$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cefc8081-f60b-33ff-97e9-2099085dc550.roa File: cefc8081-f60b-33ff-97e9-2099085dc550.roa (raw, json) Hash identifier: xhdrIsygB8Zrgh7qaNTEamRUEW91ZwdFf2r1sDfXq14= Subject key identifier: B7:60:FF:E1:5C:C5:33:8F:4D:FA:2A:68:04:DB:2A:79:04:A6:63:B9 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584B7F5220F20732D72929EA0090 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cefc8081-f60b-33ff-97e9-2099085dc550.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 33363 IP address blocks: 2605:a401:8013::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:20:f2:07:32:d7:29:29:ea:00:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=cf2a088c-5290-4b74-b557-5d26d25ed3cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3c:94:0b:03:04:c8:7c:a5:fb:08:53:c2:d1: cb:58:ed:50:ff:9b:62:27:9a:d7:b0:e9:f4:a7:35: 29:ef:ca:4b:6c:8e:75:a8:ac:9c:80:f6:d9:e7:23: 5e:99:8e:54:a5:54:ed:c8:4b:f7:48:9c:de:4c:3d: 22:2f:b4:96:ab:1c:7e:58:0d:fe:f3:39:96:4f:54: 4a:0e:88:68:a6:24:db:bb:42:e6:37:77:79:3f:91: 7a:18:95:af:e2:ee:ba:9a:31:63:7d:0d:b2:cb:ba: fa:0d:64:32:94:ca:f6:ec:b2:e3:9a:a0:ca:28:aa: 34:f4:91:ed:9a:5f:e8:fb:ce:38:17:17:bb:2b:fc: 60:cb:a1:c1:d8:e2:ed:31:d7:90:76:a0:cd:33:8a: b5:cf:0a:b6:28:39:96:e4:55:e0:8b:0b:18:4f:c9: 4c:79:fa:dd:bd:59:e3:fd:68:00:67:54:13:76:15: 0e:46:22:b5:4f:d5:41:92:1d:a3:0c:ac:a5:f6:8f: 20:27:33:6c:9d:26:66:05:7b:b2:bb:f2:b7:f9:af: 89:ba:b9:a8:1b:4a:71:ad:dd:af:86:8e:90:fa:5e: c7:c0:bd:8e:e3:3b:90:fa:fe:b3:5f:63:ab:22:cf: 23:54:56:0e:f0:2d:24:bb:f7:e3:f0:d0:a4:e1:c7: 4f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:60:FF:E1:5C:C5:33:8F:4D:FA:2A:68:04:DB:2A:79:04:A6:63:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cefc8081-f60b-33ff-97e9-2099085dc550.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv6: 2605:a401:8013::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:56:02:91:f7:2c:25:58:96:f5:e9:a8:02:2c:07:f1:7f:a5: 95:55:3b:c3:41:fd:07:60:82:49:12:ca:6e:fa:2f:76:a3:df: 8a:61:aa:fa:a9:46:34:cf:41:06:03:7d:e8:cc:a0:64:f7:f7: 68:11:f5:dc:2b:19:7a:2b:d9:c3:5a:cf:85:80:4d:d1:29:11: 0d:9b:70:5d:31:cd:2a:56:9c:9d:65:6d:76:97:19:8e:1a:ca: fa:19:b3:8d:cc:cc:d9:ac:45:99:c3:30:c6:8f:81:a6:ab:0b: d4:20:c4:b1:78:b1:8f:af:03:c9:79:a1:9a:a0:79:7d:d1:14: 76:29:e3:be:1c:c4:25:e8:75:11:d5:33:5d:f5:b3:e4:50:dc: 3d:56:53:a0:fd:4f:f7:9c:3b:77:8c:19:0a:6b:d1:9d:8c:ee: 8c:15:36:62:03:61:06:59:9c:d8:8c:4d:95:07:7e:22:dd:78: be:a1:3a:85:5e:88:1f:4d:94:12:76:17:e2:b5:23:49:12:28: ad:9a:e6:78:ef:31:a7:b3:03:c1:66:27:aa:4b:3a:7e:bc:ae: b5:7e:9c:ef:61:bd:b1:07:aa:b9:4a:df:51:5a:90:21:39:56: f8:cc:5e:79:41:bf:0c:71:0c:a6:66:1e:c7:ac:d4:32:7b:3f: 5e:83:cf:6c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt/UiDyBzLXKSnqAJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk Y2YyYTA4OGMtNTI5MC00Yjc0LWI1NTctNWQyNmQyNWVkM2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDyUCwMEyHyl+whTwtHLWO1Q/5tiJ5rXsOn0 pzUp78pLbI51qKycgPbZ5yNemY5UpVTtyEv3SJzeTD0iL7SWqxx+WA3+8zmWT1RK DohopiTbu0LmN3d5P5F6GJWv4u66mjFjfQ2yy7r6DWQylMr27LLjmqDKKKo09JHt ml/o+844Fxe7K/xgy6HB2OLtMdeQdqDNM4q1zwq2KDmW5FXgiwsYT8lMefrdvVnj /WgAZ1QTdhUORiK1T9VBkh2jDKyl9o8gJzNsnSZmBXuyu/K3+a+JurmoG0pxrd2v ho6Q+l7HwL2O4zuQ+v6zX2OrIs8jVFYO8C0ku/fj8NCk4cdP6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLdg/+FcxTOPTfoqaATbKnkEpmO5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvY2VmYzgwODEtZjYwYi0z M2ZmLTk3ZTktMjA5OTA4NWRjNTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYAT MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABxWApH3LCVYlvXpqAIsB/F/pZVVO8NB/QdggkkSym76L3aj34ph qvqpRjTPQQYDfejMoGT392gR9dwrGXor2cNaz4WATdEpEQ2bcF0xzSpWnJ1lbXaX GY4ayvoZs43MzNmsRZnDMMaPgaarC9QgxLF4sY+vA8l5oZqgeX3RFHYp474cxCXo dRHVM131s+RQ3D1WU6D9T/ecO3eMGQpr0Z2M7owVNmIDYQZZnNiMTZUHfiLdeL6h OoVeiB9NlBJ2F+K1I0kSKK2a5njvMaezA8FmJ6pLOn68rrV+nO9hvbEHqrlK31Fa kCE5VvjMXnlBvwxxDKZmHses1DJ7P16Dz2w= -----END CERTIFICATE-----Generated at Fri Oct 17 05:00:27 2025 by rpki-client