$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/fd8fc722-6aa9-306a-ae00-97cae3ebf37c.roa File: fd8fc722-6aa9-306a-ae00-97cae3ebf37c.roa (raw, json) Hash identifier: r01R+O/yyzyfYqt9j8TT9gd9GE7sZcoSTxUOXxAeh94= Subject key identifier: 38:65:D5:3D:CB:C6:64:08:43:A6:8C:5B:20:AA:FB:4E:3D:8F:3E:DE Certificate issuer: /CN=d184e471-080a-4e54-bf94-60dd0c8beb48 Certificate serial: 010D0C9F4328584B434C571D37F98E575D87E900 Authority key identifier: 82:2A:C6:5F:05:77:96:D6:12:FB:24:86:E6:72:C6:12:A5:B6:41:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/fd8fc722-6aa9-306a-ae00-97cae3ebf37c.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 22926 IP address blocks: 2607:f5e8::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:57:1d:37:f9:8e:57:5d:87:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d184e471-080a-4e54-bf94-60dd0c8beb48 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=c433e1ff-2652-4178-a036-0dac95babc84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:58:fd:68:0c:98:c7:7e:f6:19:f2:b8:9f:f2: 4d:fb:b7:ba:49:3e:8c:4e:6c:92:c6:9c:bc:c9:d4: b2:8d:8d:1d:f5:76:b5:fc:50:4a:72:d0:b3:f7:29: 52:ac:bc:9f:ed:c2:f6:c3:79:2d:3b:20:da:2b:18: bc:d7:47:08:30:5b:d6:ad:fa:c1:3a:99:6c:ca:f5: 7c:06:30:46:09:c5:f9:7e:eb:1f:17:86:fc:2f:65: ea:15:8d:fb:f2:7e:40:27:a6:9d:05:dc:48:b8:52: c8:15:26:c9:0f:2a:c5:fd:4d:4f:41:54:2f:8e:d3: ee:a1:54:15:a8:06:66:a4:94:fc:1b:a2:58:41:0e: f4:89:1b:24:f6:c3:61:d5:0e:67:77:b0:6d:d6:90: 79:05:31:d4:b0:2e:80:e4:bd:7f:c6:58:8f:6a:07: 50:c9:f2:9c:96:6e:15:84:5f:b0:67:a4:59:94:8c: 83:2c:1c:37:de:e0:91:20:79:a3:e6:50:b3:28:22: e4:42:dd:ed:1c:d9:10:0a:28:be:f8:5d:09:d5:dd: 97:7f:75:b9:d1:10:a8:e4:d7:f8:e1:82:6a:19:05: 1d:2c:92:9b:21:09:d9:f0:bf:fc:c6:84:13:f5:ab: b6:e2:4b:6d:06:8d:6a:20:08:81:83:51:a4:1d:c8: 07:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:65:D5:3D:CB:C6:64:08:43:A6:8C:5B:20:AA:FB:4E:3D:8F:3E:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/fd8fc722-6aa9-306a-ae00-97cae3ebf37c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.crl X509v3 Authority Key Identifier: keyid:82:2A:C6:5F:05:77:96:D6:12:FB:24:86:E6:72:C6:12:A5:B6:41:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer sbgp-ipAddrBlock: critical IPv6: 2607:f5e8::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:b1:99:3f:eb:32:39:8c:93:ac:b8:ac:56:89:f8:ad:fb:cd: b9:8c:bc:7b:43:e5:18:21:c4:5c:7b:37:d6:a8:d1:f2:65:c6: 5b:51:30:90:05:55:71:ff:4b:7b:e7:c4:8e:c0:c2:6b:c0:51: bf:79:da:27:ae:5d:95:96:08:93:16:db:33:db:33:c3:e4:8e: 35:7e:f9:81:98:c4:bb:72:89:c9:15:28:2a:a5:0e:d5:ef:e0: 9d:68:18:2f:fa:68:3c:c8:e3:01:86:8c:27:0a:da:b3:21:83: 76:0e:55:17:bb:74:2b:d2:70:25:39:4f:df:c6:cd:9a:09:ad: db:ce:3c:20:6f:8b:da:67:07:a9:c4:16:a8:ad:e7:7e:d6:f8: 16:11:29:50:d6:19:fc:03:ea:67:3b:e5:fe:fa:35:45:07:a4: 76:68:79:61:5c:bb:75:92:c3:7d:19:5c:e8:6e:f8:81:f7:a3: 09:fa:01:67:e5:09:96:99:ad:2f:d7:f5:0c:4f:37:1c:1a:94: 40:a1:f5:dd:19:51:2e:1d:bd:74:6e:88:b8:e2:5f:4c:1d:f1: a9:60:08:4e:9f:71:d7:99:05:1c:94:b6:1b:28:f3:59:16:a2: 45:9b:a8:ba:47:52:2a:3b:6b:53:8f:34:9e:c9:ea:ab:82:23: 24:36:78:7c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtDTFcdN/mOV12H6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDE4NGU0NzEtMDgwYS00ZTU0LWJmOTQtNjBkZDBjOGJl YjQ4MB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk YzQzM2UxZmYtMjY1Mi00MTc4LWEwMzYtMGRhYzk1YmFiYzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVj9aAyYx372GfK4n/JN+7e6ST6MTmySxpy8 ydSyjY0d9Xa1/FBKctCz9ylSrLyf7cL2w3ktOyDaKxi810cIMFvWrfrBOplsyvV8 BjBGCcX5fusfF4b8L2XqFY378n5AJ6adBdxIuFLIFSbJDyrF/U1PQVQvjtPuoVQV qAZmpJT8G6JYQQ70iRsk9sNh1Q5nd7Bt1pB5BTHUsC6A5L1/xliPagdQyfKclm4V hF+wZ6RZlIyDLBw33uCRIHmj5lCzKCLkQt3tHNkQCii++F0J1d2Xf3W50RCo5Nf4 4YJqGQUdLJKbIQnZ8L/8xoQT9au24kttBo1qIAiBg1GkHcgHKQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDhl1T3LxmQIQ6aMWyCq+049jz7eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kMTg0 ZTQ3MS0wODBhLTRlNTQtYmY5NC02MGRkMGM4YmViNDgvZmQ4ZmM3MjItNmFhOS0z MDZhLWFlMDAtOTdjYWUzZWJmMzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDE4NGU0NzEtMDgwYS00ZTU0LWJm OTQtNjBkZDBjOGJlYjQ4L2QxODRlNDcxLTA4MGEtNGU1NC1iZjk0LTYwZGQwYzhi ZWI0OC5jcmwwHwYDVR0jBBgwFoAUgirGXwV3ltYS+ySG5nLGEqW2QVEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kMTg0ZTQ3MS0wODBhLTRlNTQtYmY5NC02MGRk MGM4YmViNDguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf16DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCMsZk/6zI5jJOsuKxWifit+825jLx7Q+UYIcRcezfWqNHyZcZbUTCQ BVVx/0t758SOwMJrwFG/edonrl2VlgiTFtsz2zPD5I41fvmBmMS7conJFSgqpQ7V 7+CdaBgv+mg8yOMBhownCtqzIYN2DlUXu3Qr0nAlOU/fxs2aCa3bzjwgb4vaZwep xBaored+1vgWESlQ1hn8A+pnO+X++jVFB6R2aHlhXLt1ksN9GVzobviB96MJ+gFn 5QmWma0v1/UMTzccGpRAofXdGVEuHb10boi44l9MHfGpYAhOn3HXmQUclLYbKPNZ FqJFm6i6R1IqO2tTjzSeyeqrgiMkNnh8 -----END CERTIFICATE-----Generated at Tue Oct 14 19:33:13 2025 by rpki-client