$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/602bdbad-4add-3c5e-b46e-9417aedc7e02.roa File: 602bdbad-4add-3c5e-b46e-9417aedc7e02.roa (raw, json) Hash identifier: Zcs2DBUsUaYKpVh/c1P/8Wuoi2Kzj23nhYwL5rWvz3k= Subject key identifier: 8A:0A:1B:7C:7B:13:FF:57:B9:05:70:87:A5:62:F5:CF:AA:B6:90:11 Certificate issuer: /CN=59f5c767-5b1f-4a85-8f05-980b585fa2b4 Certificate serial: 010D0C9F4328584B84E7873D00667B2457DD1E00 Authority key identifier: 5E:49:30:3A:E2:75:92:90:20:40:F8:B9:1D:11:31:80:FF:4A:93:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/602bdbad-4add-3c5e-b46e-9417aedc7e02.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 401190 IP address blocks: 2620:14:2000:1::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/59f5c767-5b1f-4a85-8f05-980b585fa2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/59f5c767-5b1f-4a85-8f05-980b585fa2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:87:3d:00:66:7b:24:57:dd:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59f5c767-5b1f-4a85-8f05-980b585fa2b4 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=6db6fd08-a7c4-45e2-9a4f-8b7f6a2db119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:71:89:87:50:d3:2d:c7:3b:aa:ea:7d:7a:bc: 60:ea:f9:0e:01:d9:75:64:f0:b1:4d:9a:75:e5:fa: e5:e6:a9:a7:39:2c:f5:a5:6c:ed:8c:b0:a5:9e:cc: 86:fb:c9:a7:db:20:cb:97:66:ce:50:b7:51:d5:0a: a6:0b:c6:17:0f:4c:44:48:d6:b4:bc:e0:66:6d:9c: 69:9e:f4:ce:8c:ea:df:5f:f8:d9:d8:19:cd:5b:56: 48:d3:6e:7c:a2:d8:2e:a7:8e:8a:cd:95:42:bb:18: 2e:b7:e5:c1:43:a2:ec:64:f9:4b:77:44:2d:5d:f0: 17:61:e0:7c:ce:09:66:d1:fc:a7:87:8e:05:08:85: 63:d3:ed:fe:53:7a:48:2b:53:1f:8b:aa:28:ec:e2: 1d:43:12:e4:4a:33:1e:0c:f8:03:f2:66:5b:da:66: bb:b5:bc:77:b5:74:02:6e:1b:a3:4e:8c:ba:d0:67: a0:37:b2:bc:74:ed:27:a0:62:c1:7e:7e:b1:b3:1c: 29:4e:14:dd:4c:27:83:95:2e:dd:56:67:9e:c5:02: 65:cc:07:e0:4d:d0:0f:71:cc:df:4c:bc:e1:6b:a0: 3d:ef:48:16:c4:7e:b0:93:51:42:62:23:8a:c3:36: a4:82:1d:0c:24:a3:a9:08:97:fb:49:b7:77:f9:cd: c6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:0A:1B:7C:7B:13:FF:57:B9:05:70:87:A5:62:F5:CF:AA:B6:90:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/602bdbad-4add-3c5e-b46e-9417aedc7e02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/59f5c767-5b1f-4a85-8f05-980b585fa2b4.crl X509v3 Authority Key Identifier: keyid:5E:49:30:3A:E2:75:92:90:20:40:F8:B9:1D:11:31:80:FF:4A:93:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4.cer sbgp-ipAddrBlock: critical IPv6: 2620:14:2000:1::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:14:81:38:06:01:66:3a:f2:6b:f6:da:99:04:27:d3:11:1f: a7:16:ee:37:48:00:f2:89:63:1e:e2:77:2f:be:92:12:0d:89: 67:a2:68:aa:4a:66:d4:3f:a6:0c:bd:a1:2f:7c:7d:43:b9:d7: 4f:bd:6d:11:78:ac:76:59:c1:3f:6a:7a:bb:30:ee:3b:a6:66: 0c:ec:d3:72:5c:86:8e:96:e8:79:ce:89:f9:c9:c2:ac:1a:f8: bc:a9:64:83:a6:86:99:42:69:dd:d8:e6:12:1a:75:2d:52:f0: f2:6e:5f:14:bd:86:10:00:2a:86:5b:9c:75:81:74:ae:18:48: 2d:19:98:ec:ef:c8:54:b1:d0:f6:de:6b:cd:03:d2:e8:da:9a: 8a:d5:b6:e9:ec:77:bb:b5:1f:61:f0:be:27:b9:6b:f2:06:f5: bc:b4:b8:49:1f:79:50:0b:f5:3e:fd:e0:a0:7c:0e:5d:ca:ed: bf:38:a6:ca:50:2d:82:92:6d:ba:2a:a4:5b:20:d8:fc:c6:3f: 32:3f:08:f1:e1:41:80:8b:44:3b:ae:28:c5:72:d3:87:60:a7: 82:10:fa:9c:29:3d:33:a7:32:82:1c:51:1f:a5:2f:a4:8d:8c: a2:01:ae:24:59:04:cc:b2:59:b3:9b:54:5e:8a:0b:74:29:8b: 43:a3:e4:5c -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEuE54c9AGZ7JFfdHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTlmNWM3NjctNWIxZi00YTg1LThmMDUtOTgwYjU4NWZh MmI0MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk NmRiNmZkMDgtYTdjNC00NWUyLTlhNGYtOGI3ZjZhMmRiMTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHGJh1DTLcc7qup9erxg6vkOAdl1ZPCxTZp1 5frl5qmnOSz1pWztjLClnsyG+8mn2yDLl2bOULdR1QqmC8YXD0xESNa0vOBmbZxp nvTOjOrfX/jZ2BnNW1ZI0258otgup46KzZVCuxgut+XBQ6LsZPlLd0QtXfAXYeB8 zglm0fynh44FCIVj0+3+U3pIK1Mfi6oo7OIdQxLkSjMeDPgD8mZb2ma7tbx3tXQC bhujToy60GegN7K8dO0noGLBfn6xsxwpThTdTCeDlS7dVmeexQJlzAfgTdAPcczf TLzha6A970gWxH6wk1FCYiOKwzakgh0MJKOpCJf7Sbd3+c3GfwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFIoKG3x7E/9XuQVwh6Vi9c+qtpARMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81OWY1 Yzc2Ny01YjFmLTRhODUtOGYwNS05ODBiNTg1ZmEyYjQvNjAyYmRiYWQtNGFkZC0z YzVlLWI0NmUtOTQxN2FlZGM3ZTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTlmNWM3NjctNWIxZi00YTg1LThm MDUtOTgwYjU4NWZhMmI0LzU5ZjVjNzY3LTViMWYtNGE4NS04ZjA1LTk4MGI1ODVm YTJiNC5jcmwwHwYDVR0jBBgwFoAUXkkwOuJ1kpAgQPi5HRExgP9Kk20wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81OWY1Yzc2Ny01YjFmLTRhODUtOGYwNS05ODBi NTg1ZmEyYjQuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJiAAFCAA AAEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAhxSBOAYBZjrya/bamQQn0xEfpxbuN0gA8oljHuJ3L76SEg2J Z6Joqkpm1D+mDL2hL3x9Q7nXT71tEXisdlnBP2p6uzDuO6ZmDOzTclyGjpboec6J +cnCrBr4vKlkg6aGmUJp3djmEhp1LVLw8m5fFL2GEAAqhlucdYF0rhhILRmY7O/I VLHQ9t5rzQPS6NqaitW26ex3u7UfYfC+J7lr8gb1vLS4SR95UAv1Pv3goHwOXcrt vzimylAtgpJtuiqkWyDY/MY/Mj8I8eFBgItEO64oxXLTh2CnghD6nCk9M6cyghxR H6UvpI2MogGuJFkEzLJZs5tUXooLdCmLQ6PkXA== -----END CERTIFICATE-----Generated at Mon Oct 20 14:41:50 2025 by rpki-client