$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/7dae324e-ec74-30c2-b235-13f1ed8695f9.roa File: 7dae324e-ec74-30c2-b235-13f1ed8695f9.roa (raw, json) Hash identifier: X1VqLUd2ag4RiPjZKcG0g5QMFLqY7FSi/wyS5X+bjmM= Subject key identifier: F1:0F:DE:65:77:18:6B:46:7C:C8:A9:80:84:73:1D:0F:EC:BC:54:63 Certificate issuer: /CN=9e5e6e87-5f65-493b-b664-5a12819cdaa4 Certificate serial: 010D0C9F4328584B047C120DA96CCF0342EED100 Authority key identifier: 97:D2:1C:CF:8A:CD:74:E3:8F:B0:93:20:7F:C6:C2:91:E0:45:A1:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/7dae324e-ec74-30c2-b235-13f1ed8695f9.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 394770 IP address blocks: 2607:68c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/9e5e6e87-5f65-493b-b664-5a12819cdaa4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/9e5e6e87-5f65-493b-b664-5a12819cdaa4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:12:0d:a9:6c:cf:03:42:ee:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e5e6e87-5f65-493b-b664-5a12819cdaa4 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=6a0dcd48-12d7-439a-96d0-aeaec1d47383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3f:f9:60:5a:ef:bb:59:24:49:df:15:95:a5: 61:68:7a:88:2a:ca:82:d8:91:d1:e0:84:db:45:55: 3f:4e:28:1c:59:ee:6c:33:0c:68:92:38:34:f3:c6: 6c:1b:7d:31:3e:05:2e:42:51:cd:fb:71:5b:71:d0: 7a:03:fc:7e:02:45:86:09:cb:9d:30:82:4e:93:db: 61:67:14:46:07:eb:ea:3c:dd:e5:a7:97:1e:36:43: 38:98:a2:81:e1:ff:90:e1:55:3c:ee:2c:8f:44:04: 77:8e:f1:fc:b1:dd:ff:35:60:4e:e8:22:93:2a:be: 7c:31:36:e6:92:4b:e2:f9:c4:8a:c9:37:00:69:f5: 20:23:2b:92:77:b9:fc:b9:86:d5:6c:38:43:85:4f: 6b:6b:14:be:4d:8e:5f:a6:a6:cc:ff:1b:4f:ad:45: bf:09:de:95:c1:24:67:73:2f:eb:9c:a5:4a:9f:0b: ea:5e:e7:ea:1f:00:70:c5:40:9d:72:67:b8:7a:77: 45:8a:7c:07:66:4a:e4:28:05:a0:61:d3:37:bf:51: 04:dc:99:6c:a6:94:6a:96:95:fa:10:92:af:28:7d: 04:77:dc:81:71:ae:be:57:cd:7c:26:25:2e:e6:16: 13:5f:ad:79:94:e0:b4:f1:df:9b:3d:46:26:bb:56: c3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:0F:DE:65:77:18:6B:46:7C:C8:A9:80:84:73:1D:0F:EC:BC:54:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/7dae324e-ec74-30c2-b235-13f1ed8695f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/9e5e6e87-5f65-493b-b664-5a12819cdaa4.crl X509v3 Authority Key Identifier: keyid:97:D2:1C:CF:8A:CD:74:E3:8F:B0:93:20:7F:C6:C2:91:E0:45:A1:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4.cer sbgp-ipAddrBlock: critical IPv6: 2607:68c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:36:6a:a4:ce:6b:67:de:37:ed:eb:62:d9:2c:99:01:08:63: b4:17:96:c2:f7:47:3d:50:a5:96:6b:3b:ca:1c:7d:3d:fe:cd: e7:5c:51:8f:22:9a:13:e0:2a:09:ea:d8:4b:06:2f:98:ff:c7: 3c:bb:bd:9a:2d:e6:28:20:8d:28:7b:98:7c:5e:b4:34:be:81: 3d:7a:6e:02:11:e6:46:4e:ef:af:e9:c5:a3:38:61:4a:a9:c4: 02:14:86:b5:82:b7:79:8b:ba:b2:36:c3:f0:c7:ca:97:97:3c: 0f:c5:f2:44:d4:00:bd:e9:8a:16:c4:ee:02:4f:cf:44:ab:fa: 38:8b:8e:ef:8e:bd:eb:a4:98:23:df:e7:89:47:77:96:6d:f0: 94:18:bd:39:23:26:cd:e2:3b:b8:e6:0a:24:b9:bd:99:02:cd: ca:a6:cd:58:50:ac:43:1c:09:62:c4:63:51:7d:97:32:87:7c: 6e:ee:51:f9:39:8d:58:cf:95:55:b4:8d:74:8f:5d:f6:60:f4: 95:a1:43:73:45:37:be:6f:0d:90:28:75:37:18:ad:b6:b2:85: 72:f0:cc:73:42:80:a6:1f:bf:be:9c:cd:88:0a:57:1c:42:32: aa:46:0e:77:df:6b:69:8b:06:43:cf:6a:4d:d2:c1:fe:d3:95: c7:75:dd:77 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsEfBINqWzPA0Lu0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWU1ZTZlODctNWY2NS00OTNiLWI2NjQtNWExMjgxOWNk YWE0MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk NmEwZGNkNDgtMTJkNy00MzlhLTk2ZDAtYWVhZWMxZDQ3MzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2z/5YFrvu1kkSd8VlaVhaHqIKsqC2JHR4ITb RVU/TigcWe5sMwxokjg088ZsG30xPgUuQlHN+3FbcdB6A/x+AkWGCcudMIJOk9th ZxRGB+vqPN3lp5ceNkM4mKKB4f+Q4VU87iyPRAR3jvH8sd3/NWBO6CKTKr58MTbm kkvi+cSKyTcAafUgIyuSd7n8uYbVbDhDhU9raxS+TY5fpqbM/xtPrUW/Cd6VwSRn cy/rnKVKnwvqXufqHwBwxUCdcme4endFinwHZkrkKAWgYdM3v1EE3JlsppRqlpX6 EJKvKH0Ed9yBca6+V818JiUu5hYTX615lOC08d+bPUYmu1bDlQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPEP3mV3GGtGfMipgIRzHQ/svFRjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZTVl NmU4Ny01ZjY1LTQ5M2ItYjY2NC01YTEyODE5Y2RhYTQvN2RhZTMyNGUtZWM3NC0z MGMyLWIyMzUtMTNmMWVkODY5NWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWU1ZTZlODctNWY2NS00OTNiLWI2 NjQtNWExMjgxOWNkYWE0LzllNWU2ZTg3LTVmNjUtNDkzYi1iNjY0LTVhMTI4MTlj ZGFhNC5jcmwwHwYDVR0jBBgwFoAUl9Icz4rNdOOPsJMgf8bCkeBFoTMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZTVlNmU4Ny01ZjY1LTQ5M2ItYjY2NC01YTEy ODE5Y2RhYTQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdowDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAHNmqkzmtn3jft62LZLJkBCGO0F5bC90c9UKWWazvKHH09/s3nXFGP IpoT4CoJ6thLBi+Y/8c8u72aLeYoII0oe5h8XrQ0voE9em4CEeZGTu+v6cWjOGFK qcQCFIa1grd5i7qyNsPwx8qXlzwPxfJE1AC96YoWxO4CT89Eq/o4i47vjr3rpJgj 3+eJR3eWbfCUGL05IybN4ju45gokub2ZAs3Kps1YUKxDHAlixGNRfZcyh3xu7lH5 OY1Yz5VVtI10j132YPSVoUNzRTe+bw2QKHU3GK22soVy8MxzQoCmH7++nM2IClcc QjKqRg5332tpiwZDz2pN0sH+05XHdd13 -----END CERTIFICATE-----Generated at Thu Sep 18 07:41:29 2025 by rpki-client