$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a63e4741-f0d0-41ab-b0c9-866af37d6849/86d93acc-2536-31bf-8950-1dfaa1b48d16.roa File: 86d93acc-2536-31bf-8950-1dfaa1b48d16.roa (raw, json) Hash identifier: wFh9a1kAPOP/yLQ3XRaEkhva4fFVc5WGqJvLybP+uic= Subject key identifier: 39:B6:3A:9F:64:72:BA:39:66:80:7E:9B:31:A6:7D:E2:D7:F4:B9:7D Certificate issuer: /CN=a63e4741-f0d0-41ab-b0c9-866af37d6849 Certificate serial: 010D0C9F4328584B821CBF90F27398781993C900 Authority key identifier: 59:DF:EA:83:B8:E9:AF:13:F0:43:07:0E:6D:BE:F3:C7:D3:24:0D:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a63e4741-f0d0-41ab-b0c9-866af37d6849.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a63e4741-f0d0-41ab-b0c9-866af37d6849/86d93acc-2536-31bf-8950-1dfaa1b48d16.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 19694 IP address blocks: 2620:136:4000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a63e4741-f0d0-41ab-b0c9-866af37d6849/a63e4741-f0d0-41ab-b0c9-866af37d6849.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a63e4741-f0d0-41ab-b0c9-866af37d6849/a63e4741-f0d0-41ab-b0c9-866af37d6849.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a63e4741-f0d0-41ab-b0c9-866af37d6849.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:bf:90:f2:73:98:78:19:93:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a63e4741-f0d0-41ab-b0c9-866af37d6849 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=b83094e0-f7ba-4fe8-a2e1-5d8cd5be2129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:28:c1:0d:3a:be:74:a7:ae:37:a9:3f:be:e2: ca:ab:81:b0:e2:b0:ba:56:7f:f1:ec:74:0c:da:b8: c8:2b:a5:7f:df:f7:36:e4:14:c3:8e:f1:fb:81:0b: e7:7c:97:d3:a7:ee:dd:d0:49:c6:6d:fc:0f:2d:c9: 47:dc:b4:4f:bb:6d:96:49:b7:fb:d2:f6:60:d1:d2: 4e:be:4f:13:1f:f1:0b:be:77:8f:c2:f9:46:9b:cf: d1:00:31:d6:e3:16:b0:42:eb:ba:6b:bd:b5:41:5d: 0b:a1:39:31:a0:69:14:8e:44:ae:e9:5e:6d:b7:0b: 4d:55:ad:66:e7:c2:bc:9d:5f:79:ac:c4:30:b3:ca: 06:6e:74:3a:75:85:f6:35:0b:f1:c9:0a:f2:84:a7: be:79:55:ad:22:e2:f3:95:79:15:47:bb:7a:87:0f: 10:8a:c0:3c:00:75:30:e6:7c:1a:e4:d2:c6:57:12: bc:f7:34:a2:a7:b7:15:4a:aa:02:9b:13:ea:60:53: 4f:bc:f8:18:8a:79:4a:81:51:b7:d8:3d:88:70:f6: 07:79:de:14:da:56:63:35:a0:5f:9d:69:71:3e:0b: 0c:ac:96:e3:d0:45:2a:20:de:24:17:04:c0:5a:6d: 84:a0:f7:7e:76:fa:a1:67:43:26:7a:43:84:df:5c: 71:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B6:3A:9F:64:72:BA:39:66:80:7E:9B:31:A6:7D:E2:D7:F4:B9:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a63e4741-f0d0-41ab-b0c9-866af37d6849/86d93acc-2536-31bf-8950-1dfaa1b48d16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a63e4741-f0d0-41ab-b0c9-866af37d6849/a63e4741-f0d0-41ab-b0c9-866af37d6849.crl X509v3 Authority Key Identifier: keyid:59:DF:EA:83:B8:E9:AF:13:F0:43:07:0E:6D:BE:F3:C7:D3:24:0D:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a63e4741-f0d0-41ab-b0c9-866af37d6849.cer sbgp-ipAddrBlock: critical IPv6: 2620:136:4000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:84:24:2a:68:23:95:34:8b:41:b6:a9:62:e1:8a:2f:6b:45: e0:83:eb:27:80:99:22:d3:ba:bd:38:cd:29:de:17:c3:80:d8: 29:a3:34:fa:dd:88:bc:60:60:68:3d:ec:8e:bf:e2:d1:f9:a8: 4f:26:1d:40:e4:ab:2d:ef:f6:7e:e4:85:f6:4a:1c:73:c4:0f: 55:c5:cd:65:3b:33:20:1b:c2:0b:ef:cb:c1:6d:9b:4f:71:25: 2c:76:30:1d:6e:46:24:b0:0f:61:cf:23:70:27:5b:c3:c0:ec: 05:4f:d2:56:02:12:11:89:6f:8e:ae:fe:70:0d:d3:fd:32:73: 85:a0:20:70:bb:d8:92:fe:24:b6:7e:ea:36:ef:eb:03:2f:b6: bb:46:74:ee:01:e1:78:92:b2:e9:53:05:dc:20:62:38:d5:93: fc:46:50:59:ab:dd:e8:4e:04:0c:08:aa:03:26:21:35:71:a3: 35:9b:d7:1b:77:2a:31:e1:df:ae:94:99:ae:25:4a:9c:1a:c7: 12:8e:3b:c1:f4:44:a5:a5:2e:1d:e9:e0:e2:0c:76:7b:cc:92: bb:a1:b4:41:3f:90:cf:be:87:ea:6b:76:81:12:b9:43:34:30: 93:18:93:e1:5e:ac:13:c2:1e:18:88:0d:17:b3:c8:3d:a3:2a: 9a:14:3c:bc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuCHL+Q8nOYeBmTyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTYzZTQ3NDEtZjBkMC00MWFiLWIwYzktODY2YWYzN2Q2 ODQ5MB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk YjgzMDk0ZTAtZjdiYS00ZmU4LWEyZTEtNWQ4Y2Q1YmUyMTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCjBDTq+dKeuN6k/vuLKq4Gw4rC6Vn/x7HQM 2rjIK6V/3/c25BTDjvH7gQvnfJfTp+7d0EnGbfwPLclH3LRPu22WSbf70vZg0dJO vk8TH/ELvnePwvlGm8/RADHW4xawQuu6a721QV0LoTkxoGkUjkSu6V5ttwtNVa1m 58K8nV95rMQws8oGbnQ6dYX2NQvxyQryhKe+eVWtIuLzlXkVR7t6hw8QisA8AHUw 5nwa5NLGVxK89zSip7cVSqoCmxPqYFNPvPgYinlKgVG32D2IcPYHed4U2lZjNaBf nWlxPgsMrJbj0EUqIN4kFwTAWm2EoPd+dvqhZ0MmekOE31xxpQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDm2Op9kcro5ZoB+mzGmfeLX9Ll9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hNjNl NDc0MS1mMGQwLTQxYWItYjBjOS04NjZhZjM3ZDY4NDkvODZkOTNhY2MtMjUzNi0z MWJmLTg5NTAtMWRmYWExYjQ4ZDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTYzZTQ3NDEtZjBkMC00MWFiLWIw YzktODY2YWYzN2Q2ODQ5L2E2M2U0NzQxLWYwZDAtNDFhYi1iMGM5LTg2NmFmMzdk Njg0OS5jcmwwHwYDVR0jBBgwFoAUWd/qg7jprxPwQwcObb7zx9MkDeUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hNjNlNDc0MS1mMGQwLTQxYWItYjBjOS04NjZh ZjM3ZDY4NDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABNkAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALCEJCpoI5U0i0G2qWLhii9rReCD6yeAmSLTur04zSneF8OA2Cmj NPrdiLxgYGg97I6/4tH5qE8mHUDkqy3v9n7khfZKHHPED1XFzWU7MyAbwgvvy8Ft m09xJSx2MB1uRiSwD2HPI3AnW8PA7AVP0lYCEhGJb46u/nAN0/0yc4WgIHC72JL+ JLZ+6jbv6wMvtrtGdO4B4XiSsulTBdwgYjjVk/xGUFmr3ehOBAwIqgMmITVxozWb 1xt3KjHh366Uma4lSpwaxxKOO8H0RKWlLh3p4OIMdnvMkruhtEE/kM++h+prdoES uUM0MJMYk+FerBPCHhiIDRezyD2jKpoUPLw= -----END CERTIFICATE-----Generated at Mon Oct 20 10:34:48 2025 by rpki-client