$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55/49fb0d9a-4a7a-3a97-8872-0aa8f5966daf.roa File: 49fb0d9a-4a7a-3a97-8872-0aa8f5966daf.roa (raw, json) Hash identifier: XwGdT9Vzme/bOt68BvAkSWApof4haKX8HGqKO1pZU6I= Subject key identifier: 90:FA:56:7D:5D:C4:C3:11:83:36:97:AC:F1:8B:D4:2E:86:6A:CA:9C Certificate issuer: /CN=2e689c55-8453-486f-8b88-f433fba67f55 Certificate serial: 010D0C9F4328584B2CF6DC9EE01E858366DD7A00 Authority key identifier: CA:2D:8E:C3:CC:29:85:C4:8B:25:AE:E0:EB:D5:2D:89:72:73:32:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55/49fb0d9a-4a7a-3a97-8872-0aa8f5966daf.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 26216 IP address blocks: 2607:2b40::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55/2e689c55-8453-486f-8b88-f433fba67f55.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55/2e689c55-8453-486f-8b88-f433fba67f55.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:dc:9e:e0:1e:85:83:66:dd:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e689c55-8453-486f-8b88-f433fba67f55 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=ca274884-de76-4ce4-9ab7-5b8d8fff5c9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:86:8f:ae:a5:e4:25:82:0b:6d:e1:9f:5a:93: 5f:de:af:ec:df:c9:4b:2d:51:fc:8b:a9:cd:a8:c1: 23:6f:2e:7b:d7:20:b7:1d:74:27:78:99:a9:ed:9d: a0:02:c8:87:d8:1f:1d:c7:50:52:e1:9f:6c:c7:33: 69:49:04:d6:32:a7:06:f6:7e:18:d7:fb:13:df:11: 50:de:bc:84:d7:03:f6:7e:3d:1d:5b:6b:13:07:86: 79:bd:a3:f1:ed:b6:ed:3b:cd:ec:19:56:7e:04:71: e0:53:05:d0:07:8e:bc:77:1e:a9:05:22:ce:d1:0b: e8:ca:ac:24:88:53:fc:6c:aa:38:27:50:79:89:79: a6:92:00:33:37:f4:ae:02:70:a7:c7:2c:15:23:3b: aa:63:a4:c8:fe:6b:14:06:5e:a2:30:40:da:8c:8f: 45:b5:8c:c0:be:36:fd:d3:9e:7f:7d:28:54:f5:f0: 7b:71:d5:2b:07:87:e3:28:73:cf:55:84:22:27:be: 06:f0:63:18:96:af:39:b4:c4:b3:c0:51:3a:13:41: a5:4f:8c:56:d7:ba:96:69:37:a9:9d:39:d6:81:b1: 20:d8:2d:e1:95:3e:c7:b1:79:95:44:62:6f:bb:c7: 4d:d9:9e:90:8d:f1:f5:ae:3c:bd:96:bb:38:e7:48: 68:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:FA:56:7D:5D:C4:C3:11:83:36:97:AC:F1:8B:D4:2E:86:6A:CA:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55/49fb0d9a-4a7a-3a97-8872-0aa8f5966daf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55/2e689c55-8453-486f-8b88-f433fba67f55.crl X509v3 Authority Key Identifier: keyid:CA:2D:8E:C3:CC:29:85:C4:8B:25:AE:E0:EB:D5:2D:89:72:73:32:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55.cer sbgp-ipAddrBlock: critical IPv6: 2607:2b40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:bf:b3:4a:fb:fd:10:1f:b5:6c:23:62:4a:28:4a:7c:cc:4a: 4b:81:06:92:60:7e:ac:b4:b3:4c:bc:8b:b9:7b:f5:e8:92:86: fb:d1:7d:c2:a7:fb:e6:76:cb:0a:fd:65:6a:75:f8:95:98:7d: ff:70:35:c4:95:d4:ef:45:0a:0c:1a:fc:81:0c:20:37:ad:b2: ce:1b:c4:0e:71:94:3b:65:d7:23:63:aa:3c:14:57:fe:d4:f5: 58:b6:b1:96:50:8e:8f:62:f9:fb:cc:ca:46:0f:c4:ec:3f:96: 22:5e:82:f4:b3:e0:7d:ec:9f:24:7a:58:55:ae:9a:68:12:be: ef:68:bb:31:3e:1b:0d:98:81:9b:11:5c:e5:13:51:88:83:48: 25:1f:b9:c3:36:09:78:b1:79:0c:ad:75:41:51:17:ff:0e:02: af:23:53:b4:ec:37:a7:40:20:4b:ef:74:87:74:71:72:7d:ca: 9a:b7:98:07:8f:25:96:ed:7b:c7:22:2d:70:f3:27:c9:d5:64: 2f:ed:2e:7b:4e:f7:00:02:f9:d0:9d:a4:e6:a7:83:4e:c0:86: 9b:02:7b:d5:38:65:52:45:eb:5a:e4:47:ac:d3:0c:69:00:e0: 39:7f:a8:0a:2e:7c:2a:c2:e7:08:0d:d5:e8:b0:8b:fa:8e:0d: bc:6e:60:f8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEss9tye4B6Fg2bdegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU2ODljNTUtODQ1My00ODZmLThiODgtZjQzM2ZiYTY3 ZjU1MB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk Y2EyNzQ4ODQtZGU3Ni00Y2U0LTlhYjctNWI4ZDhmZmY1YzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYaPrqXkJYILbeGfWpNf3q/s38lLLVH8i6nN qMEjby571yC3HXQneJmp7Z2gAsiH2B8dx1BS4Z9sxzNpSQTWMqcG9n4Y1/sT3xFQ 3ryE1wP2fj0dW2sTB4Z5vaPx7bbtO83sGVZ+BHHgUwXQB468dx6pBSLO0Qvoyqwk iFP8bKo4J1B5iXmmkgAzN/SuAnCnxywVIzuqY6TI/msUBl6iMEDajI9FtYzAvjb9 055/fShU9fB7cdUrB4fjKHPPVYQiJ74G8GMYlq85tMSzwFE6E0GlT4xW17qWaTep nTnWgbEg2C3hlT7HsXmVRGJvu8dN2Z6QjfH1rjy9lrs450hogQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJD6Vn1dxMMRgzaXrPGL1C6GasqcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZTY4 OWM1NS04NDUzLTQ4NmYtOGI4OC1mNDMzZmJhNjdmNTUvNDlmYjBkOWEtNGE3YS0z YTk3LTg4NzItMGFhOGY1OTY2ZGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmU2ODljNTUtODQ1My00ODZmLThi ODgtZjQzM2ZiYTY3ZjU1LzJlNjg5YzU1LTg0NTMtNDg2Zi04Yjg4LWY0MzNmYmE2 N2Y1NS5jcmwwHwYDVR0jBBgwFoAUyi2Ow8wphcSLJa7g69UtiXJzMi0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZTY4OWM1NS04NDUzLTQ4NmYtOGI4OC1mNDMz ZmJhNjdmNTUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcrQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAmv7NK+/0QH7VsI2JKKEp8zEpLgQaSYH6stLNMvIu5e/Xokob70X3C p/vmdssK/WVqdfiVmH3/cDXEldTvRQoMGvyBDCA3rbLOG8QOcZQ7ZdcjY6o8FFf+ 1PVYtrGWUI6PYvn7zMpGD8TsP5YiXoL0s+B97J8kelhVrppoEr7vaLsxPhsNmIGb EVzlE1GIg0glH7nDNgl4sXkMrXVBURf/DgKvI1O07DenQCBL73SHdHFyfcqat5gH jyWW7XvHIi1w8yfJ1WQv7S57TvcAAvnQnaTmp4NOwIabAnvVOGVSReta5Ees0wxp AOA5f6gKLnwqwucIDdXosIv6jg28bmD4 -----END CERTIFICATE-----Generated at Wed Oct 22 12:21:00 2025 by rpki-client