$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69fd5aaa-164e-43f9-a8ca-302782d25019/c2f618e2-c66d-30c0-896e-b76c3e200421.roa File: c2f618e2-c66d-30c0-896e-b76c3e200421.roa (raw, json) Hash identifier: MQbiqOVpf7E2JPesLydLLVn6SBHa30/1C6DjZNPS10M= Subject key identifier: 9F:C8:C2:CD:94:0B:49:2F:DE:37:3C:E5:14:3C:E9:8A:BA:29:3F:B4 Certificate issuer: /CN=69fd5aaa-164e-43f9-a8ca-302782d25019 Certificate serial: 010D0C9F4328584B80B763DC018B7EC944AD9BEC Authority key identifier: B2:50:50:2D:5D:EA:5E:9C:26:91:2C:45:AA:82:D7:56:93:F9:9B:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69fd5aaa-164e-43f9-a8ca-302782d25019.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69fd5aaa-164e-43f9-a8ca-302782d25019/c2f618e2-c66d-30c0-896e-b76c3e200421.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 21837 IP address blocks: 2620:117:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69fd5aaa-164e-43f9-a8ca-302782d25019/69fd5aaa-164e-43f9-a8ca-302782d25019.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69fd5aaa-164e-43f9-a8ca-302782d25019/69fd5aaa-164e-43f9-a8ca-302782d25019.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69fd5aaa-164e-43f9-a8ca-302782d25019.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:63:dc:01:8b:7e:c9:44:ad:9b:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd5aaa-164e-43f9-a8ca-302782d25019 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=af0eea06-eddf-40d5-8648-b2703848787a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b9:f5:66:88:14:fd:77:65:01:f8:a1:f7:6d: 64:46:81:f8:6a:62:a0:56:03:6f:98:88:06:96:ce: d4:e3:67:57:40:69:17:87:d2:dd:1c:d7:c5:99:18: 6a:31:68:27:33:c3:82:a0:e1:46:13:30:a4:fc:d6: 30:92:6d:27:6d:e8:7a:76:52:e5:b8:1d:13:8c:1c: 2a:2c:c5:93:8f:40:ae:4a:6f:a1:f9:5b:9e:63:fc: f5:94:08:fb:30:39:68:4a:67:b0:54:0e:1c:af:b6: 44:eb:1c:92:c3:08:ec:46:73:37:67:25:2b:14:0c: de:9c:be:88:f5:ea:62:5d:f4:20:d1:b7:d9:15:c4: e5:88:56:97:9a:31:d2:1c:a4:7e:61:16:e9:75:b9: 2d:a4:4c:80:56:92:c5:1b:bd:05:06:1a:9a:f8:bf: 6a:ff:43:7e:34:02:86:f0:4e:e7:6b:8d:72:2a:65: 8d:d3:fe:43:0a:47:22:89:2d:b7:7e:b7:2d:26:cf: 73:bd:d2:f1:2c:56:cf:51:35:bd:4d:29:34:4d:2c: 34:0f:6c:2c:ac:4f:78:06:95:0c:c6:28:d4:70:95: 84:42:b4:79:74:83:32:d9:cb:b9:d6:f1:98:e8:6f: 46:80:1d:6e:1a:d5:3a:56:db:16:6f:75:45:00:93: bf:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:C8:C2:CD:94:0B:49:2F:DE:37:3C:E5:14:3C:E9:8A:BA:29:3F:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69fd5aaa-164e-43f9-a8ca-302782d25019/c2f618e2-c66d-30c0-896e-b76c3e200421.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69fd5aaa-164e-43f9-a8ca-302782d25019/69fd5aaa-164e-43f9-a8ca-302782d25019.crl X509v3 Authority Key Identifier: keyid:B2:50:50:2D:5D:EA:5E:9C:26:91:2C:45:AA:82:D7:56:93:F9:9B:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69fd5aaa-164e-43f9-a8ca-302782d25019.cer sbgp-ipAddrBlock: critical IPv6: 2620:117:c000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:cf:eb:e5:e9:e6:92:9a:fd:e6:6e:d8:2f:b0:3a:ad:5d:87: 54:22:6d:33:12:8b:5b:c3:4c:60:82:be:ae:1d:45:e1:ba:a4: 8f:1b:37:40:7d:eb:8b:69:a7:87:8e:58:74:f6:20:de:3f:18: e8:86:23:c2:81:00:b4:cf:41:71:5c:90:d3:d2:d5:62:1c:8c: e0:55:eb:bd:43:bf:d5:02:26:fb:12:c5:21:9c:50:7b:3e:68: b4:2b:42:dd:da:c1:1f:12:8e:7d:b8:bb:1a:0c:c8:1d:ca:28: 95:1f:5c:ad:a5:4e:d7:be:4e:5c:8b:06:f7:76:70:e7:f8:f5: fc:2a:f5:fc:a4:06:83:d3:30:d0:e7:0e:a5:26:53:48:77:8d: 4a:ee:34:e9:ed:c0:ca:48:f4:08:95:83:d5:e9:48:43:09:c7: ea:50:b4:14:38:c6:55:0e:e4:e7:9e:16:6f:15:63:aa:85:a4: 05:2b:4f:21:64:7a:5e:84:64:84:8d:68:46:34:f3:ca:8e:45: ae:2a:b0:fb:8c:b0:86:3e:a1:aa:2a:ae:c5:5a:dd:4d:9c:20: 82:b5:9a:a8:f3:98:90:79:cb:fc:75:15:0c:c0:08:6c:70:5d: 82:cd:d1:d5:2a:e3:0d:71:bf:cb:f2:aa:9e:fe:1a:0f:e7:95: c9:ec:dd:e5 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuAt2PcAYt+yUStm+wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDVhYWEtMTY0ZS00M2Y5LWE4Y2EtMzAyNzgyZDI1 MDE5MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk YWYwZWVhMDYtZWRkZi00MGQ1LTg2NDgtYjI3MDM4NDg3ODdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7n1ZogU/XdlAfih921kRoH4amKgVgNvmIgG ls7U42dXQGkXh9LdHNfFmRhqMWgnM8OCoOFGEzCk/NYwkm0nbeh6dlLluB0TjBwq LMWTj0CuSm+h+VueY/z1lAj7MDloSmewVA4cr7ZE6xySwwjsRnM3ZyUrFAzenL6I 9epiXfQg0bfZFcTliFaXmjHSHKR+YRbpdbktpEyAVpLFG70FBhqa+L9q/0N+NAKG 8E7na41yKmWN0/5DCkciiS23frctJs9zvdLxLFbPUTW9TSk0TSw0D2wsrE94BpUM xijUcJWEQrR5dIMy2cu51vGY6G9GgB1uGtU6VtsWb3VFAJO/TwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJ/Iws2UC0kv3jc85RQ86Yq6KT+0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82OWZk NWFhYS0xNjRlLTQzZjktYThjYS0zMDI3ODJkMjUwMTkvYzJmNjE4ZTItYzY2ZC0z MGMwLTg5NmUtYjc2YzNlMjAwNDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjlmZDVhYWEtMTY0ZS00M2Y5LWE4 Y2EtMzAyNzgyZDI1MDE5LzY5ZmQ1YWFhLTE2NGUtNDNmOS1hOGNhLTMwMjc4MmQy NTAxOS5jcmwwHwYDVR0jBBgwFoAUslBQLV3qXpwmkSxFqoLXVpP5my4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82OWZkNWFhYS0xNjRlLTQzZjktYThjYS0zMDI3 ODJkMjUwMTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABF8Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAD8/r5enmkpr95m7YL7A6rV2HVCJtMxKLW8NMYIK+rh1F4bqkjxs3 QH3ri2mnh45YdPYg3j8Y6IYjwoEAtM9BcVyQ09LVYhyM4FXrvUO/1QIm+xLFIZxQ ez5otCtC3drBHxKOfbi7GgzIHcoolR9craVO175OXIsG93Zw5/j1/Cr1/KQGg9Mw 0OcOpSZTSHeNSu406e3Aykj0CJWD1elIQwnH6lC0FDjGVQ7k554WbxVjqoWkBStP IWR6XoRkhI1oRjTzyo5Friqw+4ywhj6hqiquxVrdTZwggrWaqPOYkHnL/HUVDMAI bHBdgs3R1SrjDXG/y/Kqnv4aD+eVyezd5Q== -----END CERTIFICATE-----Generated at Tue Oct 21 00:14:23 2025 by rpki-client