$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569/a7478053-78aa-3f5d-b1af-384fc4badd80.roa File: a7478053-78aa-3f5d-b1af-384fc4badd80.roa (raw, json) Hash identifier: QUu62mL+4tc7hB3cD7b+zEl9LR2fcuzkaaAa1FwSGj4= Subject key identifier: 20:E5:A3:4A:EE:D8:B6:70:84:0E:92:23:84:5E:85:FB:9A:16:58:3F Certificate issuer: /CN=c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569 Certificate serial: 010D0C9F4328584BB45D2EE97C9B4B2526A97BE0 Authority key identifier: 7E:43:91:89:D1:82:7F:29:92:31:FD:11:FC:5E:A5:94:1E:96:94:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569/a7478053-78aa-3f5d-b1af-384fc4badd80.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 393731 IP address blocks: 2607:7940::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:2e:e9:7c:9b:4b:25:26:a9:7b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=5e69eb44-e6e6-473f-9da7-469788749d8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8d:ce:c7:58:b3:2a:f2:32:ef:67:07:79:81: d4:12:6a:49:37:0b:58:08:68:be:47:b9:ca:c9:bf: 04:fc:ae:57:4b:d1:c5:da:ea:62:f7:ad:3e:fc:8c: 18:02:f2:28:54:f8:58:40:f2:93:46:c7:5b:d2:99: 5c:3f:63:fa:b2:b1:e2:93:3c:44:b0:87:20:5e:9e: 2c:14:f0:b1:ca:4d:02:5e:63:87:ea:9d:cd:e6:23: be:89:55:a5:8f:d9:c4:19:c3:36:4d:15:bb:c7:25: 56:71:90:a7:8f:da:ed:60:32:38:3b:30:36:b9:df: 55:0e:db:09:ff:92:f0:2b:30:c6:c0:c1:bd:4b:ab: b2:71:62:9f:05:ad:83:d0:00:bd:e2:ab:90:38:94: 0b:4b:2e:3b:0d:03:cc:8e:af:09:ab:b9:50:ee:ba: 0a:b7:4f:55:45:9d:0b:13:6d:34:7d:0b:ad:de:f5: f8:d3:29:34:37:9d:ec:97:0c:39:2f:45:69:61:78: 98:6a:6e:8f:17:f1:5c:ef:3c:90:52:0c:d7:29:78: 81:73:e5:9a:79:a5:33:bd:07:84:3a:a2:d9:3d:e7: 7e:5c:95:04:2a:98:dc:c5:09:1a:af:1d:f4:1c:09: d6:4d:50:6e:8d:14:57:bd:d6:ab:56:a7:a2:2f:44: 5f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E5:A3:4A:EE:D8:B6:70:84:0E:92:23:84:5E:85:FB:9A:16:58:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569/a7478053-78aa-3f5d-b1af-384fc4badd80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569.crl X509v3 Authority Key Identifier: keyid:7E:43:91:89:D1:82:7F:29:92:31:FD:11:FC:5E:A5:94:1E:96:94:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569.cer sbgp-ipAddrBlock: critical IPv6: 2607:7940::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:da:83:71:c1:c5:f0:8c:69:b0:1f:3d:8b:22:4d:47:14:7f: 5e:3a:4a:46:9d:10:6a:30:06:e8:12:3f:d4:e8:c8:05:fb:1d: f1:93:f4:0f:84:36:47:73:93:c0:42:1d:6d:b0:23:b2:22:06: e1:37:61:09:d3:e1:80:2c:7b:cb:42:df:1b:24:af:33:e9:24: 1f:bf:94:57:7e:8b:2b:d7:1f:e1:81:8c:70:72:23:09:65:7d: 11:cc:26:2b:9f:aa:f5:67:64:e8:79:a2:4f:56:13:db:68:bf: dc:60:55:f1:5d:32:3a:da:83:76:f6:cd:fe:ce:93:26:68:fd: e6:b0:0c:a9:53:1d:0b:32:61:56:26:60:eb:bc:0a:8d:9b:f1: 36:33:05:ce:21:55:c5:4a:29:6c:c8:f5:af:d8:5f:4c:b4:97: 03:70:01:d5:71:07:e5:4f:f7:cb:ef:bb:cd:9f:97:75:a0:e4: c6:f6:69:6c:72:2f:98:d1:c0:cd:b8:e6:5c:9e:26:f5:5c:de: 1f:f8:e4:bb:9c:bc:f3:00:fb:54:b0:ef:6c:e7:41:0f:a2:93: 0b:7f:76:cf:e0:07:5e:c7:ca:4c:26:6e:ee:b3:46:b1:1d:0d: 5a:35:11:a6:6a:99:24:8e:6d:e0:b9:fb:04:76:ec:da:23:45: 3c:65:98:a6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEu0XS7pfJtLJSape+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzVmZDRhNjItZDhjYy00ZTQ0LWI1Y2ItNTNhOTNjMmI3 NTY5MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk NWU2OWViNDQtZTZlNi00NzNmLTlkYTctNDY5Nzg4NzQ5ZDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlY3Ox1izKvIy72cHeYHUEmpJNwtYCGi+R7nK yb8E/K5XS9HF2upi960+/IwYAvIoVPhYQPKTRsdb0plcP2P6srHikzxEsIcgXp4s FPCxyk0CXmOH6p3N5iO+iVWlj9nEGcM2TRW7xyVWcZCnj9rtYDI4OzA2ud9VDtsJ /5LwKzDGwMG9S6uycWKfBa2D0AC94quQOJQLSy47DQPMjq8Jq7lQ7roKt09VRZ0L E200fQut3vX40yk0N53slww5L0VpYXiYam6PF/Fc7zyQUgzXKXiBc+WaeaUzvQeE OqLZPed+XJUEKpjcxQkarx30HAnWTVBujRRXvdarVqeiL0RftQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCDlo0ru2LZwhA6SI4RehfuaFlg/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNWZk NGE2Mi1kOGNjLTRlNDQtYjVjYi01M2E5M2MyYjc1NjkvYTc0NzgwNTMtNzhhYS0z ZjVkLWIxYWYtMzg0ZmM0YmFkZDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzVmZDRhNjItZDhjYy00ZTQ0LWI1 Y2ItNTNhOTNjMmI3NTY5L2M1ZmQ0YTYyLWQ4Y2MtNGU0NC1iNWNiLTUzYTkzYzJi NzU2OS5jcmwwHwYDVR0jBBgwFoAUfkORidGCfymSMf0R/F6llB6WlNswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jNWZkNGE2Mi1kOGNjLTRlNDQtYjVjYi01M2E5 M2MyYjc1NjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgd5QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB22oNxwcXwjGmwHz2LIk1HFH9eOkpGnRBqMAboEj/U6MgF+x3xk/QP hDZHc5PAQh1tsCOyIgbhN2EJ0+GALHvLQt8bJK8z6SQfv5RXfosr1x/hgYxwciMJ ZX0RzCYrn6r1Z2ToeaJPVhPbaL/cYFXxXTI62oN29s3+zpMmaP3msAypUx0LMmFW JmDrvAqNm/E2MwXOIVXFSilsyPWv2F9MtJcDcAHVcQflT/fL77vNn5d1oOTG9mls ci+Y0cDNuOZcnib1XN4f+OS7nLzzAPtUsO9s50EPopMLf3bP4Adex8pMJm7us0ax HQ1aNRGmapkkjm3gufsEduzaI0U8ZZim -----END CERTIFICATE-----Generated at Mon Nov 3 10:21:40 2025 by rpki-client