$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/d68caa82-7ee3-3b57-a8f9-90262d3791f7.roa File: d68caa82-7ee3-3b57-a8f9-90262d3791f7.roa (raw, json) Hash identifier: b/+PC76dgNdqzge99nXmJ78Smrm6CYYzMxu47uAVrFM= Subject key identifier: AD:C8:64:8C:71:F0:D0:EB:61:A2:6D:02:CF:EE:81:E0:AD:29:08:13 Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Certificate serial: 010D0C9F4328584B8EACEC3982F7F4B2E47F1040 Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/d68caa82-7ee3-3b57-a8f9-90262d3791f7.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 21743 IP address blocks: 2620:b9:e000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:ec:39:82:f7:f4:b2:e4:7f:10:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=9877f655-56ef-4047-9dd4-8865eeec8407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:45:56:3c:3b:bd:d2:22:61:ab:47:1f:33:4b: 17:32:fb:16:42:76:ad:c3:dc:92:ca:15:42:48:c9: 24:c6:e3:bf:8d:04:fa:fc:d7:15:96:a3:36:af:17: 88:7f:a1:be:1c:8f:51:37:a5:bf:90:56:1a:24:85: c5:73:9a:e6:0b:de:35:c0:a0:4b:cb:db:61:c4:e3: 79:be:3c:a9:d2:3d:fa:49:58:97:1e:61:1f:26:0b: d6:23:77:15:ba:b7:9f:ec:06:2b:52:8e:45:66:f6: 33:a5:e5:d4:83:ea:5d:41:e0:10:e8:4d:76:ed:06: b8:46:59:cb:02:a2:69:a6:2f:5a:e0:ab:e7:a9:5b: 51:b3:27:d0:5c:b5:34:dd:86:a0:39:df:d6:a7:00: fc:2f:2e:3b:db:50:66:62:21:f1:eb:fa:9f:9f:bf: dc:45:64:14:9f:aa:d6:17:32:93:06:96:d2:07:21: de:4e:07:3b:c1:94:7f:05:cb:a4:e7:54:27:2e:65: 38:0a:4b:b2:56:42:43:63:c6:42:b9:3e:8b:f4:a9: 7b:08:c3:fe:42:c1:4e:90:46:04:ad:0c:e5:2a:1c: 59:30:4c:36:02:93:72:a5:1f:fa:01:78:c9:cd:ef: 9b:eb:64:ba:6b:b6:8d:c8:9f:2b:f7:be:7b:c6:0d: 87:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:C8:64:8C:71:F0:D0:EB:61:A2:6D:02:CF:EE:81:E0:AD:29:08:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/d68caa82-7ee3-3b57-a8f9-90262d3791f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl X509v3 Authority Key Identifier: keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer sbgp-ipAddrBlock: critical IPv6: 2620:b9:e000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:34:80:ac:cc:75:d1:1c:dc:cf:ce:d9:f4:63:51:c1:43:e9: 20:89:d3:61:30:6a:4b:8c:b4:d0:97:21:fd:cc:39:c2:90:60: ac:35:86:e4:06:8a:7b:96:e3:ad:9d:3d:a6:42:6f:be:bc:6c: 6d:9a:28:b3:53:a9:9f:d0:36:6b:80:58:cc:ec:2e:2a:a9:2c: 92:e0:dc:47:1b:e2:6f:08:93:04:e9:46:06:a3:17:cc:21:c7: 2b:06:ca:b6:e6:68:92:ef:c1:15:35:da:92:6e:f3:91:57:c8: c9:2f:55:03:36:4f:dc:b0:58:fd:03:fb:1b:70:3a:4c:a5:32: 65:2f:1c:63:b6:d8:4c:72:6d:02:fe:26:29:d3:14:a7:22:39: cc:cf:21:e9:3e:6e:75:1a:d1:ac:33:69:ea:57:8b:cf:1a:b2: 00:6a:47:b6:ea:a5:14:9f:03:26:ad:1f:5c:61:74:48:e3:93: 1c:78:61:6a:2c:d8:47:cf:e8:0c:1a:0b:ef:c3:5e:19:4d:d7: de:e1:23:53:c7:a8:43:9f:8f:c9:19:b5:5a:55:07:87:1b:22: cb:cb:a4:f5:b5:c8:dc:62:69:fc:ad:c6:d3:85:ac:97:df:3e: 65:70:04:ca:a8:89:c1:c5:33:52:1f:96:bf:12:db:00:70:4c: d1:94:c0:fb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuOrOw5gvf0suR/EEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk M2RmMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk OTg3N2Y2NTUtNTZlZi00MDQ3LTlkZDQtODg2NWVlZWM4NDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA50VWPDu90iJhq0cfM0sXMvsWQnatw9ySyhVC SMkkxuO/jQT6/NcVlqM2rxeIf6G+HI9RN6W/kFYaJIXFc5rmC941wKBLy9thxON5 vjyp0j36SViXHmEfJgvWI3cVuref7AYrUo5FZvYzpeXUg+pdQeAQ6E127Qa4RlnL AqJppi9a4KvnqVtRsyfQXLU03YagOd/WpwD8Ly4721BmYiHx6/qfn7/cRWQUn6rW FzKTBpbSByHeTgc7wZR/Bcuk51QnLmU4CkuyVkJDY8ZCuT6L9Kl7CMP+QsFOkEYE rQzlKhxZMEw2ApNypR/6AXjJze+b62S6a7aNyJ8r9757xg2HcwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK3IZIxx8NDrYaJtAs/ugeCtKQgTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvZDY4Y2FhODItN2VlMy0z YjU3LWE4ZjktOTAyNjJkMzc5MWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5 MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1 ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx MzBjNWQzZGYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAueAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACs0gKzMddEc3M/O2fRjUcFD6SCJ02EwakuMtNCXIf3MOcKQYKw1 huQGinuW462dPaZCb768bG2aKLNTqZ/QNmuAWMzsLiqpLJLg3Ecb4m8IkwTpRgaj F8whxysGyrbmaJLvwRU12pJu85FXyMkvVQM2T9ywWP0D+xtwOkylMmUvHGO22Exy bQL+JinTFKciOczPIek+bnUa0awzaepXi88asgBqR7bqpRSfAyatH1xhdEjjkxx4 YWos2EfP6AwaC+/DXhlN197hI1PHqEOfj8kZtVpVB4cbIsvLpPW1yNxiafytxtOF rJffPmVwBMqoicHFM1Iflr8S2wBwTNGUwPs= -----END CERTIFICATE-----Generated at Mon Oct 20 05:05:53 2025 by rpki-client