$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/ef39d7a1-5450-38f0-8fe3-ed3a9bcb4e0c.roa File: ef39d7a1-5450-38f0-8fe3-ed3a9bcb4e0c.roa (raw, json) Hash identifier: dJMhFu29RqciELViVo2HlE8SNZGxMJqLZwIiuSdkfcU= Subject key identifier: C9:07:BD:81:02:86:32:75:94:7F:13:E1:65:A3:EB:82:D3:CA:F2:E8 Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Certificate serial: 010D0C9F4328584B907700F82C2C62B6D25A7191 Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/ef39d7a1-5450-38f0-8fe3-ed3a9bcb4e0c.roa Signing time: Sat 18 Oct 2025 16:23:53 +0000 ROA not before: Sat 18 Oct 2025 16:23:53 +0000 ROA not after: Fri 16 Jan 2026 17:23:53 +0000 asID: 26548 IP address blocks: 2604:fbc0:1101::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:90:77:00:f8:2c:2c:62:b6:d2:5a:71:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Validity Not Before: Oct 18 16:23:53 2025 GMT Not After : Jan 16 17:23:53 2026 GMT Subject: CN=c4d0a94f-560e-461c-8301-2a288583742f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2a:9b:7a:99:5d:af:98:57:70:30:fa:aa:db: 2e:19:d6:5a:f1:5f:9c:00:43:a5:a1:6b:2f:ac:8d: b8:2d:a0:85:c1:a7:37:3e:b6:b6:4d:c3:25:58:75: 1c:ca:42:01:98:a8:97:a3:83:b0:27:55:ed:b2:dc: 67:8a:85:cc:e8:26:4b:89:2d:88:a6:a0:0d:62:c5: aa:04:7e:31:44:dd:60:16:3a:6b:39:65:13:7c:06: be:bc:45:4f:af:f4:ad:5f:cd:e9:3e:07:ed:7a:23: 3b:59:22:2f:73:5c:9f:9d:c3:c2:4c:0a:1e:3e:5f: 14:49:ce:07:a9:b5:f2:1a:b6:7c:21:f9:ad:09:c7: 10:01:1c:6b:75:d9:04:6e:d5:16:1e:c3:02:ea:39: 34:2d:d6:26:75:73:56:ae:b1:d7:b5:2e:7c:0a:99: ee:7f:21:d6:17:85:21:46:5c:e6:04:b2:09:f9:be: 75:f1:08:29:62:26:fc:1c:97:06:66:1a:b2:3b:9a: 2b:ec:93:73:a4:dc:35:8e:e4:c1:cd:04:80:89:8d: cb:c0:98:4d:20:25:85:99:14:9d:f6:53:eb:89:45: 60:a6:95:98:b9:c7:1d:89:40:ca:eb:38:7b:28:bf: ba:11:56:42:b7:2d:54:c7:3c:25:2a:87:b1:6d:1c: 17:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:07:BD:81:02:86:32:75:94:7F:13:E1:65:A3:EB:82:D3:CA:F2:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/ef39d7a1-5450-38f0-8fe3-ed3a9bcb4e0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl X509v3 Authority Key Identifier: keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer sbgp-ipAddrBlock: critical IPv6: 2604:fbc0:1101::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:ee:f4:02:c1:c5:ed:41:cc:98:41:d9:05:b7:39:59:c3:ad: b1:04:cb:08:ed:42:53:87:20:bf:8c:96:b7:f6:d6:89:fe:d2: f4:57:50:36:eb:3e:7e:48:99:7b:51:b0:ab:15:7f:16:99:3a: 29:7a:53:f5:2e:5d:32:52:fd:bd:d5:95:4a:c2:c2:41:52:9d: b9:05:61:23:d3:1e:cb:ce:d2:70:c7:13:e7:50:ea:99:b9:96: 0b:ba:b1:44:15:4d:1a:08:58:77:af:5f:94:be:d6:36:88:73: 0f:54:85:c7:aa:81:dd:7f:79:f7:9b:8d:b7:7f:b3:18:ba:ec: 9a:88:6a:8d:a2:c1:7c:30:e0:81:ec:25:91:fd:8a:2e:c5:95: 8c:e7:b3:e0:79:95:a5:82:0d:dd:37:ff:52:6d:8b:60:f9:d7: 1b:20:be:d7:ae:07:3c:67:9b:6e:dc:8d:87:09:23:a7:d5:8f: aa:bf:06:e3:be:75:58:19:70:1d:b8:cc:51:34:90:d6:df:82: 2d:04:d8:fa:4e:a6:c3:e0:a6:a1:52:2b:e7:7c:91:f0:c0:26: b9:e7:76:d6:72:0f:c1:16:71:77:7b:23:9d:d3:78:8c:9c:a5: 40:52:53:ba:bf:10:23:ee:64:1f:a0:37:7a:96:ea:58:c4:86: f1:f2:59:a4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuQdwD4LCxittJacZEwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz MmIzMB4XDTI1MTAxODE2MjM1M1oXDTI2MDExNjE3MjM1M1owLzEtMCsGA1UEAxMk YzRkMGE5NGYtNTYwZS00NjFjLTgzMDEtMmEyODg1ODM3NDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiqbepldr5hXcDD6qtsuGdZa8V+cAEOloWsv rI24LaCFwac3Pra2TcMlWHUcykIBmKiXo4OwJ1XtstxnioXM6CZLiS2IpqANYsWq BH4xRN1gFjprOWUTfAa+vEVPr/StX83pPgfteiM7WSIvc1yfncPCTAoePl8USc4H qbXyGrZ8IfmtCccQARxrddkEbtUWHsMC6jk0LdYmdXNWrrHXtS58CpnufyHWF4Uh RlzmBLIJ+b518QgpYib8HJcGZhqyO5or7JNzpNw1juTBzQSAiY3LwJhNICWFmRSd 9lPriUVgppWYuccdiUDK6zh7KL+6EVZCty1UxzwlKoexbRwXowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMkHvYEChjJ1lH8T4WWj64LTyvLoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5 YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvZWYzOWQ3YTEtNTQ1MC0z OGYwLThmZTMtZWQzYTliY2I0ZTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0 ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh ZjhjMTMyYjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgT7wBEB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJzu9ALBxe1BzJhB2QW3OVnDrbEEywjtQlOHIL+Mlrf21on+0vRX UDbrPn5ImXtRsKsVfxaZOil6U/UuXTJS/b3VlUrCwkFSnbkFYSPTHsvO0nDHE+dQ 6pm5lgu6sUQVTRoIWHevX5S+1jaIcw9Uhceqgd1/efebjbd/sxi67JqIao2iwXww 4IHsJZH9ii7FlYzns+B5laWCDd03/1Jti2D51xsgvteuBzxnm27cjYcJI6fVj6q/ BuO+dVgZcB24zFE0kNbfgi0E2PpOpsPgpqFSK+d8kfDAJrnndtZyD8EWcXd7I53T eIycpUBSU7q/ECPuZB+gN3qW6ljEhvHyWaQ= -----END CERTIFICATE-----Generated at Mon Oct 20 04:27:03 2025 by rpki-client