$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/f5e9cfdc-fdaf-32b7-a0b3-ca092b5648d6.roa File: f5e9cfdc-fdaf-32b7-a0b3-ca092b5648d6.roa (raw, json) Hash identifier: tM/6j0U/VCb6e+OyzwQFYz0qHHwA+Fk6kntv+Lvaw5U= Subject key identifier: 21:6D:F8:72:39:9F:D9:43:DE:85:F5:89:55:EB:DB:FA:26:D9:5C:A4 Certificate issuer: /CN=0e08deb7-db4d-4298-bfe7-8df00db48dc3 Certificate serial: 010D0C9F4328584B62020C03649324EE17021940 Authority key identifier: 75:29:E0:2C:22:9F:1A:8D:00:71:EC:92:B2:35:02:2E:62:59:30:4A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/f5e9cfdc-fdaf-32b7-a0b3-ca092b5648d6.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 16509 IP address blocks: 2620:197:f00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:0c:03:64:93:24:ee:17:02:19:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e08deb7-db4d-4298-bfe7-8df00db48dc3 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=82c0f790-36e9-495e-85d5-3eab65315101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a2:40:52:0c:82:e9:d8:2c:8e:d0:4b:f2:7b: b4:01:77:bb:53:f3:1a:7f:4d:22:9f:ec:42:1a:cb: 8b:0f:d0:3e:26:50:fe:13:e5:22:fe:a7:51:e9:c4: e4:87:6c:96:81:03:82:60:5b:f5:31:6f:f7:7d:f8: bf:41:70:0a:21:5e:f5:1a:11:b5:3d:12:e8:e4:f8: 41:47:88:93:1e:0e:d5:a8:d2:fb:2f:99:55:36:5c: c9:16:13:66:ee:6a:f4:0b:5a:49:20:6c:05:ec:e2: 23:b7:59:9a:90:99:11:d9:bd:3f:c4:1b:88:bf:93: 23:17:60:4e:4c:7f:54:4a:5f:0e:73:dd:fe:60:2f: 6e:f4:76:ff:45:4f:ab:0d:fa:1d:dc:11:e3:d8:34: 75:35:ba:3c:b7:fa:4c:31:db:08:83:33:29:7a:27: 2f:93:dc:25:96:53:e6:7e:16:9b:96:fc:03:28:97: 3f:5f:3c:b3:59:e1:30:6b:4e:80:1f:bd:63:af:fc: 9e:2c:fd:cf:15:a5:5d:48:9f:d2:51:59:d1:1e:95: 31:0e:98:78:97:19:b9:22:e6:b1:45:90:c0:21:4c: 2a:31:be:6b:7d:90:93:8a:bd:57:02:36:91:56:bb: 78:77:2c:ef:96:6f:68:e8:14:dd:8a:6d:a5:65:c5: 3b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:6D:F8:72:39:9F:D9:43:DE:85:F5:89:55:EB:DB:FA:26:D9:5C:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/f5e9cfdc-fdaf-32b7-a0b3-ca092b5648d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.crl X509v3 Authority Key Identifier: keyid:75:29:E0:2C:22:9F:1A:8D:00:71:EC:92:B2:35:02:2E:62:59:30:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer sbgp-ipAddrBlock: critical IPv6: 2620:197:f00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:eb:14:7b:9f:52:c0:fe:5e:61:a6:57:dd:a2:9d:c9:82:09: 61:7e:43:bb:80:12:f3:10:45:9b:46:83:15:06:aa:83:3d:85: cc:82:c7:15:61:6c:15:34:df:b2:99:fc:a5:d0:0d:87:2e:51: 4c:9c:f0:38:32:5a:94:1f:dd:df:41:d4:8f:7e:8d:98:27:d1: 8b:56:ef:ae:d2:b0:51:bf:bb:d9:86:78:3a:57:07:c5:4f:d2: 96:2c:04:b9:2c:30:5a:de:9a:63:38:82:1e:14:f3:df:6b:3d: d7:eb:af:cf:60:35:ad:e3:8d:dd:a2:a2:e1:6e:61:f3:98:37: ea:da:d8:19:26:25:96:59:4f:6d:6b:5f:9f:c2:9b:65:49:a4: 8f:6f:93:44:e4:ff:29:30:46:f1:7d:63:8c:62:40:e8:00:0f: b0:da:bc:85:fb:ba:57:cb:fa:0c:e6:e1:69:72:c7:c7:b9:05: 1e:08:80:18:ba:c0:a6:84:d3:5e:de:dc:9d:92:82:17:a6:bf: 47:5c:39:de:c9:45:f5:2b:3a:fb:04:a2:6e:56:f3:35:fd:63: 7d:f6:1d:4f:3d:0d:e9:d0:75:cd:5c:57:a4:0d:cd:7f:49:bf: 53:df:0a:e2:41:ce:24:4f:cc:d3:f6:0d:85:e6:13:78:5e:6c: ac:0b:cd:aa -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAgwDZJMk7hcCGUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGUwOGRlYjctZGI0ZC00Mjk4LWJmZTctOGRmMDBkYjQ4 ZGMzMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ODJjMGY3OTAtMzZlOS00OTVlLTg1ZDUtM2VhYjY1MzE1MTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaJAUgyC6dgsjtBL8nu0AXe7U/Maf00in+xC GsuLD9A+JlD+E+Ui/qdR6cTkh2yWgQOCYFv1MW/3ffi/QXAKIV71GhG1PRLo5PhB R4iTHg7VqNL7L5lVNlzJFhNm7mr0C1pJIGwF7OIjt1makJkR2b0/xBuIv5MjF2BO TH9USl8Oc93+YC9u9Hb/RU+rDfod3BHj2DR1Nbo8t/pMMdsIgzMpeicvk9wlllPm fhablvwDKJc/XzyzWeEwa06AH71jr/yeLP3PFaVdSJ/SUVnRHpUxDph4lxm5Iuax RZDAIUwqMb5rfZCTir1XAjaRVrt4dyzvlm9o6BTdim2lZcU7FQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCFt+HI5n9lD3oX1iVXr2/om2VykMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTA4 ZGViNy1kYjRkLTQyOTgtYmZlNy04ZGYwMGRiNDhkYzMvZjVlOWNmZGMtZmRhZi0z MmI3LWEwYjMtY2EwOTJiNTY0OGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGUwOGRlYjctZGI0ZC00Mjk4LWJm ZTctOGRmMDBkYjQ4ZGMzLzBlMDhkZWI3LWRiNGQtNDI5OC1iZmU3LThkZjAwZGI0 OGRjMy5jcmwwHwYDVR0jBBgwFoAUdSngLCKfGo0AceySsjUCLmJZMEowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTA4ZGViNy1kYjRkLTQyOTgtYmZlNy04ZGYw MGRiNDhkYzMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABlw8A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGbrFHufUsD+XmGmV92incmCCWF+Q7uAEvMQRZtGgxUGqoM9hcyC xxVhbBU037KZ/KXQDYcuUUyc8DgyWpQf3d9B1I9+jZgn0YtW767SsFG/u9mGeDpX B8VP0pYsBLksMFremmM4gh4U899rPdfrr89gNa3jjd2iouFuYfOYN+ra2BkmJZZZ T21rX5/Cm2VJpI9vk0Tk/ykwRvF9Y4xiQOgAD7DavIX7ulfL+gzm4Wlyx8e5BR4I gBi6wKaE017e3J2Sghemv0dcOd7JRfUrOvsEom5W8zX9Y332HU89DenQdc1cV6QN zX9Jv1PfCuJBziRPzNP2DYXmE3hebKwLzao= -----END CERTIFICATE-----Generated at Tue Oct 21 01:36:16 2025 by rpki-client