$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/1be5fb30-d6d3-30f1-90bd-a0012e8772e3.roa File: 1be5fb30-d6d3-30f1-90bd-a0012e8772e3.roa (raw, json) Hash identifier: eg80FoYpA0dkEfzGtiaJoa2LjUnJv2qsRbLzsAwdjno= Subject key identifier: F7:1B:9D:88:5A:3C:16:7A:2B:18:17:C7:E6:70:1D:D9:4A:F7:6E:CC Certificate issuer: /CN=2fe89f6f-530f-4fd6-8c9f-68c4478b3a40 Certificate serial: 010D0C9F4328584B1C36CEADEF0AB7DA273B2A80 Authority key identifier: EB:C9:0D:BE:3E:5C:11:0A:A1:CA:4A:85:23:5E:B1:30:D8:A6:CA:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/1be5fb30-d6d3-30f1-90bd-a0012e8772e3.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 14618 IP address blocks: 2620:c1:e000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:ce:ad:ef:0a:b7:da:27:3b:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fe89f6f-530f-4fd6-8c9f-68c4478b3a40 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=a0fbb968-ae1c-4a44-a749-4bc5f9675cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:39:f6:03:a5:e3:88:d7:ac:95:15:89:cd:6c: 8f:29:57:d4:29:ce:74:7a:99:16:a2:03:d1:25:6d: cc:eb:b2:2e:4a:a5:49:19:63:05:0f:5e:bb:16:bb: 2c:a6:fe:6c:e1:06:be:fc:74:97:78:dc:bb:fa:75: 01:94:16:4f:af:55:a0:e3:71:33:b2:9d:95:72:f7: f5:58:33:dd:7f:76:08:b3:a6:0b:ca:69:54:0d:98: 3d:be:3b:81:03:79:ac:76:fa:9b:53:6b:50:c9:d5: 3b:24:31:43:d6:a0:d2:0e:23:46:a7:e5:f0:e8:f0: ed:1c:1c:42:25:43:6b:17:26:4a:ca:50:d8:5e:67: bd:9e:c5:c7:1b:6c:68:6e:0f:93:1c:4a:03:8b:f1: f6:43:1a:f1:d4:ed:f9:6a:13:e8:6a:6f:f2:5f:a9: 16:35:d7:52:f7:d2:e5:aa:69:8e:00:00:0c:6f:f1: e0:c1:0c:8a:ea:ec:04:5a:ed:20:18:58:fc:99:7b: 0f:8a:60:5b:89:61:df:81:18:8f:fc:10:a0:ed:9a: f1:98:b1:b4:3f:d3:ec:5e:77:d6:a9:30:66:6e:8e: ba:e7:c2:c7:c3:5b:08:c1:03:4d:13:ab:09:d5:ad: be:80:6c:3a:1e:28:f2:07:41:ce:80:66:31:58:fa: a5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:1B:9D:88:5A:3C:16:7A:2B:18:17:C7:E6:70:1D:D9:4A:F7:6E:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/1be5fb30-d6d3-30f1-90bd-a0012e8772e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.crl X509v3 Authority Key Identifier: keyid:EB:C9:0D:BE:3E:5C:11:0A:A1:CA:4A:85:23:5E:B1:30:D8:A6:CA:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.cer sbgp-ipAddrBlock: critical IPv6: 2620:c1:e000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:84:f5:8d:8a:fe:72:d9:9f:5d:3b:f1:92:54:7d:8b:0f:57: 6c:c5:ce:8f:4a:54:b5:1e:b8:6a:21:60:7b:aa:66:f4:15:1a: 77:b8:8f:8b:e6:19:5b:56:d0:be:1f:44:e1:26:36:56:88:3d: 7d:b9:20:89:8f:d1:19:5b:fd:d3:e1:ea:b2:44:9b:89:a3:a1: d9:30:b6:f5:09:11:fa:27:61:f1:bd:8b:f2:f9:2b:a0:fc:14: 5a:ae:c6:f1:f9:d8:62:8c:df:4b:f9:1b:3c:03:e3:c2:1a:5b: a9:c6:c5:ad:9e:d8:ec:d6:f5:2f:6c:6d:78:33:51:01:b4:5c: 03:43:e2:b5:cc:37:bc:97:f0:8e:cf:72:89:b0:6e:9c:6e:d2: 53:7d:df:55:f8:ef:e7:51:0a:2c:74:a3:21:e8:93:09:35:c2: c4:99:50:20:2d:3d:b9:f8:d6:e9:78:90:28:e9:b4:a8:88:6c: 00:07:5a:62:a5:8e:a9:29:b8:9f:23:e0:cb:e0:63:0f:20:98: b1:d0:7d:0e:c4:e2:1e:fe:ae:20:4e:bb:ce:6f:42:f9:37:47: 67:e5:84:cd:15:57:16:b2:f1:0f:39:eb:27:84:b9:ab:02:a9: 14:95:02:61:e3:16:59:a4:1f:57:ab:2e:b9:5f:c3:c0:b8:37: 4d:f9:99:e7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEscNs6t7wq32ic7KoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZlODlmNmYtNTMwZi00ZmQ2LThjOWYtNjhjNDQ3OGIz YTQwMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk YTBmYmI5NjgtYWUxYy00YTQ0LWE3NDktNGJjNWY5Njc1Y2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTn2A6XjiNeslRWJzWyPKVfUKc50epkWogPR JW3M67IuSqVJGWMFD167Frsspv5s4Qa+/HSXeNy7+nUBlBZPr1Wg43Ezsp2Vcvf1 WDPdf3YIs6YLymlUDZg9vjuBA3msdvqbU2tQydU7JDFD1qDSDiNGp+Xw6PDtHBxC JUNrFyZKylDYXme9nsXHG2xobg+THEoDi/H2Qxrx1O35ahPoam/yX6kWNddS99Ll qmmOAAAMb/HgwQyK6uwEWu0gGFj8mXsPimBbiWHfgRiP/BCg7ZrxmLG0P9PsXnfW qTBmbo6658LHw1sIwQNNE6sJ1a2+gGw6HijyB0HOgGYxWPql2QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPcbnYhaPBZ6KxgXx+ZwHdlK927MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yZmU4 OWY2Zi01MzBmLTRmZDYtOGM5Zi02OGM0NDc4YjNhNDAvMWJlNWZiMzAtZDZkMy0z MGYxLTkwYmQtYTAwMTJlODc3MmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMmZlODlmNmYtNTMwZi00ZmQ2LThj OWYtNjhjNDQ3OGIzYTQwLzJmZTg5ZjZmLTUzMGYtNGZkNi04YzlmLTY4YzQ0Nzhi M2E0MC5jcmwwHwYDVR0jBBgwFoAU68kNvj5cEQqhykqFI16xMNimyscwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yZmU4OWY2Zi01MzBmLTRmZDYtOGM5Zi02OGM0 NDc4YjNhNDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAweAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADWE9Y2K/nLZn1078ZJUfYsPV2zFzo9KVLUeuGohYHuqZvQVGne4 j4vmGVtW0L4fROEmNlaIPX25IImP0Rlb/dPh6rJEm4mjodkwtvUJEfonYfG9i/L5 K6D8FFquxvH52GKM30v5GzwD48IaW6nGxa2e2OzW9S9sbXgzUQG0XAND4rXMN7yX 8I7Pcomwbpxu0lN931X47+dRCix0oyHokwk1wsSZUCAtPbn41ul4kCjptKiIbAAH WmKljqkpuJ8j4MvgYw8gmLHQfQ7E4h7+riBOu85vQvk3R2flhM0VVxay8Q856yeE uasCqRSVAmHjFlmkH1erLrlfw8C4N035mec= -----END CERTIFICATE-----Generated at Mon Oct 20 04:04:58 2025 by rpki-client