$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16d71376-e8fa-4e6c-bbf4-978708d88645/2114c8a0-aefd-3d2b-9228-3a7ae7acedad.roa File: 2114c8a0-aefd-3d2b-9228-3a7ae7acedad.roa (raw, json) Hash identifier: cSBntAWG7/GsMdvj2t4ljs3yGbTJEqtMlJL4u8PQIxY= Subject key identifier: 4F:D8:5C:7C:81:2A:CA:11:24:46:BE:F6:63:69:85:E7:27:9F:83:13 Certificate issuer: /CN=16d71376-e8fa-4e6c-bbf4-978708d88645 Certificate serial: 010D0C9F4328584B8A19BD8E6D0DAC9BD280D880 Authority key identifier: 4F:1F:74:1C:B5:05:7E:10:C8:53:1F:E1:B4:D5:44:29:C1:44:B0:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16d71376-e8fa-4e6c-bbf4-978708d88645.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16d71376-e8fa-4e6c-bbf4-978708d88645/2114c8a0-aefd-3d2b-9228-3a7ae7acedad.roa Signing time: Thu 16 Oct 2025 09:41:07 +0000 ROA not before: Thu 16 Oct 2025 09:41:07 +0000 ROA not after: Wed 14 Jan 2026 10:41:07 +0000 asID: 401311 IP address blocks: 2620:cd:2000::/48 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16d71376-e8fa-4e6c-bbf4-978708d88645/16d71376-e8fa-4e6c-bbf4-978708d88645.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16d71376-e8fa-4e6c-bbf4-978708d88645/16d71376-e8fa-4e6c-bbf4-978708d88645.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16d71376-e8fa-4e6c-bbf4-978708d88645.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8a:19:bd:8e:6d:0d:ac:9b:d2:80:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16d71376-e8fa-4e6c-bbf4-978708d88645 Validity Not Before: Oct 16 09:41:07 2025 GMT Not After : Jan 14 10:41:07 2026 GMT Subject: CN=c6536878-a41c-494e-843c-674d04ef954a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a0:c1:89:e6:48:f2:9b:95:57:15:aa:92:b8: 2b:ae:42:8a:e6:e3:1c:1d:53:a1:ee:cb:c6:96:54: 1d:1d:bc:89:87:23:fe:09:ae:6e:cc:9b:69:80:1f: d5:4c:cc:8c:63:ee:62:43:e1:c3:2c:9e:ce:b3:0b: a6:a3:02:fe:ea:4b:87:6a:fd:9a:43:d7:10:c2:3d: ce:c3:cb:30:c8:7e:bb:a8:d3:9f:c8:9f:e3:a0:23: 7e:31:25:ae:b3:65:b4:2b:29:d9:52:80:26:60:4e: 99:81:10:f6:b2:e2:8a:0f:b7:dd:37:1b:3b:ff:a9: cc:7a:93:66:b0:51:eb:5c:29:2b:79:be:70:af:56: 08:03:d0:73:86:54:35:8c:ff:34:96:7b:d5:4d:2c: 15:5c:cb:e6:c2:61:f7:65:a4:c2:03:9a:da:9e:09: 12:ee:93:e5:61:71:53:48:2f:46:c5:e0:03:3f:b6: e6:0e:dc:97:a5:60:1e:e8:09:d1:f6:53:cd:1b:59: 5f:4d:a8:07:78:ef:a3:8c:62:bf:35:ec:cd:74:6d: a8:a3:5e:da:1d:a8:d5:ad:cf:c3:07:f9:42:23:8e: a5:67:36:63:b2:9b:77:84:cb:3d:be:8c:5d:fa:27: dd:51:31:c1:7c:75:c9:60:6f:93:0a:23:8c:57:15: bd:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D8:5C:7C:81:2A:CA:11:24:46:BE:F6:63:69:85:E7:27:9F:83:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16d71376-e8fa-4e6c-bbf4-978708d88645/2114c8a0-aefd-3d2b-9228-3a7ae7acedad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16d71376-e8fa-4e6c-bbf4-978708d88645/16d71376-e8fa-4e6c-bbf4-978708d88645.crl X509v3 Authority Key Identifier: keyid:4F:1F:74:1C:B5:05:7E:10:C8:53:1F:E1:B4:D5:44:29:C1:44:B0:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16d71376-e8fa-4e6c-bbf4-978708d88645.cer sbgp-ipAddrBlock: critical IPv6: 2620:cd:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:c2:4a:d9:1f:b1:be:33:7d:ca:45:ed:c6:8a:61:52:7b:96: d0:96:30:9c:ad:2e:d0:8b:8c:79:43:9a:6a:6f:e7:33:b6:67: 28:2a:59:ad:e9:f6:2b:21:46:48:d4:00:9f:df:3b:d8:78:93: 50:55:5d:db:ad:65:28:6b:21:b1:e9:2d:fa:a1:f0:91:44:43: 25:df:c2:75:ca:89:69:2e:af:69:9e:9d:b0:3d:85:30:d2:0d: bc:a1:68:56:6f:ce:4b:23:08:c4:05:95:08:c8:54:24:45:83: cf:67:0c:a9:af:f9:18:ac:c3:0e:fe:ed:28:06:c1:90:ab:bf: 35:42:c6:0e:5c:26:26:e9:e6:4a:26:d0:39:fa:be:43:f7:9b: 1d:71:02:e5:ba:87:4a:0d:d3:27:1a:ff:5b:4e:46:e5:69:61: d2:41:7c:9a:1e:5c:98:6d:e5:84:3b:94:54:c6:d5:9e:8b:d6: a8:f8:59:4f:f5:03:94:28:9d:ba:25:cb:ee:14:63:29:b3:22: e7:c4:8b:88:61:67:12:8a:da:b7:92:a9:e1:74:ef:cb:c7:6f: fa:7a:8b:08:87:01:16:74:cd:77:4c:f8:5f:65:32:a2:dd:54: 8e:58:b3:60:44:f1:ba:f4:91:2f:a9:78:52:3d:a3:c1:04:ee: f7:16:8b:8a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuKGb2ObQ2sm9KA2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTZkNzEzNzYtZThmYS00ZTZjLWJiZjQtOTc4NzA4ZDg4 NjQ1MB4XDTI1MTAxNjA5NDEwN1oXDTI2MDExNDEwNDEwN1owLzEtMCsGA1UEAxMk YzY1MzY4NzgtYTQxYy00OTRlLTg0M2MtNjc0ZDA0ZWY5NTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqDBieZI8puVVxWqkrgrrkKK5uMcHVOh7svG llQdHbyJhyP+Ca5uzJtpgB/VTMyMY+5iQ+HDLJ7OswumowL+6kuHav2aQ9cQwj3O w8swyH67qNOfyJ/joCN+MSWus2W0KynZUoAmYE6ZgRD2suKKD7fdNxs7/6nMepNm sFHrXCkreb5wr1YIA9BzhlQ1jP80lnvVTSwVXMvmwmH3ZaTCA5rangkS7pPlYXFT SC9GxeADP7bmDtyXpWAe6AnR9lPNG1lfTagHeO+jjGK/NezNdG2oo17aHajVrc/D B/lCI46lZzZjspt3hMs9voxd+ifdUTHBfHXJYG+TCiOMVxW9LQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE/YXHyBKsoRJEa+9mNphecnn4MTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xNmQ3 MTM3Ni1lOGZhLTRlNmMtYmJmNC05Nzg3MDhkODg2NDUvMjExNGM4YTAtYWVmZC0z ZDJiLTkyMjgtM2E3YWU3YWNlZGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMTZkNzEzNzYtZThmYS00ZTZjLWJi ZjQtOTc4NzA4ZDg4NjQ1LzE2ZDcxMzc2LWU4ZmEtNGU2Yy1iYmY0LTk3ODcwOGQ4 ODY0NS5jcmwwHwYDVR0jBBgwFoAUTx90HLUFfhDIUx/htNVEKcFEsKYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8xNmQ3MTM3Ni1lOGZhLTRlNmMtYmJmNC05Nzg3 MDhkODg2NDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAzSAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA3CStkfsb4zfcpF7caKYVJ7ltCWMJytLtCLjHlDmmpv5zO2Zygq Wa3p9ishRkjUAJ/fO9h4k1BVXdutZShrIbHpLfqh8JFEQyXfwnXKiWkur2menbA9 hTDSDbyhaFZvzksjCMQFlQjIVCRFg89nDKmv+Risww7+7SgGwZCrvzVCxg5cJibp 5kom0Dn6vkP3mx1xAuW6h0oN0yca/1tORuVpYdJBfJoeXJht5YQ7lFTG1Z6L1qj4 WU/1A5Qonboly+4UYymzIufEi4hhZxKK2reSqeF078vHb/p6iwiHARZ0zXdM+F9l MqLdVI5Ys2BE8br0kS+peFI9o8EE7vcWi4o= -----END CERTIFICATE-----Generated at Tue Oct 21 04:32:08 2025 by rpki-client