$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/9051a4c1-e0cc-3c99-b06f-6125fd4e2008.roa File: 9051a4c1-e0cc-3c99-b06f-6125fd4e2008.roa (raw, json) Hash identifier: cJEgse/uGe1B1cJ9fNWa88CjjLtkWAKeB7TDLF7zKsU= Subject key identifier: 17:EA:F0:EB:CA:BF:4E:05:2F:2B:33:D8:D1:23:A7:F9:1D:B6:66:8B Certificate issuer: /CN=e85b04ff-40d9-4bf7-8d38-4de0c54bb785 Certificate serial: 010D0C9F4328584B7DECB535FE89ED67C45B9100 Authority key identifier: D6:BF:E3:FD:2D:90:49:61:AF:E1:E9:09:3F:B8:8F:2C:E4:E3:06:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/9051a4c1-e0cc-3c99-b06f-6125fd4e2008.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 47065 IP address blocks: 2620:33:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:b5:35:fe:89:ed:67:c4:5b:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e85b04ff-40d9-4bf7-8d38-4de0c54bb785 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=23e44c05-f1fc-4c68-9b05-c9c7ce7126e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:41:61:c9:18:09:74:cf:40:a0:0a:11:6d:99: 60:4e:fd:41:60:52:bb:f0:5b:07:c5:e3:65:d8:a4: 48:9f:17:cc:5c:2c:b5:44:9a:27:8d:95:5c:f6:11: 12:a3:32:07:d1:1e:1f:c8:09:2b:6d:83:e7:23:d6: b9:04:0a:cd:dc:27:f2:2f:ee:76:cc:43:c6:c1:32: 31:9b:94:f3:01:ff:82:bb:5e:c5:1a:21:e5:f3:5f: c3:df:b7:e4:ea:e4:f7:21:ed:0d:52:a2:db:a2:ec: d6:92:9e:44:26:6f:33:af:5f:ff:e8:1c:95:8d:7c: 64:03:7c:45:45:21:1b:a1:e3:cc:9c:68:f8:c5:f0: ed:d5:5b:99:58:2b:62:a7:4e:5a:23:5c:29:50:d1: 13:20:58:23:47:e7:73:c2:a8:13:2f:fc:63:15:95: fe:a3:63:7b:15:89:e0:b1:c1:94:71:46:50:b4:5e: 54:8e:e7:c2:b9:65:d0:43:df:e5:67:7c:9d:da:b4: 54:ee:46:e5:16:a5:98:75:23:b0:0c:82:6f:8b:d0: 0f:63:98:c3:3c:ac:36:c0:ef:86:93:bc:12:1a:e2: 83:62:3b:f6:aa:31:8e:e0:1d:a1:c2:06:d2:26:37: eb:14:87:f8:55:06:bc:c1:95:45:ae:f9:4e:ef:63: ae:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:EA:F0:EB:CA:BF:4E:05:2F:2B:33:D8:D1:23:A7:F9:1D:B6:66:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/9051a4c1-e0cc-3c99-b06f-6125fd4e2008.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.crl X509v3 Authority Key Identifier: keyid:D6:BF:E3:FD:2D:90:49:61:AF:E1:E9:09:3F:B8:8F:2C:E4:E3:06:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.cer sbgp-ipAddrBlock: critical IPv6: 2620:33:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:93:f6:d1:9c:79:27:b3:fb:37:a1:e5:61:73:08:6c:3e:eb: 28:0e:51:ab:de:33:bf:92:75:6e:6f:0a:cb:ba:11:48:fb:25: 61:5d:77:e2:88:e6:1d:68:64:52:02:d7:62:bf:ee:8e:0d:15: 7a:0d:69:60:6f:82:9d:0b:b0:6f:de:0e:45:b9:a6:62:aa:39: 5c:24:9c:b8:da:8c:a8:ef:f1:3d:a4:bf:e6:8e:17:cf:1a:8e: 64:20:84:58:91:76:30:d6:2b:d1:1f:10:7d:d8:84:b5:1f:74: 6c:f8:a7:e6:16:67:09:14:d2:d3:22:e3:c6:8e:76:5b:7e:6d: 77:12:04:28:61:04:b1:4b:a7:d5:33:7d:a9:8d:99:08:4e:82: 0f:6d:1b:7c:fd:e0:c0:6b:df:20:71:f0:f7:13:31:6a:89:0e: 0f:ec:66:da:c3:8f:dd:0f:72:c0:1e:f2:2c:05:27:9d:88:0b: 29:95:1c:2a:5c:29:ba:a0:5c:0d:26:ef:9c:a9:7e:c5:fc:64: ce:d0:f8:11:d6:a4:58:9d:7c:ad:d7:65:c4:ac:48:b9:e8:70: 2b:07:e5:28:1e:d8:14:d4:39:b7:3b:07:12:d0:9f:7d:82:3a: 26:85:f5:9f:50:7f:b0:f4:bb:e8:cf:40:67:53:88:ad:7d:50: bf:7d:3e:a6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt97LU1/ontZ8RbkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTg1YjA0ZmYtNDBkOS00YmY3LThkMzgtNGRlMGM1NGJi Nzg1MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk MjNlNDRjMDUtZjFmYy00YzY4LTliMDUtYzljN2NlNzEyNmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUFhyRgJdM9AoAoRbZlgTv1BYFK78FsHxeNl 2KRInxfMXCy1RJonjZVc9hESozIH0R4fyAkrbYPnI9a5BArN3CfyL+52zEPGwTIx m5TzAf+Cu17FGiHl81/D37fk6uT3Ie0NUqLbouzWkp5EJm8zr1//6ByVjXxkA3xF RSEboePMnGj4xfDt1VuZWCtip05aI1wpUNETIFgjR+dzwqgTL/xjFZX+o2N7FYng scGUcUZQtF5UjufCuWXQQ9/lZ3yd2rRU7kblFqWYdSOwDIJvi9APY5jDPKw2wO+G k7wSGuKDYjv2qjGO4B2hwgbSJjfrFIf4VQa8wZVFrvlO72OurwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBfq8OvKv04FLysz2NEjp/kdtmaLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lODVi MDRmZi00MGQ5LTRiZjctOGQzOC00ZGUwYzU0YmI3ODUvOTA1MWE0YzEtZTBjYy0z Yzk5LWIwNmYtNjEyNWZkNGUyMDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTg1YjA0ZmYtNDBkOS00YmY3LThk MzgtNGRlMGM1NGJiNzg1L2U4NWIwNGZmLTQwZDktNGJmNy04ZDM4LTRkZTBjNTRi Yjc4NS5jcmwwHwYDVR0jBBgwFoAU1r/j/S2QSWGv4ekJP7iPLOTjBlowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lODViMDRmZi00MGQ5LTRiZjctOGQzOC00ZGUw YzU0YmI3ODUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAM8AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAKT9tGceSez+zeh5WFzCGw+6ygOUaveM7+SdW5vCsu6EUj7JWFd d+KI5h1oZFIC12K/7o4NFXoNaWBvgp0LsG/eDkW5pmKqOVwknLjajKjv8T2kv+aO F88ajmQghFiRdjDWK9EfEH3YhLUfdGz4p+YWZwkU0tMi48aOdlt+bXcSBChhBLFL p9UzfamNmQhOgg9tG3z94MBr3yBx8PcTMWqJDg/sZtrDj90PcsAe8iwFJ52ICymV HCpcKbqgXA0m75ypfsX8ZM7Q+BHWpFidfK3XZcSsSLnocCsH5Sge2BTUObc7BxLQ n32COiaF9Z9Qf7D0u+jPQGdTiK19UL99PqY= -----END CERTIFICATE-----Generated at Mon Oct 20 18:46:44 2025 by rpki-client