$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19345e58-ac00-4d42-ad61-73928068f7c9/9a1f90a1-e552-3a64-af21-d87d3f46ad99.roa File: 9a1f90a1-e552-3a64-af21-d87d3f46ad99.roa (raw, json) Hash identifier: fEQjA4vRfQTbw7nNMORwb1f7bAZCthFhpLYAPor8ZJM= Subject key identifier: E7:27:70:58:A8:69:EE:DF:42:7E:6E:25:26:7C:63:B7:A0:7E:B0:66 Certificate issuer: /CN=19345e58-ac00-4d42-ad61-73928068f7c9 Certificate serial: 010D0C9F4328584B1C372C9ADAC006D7983A4600 Authority key identifier: E0:68:79:1E:C0:28:31:B4:A4:D2:73:82:BA:D3:56:17:20:8B:A4:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19345e58-ac00-4d42-ad61-73928068f7c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19345e58-ac00-4d42-ad61-73928068f7c9/9a1f90a1-e552-3a64-af21-d87d3f46ad99.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 16796 IP address blocks: 2620:2:4000::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19345e58-ac00-4d42-ad61-73928068f7c9/19345e58-ac00-4d42-ad61-73928068f7c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19345e58-ac00-4d42-ad61-73928068f7c9/19345e58-ac00-4d42-ad61-73928068f7c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19345e58-ac00-4d42-ad61-73928068f7c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:2c:9a:da:c0:06:d7:98:3a:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19345e58-ac00-4d42-ad61-73928068f7c9 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=d286714b-5d4f-4ff9-9ef8-53acfe141108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:53:18:38:db:6a:12:ea:64:5b:1a:3c:27:27: 12:1b:93:d1:94:f2:b3:3b:a3:91:7f:eb:9f:7c:4e: 45:17:f7:63:00:3f:eb:50:91:db:8c:78:e6:94:c6: 52:4f:e3:8c:b5:42:73:8e:49:f6:8c:19:15:bc:80: ff:fe:0e:1c:0f:85:68:a4:31:f3:8f:ce:6c:75:a2: dc:a4:25:c4:b6:c8:a0:8c:59:06:c5:96:23:54:70: 36:81:6a:b2:9f:9c:af:c3:d2:a2:00:0f:40:6f:21: f8:b8:d4:76:74:42:20:05:a5:32:0c:7d:4d:b0:43: bb:b8:d5:6c:12:b1:74:3e:ab:7a:a3:25:2a:a0:7e: d1:94:59:ba:12:73:36:59:f8:28:92:86:d8:11:ad: f5:f8:2b:73:23:c7:f0:12:51:e1:f5:93:c5:ff:15: 53:fc:e8:89:f0:d8:3b:08:94:e7:74:40:b8:10:57: 10:34:d8:b8:52:e2:4f:db:75:94:ff:12:b4:4f:24: 88:21:5c:70:5b:4b:7a:7c:10:88:d5:97:2a:d2:80: cc:81:96:0b:b9:53:a9:e2:69:86:56:e8:de:c9:58: c0:3a:4d:db:5c:d3:34:e6:9b:2d:67:4d:6e:d9:cd: 88:6c:bf:e0:62:1b:04:1a:49:69:7e:c6:60:8d:cb: e1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:27:70:58:A8:69:EE:DF:42:7E:6E:25:26:7C:63:B7:A0:7E:B0:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19345e58-ac00-4d42-ad61-73928068f7c9/9a1f90a1-e552-3a64-af21-d87d3f46ad99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19345e58-ac00-4d42-ad61-73928068f7c9/19345e58-ac00-4d42-ad61-73928068f7c9.crl X509v3 Authority Key Identifier: keyid:E0:68:79:1E:C0:28:31:B4:A4:D2:73:82:BA:D3:56:17:20:8B:A4:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19345e58-ac00-4d42-ad61-73928068f7c9.cer sbgp-ipAddrBlock: critical IPv6: 2620:2:4000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:72:36:ca:3f:e0:54:fd:d6:11:3f:e1:80:58:16:f6:fb:d6: 23:ab:29:70:75:52:58:fc:58:8e:51:dc:90:a1:14:9a:42:46: 5f:8f:50:30:9e:83:6d:30:ef:ba:57:9f:e7:2c:4e:4d:e3:e9: b3:dd:69:49:d5:c5:e1:4c:b6:0b:f3:1d:e0:e4:08:fe:ea:15: 0f:b5:df:2c:0f:b0:ea:d1:8e:22:e2:46:9e:0b:43:d1:c2:57: c0:70:67:11:f9:d8:46:2e:92:ab:74:dc:81:ff:f2:9a:7f:83: 2b:52:5a:a9:e9:de:ff:7c:d3:93:13:be:ab:af:b9:51:55:b4: 25:c4:02:7a:f7:0d:82:30:18:f2:fc:cc:54:3c:e7:60:22:f9: 4c:8c:dd:cb:29:a1:bf:e4:28:66:7b:3d:a2:c2:25:87:fa:16: 9f:69:46:26:f8:51:15:e0:de:93:08:a8:61:7e:02:6d:c9:ac: 8d:8d:f7:a9:e1:00:5c:a7:e6:94:dd:55:8c:2a:ec:8c:83:b1: 69:c9:a2:f5:19:b2:b9:cf:85:ff:60:8e:16:a7:3f:d3:ad:51: b3:23:de:8b:c3:8f:c0:80:0f:e9:1c:bb:66:26:6e:15:35:44: f9:97:74:1a:cb:a3:39:a1:3a:e2:7d:8a:4b:f9:2b:e9:68:b6: a8:dd:aa:b7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEscNyya2sAG15g6RgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTkzNDVlNTgtYWMwMC00ZDQyLWFkNjEtNzM5MjgwNjhm N2M5MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk ZDI4NjcxNGItNWQ0Zi00ZmY5LTllZjgtNTNhY2ZlMTQxMTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VMYONtqEupkWxo8JycSG5PRlPKzO6ORf+uf fE5FF/djAD/rUJHbjHjmlMZST+OMtUJzjkn2jBkVvID//g4cD4VopDHzj85sdaLc pCXEtsigjFkGxZYjVHA2gWqyn5yvw9KiAA9AbyH4uNR2dEIgBaUyDH1NsEO7uNVs ErF0Pqt6oyUqoH7RlFm6EnM2WfgokobYEa31+CtzI8fwElHh9ZPF/xVT/OiJ8Ng7 CJTndEC4EFcQNNi4UuJP23WU/xK0TySIIVxwW0t6fBCI1Zcq0oDMgZYLuVOp4mmG VujeyVjAOk3bXNM05pstZ01u2c2IbL/gYhsEGklpfsZgjcvhBQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOcncFioae7fQn5uJSZ8Y7egfrBmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xOTM0 NWU1OC1hYzAwLTRkNDItYWQ2MS03MzkyODA2OGY3YzkvOWExZjkwYTEtZTU1Mi0z YTY0LWFmMjEtZDg3ZDNmNDZhZDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMTkzNDVlNTgtYWMwMC00ZDQyLWFk NjEtNzM5MjgwNjhmN2M5LzE5MzQ1ZTU4LWFjMDAtNGQ0Mi1hZDYxLTczOTI4MDY4 ZjdjOS5jcmwwHwYDVR0jBBgwFoAU4Gh5HsAoMbSk0nOCutNWFyCLpEYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8xOTM0NWU1OC1hYzAwLTRkNDItYWQ2MS03Mzky ODA2OGY3YzkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAkAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH1yNso/4FT91hE/4YBYFvb71iOrKXB1Ulj8WI5R3JChFJpCRl+P UDCeg20w77pXn+csTk3j6bPdaUnVxeFMtgvzHeDkCP7qFQ+13ywPsOrRjiLiRp4L Q9HCV8BwZxH52EYukqt03IH/8pp/gytSWqnp3v9805MTvquvuVFVtCXEAnr3DYIw GPL8zFQ852Ai+UyM3cspob/kKGZ7PaLCJYf6Fp9pRib4URXg3pMIqGF+Am3JrI2N 96nhAFyn5pTdVYwq7IyDsWnJovUZsrnPhf9gjhanP9OtUbMj3ovDj8CAD+kcu2Ym bhU1RPmXdBrLozmhOuJ9ikv5K+lotqjdqrc= -----END CERTIFICATE-----Generated at Mon Oct 20 20:22:24 2025 by rpki-client