$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/069cdb94-57ea-3984-bc50-ad1a2d5591b6.roa File: 069cdb94-57ea-3984-bc50-ad1a2d5591b6.roa (raw, json) Hash identifier: TS8JypCb6KwjHxz+yqFjLqcaU2AcMbQn/iryzQZCUx4= Subject key identifier: 1C:70:49:2D:D7:ED:A2:D2:7F:EA:2E:9B:C9:DC:76:49:8C:0A:A8:D8 Certificate issuer: /CN=6459964e-cb44-4be5-88da-03fac554e95c Certificate serial: 010D0C9F4328584B715CB6E8815F86617DFE9B00 Authority key identifier: 2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/069cdb94-57ea-3984-bc50-ad1a2d5591b6.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 32771 IP address blocks: 2620:111:800a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:b6:e8:81:5f:86:61:7d:fe:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6459964e-cb44-4be5-88da-03fac554e95c Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=5e33709a-3a74-4695-ac7b-498fabe8af0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cb:ea:a9:c5:e2:93:ce:f2:68:4d:be:34:52: 3c:b8:00:2c:af:38:e6:50:52:cf:ba:78:f0:55:88: d3:1f:35:34:e9:ef:4e:54:ce:35:9f:12:85:17:cb: ba:6b:b6:a3:0c:b2:52:fb:5d:b6:90:8a:fa:16:87: 0f:00:1f:8c:7c:53:74:aa:19:25:6b:d2:3f:70:ad: 29:02:4b:b6:e0:61:53:f7:c9:05:5e:48:b1:88:64: 2f:e4:e1:ab:34:fc:ce:e3:9e:e4:79:ac:5b:2b:fb: 7e:8c:1d:cc:e0:0b:47:e4:64:40:69:da:5d:18:a0: 52:19:0f:b8:c5:4d:44:8a:72:88:ce:79:c5:05:d5: b0:8f:2f:7b:3f:8c:c9:fa:b0:4b:11:2d:48:c7:1a: 1b:46:fd:52:25:e0:96:e4:b4:51:57:8e:62:3c:0a: 7b:53:77:34:cf:a5:b3:15:71:e5:03:ec:3e:db:fd: bf:58:22:8b:8c:3d:63:2c:1b:78:66:08:e2:3e:29: 4e:37:59:6d:ac:84:d2:23:20:d6:ca:b8:cd:67:6e: 70:5b:61:dd:0d:5c:35:38:ff:a7:5e:32:70:eb:95: 9f:00:3d:c5:04:31:34:8c:00:13:41:26:5a:2b:79: 46:f8:aa:75:fa:77:83:57:61:ee:97:56:2e:70:06: 94:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:70:49:2D:D7:ED:A2:D2:7F:EA:2E:9B:C9:DC:76:49:8C:0A:A8:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/069cdb94-57ea-3984-bc50-ad1a2d5591b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl X509v3 Authority Key Identifier: keyid:2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer sbgp-ipAddrBlock: critical IPv6: 2620:111:800a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:ce:a7:47:46:9a:4c:a9:ac:96:b8:0e:81:db:1c:af:07:ef: da:47:18:4d:c4:f4:3f:b4:0d:63:34:6b:42:c5:37:73:ad:9c: be:4b:88:c4:e1:ac:93:f8:03:67:46:90:f2:ed:ad:58:71:74: bb:55:02:b3:4f:58:bb:e2:38:ae:10:02:c5:87:f4:12:c7:5e: 9a:f2:18:fd:f5:5d:05:ca:ea:33:35:fc:3e:f0:36:e7:75:cb: 6f:eb:df:b2:18:67:77:bd:40:67:cf:e1:18:1b:c6:73:53:6b: ed:25:1e:94:7f:d2:ae:65:01:9e:90:bb:b2:7f:eb:90:ed:51: fc:ea:b2:43:64:0e:e7:2f:17:9d:0e:7b:ae:31:d7:60:86:e7: 02:35:fa:21:86:04:bb:c8:25:d0:69:8b:2f:82:b9:7d:f9:d5: 8a:fe:a8:1a:bc:20:f0:e4:10:97:fc:bc:29:1c:ec:a7:c6:dc: 18:6c:0b:88:e7:53:af:54:5d:a4:cc:fb:23:4e:99:85:04:7e: 27:d2:da:b9:21:94:5c:77:67:67:6e:9d:fa:d8:c2:98:55:11: 36:bc:cf:02:2f:4b:ff:d6:cd:d9:cb:62:20:4a:3a:00:3a:71: 08:a0:fb:6f:6f:f0:5b:b7:6a:f8:c7:30:e4:d4:96:c5:ba:b3: 60:73:12:d7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtxXLbogV+GYX3+mwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQ1OTk2NGUtY2I0NC00YmU1LTg4ZGEtMDNmYWM1NTRl OTVjMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NWUzMzcwOWEtM2E3NC00Njk1LWFjN2ItNDk4ZmFiZThhZjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcvqqcXik87yaE2+NFI8uAAsrzjmUFLPunjw VYjTHzU06e9OVM41nxKFF8u6a7ajDLJS+122kIr6FocPAB+MfFN0qhkla9I/cK0p Aku24GFT98kFXkixiGQv5OGrNPzO457keaxbK/t+jB3M4AtH5GRAadpdGKBSGQ+4 xU1EinKIznnFBdWwjy97P4zJ+rBLES1IxxobRv1SJeCW5LRRV45iPAp7U3c0z6Wz FXHlA+w+2/2/WCKLjD1jLBt4ZgjiPilON1ltrITSIyDWyrjNZ25wW2HdDVw1OP+n XjJw65WfAD3FBDE0jAATQSZaK3lG+Kp1+neDV2Hul1YucAaUYwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBxwSS3X7aLSf+oum8ncdkmMCqjYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5 OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2ZhYzU1NGU5NWMvMDY5Y2RiOTQtNTdlYS0z OTg0LWJjNTAtYWQxYTJkNTU5MWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjQ1OTk2NGUtY2I0NC00YmU1LTg4 ZGEtMDNmYWM1NTRlOTVjLzY0NTk5NjRlLWNiNDQtNGJlNS04OGRhLTAzZmFjNTU0 ZTk1Yy5jcmwwHwYDVR0jBBgwFoAUKt7spHKs8deFfsVG4i81dJj6CmIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2Zh YzU1NGU5NWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABEYAK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ/Op0dGmkyprJa4DoHbHK8H79pHGE3E9D+0DWM0a0LFN3OtnL5L iMThrJP4A2dGkPLtrVhxdLtVArNPWLviOK4QAsWH9BLHXpryGP31XQXK6jM1/D7w Nud1y2/r37IYZ3e9QGfP4RgbxnNTa+0lHpR/0q5lAZ6Qu7J/65DtUfzqskNkDucv F50Oe64x12CG5wI1+iGGBLvIJdBpiy+CuX351Yr+qBq8IPDkEJf8vCkc7KfG3Bhs C4jnU69UXaTM+yNOmYUEfifS2rkhlFx3Z2dunfrYwphVETa8zwIvS//WzdnLYiBK OgA6cQig+29v8Fu3avjHMOTUlsW6s2BzEtc= -----END CERTIFICATE-----Generated at Mon Oct 20 22:21:41 2025 by rpki-client