$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9aa1239e-f794-41f3-afdb-07b565ff2d53/675caa0d-a9a7-363c-ad86-aa26ee4a7e09.roa File: 675caa0d-a9a7-363c-ad86-aa26ee4a7e09.roa (raw, json) Hash identifier: Kc5K2YOtDeNyR2+wprUQnzgvVGr+ZWDDcjvrc/hSQUE= Subject key identifier: 33:4A:32:61:44:5E:75:EE:35:8F:F9:D0:35:E6:1E:0F:89:08:19:B9 Certificate issuer: /CN=9aa1239e-f794-41f3-afdb-07b565ff2d53 Certificate serial: 010D0C9F4328584B80B7614623908B75B8049C80 Authority key identifier: 0F:0C:07:9A:B1:5A:67:0B:4D:8B:E4:6B:93:EA:4E:43:8D:11:2E:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9aa1239e-f794-41f3-afdb-07b565ff2d53.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9aa1239e-f794-41f3-afdb-07b565ff2d53/675caa0d-a9a7-363c-ad86-aa26ee4a7e09.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 29903 IP address blocks: 2620:5a:8000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9aa1239e-f794-41f3-afdb-07b565ff2d53/9aa1239e-f794-41f3-afdb-07b565ff2d53.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9aa1239e-f794-41f3-afdb-07b565ff2d53/9aa1239e-f794-41f3-afdb-07b565ff2d53.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9aa1239e-f794-41f3-afdb-07b565ff2d53.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:61:46:23:90:8b:75:b8:04:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9aa1239e-f794-41f3-afdb-07b565ff2d53 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=68e6f3c2-386f-4ba5-8a77-7714a78b6415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f1:e9:5b:ee:0e:7a:94:a6:9e:53:fa:5d:a3: 7b:bb:4d:48:1b:ec:e5:63:36:0c:af:57:cd:6e:77: f8:3e:f7:c5:0d:de:20:0d:dd:ee:79:d2:4a:72:4c: 0a:6e:42:84:6d:f4:c9:93:55:01:4d:f1:68:8a:1b: de:70:02:4e:c2:3c:f3:84:2b:3b:ed:0e:15:f2:51: 4b:d7:21:d5:b2:22:d8:46:81:0f:ef:71:27:a6:6a: 31:06:f7:ec:66:28:ed:cf:7b:5a:cb:99:6b:28:9a: f5:1e:66:51:db:ef:cd:39:e2:e3:45:0a:ad:75:90: 2f:f7:84:5b:d9:73:d3:ad:75:73:4e:9a:6f:bb:2f: 7b:13:5f:42:ee:de:2a:cb:46:48:40:0d:65:3a:87: b5:4b:6e:df:94:1f:a0:5d:a7:05:b3:68:7f:9f:49: 8b:77:98:22:da:6a:43:20:af:37:19:ff:bc:d5:01: 81:c5:4d:c6:3f:c6:76:4d:75:b8:3c:de:8f:66:0e: 87:2b:69:1e:c9:e0:26:05:9d:3d:d9:16:da:77:92: 0f:ff:ec:20:d4:b5:25:10:fb:85:45:60:02:f6:95: f6:d1:df:2a:e5:6f:c2:2e:26:d1:8d:06:95:3e:cf: fc:bc:1c:94:98:4b:0c:75:b4:bb:9e:9b:4d:fb:a1: 9f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:4A:32:61:44:5E:75:EE:35:8F:F9:D0:35:E6:1E:0F:89:08:19:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9aa1239e-f794-41f3-afdb-07b565ff2d53/675caa0d-a9a7-363c-ad86-aa26ee4a7e09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9aa1239e-f794-41f3-afdb-07b565ff2d53/9aa1239e-f794-41f3-afdb-07b565ff2d53.crl X509v3 Authority Key Identifier: keyid:0F:0C:07:9A:B1:5A:67:0B:4D:8B:E4:6B:93:EA:4E:43:8D:11:2E:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9aa1239e-f794-41f3-afdb-07b565ff2d53.cer sbgp-ipAddrBlock: critical IPv6: 2620:5a:8000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:e0:ca:59:38:e0:27:9d:3d:06:84:ca:dd:40:1a:a7:9c:ae: e9:c8:0d:24:64:45:6f:4b:1d:65:25:ba:0d:1d:c9:06:0b:5b: f0:24:43:8f:10:06:cb:c3:73:74:94:ba:0f:d0:85:2d:fd:1e: ec:c9:f8:2e:e9:36:d1:b9:67:2c:85:89:93:f3:33:70:1e:40: 77:b8:21:16:be:55:f6:85:c0:11:3b:b5:45:11:e0:6a:2d:70: 67:5b:e7:bf:04:f3:5f:59:c7:f6:88:8c:9b:83:64:f3:7d:b5: f1:83:5a:b8:5e:8e:70:84:44:8d:04:fd:dc:db:d7:b3:b6:ae: 0f:8a:a0:d6:b8:de:c8:ee:9c:c5:1e:3d:df:de:68:63:40:91: 0f:d9:8e:9e:6e:7a:cf:a1:50:99:c9:1b:ab:bb:a8:cf:c8:78: d7:ce:c6:6a:c8:d4:ad:b0:26:90:82:5f:ed:55:44:6f:54:89: 87:26:23:72:08:50:8d:a5:4d:de:38:00:70:52:95:82:28:7c: 0b:d6:5f:92:5e:04:3e:2d:33:25:5e:4b:bc:f7:92:be:3f:8c: 2b:d8:04:e3:06:ac:a6:6b:15:93:f8:20:5a:8b:6a:8b:3a:1e: 89:3d:92:2f:82:e2:8f:c8:94:c2:fa:33:c3:06:1b:f8:91:c7: 9c:ce:e3:4b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuAt2FGI5CLdbgEnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWFhMTIzOWUtZjc5NC00MWYzLWFmZGItMDdiNTY1ZmYy ZDUzMB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk NjhlNmYzYzItMzg2Zi00YmE1LThhNzctNzcxNGE3OGI2NDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/HpW+4OepSmnlP6XaN7u01IG+zlYzYMr1fN bnf4PvfFDd4gDd3uedJKckwKbkKEbfTJk1UBTfFoihvecAJOwjzzhCs77Q4V8lFL 1yHVsiLYRoEP73EnpmoxBvfsZijtz3tay5lrKJr1HmZR2+/NOeLjRQqtdZAv94Rb 2XPTrXVzTppvuy97E19C7t4qy0ZIQA1lOoe1S27flB+gXacFs2h/n0mLd5gi2mpD IK83Gf+81QGBxU3GP8Z2TXW4PN6PZg6HK2keyeAmBZ092Rbad5IP/+wg1LUlEPuF RWAC9pX20d8q5W/CLibRjQaVPs/8vByUmEsMdbS7nptN+6Gf8wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDNKMmFEXnXuNY/50DXmHg+JCBm5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85YWEx MjM5ZS1mNzk0LTQxZjMtYWZkYi0wN2I1NjVmZjJkNTMvNjc1Y2FhMGQtYTlhNy0z NjNjLWFkODYtYWEyNmVlNGE3ZTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWFhMTIzOWUtZjc5NC00MWYzLWFm ZGItMDdiNTY1ZmYyZDUzLzlhYTEyMzllLWY3OTQtNDFmMy1hZmRiLTA3YjU2NWZm MmQ1My5jcmwwHwYDVR0jBBgwFoAUDwwHmrFaZwtNi+Rrk+pOQ40RLuIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85YWExMjM5ZS1mNzk0LTQxZjMtYWZkYi0wN2I1 NjVmZjJkNTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAWoAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABTgylk44CedPQaEyt1AGqecrunIDSRkRW9LHWUlug0dyQYLW/Ak Q48QBsvDc3SUug/QhS39HuzJ+C7pNtG5ZyyFiZPzM3AeQHe4IRa+VfaFwBE7tUUR 4GotcGdb578E819Zx/aIjJuDZPN9tfGDWrhejnCERI0E/dzb17O2rg+KoNa43sju nMUePd/eaGNAkQ/Zjp5ues+hUJnJG6u7qM/IeNfOxmrI1K2wJpCCX+1VRG9UiYcm I3IIUI2lTd44AHBSlYIofAvWX5JeBD4tMyVeS7z3kr4/jCvYBOMGrKZrFZP4IFqL aos6Hok9ki+C4o/IlML6M8MGG/iRx5zO40s= -----END CERTIFICATE-----Generated at Mon Oct 20 20:41:54 2025 by rpki-client