$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/99c569cb-49e3-3b55-8f14-63e32d1466d6.roa File: 99c569cb-49e3-3b55-8f14-63e32d1466d6.roa (raw, json) Hash identifier: T58+n/13aQ5ghBKZaXS9F8xW96yAK5EfQrI/HdbSn3c= Subject key identifier: 40:65:F4:1C:4A:08:35:0A:B6:73:78:40:DA:8E:AE:5E:34:AD:CB:89 Certificate issuer: /CN=6459964e-cb44-4be5-88da-03fac554e95c Certificate serial: 010D0C9F4328584B715CB6F9E3A8C39CEB4A6A00 Authority key identifier: 2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/99c569cb-49e3-3b55-8f14-63e32d1466d6.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 32771 IP address blocks: 2620:111:800b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:b6:f9:e3:a8:c3:9c:eb:4a:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6459964e-cb44-4be5-88da-03fac554e95c Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=baeb77c5-c282-4eab-b301-14ca164cf604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fe:5d:19:8b:bc:78:b6:7b:29:66:9b:d3:23: 82:89:91:c3:4a:5b:23:39:ad:78:89:ef:03:26:43: fc:14:a2:6d:d7:61:8e:68:b9:1d:f5:b8:75:81:ba: bf:0b:6b:40:fd:a4:8c:f5:29:be:7e:d9:64:89:57: 20:77:7b:12:de:f3:3b:0b:c2:90:d4:fb:48:6f:53: e1:43:40:f3:da:15:18:9d:d3:e0:a2:ad:90:cb:0a: 2e:3e:3b:33:bc:ed:d4:c0:41:5b:bc:c3:1c:9d:d0: f5:92:13:c2:26:73:e0:d1:d2:d6:55:81:b2:49:13: 86:07:ae:b0:38:2b:44:0f:8f:60:51:f5:1a:c4:3c: 4d:fc:48:99:90:30:42:52:0f:fe:28:e2:c8:52:2f: 0f:8d:cb:97:3d:03:84:d4:27:8b:67:ca:df:21:a7: ab:9b:22:df:2e:58:47:21:09:e8:6b:54:72:16:e9: b2:cd:a9:f8:22:6d:68:81:be:8e:23:3d:4c:a5:81: 6e:23:1d:fc:ec:f2:b2:77:1c:0c:30:75:82:ed:4f: 00:fd:26:90:dd:b3:43:bf:34:e6:ce:a2:97:35:88: 3d:5a:43:d8:a6:c0:6d:bb:e6:1a:74:77:b0:cf:02: d2:9c:21:d2:f2:75:1a:b2:79:37:6e:c9:66:a1:41: 51:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:65:F4:1C:4A:08:35:0A:B6:73:78:40:DA:8E:AE:5E:34:AD:CB:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/99c569cb-49e3-3b55-8f14-63e32d1466d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl X509v3 Authority Key Identifier: keyid:2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer sbgp-ipAddrBlock: critical IPv6: 2620:111:800b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:6a:0e:44:4f:04:38:dc:7d:35:64:21:a2:9f:1d:9f:6f:46: 34:43:0f:e6:ac:8e:95:a1:7d:5b:d4:2e:1d:5b:48:58:82:41: f0:d8:dc:bf:d7:31:9b:0b:d8:e4:e2:76:00:24:15:07:43:90: 92:be:91:9f:70:f9:2e:59:f7:e9:0b:38:eb:c8:fb:6b:05:db: 28:3f:f2:28:83:32:42:28:f3:f4:1c:81:5c:54:14:89:7a:9e: f4:5b:33:58:53:0c:6b:26:52:6c:c6:e4:5a:58:74:65:36:1b: 1b:c7:1d:c1:ad:3f:1a:3b:7a:e2:29:5f:e4:ea:94:5e:d6:c5: 88:31:d1:ff:c3:d1:7e:26:f2:1d:74:ed:2c:27:81:dc:3b:f6: 1f:cc:96:c9:41:6a:00:d3:85:64:ca:e9:33:c9:5c:44:e9:b6: 43:5c:97:16:94:2f:6f:cb:ed:d2:26:14:90:7e:c9:1e:5d:35: af:14:06:51:2e:19:aa:9d:55:42:68:1b:a3:30:51:b8:3e:a8: b7:e6:2c:33:f9:cc:32:cc:45:e0:37:3f:e4:4a:e7:17:82:4e: 84:d8:0f:7e:29:d9:4b:41:ea:73:63:35:29:c8:b0:a4:72:16: 07:f3:8a:ba:06:81:f1:79:13:8d:a2:74:c7:67:02:38:c4:2a: 0d:bd:d8:df -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtxXLb546jDnOtKagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQ1OTk2NGUtY2I0NC00YmU1LTg4ZGEtMDNmYWM1NTRl OTVjMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YmFlYjc3YzUtYzI4Mi00ZWFiLWIzMDEtMTRjYTE2NGNmNjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/5dGYu8eLZ7KWab0yOCiZHDSlsjOa14ie8D JkP8FKJt12GOaLkd9bh1gbq/C2tA/aSM9Sm+ftlkiVcgd3sS3vM7C8KQ1PtIb1Ph Q0Dz2hUYndPgoq2QywouPjszvO3UwEFbvMMcndD1khPCJnPg0dLWVYGySROGB66w OCtED49gUfUaxDxN/EiZkDBCUg/+KOLIUi8PjcuXPQOE1CeLZ8rfIaermyLfLlhH IQnoa1RyFumyzan4Im1ogb6OIz1MpYFuIx387PKydxwMMHWC7U8A/SaQ3bNDvzTm zqKXNYg9WkPYpsBtu+YadHewzwLSnCHS8nUasnk3bslmoUFRFwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEBl9BxKCDUKtnN4QNqOrl40rcuJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5 OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2ZhYzU1NGU5NWMvOTljNTY5Y2ItNDllMy0z YjU1LThmMTQtNjNlMzJkMTQ2NmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjQ1OTk2NGUtY2I0NC00YmU1LTg4 ZGEtMDNmYWM1NTRlOTVjLzY0NTk5NjRlLWNiNDQtNGJlNS04OGRhLTAzZmFjNTU0 ZTk1Yy5jcmwwHwYDVR0jBBgwFoAUKt7spHKs8deFfsVG4i81dJj6CmIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2Zh YzU1NGU5NWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABEYAL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC5qDkRPBDjcfTVkIaKfHZ9vRjRDD+asjpWhfVvULh1bSFiCQfDY 3L/XMZsL2OTidgAkFQdDkJK+kZ9w+S5Z9+kLOOvI+2sF2yg/8iiDMkIo8/QcgVxU FIl6nvRbM1hTDGsmUmzG5FpYdGU2GxvHHcGtPxo7euIpX+TqlF7WxYgx0f/D0X4m 8h107Swngdw79h/MlslBagDThWTK6TPJXETptkNclxaUL2/L7dImFJB+yR5dNa8U BlEuGaqdVUJoG6MwUbg+qLfmLDP5zDLMReA3P+RK5xeCToTYD34p2UtB6nNjNSnI sKRyFgfziroGgfF5E42idMdnAjjEKg292N8= -----END CERTIFICATE-----Generated at Tue Oct 21 03:05:43 2025 by rpki-client