$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/60df6f8f-1b7f-32e6-8aa3-f7aaf1c2cfb0.roa File: 60df6f8f-1b7f-32e6-8aa3-f7aaf1c2cfb0.roa (raw, json) Hash identifier: RCyfpmL5zujto3wIc1eBNeLZ+J2Rq/ZTDDTqhykWNqM= Subject key identifier: E3:BD:A6:34:49:D7:0E:29:02:FD:17:09:F7:91:2C:0E:27:66:18:6D Certificate issuer: /CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Certificate serial: 010D0C9F4328584B4FDC73F70A53E518F3456D80 Authority key identifier: 81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/60df6f8f-1b7f-32e6-8aa3-f7aaf1c2cfb0.roa Signing time: Thu 25 Sep 2025 13:00:41 +0000 ROA not before: Thu 25 Sep 2025 13:00:41 +0000 ROA not after: Wed 24 Dec 2025 14:00:41 +0000 asID: 32058 IP address blocks: 2620:0:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:dc:73:f7:0a:53:e5:18:f3:45:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Validity Not Before: Sep 25 13:00:41 2025 GMT Not After : Dec 24 14:00:41 2025 GMT Subject: CN=d156754b-701c-4d65-8cb9-278ab872f6a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:07:c3:6c:28:66:eb:53:cd:16:d3:ed:9a:e6: 35:b7:a7:12:cf:3b:48:96:0e:7f:9f:02:e0:2f:62: 2e:a9:2d:6b:a3:1d:6a:b5:c2:2d:bf:30:10:80:8e: 6f:c3:b6:0e:90:36:2b:13:0b:d1:46:db:f9:0d:33: 80:6d:29:72:4b:0a:98:ae:59:c3:1b:63:90:e6:e8: 64:20:ee:79:80:f4:1f:96:ff:ea:8e:1f:bc:d8:ee: 79:64:de:66:66:4f:e9:db:09:95:ee:62:83:17:4d: 9b:f0:d7:2d:f7:1b:b7:ec:dc:f5:39:fe:2e:39:fa: a9:9a:e4:4e:17:e1:85:fd:27:fb:cf:ae:f3:b1:28: 66:0f:6b:3f:20:06:43:b9:2b:f8:6b:17:bf:6d:f1: 95:86:4c:2c:fe:01:b7:82:83:0c:8a:f0:f8:53:39: d0:3d:5e:16:73:04:73:cf:b8:3a:57:4f:10:01:cd: cb:fa:bd:97:e8:7f:90:95:fe:cb:ca:bf:a9:2d:f4: 9b:bc:46:43:ff:0d:c8:b5:78:27:b1:62:6b:16:27: b8:9d:76:c1:7c:20:bb:9b:b7:17:13:38:d8:54:07: 0a:75:74:9f:61:4f:d1:ad:68:e6:81:3c:cf:7a:e9: ff:72:ab:83:e8:cf:b0:d1:a4:10:8b:d8:63:d4:b5: 2d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:BD:A6:34:49:D7:0E:29:02:FD:17:09:F7:91:2C:0E:27:66:18:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/60df6f8f-1b7f-32e6-8aa3-f7aaf1c2cfb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl X509v3 Authority Key Identifier: keyid:81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:9c:b4:63:fb:b9:ee:9e:c1:04:40:5f:e2:35:3c:a3:81:62: 6f:ea:12:a1:87:30:e2:f1:ff:28:e0:ee:eb:eb:06:f4:19:b0: 76:75:af:f0:a5:e2:d2:50:fc:cc:33:c2:e2:8d:2e:83:07:b2: 6f:4e:e3:e3:8e:3a:e2:ea:d6:f4:32:62:67:62:55:aa:86:ee: 21:cb:ac:c5:82:cb:9f:76:cb:c4:28:58:4b:bf:79:76:ca:59: 7d:b3:4d:91:d3:80:d3:ec:ce:c5:17:1d:35:eb:43:97:f8:80: f2:e2:17:6b:99:10:ff:ff:b0:ec:cc:05:e6:d1:bc:f5:35:fd: e4:01:45:62:64:eb:9c:95:14:e0:54:d6:26:aa:44:6f:85:28: 64:9a:3d:e2:74:9c:57:d1:b2:e4:cd:e4:f1:46:e1:24:8e:48: fc:0f:f2:e2:ca:b6:20:f9:1c:2d:d8:72:c0:b8:bd:7c:f8:30: 9c:09:d0:fd:1b:e6:cc:6f:03:ae:82:ea:b3:d4:cb:b0:de:6c: e1:a8:09:0d:b9:ef:d8:70:f0:80:b3:95:72:d9:10:57:3e:3f: 27:8a:04:a7:90:70:ca:43:6f:42:b5:ea:ee:0c:e0:20:af:25: bc:a3:bd:4f:fc:e9:78:a2:bb:b9:4f:3d:a0:80:f0:07:63:49: 94:2d:1b:b1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtP3HP3ClPlGPNFbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2UxY2E1YTItNjg0NC00NWYzLWIwMWEtY2ZjODg1Mzdk NmEzMB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk ZDE1Njc1NGItNzAxYy00ZDY1LThjYjktMjc4YWI4NzJmNmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAfDbChm61PNFtPtmuY1t6cSzztIlg5/nwLg L2IuqS1rox1qtcItvzAQgI5vw7YOkDYrEwvRRtv5DTOAbSlySwqYrlnDG2OQ5uhk IO55gPQflv/qjh+82O55ZN5mZk/p2wmV7mKDF02b8Nct9xu37Nz1Of4uOfqpmuRO F+GF/Sf7z67zsShmD2s/IAZDuSv4axe/bfGVhkws/gG3goMMivD4UznQPV4WcwRz z7g6V08QAc3L+r2X6H+Qlf7Lyr+pLfSbvEZD/w3ItXgnsWJrFie4nXbBfCC7m7cX EzjYVAcKdXSfYU/RrWjmgTzPeun/cquD6M+w0aQQi9hj1LUtvQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOO9pjRJ1w4pAv0XCfeRLA4nZhhtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFj YTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4ODUzN2Q2YTMvNjBkZjZmOGYtMWI3Zi0z MmU2LThhYTMtZjdhYWYxYzJjZmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2UxY2E1YTItNjg0NC00NWYzLWIw MWEtY2ZjODg1MzdkNmEzL2NlMWNhNWEyLTY4NDQtNDVmMy1iMDFhLWNmYzg4NTM3 ZDZhMy5jcmwwHwYDVR0jBBgwFoAUgWfH6ryZ73INFItKw85aHh5MNZEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFjYTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4 ODUzN2Q2YTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAAEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEOctGP7ue6ewQRAX+I1PKOBYm/qEqGHMOLx/yjg7uvrBvQZsHZ1 r/Cl4tJQ/MwzwuKNLoMHsm9O4+OOOuLq1vQyYmdiVaqG7iHLrMWCy592y8QoWEu/ eXbKWX2zTZHTgNPszsUXHTXrQ5f4gPLiF2uZEP//sOzMBebRvPU1/eQBRWJk65yV FOBU1iaqRG+FKGSaPeJ0nFfRsuTN5PFG4SSOSPwP8uLKtiD5HC3YcsC4vXz4MJwJ 0P0b5sxvA66C6rPUy7DebOGoCQ2579hw8ICzlXLZEFc+PyeKBKeQcMpDb0K16u4M 4CCvJbyjvU/86Xiiu7lPPaCA8AdjSZQtG7E= -----END CERTIFICATE-----Generated at Mon Oct 20 17:35:22 2025 by rpki-client