$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/0e96be0b-7a3f-33aa-902c-3e77d58f2fe3.roa File: 0e96be0b-7a3f-33aa-902c-3e77d58f2fe3.roa (raw, json) Hash identifier: cXWagHzKVJvFn2DDQ9nGK4cXbOWP2TWReEfK7ibarq8= Subject key identifier: D6:F4:EA:DA:5C:43:AC:64:C2:F8:FF:CA:7D:F8:42:02:D2:79:77:2C Certificate issuer: /CN=c98136f0-3efc-4dfb-a3fe-596d9a8df01a Certificate serial: 010D0C9F4328584B4E770CC174E569B38F415400 Authority key identifier: F9:A6:75:02:28:D4:3A:8D:33:46:9E:1C:BC:95:0E:36:D7:3B:3E:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/0e96be0b-7a3f-33aa-902c-3e77d58f2fe3.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 31898 IP address blocks: 2620:11b:9000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:0c:c1:74:e5:69:b3:8f:41:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c98136f0-3efc-4dfb-a3fe-596d9a8df01a Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=6fb13e7b-8029-405f-92b7-047cd19c2190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d6:77:e5:d1:b7:b6:eb:c2:05:04:9c:f1:24: a3:b3:66:90:63:ed:a2:c1:86:9c:d9:06:97:34:15: 2b:b5:c0:a8:4d:d9:5d:71:6d:19:c9:d1:7d:80:e3: 34:33:1e:f6:64:fc:90:37:d5:44:c3:2e:6f:e8:b7: c2:db:e6:7e:fb:da:0b:71:41:fc:1a:d7:07:0e:7e: b7:52:2c:f7:56:09:2f:68:4b:e6:29:a3:9e:22:6b: 53:86:b5:e0:65:7c:06:50:c7:75:bb:97:5e:78:42: 63:0a:ea:6c:21:9f:16:18:19:4e:b8:af:3c:5e:94: 24:82:9f:d0:f5:bf:49:b2:85:20:27:67:57:69:4a: e7:0a:55:eb:62:6f:ee:22:ea:de:b1:f9:92:dd:da: 4d:ba:3e:49:8e:b2:1a:bc:e3:64:85:15:1c:be:3c: 31:55:2e:71:55:ff:ee:11:a5:2e:59:2f:98:b3:3d: f8:26:b6:22:60:2a:df:99:7a:ba:f7:8a:cb:be:f7: 0e:d3:2a:6f:d3:66:eb:6f:38:82:ca:10:7f:6a:0a: ef:19:e2:63:9a:74:20:aa:8e:31:67:4b:5f:ed:3c: 27:1c:96:c7:8d:f5:5b:c0:a8:6d:59:2d:55:9f:2c: 81:17:91:9b:d7:f4:88:f7:75:51:65:76:bd:6a:27: c5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:F4:EA:DA:5C:43:AC:64:C2:F8:FF:CA:7D:F8:42:02:D2:79:77:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/0e96be0b-7a3f-33aa-902c-3e77d58f2fe3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.crl X509v3 Authority Key Identifier: keyid:F9:A6:75:02:28:D4:3A:8D:33:46:9E:1C:BC:95:0E:36:D7:3B:3E:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.cer sbgp-ipAddrBlock: critical IPv6: 2620:11b:9000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:a1:e3:d8:6c:b3:22:04:4e:ed:e2:6a:a0:bf:d4:8f:d2:4d: 61:ac:7f:b1:11:8b:f2:f4:28:f4:b0:18:8f:30:fa:6a:19:17: a5:c7:cd:b9:53:31:aa:12:ad:a5:05:9a:e5:34:5c:6d:3a:52: 39:27:f7:94:f3:96:65:42:1e:04:cd:f1:f2:63:53:83:38:85: 2a:19:a6:3c:93:2b:64:bb:fd:90:73:86:38:a6:f7:53:c3:6d: 54:ca:0d:5c:e4:d6:ed:d6:81:7e:9e:5e:35:0f:37:18:a6:8d: 68:4f:29:4c:66:fd:b6:b1:f6:37:f0:c6:2a:5d:d8:65:f6:33: cd:fb:69:62:cb:dd:64:c4:90:53:7e:fd:7d:be:d6:9f:c7:f3: 96:75:5a:59:a9:d5:1f:2d:98:49:02:e3:81:91:9e:0c:f6:25: 4b:2f:0a:36:80:1f:7e:28:d3:4f:41:29:61:6f:cf:67:53:17: 69:79:86:63:0d:76:63:d9:f9:40:f8:7d:f3:66:4b:de:13:b7: 8a:ce:64:b8:fe:e6:d7:e5:fa:5f:a6:52:d2:a0:47:de:44:c3: 64:42:7d:2b:5a:ca:11:c9:44:86:10:f5:05:02:99:5a:9e:c7: 64:95:37:8f:54:2d:f0:11:fe:63:05:ae:d4:ac:dc:f7:bc:4f: 7d:fe:4c:16 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtOdwzBdOVps49BVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzk4MTM2ZjAtM2VmYy00ZGZiLWEzZmUtNTk2ZDlhOGRm MDFhMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk NmZiMTNlN2ItODAyOS00MDVmLTkyYjctMDQ3Y2QxOWMyMTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdZ35dG3tuvCBQSc8SSjs2aQY+2iwYac2QaX NBUrtcCoTdldcW0ZydF9gOM0Mx72ZPyQN9VEwy5v6LfC2+Z++9oLcUH8GtcHDn63 Uiz3VgkvaEvmKaOeImtThrXgZXwGUMd1u5deeEJjCupsIZ8WGBlOuK88XpQkgp/Q 9b9JsoUgJ2dXaUrnClXrYm/uIuresfmS3dpNuj5JjrIavONkhRUcvjwxVS5xVf/u EaUuWS+Ysz34JrYiYCrfmXq694rLvvcO0ypv02brbziCyhB/agrvGeJjmnQgqo4x Z0tf7TwnHJbHjfVbwKhtWS1VnyyBF5Gb1/SI93VRZXa9aifFPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNb06tpcQ6xkwvj/yn34QgLSeXcsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTgx MzZmMC0zZWZjLTRkZmItYTNmZS01OTZkOWE4ZGYwMWEvMGU5NmJlMGItN2EzZi0z M2FhLTkwMmMtM2U3N2Q1OGYyZmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzk4MTM2ZjAtM2VmYy00ZGZiLWEz ZmUtNTk2ZDlhOGRmMDFhL2M5ODEzNmYwLTNlZmMtNGRmYi1hM2ZlLTU5NmQ5YThk ZjAxYS5jcmwwHwYDVR0jBBgwFoAU+aZ1AijUOo0zRp4cvJUONtc7Pn0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTgxMzZmMC0zZWZjLTRkZmItYTNmZS01OTZk OWE4ZGYwMWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABG5AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHah49hssyIETu3iaqC/1I/STWGsf7ERi/L0KPSwGI8w+moZF6XH zblTMaoSraUFmuU0XG06Ujkn95TzlmVCHgTN8fJjU4M4hSoZpjyTK2S7/ZBzhjim 91PDbVTKDVzk1u3WgX6eXjUPNximjWhPKUxm/bax9jfwxipd2GX2M837aWLL3WTE kFN+/X2+1p/H85Z1Wlmp1R8tmEkC44GRngz2JUsvCjaAH34o009BKWFvz2dTF2l5 hmMNdmPZ+UD4ffNmS94Tt4rOZLj+5tfl+l+mUtKgR95Ew2RCfStayhHJRIYQ9QUC mVqex2SVN49ULfAR/mMFrtSs3Pe8T33+TBY= -----END CERTIFICATE-----Generated at Sun Oct 19 23:45:50 2025 by rpki-client