$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/4473534e-1393-3bf6-b9d0-9ce69ce9703a.roa File: 4473534e-1393-3bf6-b9d0-9ce69ce9703a.roa (raw, json) Hash identifier: YFKOMdXqz+tefAT7N41Fy6P1k/66E6QF8VjBAyjrsw4= Subject key identifier: F6:4B:A8:08:1B:9A:F0:0F:53:97:20:FD:C2:82:2E:89:6E:BD:D4:21 Certificate issuer: /CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Certificate serial: 010D0C9F4328584B20C1EF6468D6D9AA2357A980 Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/4473534e-1393-3bf6-b9d0-9ce69ce9703a.roa Signing time: Mon 08 Sep 2025 16:04:19 +0000 ROA not before: Mon 08 Sep 2025 16:04:19 +0000 ROA not after: Sun 07 Dec 2025 17:04:19 +0000 asID: 16509 IP address blocks: 2605:b040:e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:c1:ef:64:68:d6:d9:aa:23:57:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Validity Not Before: Sep 8 16:04:19 2025 GMT Not After : Dec 7 17:04:19 2025 GMT Subject: CN=b195b456-ecaf-4a7e-a416-6226db37131f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:61:ac:3b:0e:d1:05:75:c3:99:d5:2b:96:b0: df:65:08:93:db:0f:91:8f:21:03:d1:1f:2d:a7:84: 58:8d:81:5b:8f:e0:41:3e:16:bf:f5:f2:fd:70:a5: 0c:a4:35:db:75:98:3a:e9:69:15:26:6d:3e:24:a5: 5b:5d:a6:67:37:bc:44:dd:34:33:ba:a0:e2:c3:82: 7a:56:9b:d5:f2:76:26:b5:f2:b7:11:c8:59:cc:24: 2a:76:d8:ca:0a:c7:47:d5:68:f6:c8:87:eb:fa:10: 3c:99:9a:f7:34:2a:75:28:e7:ca:12:e8:6a:12:0e: e9:6b:b2:44:a7:c7:27:46:ce:93:2f:d5:52:ba:9e: 57:d2:16:c3:c6:2e:df:be:03:2c:c4:19:68:ec:e8: 56:ac:fa:ec:fe:57:64:88:01:0a:c4:35:5b:a1:47: b2:45:3c:d3:ee:f3:bc:47:7e:14:f6:74:26:2a:1f: ec:43:89:ee:ba:86:41:85:e4:40:ef:29:70:74:e6: 51:91:6c:de:b5:c0:8b:ed:54:a9:90:8a:d8:ac:9c: 3d:51:7d:c1:98:de:01:d2:ce:18:e5:e2:e1:ba:ea: ec:af:93:6e:bd:14:32:96:44:06:31:fb:a0:7a:60: 6c:a4:8d:dc:f6:c3:0e:13:43:5e:f2:0f:e8:0b:f0: 5d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:4B:A8:08:1B:9A:F0:0F:53:97:20:FD:C2:82:2E:89:6E:BD:D4:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/4473534e-1393-3bf6-b9d0-9ce69ce9703a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl X509v3 Authority Key Identifier: keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer sbgp-ipAddrBlock: critical IPv6: 2605:b040:e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:c4:28:40:a8:db:b5:4b:61:73:57:3d:c8:08:1e:8b:e6:97: 10:bf:82:df:4d:09:ff:ea:d7:c8:fe:e2:c0:1c:84:89:a6:94: 3d:64:1b:8d:52:a4:e3:e9:45:a4:fb:6e:c8:b2:04:8b:33:66: b0:a6:3d:2b:49:fc:22:17:8c:d8:99:65:c3:87:0e:ea:c4:b6: 29:42:0b:ca:da:00:c2:90:f0:26:6f:42:b0:2e:81:71:63:73: 28:ca:a9:a2:53:b7:a5:8f:62:a3:af:2b:58:91:03:c4:49:31: 54:6d:8a:96:84:b9:76:4c:8e:93:38:c3:9d:dd:55:82:09:2b: 2f:73:4c:d6:64:e6:84:16:9c:bd:25:9f:c8:27:cb:ac:b2:6e: ce:35:e7:07:fe:71:91:45:8d:05:8e:78:50:d8:b8:6a:ed:61: 9f:84:34:01:05:c4:14:6b:6f:2d:9d:ca:90:d6:53:dc:47:de: a8:0e:87:06:77:58:de:db:06:25:6a:18:d7:e6:0c:a2:40:d0: 66:b4:5d:b9:6c:53:b8:91:6a:59:2b:b8:2c:c5:00:42:1e:82: 3f:f7:1a:e0:7f:59:d6:cc:bb:f8:8b:73:c3:fe:3a:9f:a1:8d: fc:0c:c9:00:bc:f1:72:98:75:5a:0e:44:cc:ce:ea:1f:d3:4c: fa:3d:89:23 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsgwe9kaNbZqiNXqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmU5YzU4OTQtZjc5NC00MjA5LWEwMGQtY2YyMzIzNjNk N2M2MB4XDTI1MDkwODE2MDQxOVoXDTI1MTIwNzE3MDQxOVowLzEtMCsGA1UEAxMk YjE5NWI0NTYtZWNhZi00YTdlLWE0MTYtNjIyNmRiMzcxMzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGGsOw7RBXXDmdUrlrDfZQiT2w+RjyED0R8t p4RYjYFbj+BBPha/9fL9cKUMpDXbdZg66WkVJm0+JKVbXaZnN7xE3TQzuqDiw4J6 VpvV8nYmtfK3EchZzCQqdtjKCsdH1Wj2yIfr+hA8mZr3NCp1KOfKEuhqEg7pa7JE p8cnRs6TL9VSup5X0hbDxi7fvgMsxBlo7OhWrPrs/ldkiAEKxDVboUeyRTzT7vO8 R34U9nQmKh/sQ4nuuoZBheRA7ylwdOZRkWzetcCL7VSpkIrYrJw9UX3BmN4B0s4Y 5eLhuursr5NuvRQylkQGMfugemBspI3c9sMOE0Ne8g/oC/Bd6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPZLqAgbmvAPU5cg/cKCLoluvdQhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTlj NTg5NC1mNzk0LTQyMDktYTAwZC1jZjIzMjM2M2Q3YzYvNDQ3MzUzNGUtMTM5My0z YmY2LWI5ZDAtOWNlNjljZTk3MDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmU5YzU4OTQtZjc5NC00MjA5LWEw MGQtY2YyMzIzNjNkN2M2LzZlOWM1ODk0LWY3OTQtNDIwOS1hMDBkLWNmMjMyMzYz ZDdjNi5jcmwwHwYDVR0jBBgwFoAU620+1MghuZYRngwJ/123iIBSlIUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTljNTg5NC1mNzk0LTQyMDktYTAwZC1jZjIz MjM2M2Q3YzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWwQAAO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD/EKECo27VLYXNXPcgIHovmlxC/gt9NCf/q18j+4sAchImmlD1k G41SpOPpRaT7bsiyBIszZrCmPStJ/CIXjNiZZcOHDurEtilCC8raAMKQ8CZvQrAu gXFjcyjKqaJTt6WPYqOvK1iRA8RJMVRtipaEuXZMjpM4w53dVYIJKy9zTNZk5oQW nL0ln8gny6yybs415wf+cZFFjQWOeFDYuGrtYZ+ENAEFxBRrby2dypDWU9xH3qgO hwZ3WN7bBiVqGNfmDKJA0Ga0XblsU7iRalkruCzFAEIegj/3GuB/WdbMu/iLc8P+ Op+hjfwMyQC88XKYdVoORMzO6h/TTPo9iSM= -----END CERTIFICATE-----Generated at Mon Oct 20 09:48:43 2025 by rpki-client