$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/b5060e1b-5649-3da3-90ed-6368bf81760a.roa File: b5060e1b-5649-3da3-90ed-6368bf81760a.roa (raw, json) Hash identifier: Pw2zX/8Pro92OPaGl4+aw6P7unhKUtDum3PSHYyDD+o= Subject key identifier: 13:E5:D7:20:2C:A5:67:B4:CF:26:F7:74:7B:42:7B:BE:68:1E:8B:40 Certificate issuer: /CN=3e65c610-fa49-4d7b-a2e7-69124f1e5c85 Certificate serial: 010D0C9F4328584B79BCBAA716338C4389ED1E00 Authority key identifier: F1:40:ED:33:FA:99:FA:E6:68:C3:42:37:01:C2:6B:4C:6A:AE:35:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/b5060e1b-5649-3da3-90ed-6368bf81760a.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 14228 IP address blocks: 2620:d5:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:ba:a7:16:33:8c:43:89:ed:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e65c610-fa49-4d7b-a2e7-69124f1e5c85 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=c2f2e502-ebef-42d2-9f92-521eb824be74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a2:fc:e2:4d:bd:71:7a:5a:c4:fc:3a:b5:bc: 9e:3a:5e:32:00:33:8f:15:7b:da:65:f0:a2:41:35: 6c:52:b7:d0:0c:65:61:54:b1:1d:ba:75:ee:7d:76: 2f:a9:5c:84:9e:38:78:a9:58:8e:56:f5:aa:97:96: 51:08:d0:5d:91:a4:e8:f5:a9:67:58:ec:61:d2:c1: 24:d6:5d:45:7a:05:52:0d:49:52:52:56:ff:5b:43: a0:30:b9:10:8b:b7:05:12:ab:e2:ea:2e:06:a8:57: 3a:77:71:d3:31:6b:8d:25:53:47:3b:4f:2b:80:e9: 11:41:41:a3:1f:ff:a3:1f:74:48:db:cd:ac:75:60: 05:1b:c5:48:8f:41:76:3f:17:cf:cc:09:53:85:e0: 10:bb:25:8a:0b:e1:46:28:27:7c:04:ea:97:c9:34: d0:59:7d:df:52:d7:ac:28:25:3c:8b:de:34:c1:94: ec:97:97:2b:81:b7:94:6b:1d:2b:a3:31:7c:7f:5e: ee:74:0d:44:f3:f3:4b:c0:94:4c:8c:75:14:9f:96: 79:75:1b:dd:cd:e6:da:70:ab:e9:5b:c6:5a:1c:24: 03:10:a9:23:16:8c:f3:3f:37:65:e6:b6:33:f8:77: be:78:5b:3d:8c:ea:cf:53:3a:68:0b:fd:d1:d8:0f: 38:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:E5:D7:20:2C:A5:67:B4:CF:26:F7:74:7B:42:7B:BE:68:1E:8B:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/b5060e1b-5649-3da3-90ed-6368bf81760a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.crl X509v3 Authority Key Identifier: keyid:F1:40:ED:33:FA:99:FA:E6:68:C3:42:37:01:C2:6B:4C:6A:AE:35:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.cer sbgp-ipAddrBlock: critical IPv6: 2620:d5:4000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:6d:ff:ce:15:02:f9:2e:e3:c1:69:52:9c:61:12:97:ab:96: dc:c7:b9:f9:b2:cc:64:ad:2f:2d:6b:44:69:66:23:f4:8e:df: ab:7e:9e:fc:a1:7f:29:0e:36:f7:8e:da:1e:28:c2:73:c0:2e: 65:ae:49:06:80:50:8a:89:c8:4d:d2:41:e8:4b:fb:c0:cd:32: aa:05:46:b2:31:80:75:f4:4b:77:63:2f:24:48:d2:4d:07:da: f9:58:72:7b:4e:e7:ca:c0:c2:a5:04:c8:f0:95:45:98:72:2d: b3:e3:a6:0d:c1:55:cd:16:e7:98:7c:d0:9f:5e:95:3d:b5:fb: e6:fe:55:ea:f1:68:f2:fa:eb:41:55:0e:af:9f:30:0e:ef:f0: 77:f1:4b:e4:1e:9a:7d:36:42:ad:d4:a3:6a:32:14:16:cf:c1: 26:81:98:14:cd:79:bf:e4:e7:b6:7c:c4:56:42:ae:0a:a5:0a: 7b:81:0c:17:a2:47:87:6f:15:09:b3:62:61:cf:fd:0f:f4:01: 1c:ef:20:d3:28:3b:fc:66:64:33:4e:c4:43:df:8e:28:5c:16: 90:a3:d3:30:c8:e8:ec:cb:53:db:85:25:d2:b6:82:3b:c4:45: 64:9d:44:0b:57:d8:6f:b3:12:0e:f5:6b:a3:2e:1f:00:33:a1: 61:82:04:6f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt5vLqnFjOMQ4ntHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U2NWM2MTAtZmE0OS00ZDdiLWEyZTctNjkxMjRmMWU1 Yzg1MB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk YzJmMmU1MDItZWJlZi00MmQyLTlmOTItNTIxZWI4MjRiZTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKL84k29cXpaxPw6tbyeOl4yADOPFXvaZfCi QTVsUrfQDGVhVLEdunXufXYvqVyEnjh4qViOVvWql5ZRCNBdkaTo9alnWOxh0sEk 1l1FegVSDUlSUlb/W0OgMLkQi7cFEqvi6i4GqFc6d3HTMWuNJVNHO08rgOkRQUGj H/+jH3RI282sdWAFG8VIj0F2PxfPzAlTheAQuyWKC+FGKCd8BOqXyTTQWX3fUtes KCU8i940wZTsl5crgbeUax0rozF8f17udA1E8/NLwJRMjHUUn5Z5dRvdzebacKvp W8ZaHCQDEKkjFozzPzdl5rYz+He+eFs9jOrPUzpoC/3R2A84RQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBPl1yAspWe0zyb3dHtCe75oHotAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zZTY1 YzYxMC1mYTQ5LTRkN2ItYTJlNy02OTEyNGYxZTVjODUvYjUwNjBlMWItNTY0OS0z ZGEzLTkwZWQtNjM2OGJmODE3NjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2U2NWM2MTAtZmE0OS00ZDdiLWEy ZTctNjkxMjRmMWU1Yzg1LzNlNjVjNjEwLWZhNDktNGQ3Yi1hMmU3LTY5MTI0ZjFl NWM4NS5jcmwwHwYDVR0jBBgwFoAU8UDtM/qZ+uZow0I3AcJrTGquNSgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zZTY1YzYxMC1mYTQ5LTRkN2ItYTJlNy02OTEy NGYxZTVjODUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAA1UAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGNt/84VAvku48FpUpxhEperltzHufmyzGStLy1rRGlmI/SO36t+ nvyhfykONveO2h4ownPALmWuSQaAUIqJyE3SQehL+8DNMqoFRrIxgHX0S3djLyRI 0k0H2vlYcntO58rAwqUEyPCVRZhyLbPjpg3BVc0W55h80J9elT21++b+VerxaPL6 60FVDq+fMA7v8HfxS+Qemn02Qq3Uo2oyFBbPwSaBmBTNeb/k57Z8xFZCrgqlCnuB DBeiR4dvFQmzYmHP/Q/0ARzvINMoO/xmZDNOxEPfjihcFpCj0zDI6OzLU9uFJdK2 gjvERWSdRAtX2G+zEg71a6MuHwAzoWGCBG8= -----END CERTIFICATE-----Generated at Tue Oct 21 02:31:07 2025 by rpki-client