$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/556ab474-b1fc-3b96-bfc3-a128608ae64e.roa File: 556ab474-b1fc-3b96-bfc3-a128608ae64e.roa (raw, json) Hash identifier: evc1L1QcLvKM4D2t20RC9AT8JiQMKinSLjAy/5aKeE8= Subject key identifier: 33:61:5F:69:C0:B2:AE:40:32:BE:5A:2A:2A:E9:C8:A2:9F:8F:54:13 Certificate issuer: /CN=6459964e-cb44-4be5-88da-03fac554e95c Certificate serial: 010D0C9F4328584B76F255B1A12427840F48D000 Authority key identifier: 2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/556ab474-b1fc-3b96-bfc3-a128608ae64e.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 32771 IP address blocks: 2620:111:800f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:55:b1:a1:24:27:84:0f:48:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6459964e-cb44-4be5-88da-03fac554e95c Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=d0b70ec1-9a2b-49f4-b599-a7ee9cdb42e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a3:4d:94:dc:b9:d1:10:49:0a:1a:04:08:6b: 65:a0:1e:d9:86:5e:28:88:6c:72:21:c2:32:95:e0: 8a:26:c9:3e:74:ae:41:79:0b:20:c9:e8:e8:90:6a: af:6f:7a:e2:c0:48:6e:8a:a6:5b:16:0f:af:68:f2: 0e:4d:7e:6f:f1:b1:12:90:70:a2:d3:57:20:36:14: 6b:8f:fa:27:98:22:c6:60:47:bd:48:45:20:46:b3: f8:8d:92:24:c4:3e:5c:27:75:cb:b2:dd:f5:68:71: 06:11:2d:b3:50:bd:0b:af:21:d8:8f:4a:8b:e2:77: 2c:5a:60:3c:c9:42:f8:6a:61:f9:be:b5:87:ec:db: 43:34:2e:b0:93:8a:59:c1:5d:00:62:2e:5e:9e:fc: f0:49:6b:d4:f7:8f:60:c8:37:d7:f5:33:d5:6c:d2: b2:9b:19:17:74:e8:7a:e6:83:9d:c8:08:48:77:0d: 59:5e:17:fa:bd:7c:99:ec:59:84:45:41:2e:58:d3: 72:7d:43:52:23:18:dc:e8:68:13:25:47:aa:14:ac: 1c:04:9d:74:2c:64:42:54:0a:1e:5c:f6:a5:01:dc: 6d:d5:6c:cb:7e:a3:5b:99:ca:17:ae:ad:b5:e3:97: 2c:48:13:6e:e8:ef:e8:8b:1c:cb:43:a5:71:96:15: 68:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:61:5F:69:C0:B2:AE:40:32:BE:5A:2A:2A:E9:C8:A2:9F:8F:54:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/556ab474-b1fc-3b96-bfc3-a128608ae64e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl X509v3 Authority Key Identifier: keyid:2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer sbgp-ipAddrBlock: critical IPv6: 2620:111:800f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:29:2c:d8:61:39:b1:21:58:11:35:a6:c8:a6:fd:a7:d9:74: 3e:20:c6:bf:ee:2c:5d:cd:0d:7d:fa:1f:1a:81:f1:5d:22:d3: 33:a8:fa:3e:8c:62:e6:e7:a7:f4:d2:dd:c3:15:49:3a:fd:1f: 81:30:61:a7:e2:70:98:bd:a1:a6:3a:a4:73:5c:c9:7a:22:13: ec:3b:83:82:75:6b:2c:d9:2b:11:63:d9:22:0b:a9:f6:69:2f: 2e:ec:b9:a0:1e:06:a5:02:59:8e:88:6c:e0:8f:38:45:67:f5: 8f:ea:fc:29:74:92:a8:de:54:d9:b6:2c:40:70:25:7d:e0:72: 78:b0:9c:3d:c6:33:e1:fc:00:e1:bb:16:b2:9b:b1:1d:cb:1a: 3c:b9:76:9b:ee:2e:8a:12:87:c8:4b:de:9e:a1:90:ec:c1:dd: 58:c2:e2:79:27:7e:8a:e0:f4:bb:40:a7:34:86:a2:08:37:29: ee:f8:70:6d:5a:1b:80:74:f4:7a:28:e2:3d:ef:f6:5c:65:07: d5:ea:dc:46:40:70:14:06:5b:48:bf:78:03:d6:c8:ac:10:78: 0e:1b:ab:9e:d7:21:68:29:62:88:63:dd:f9:95:2f:d0:04:ce: 93:2a:3f:e3:91:be:39:0e:76:a7:45:66:2a:5e:0d:9a:1a:c7: 98:ab:98:37 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt28lWxoSQnhA9I0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQ1OTk2NGUtY2I0NC00YmU1LTg4ZGEtMDNmYWM1NTRl OTVjMB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk ZDBiNzBlYzEtOWEyYi00OWY0LWI1OTktYTdlZTljZGI0MmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaNNlNy50RBJChoECGtloB7Zhl4oiGxyIcIy leCKJsk+dK5BeQsgyejokGqvb3riwEhuiqZbFg+vaPIOTX5v8bESkHCi01cgNhRr j/onmCLGYEe9SEUgRrP4jZIkxD5cJ3XLst31aHEGES2zUL0LryHYj0qL4ncsWmA8 yUL4amH5vrWH7NtDNC6wk4pZwV0AYi5envzwSWvU949gyDfX9TPVbNKymxkXdOh6 5oOdyAhIdw1ZXhf6vXyZ7FmERUEuWNNyfUNSIxjc6GgTJUeqFKwcBJ10LGRCVAoe XPalAdxt1WzLfqNbmcoXrq2145csSBNu6O/oixzLQ6VxlhVoMwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDNhX2nAsq5AMr5aKirpyKKfj1QTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5 OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2ZhYzU1NGU5NWMvNTU2YWI0NzQtYjFmYy0z Yjk2LWJmYzMtYTEyODYwOGFlNjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjQ1OTk2NGUtY2I0NC00YmU1LTg4 ZGEtMDNmYWM1NTRlOTVjLzY0NTk5NjRlLWNiNDQtNGJlNS04OGRhLTAzZmFjNTU0 ZTk1Yy5jcmwwHwYDVR0jBBgwFoAUKt7spHKs8deFfsVG4i81dJj6CmIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2Zh YzU1NGU5NWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABEYAP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB4pLNhhObEhWBE1psim/afZdD4gxr/uLF3NDX36HxqB8V0i0zOo +j6MYubnp/TS3cMVSTr9H4EwYaficJi9oaY6pHNcyXoiE+w7g4J1ayzZKxFj2SIL qfZpLy7suaAeBqUCWY6IbOCPOEVn9Y/q/Cl0kqjeVNm2LEBwJX3gcniwnD3GM+H8 AOG7FrKbsR3LGjy5dpvuLooSh8hL3p6hkOzB3VjC4nknforg9LtApzSGogg3Ke74 cG1aG4B09Hoo4j3v9lxlB9Xq3EZAcBQGW0i/eAPWyKwQeA4bq57XIWgpYohj3fmV L9AEzpMqP+ORvjkOdqdFZipeDZoax5irmDc= -----END CERTIFICATE-----Generated at Tue Oct 21 05:32:26 2025 by rpki-client