$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/0a59adf1-4ce0-3512-b604-484c769f0384.roa File: 0a59adf1-4ce0-3512-b604-484c769f0384.roa (raw, json) Hash identifier: 1lZ2KeVzoN3Htnly3LdpKGBcRJN+N/BdCC6Yg3J+HJs= Subject key identifier: E8:81:A0:B3:11:FE:8B:A0:E0:57:DC:3D:E8:C4:56:3C:47:6C:2D:4A Certificate issuer: /CN=6459964e-cb44-4be5-88da-03fac554e95c Certificate serial: 010D0C9F4328584B76F2557EADD1ADEEC03E6FC0 Authority key identifier: 2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/0a59adf1-4ce0-3512-b604-484c769f0384.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 32771 IP address blocks: 2620:111:800d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:55:7e:ad:d1:ad:ee:c0:3e:6f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6459964e-cb44-4be5-88da-03fac554e95c Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=527d4484-1f01-4615-9c9f-d7b098c3e351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:47:96:2a:8e:d2:f2:c0:d8:26:e9:c5:7a:76: 3e:f4:e7:31:ff:7f:08:fd:96:11:a8:8b:6a:62:5b: 7e:cc:41:7c:2f:69:8a:cd:71:cc:ce:99:f1:6d:dc: 6d:2d:9a:ec:e2:ae:e5:7c:18:d4:9a:50:fc:7e:b7: 2d:16:d3:01:a6:61:3a:fd:55:95:53:82:44:b6:53: 06:be:b6:63:84:07:29:69:f4:84:e4:35:72:4e:c7: 3a:2e:a3:ac:d0:30:8b:44:70:ff:08:93:8b:e7:66: 05:d1:25:3a:e5:a8:7a:c4:74:e3:2f:d4:9a:9c:0a: 07:d9:c0:b2:72:ae:4c:8d:d4:78:e6:95:fe:d4:ad: 18:52:d4:47:10:7e:ad:93:d0:72:3f:74:0a:8d:c1: 62:69:11:6f:69:d3:5a:d1:47:48:97:5d:8a:0e:d2: db:66:c3:4a:68:d9:10:65:d6:00:bd:9b:b8:5a:73: 50:34:2b:26:98:40:fe:ab:e7:f2:8f:b5:40:16:d1: d6:4a:2e:76:41:58:6b:b5:9a:00:de:ab:09:a7:8a: 95:89:d0:e3:ee:12:b2:f3:a1:d6:a0:75:98:f5:fb: b6:ea:c0:cb:66:8b:d1:e4:6d:79:b0:68:8c:c7:38: 97:1e:10:f9:63:93:a9:53:a9:ff:fa:4c:a1:1e:13: 14:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:81:A0:B3:11:FE:8B:A0:E0:57:DC:3D:E8:C4:56:3C:47:6C:2D:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/0a59adf1-4ce0-3512-b604-484c769f0384.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl X509v3 Authority Key Identifier: keyid:2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer sbgp-ipAddrBlock: critical IPv6: 2620:111:800d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:1c:49:82:7a:75:17:bd:85:51:6c:ca:51:4f:f3:2b:28:41: 03:2f:54:5c:2d:97:1e:2e:4c:90:06:64:8c:2b:b7:6e:29:e9: 45:ce:6a:27:c8:dd:03:ef:42:5c:19:d9:46:e3:fb:a5:ce:f3: 2f:64:82:e8:84:37:56:3e:99:ea:dc:b1:98:5a:81:fc:28:49: d5:35:25:82:98:ac:b1:96:d9:57:d7:82:d8:1c:de:c9:09:bb: 35:ce:ad:24:a7:26:1a:e8:cb:61:40:c7:40:18:08:7a:ea:3f: 16:e0:8a:d0:ab:34:3c:35:f8:15:d1:94:12:42:9f:4d:da:70: 82:d0:3d:a2:bd:63:fb:f7:a0:04:c7:f6:6c:6b:72:c1:3e:fd: 5a:13:67:7f:d9:33:ed:a8:26:a9:40:26:bb:a3:e7:9d:11:36: 14:90:71:4a:e0:62:e0:04:e5:00:4d:61:4a:68:33:fe:d3:c8: 12:d7:bb:d7:20:50:d3:7b:06:c0:b0:67:96:63:3e:ae:d8:9e: 8d:e4:b6:ad:19:fd:a3:d8:7d:41:b7:62:77:62:a4:b0:0c:79: 35:09:36:91:9f:2b:ff:fd:86:a6:cd:b7:04:7b:0f:3c:b1:ef: 06:f5:50:28:d2:87:9f:87:b1:e2:da:29:3c:8e:ed:f4:34:79: a4:da:3d:f0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt28lV+rdGt7sA+b8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQ1OTk2NGUtY2I0NC00YmU1LTg4ZGEtMDNmYWM1NTRl OTVjMB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NTI3ZDQ0ODQtMWYwMS00NjE1LTljOWYtZDdiMDk4YzNlMzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0eWKo7S8sDYJunFenY+9Ocx/38I/ZYRqItq Ylt+zEF8L2mKzXHMzpnxbdxtLZrs4q7lfBjUmlD8frctFtMBpmE6/VWVU4JEtlMG vrZjhAcpafSE5DVyTsc6LqOs0DCLRHD/CJOL52YF0SU65ah6xHTjL9SanAoH2cCy cq5MjdR45pX+1K0YUtRHEH6tk9ByP3QKjcFiaRFvadNa0UdIl12KDtLbZsNKaNkQ ZdYAvZu4WnNQNCsmmED+q+fyj7VAFtHWSi52QVhrtZoA3qsJp4qVidDj7hKy86HW oHWY9fu26sDLZovR5G15sGiMxziXHhD5Y5OpU6n/+kyhHhMUzQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOiBoLMR/oug4FfcPejEVjxHbC1KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5 OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2ZhYzU1NGU5NWMvMGE1OWFkZjEtNGNlMC0z NTEyLWI2MDQtNDg0Yzc2OWYwMzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjQ1OTk2NGUtY2I0NC00YmU1LTg4 ZGEtMDNmYWM1NTRlOTVjLzY0NTk5NjRlLWNiNDQtNGJlNS04OGRhLTAzZmFjNTU0 ZTk1Yy5jcmwwHwYDVR0jBBgwFoAUKt7spHKs8deFfsVG4i81dJj6CmIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2Zh YzU1NGU5NWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABEYAN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIccSYJ6dRe9hVFsylFP8ysoQQMvVFwtlx4uTJAGZIwrt24p6UXO aifI3QPvQlwZ2Ubj+6XO8y9kguiEN1Y+mercsZhagfwoSdU1JYKYrLGW2VfXgtgc 3skJuzXOrSSnJhroy2FAx0AYCHrqPxbgitCrNDw1+BXRlBJCn03acILQPaK9Y/v3 oATH9mxrcsE+/VoTZ3/ZM+2oJqlAJruj550RNhSQcUrgYuAE5QBNYUpoM/7TyBLX u9cgUNN7BsCwZ5ZjPq7Yno3ktq0Z/aPYfUG3YndipLAMeTUJNpGfK//9hqbNtwR7 Dzyx7wb1UCjSh5+HseLaKTyO7fQ0eaTaPfA= -----END CERTIFICATE-----Generated at Tue Oct 21 03:05:30 2025 by rpki-client