynRBzxXZXKGdyuoQ7gT/lf3LyyDcpB/On EtJ1DRJpqo8gDnerR9SYHhGL2uGgsaSuMRm1KgaLf1d326825zRKklRx+8yqBUeG k/r9COpIgnS2kncdHknl+hUsypJbLTHPFLsxwdhS4sq0rCDlEDOtPI/RdNx2w+co tfqYJWbgCYxNvQXt+HssPmPBO86C6lkkAo3DktuJQzwFNEwxJwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAdyssVj6Tqy8+ExNuJ1idajVL2LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82NWI0 MGJkNS01YmFjLTQ5MjYtOTNhMy1mZDE2YzdjMzE0NDUvMTljZWZhMDEtNWFhMy0z YzkyLWFmNmUtOGI4NGI1YWIzMDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjViNDBiZDUtNWJhYy00OTI2LTkz YTMtZmQxNmM3YzMxNDQ1LzY1YjQwYmQ1LTViYWMtNDkyNi05M2EzLWZkMTZjN2Mz MTQ0NS5jcmwwHwYDVR0jBBgwFoAUN9yHGDuzfBdBUxxjaxhiCAUeUrQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82NWI0MGJkNS01YmFjLTQ5MjYtOTNhMy1mZDE2 YzdjMzE0NDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgeIQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAQCtKHgc3TCJn0XssHZGF4BKEaiO+Ax36hO4TNMlApDXGye12iNg2t eJ0M10EiyJPckFsD8BPn61+/8DcsUU1NUWWA9EY9sF4Bt+PoWKvFyPifsUeWWo41 zetWQMTqfqPMKsr47KW7kzJlI8d8tM794DnQzcfVg8amEDv63qb8OD+NxE2ApR6Z tJk0+tY9WycLCWadLk2otrwWcsgitT4hh3awBehYAB5M1Ml9g9TvFwzDLaRlUMuP jmGVLtoKOb3ShTsAs5uhzDG88PEcAeS3rPrjSMG+ktakEoCX4D/YDkPxM8kjjPqe dTBzkJgSkBaBW6VfmtVzLK1Td4GsyBmo -----END CERTIFICATE-----Generated at Fri Sep 19 14:29:55 2025 by rpki-client