$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/a8bce116-f9c1-3ab1-a05b-f6475a01916a.roa File: a8bce116-f9c1-3ab1-a05b-f6475a01916a.roa (raw, json) Hash identifier: 2+AwIDAYtb/VC/MKvmbBUHjtaR4AX6YYcUC741FkuKc= Subject key identifier: 06:CC:7C:E0:C3:FE:BF:3C:55:9C:CB:D8:F3:94:B6:67:C4:8E:E7:6A Certificate issuer: /CN=9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26 Certificate serial: 010D0C9F4328584B2496CD6363F0B6257F3E9A60 Authority key identifier: 74:72:3E:BF:C2:5D:67:28:C0:C1:10:60:A7:68:80:8F:9E:BA:5C:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/a8bce116-f9c1-3ab1-a05b-f6475a01916a.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 54098 IP address blocks: 2607:2740::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:cd:63:63:f0:b6:25:7f:3e:9a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26 Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=8ac89dc7-1007-4c87-9d41-07420297cb6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:4f:69:b9:ff:5a:87:cb:4c:4f:fc:ac:0d:9b: 41:2b:e5:80:e7:71:c3:58:83:07:1b:13:fb:26:b3: b5:c7:38:9e:78:6c:62:a9:17:ba:f4:fb:8b:0a:57: d2:7f:89:65:4d:f6:49:5d:15:af:31:11:b8:bd:7b: 63:aa:7d:e8:f6:12:fe:2d:b2:90:2f:00:78:13:ff: c9:5a:22:16:10:42:fa:96:e9:a5:32:3b:42:91:da: 8c:eb:ab:8e:9f:07:eb:28:3d:06:02:05:3a:58:5f: ea:b5:5a:22:e3:09:be:b2:6f:e2:e1:77:81:b4:72: 22:70:b9:79:bc:d3:97:22:92:71:a0:66:e1:36:d8: c0:04:f5:15:de:34:27:f5:28:88:7a:b5:71:04:24: bf:21:93:b8:d9:52:61:90:83:c6:66:b3:ae:22:43: d4:37:5f:18:75:49:22:0b:a3:c5:1a:72:35:13:fb: 2d:03:0c:8e:10:6a:0c:2d:e1:96:ee:c7:5d:77:1f: 8f:6a:0f:56:a5:0c:47:32:2d:df:72:1e:80:ed:af: a1:a8:81:b5:0f:25:82:3d:92:74:69:d5:3a:19:e4: 93:80:f6:32:45:b7:f7:5b:5e:36:c9:d6:64:88:75: f2:4d:3d:a6:b4:b8:ee:14:f8:74:fc:1b:14:ab:a7: 1f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:CC:7C:E0:C3:FE:BF:3C:55:9C:CB:D8:F3:94:B6:67:C4:8E:E7:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/a8bce116-f9c1-3ab1-a05b-f6475a01916a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.crl X509v3 Authority Key Identifier: keyid:74:72:3E:BF:C2:5D:67:28:C0:C1:10:60:A7:68:80:8F:9E:BA:5C:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.cer sbgp-ipAddrBlock: critical IPv6: 2607:2740::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:d7:b6:b6:04:fa:11:e9:ab:9d:02:87:cf:d4:e0:8c:97:bb: 6c:76:db:72:20:73:6e:d6:69:f6:02:ea:c3:4e:6c:d7:20:b3: 3e:40:75:b6:7a:6b:42:c6:14:48:7c:94:a5:b6:ec:a0:75:ee: 6f:ca:d9:f0:9b:7e:3f:5d:97:38:61:e6:c3:35:18:2c:ff:b6: 10:cc:d8:17:11:52:5a:dd:a6:0e:e8:e2:33:60:07:9a:09:e5: 4d:eb:21:ba:a7:e0:fd:e4:a1:0b:be:b8:c3:1f:df:fe:9e:a9: 42:35:23:ce:7f:c2:fc:16:11:2b:f3:2c:6b:d8:dd:e2:49:d1: 2a:aa:3f:d3:6e:c7:cb:27:51:33:f3:a7:86:50:73:75:a9:bc: 3a:39:35:3d:cd:0f:c1:e8:fa:75:77:22:07:54:32:b2:7f:da: 8a:ab:a8:f6:88:6c:f8:1f:ee:64:d5:de:57:94:61:44:e7:04: 61:74:62:f7:0a:64:e1:78:1f:fe:b0:76:c2:28:1f:7f:78:9c: e9:39:ec:5c:8f:92:95:ce:c9:22:74:46:c4:5e:18:1c:18:73: 13:b2:9c:84:0d:52:fc:ae:e0:22:94:7c:72:bf:69:22:21:ff: e1:0d:7c:c0:8e:df:23:3b:db:91:50:43:e0:e4:df:8e:17:d0: c0:8e:3d:c6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEskls1jY/C2JX8+mmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE4NmViM2UtZDE0Mi00Y2I5LWFkNGQtZDdmNjBiYWMy ZDI2MB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk OGFjODlkYzctMTAwNy00Yzg3LTlkNDEtMDc0MjAyOTdjYjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4E9puf9ah8tMT/ysDZtBK+WA53HDWIMHGxP7 JrO1xzieeGxiqRe69PuLClfSf4llTfZJXRWvMRG4vXtjqn3o9hL+LbKQLwB4E//J WiIWEEL6lumlMjtCkdqM66uOnwfrKD0GAgU6WF/qtVoi4wm+sm/i4XeBtHIicLl5 vNOXIpJxoGbhNtjABPUV3jQn9SiIerVxBCS/IZO42VJhkIPGZrOuIkPUN18YdUki C6PFGnI1E/stAwyOEGoMLeGW7sdddx+Pag9WpQxHMi3fch6A7a+hqIG1DyWCPZJ0 adU6GeSTgPYyRbf3W142ydZkiHXyTT2mtLjuFPh0/BsUq6cfUQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAbMfODD/r88VZzL2POUtmfEjudqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTg2 ZWIzZS1kMTQyLTRjYjktYWQ0ZC1kN2Y2MGJhYzJkMjYvYThiY2UxMTYtZjljMS0z YWIxLWEwNWItZjY0NzVhMDE5MTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE4NmViM2UtZDE0Mi00Y2I5LWFk NGQtZDdmNjBiYWMyZDI2LzlhODZlYjNlLWQxNDItNGNiOS1hZDRkLWQ3ZjYwYmFj MmQyNi5jcmwwHwYDVR0jBBgwFoAUdHI+v8JdZyjAwRBgp2iAj566XFAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTg2ZWIzZS1kMTQyLTRjYjktYWQ0ZC1kN2Y2 MGJhYzJkMjYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcnQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCC17a2BPoR6audAofP1OCMl7tsdttyIHNu1mn2AurDTmzXILM+QHW2 emtCxhRIfJSltuygde5vytnwm34/XZc4YebDNRgs/7YQzNgXEVJa3aYO6OIzYAea CeVN6yG6p+D95KELvrjDH9/+nqlCNSPOf8L8FhEr8yxr2N3iSdEqqj/TbsfLJ1Ez 86eGUHN1qbw6OTU9zQ/B6Pp1dyIHVDKyf9qKq6j2iGz4H+5k1d5XlGFE5wRhdGL3 CmTheB/+sHbCKB9/eJzpOexcj5KVzskidEbEXhgcGHMTspyEDVL8ruAilHxyv2ki If/hDXzAjt8jO9uRUEPg5N+OF9DAjj3G -----END CERTIFICATE-----Generated at Wed Sep 10 13:08:08 2025 by rpki-client