$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/4b8dc84a-2b50-3661-a858-cd3c92400224.roa File: 4b8dc84a-2b50-3661-a858-cd3c92400224.roa (raw, json) Hash identifier: b5FMuF2GWX9qfRL1UBwirS+PRw8bKX2idajfekgFhnU= Subject key identifier: 5B:7D:0F:D8:6B:90:32:78:1D:56:E2:84:37:16:6A:EA:15:03:19:C5 Certificate issuer: /CN=7f6bc06a-0a42-4758-8629-8c90ecf2f82e Certificate serial: 010D0C9F4328584AECC1272C3D88901696AC4000 Authority key identifier: 22:8E:E7:FA:0E:00:40:C5:BA:3F:20:67:77:FA:3C:05:BD:6F:5A:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/4b8dc84a-2b50-3661-a858-cd3c92400224.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 26223 IP address blocks: 2605:c900::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:27:2c:3d:88:90:16:96:ac:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f6bc06a-0a42-4758-8629-8c90ecf2f82e Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=0848b396-1b87-47f7-baa6-b81f31ddfa8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:92:61:0b:90:2c:40:6b:d4:14:a1:07:5b:6a: 2e:c5:fb:f8:c9:2c:f6:85:cd:3e:62:78:5d:3c:ba: 08:b0:38:75:08:50:7c:1a:99:61:07:13:08:77:52: 38:9f:eb:cf:c1:fb:4d:81:64:74:5f:ad:74:4e:ef: b6:62:49:0c:9d:e7:fb:bd:89:92:53:b4:2f:33:3e: 6e:68:aa:18:e3:de:a2:bf:d5:9e:26:25:3f:16:55: 51:f0:29:ac:5e:01:ac:7e:d4:d5:ad:74:55:6b:99: cc:74:aa:73:63:49:97:02:e4:e9:b5:fa:33:22:f0: 38:95:8c:04:1e:24:af:c4:dd:0c:db:d6:fc:5a:7f: 2f:89:5e:8f:67:cf:ea:52:fa:5e:de:47:6e:1f:72: 42:ba:52:98:ba:60:f5:a0:79:aa:b8:47:60:65:b1: 03:81:6f:fc:3b:96:cc:c0:6c:a9:0d:72:f7:9f:59: ce:cb:0d:af:4b:c5:2a:65:3e:5b:ec:c5:c8:41:c3: 61:bb:5c:91:15:7d:58:d3:90:1b:90:7e:e5:47:6b: a3:4a:4d:fb:55:a6:da:d9:85:c2:8f:d4:b3:25:94: 46:32:d0:82:d4:7c:51:64:a9:a4:93:ff:32:60:de: 83:80:fd:8d:f5:a8:5e:56:84:a0:e2:5d:36:eb:f5: 49:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:7D:0F:D8:6B:90:32:78:1D:56:E2:84:37:16:6A:EA:15:03:19:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/4b8dc84a-2b50-3661-a858-cd3c92400224.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.crl X509v3 Authority Key Identifier: keyid:22:8E:E7:FA:0E:00:40:C5:BA:3F:20:67:77:FA:3C:05:BD:6F:5A:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.cer sbgp-ipAddrBlock: critical IPv6: 2605:c900::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:35:a9:90:1f:b5:c0:85:f9:20:1d:3d:ac:29:f2:7d:41:a0: 0b:3f:6f:d8:aa:d5:11:5c:0c:e5:ee:1d:0f:3b:1c:eb:fa:8a: 5a:c7:8f:b2:dc:cf:e3:79:3b:7e:31:e7:1d:25:6a:1a:74:48: 76:6b:9e:ff:e8:a7:82:53:79:da:80:54:ef:ba:4f:3e:df:30: 07:26:50:9e:7b:ab:df:4d:15:25:1a:f5:dc:24:ca:5d:52:e6: ab:1f:8c:79:eb:06:13:81:30:5f:db:51:84:ed:38:47:4c:78: 81:4a:a5:71:4a:69:6b:de:51:8d:64:92:02:36:d3:4b:00:17: 93:c2:2e:72:02:31:20:8e:ff:b5:ec:b5:ac:2b:6c:89:c8:91: cf:6a:fb:55:39:ea:67:96:9e:ac:e5:09:3b:df:e0:eb:57:84: df:24:2c:24:d5:66:2f:95:da:d3:09:11:bd:70:f2:67:d7:c0: b3:78:7f:23:b1:6b:77:cf:64:e3:e5:8b:e8:3e:10:bd:44:0c: 4d:c1:a7:80:39:6f:36:17:9e:61:58:48:02:bb:a2:a4:22:4e: 6e:3f:b8:77:04:12:68:13:7b:13:3f:03:b8:ee:f5:68:7f:20: 9a:de:b2:81:ef:c2:0b:ac:cc:fc:cd:ec:3e:b8:30:83:a1:82: e3:c2:2e:13 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErswScsPYiQFpasQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Y2YmMwNmEtMGE0Mi00NzU4LTg2MjktOGM5MGVjZjJm ODJlMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MDg0OGIzOTYtMWI4Ny00N2Y3LWJhYTYtYjgxZjMxZGRmYThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZJhC5AsQGvUFKEHW2ouxfv4ySz2hc0+Ynhd PLoIsDh1CFB8GplhBxMId1I4n+vPwftNgWR0X610Tu+2YkkMnef7vYmSU7QvMz5u aKoY496iv9WeJiU/FlVR8CmsXgGsftTVrXRVa5nMdKpzY0mXAuTptfozIvA4lYwE HiSvxN0M29b8Wn8viV6PZ8/qUvpe3kduH3JCulKYumD1oHmquEdgZbEDgW/8O5bM wGypDXL3n1nOyw2vS8UqZT5b7MXIQcNhu1yRFX1Y05AbkH7lR2ujSk37Vaba2YXC j9SzJZRGMtCC1HxRZKmkk/8yYN6DgP2N9aheVoSg4l026/VJpwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFt9D9hrkDJ4HVbihDcWauoVAxnFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZjZi YzA2YS0wYTQyLTQ3NTgtODYyOS04YzkwZWNmMmY4MmUvNGI4ZGM4NGEtMmI1MC0z NjYxLWE4NTgtY2QzYzkyNDAwMjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2Y2YmMwNmEtMGE0Mi00NzU4LTg2 MjktOGM5MGVjZjJmODJlLzdmNmJjMDZhLTBhNDItNDc1OC04NjI5LThjOTBlY2Yy ZjgyZS5jcmwwHwYDVR0jBBgwFoAUIo7n+g4AQMW6PyBnd/o8Bb1vWs8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZjZiYzA2YS0wYTQyLTQ3NTgtODYyOS04Yzkw ZWNmMmY4MmUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXJADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAnNamQH7XAhfkgHT2sKfJ9QaALP2/YqtURXAzl7h0POxzr+opax4+y 3M/jeTt+MecdJWoadEh2a57/6KeCU3nagFTvuk8+3zAHJlCee6vfTRUlGvXcJMpd UuarH4x56wYTgTBf21GE7ThHTHiBSqVxSmlr3lGNZJICNtNLABeTwi5yAjEgjv+1 7LWsK2yJyJHPavtVOepnlp6s5Qk73+DrV4TfJCwk1WYvldrTCRG9cPJn18CzeH8j sWt3z2Tj5YvoPhC9RAxNwaeAOW82F55hWEgCu6KkIk5uP7h3BBJoE3sTPwO47vVo fyCa3rKB78ILrMz8zew+uDCDoYLjwi4T -----END CERTIFICATE-----Generated at Mon Nov 3 04:45:13 2025 by rpki-client