$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b51b96b-674e-4350-82f7-7b884151238a/9a40f8e3-7939-3f15-98eb-d27eb397e980.roa File: 9a40f8e3-7939-3f15-98eb-d27eb397e980.roa (raw, json) Hash identifier: ihcRh6aNyNxTURtjZyQx6ZjQZJgbKnC7XpPRjJ9E5kI= Subject key identifier: 2C:22:66:D5:A9:48:55:EE:30:88:10:21:78:73:3B:14:8D:7B:83:31 Certificate issuer: /CN=9b51b96b-674e-4350-82f7-7b884151238a Certificate serial: 010D0C9F4328584B95A786CC84E76492C9C6CE40 Authority key identifier: 93:25:DD:83:88:43:05:29:7A:B1:A8:37:23:B2:07:06:D3:17:A3:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b51b96b-674e-4350-82f7-7b884151238a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b51b96b-674e-4350-82f7-7b884151238a/9a40f8e3-7939-3f15-98eb-d27eb397e980.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 394151 IP address blocks: 2620:b8:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b51b96b-674e-4350-82f7-7b884151238a/9b51b96b-674e-4350-82f7-7b884151238a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b51b96b-674e-4350-82f7-7b884151238a/9b51b96b-674e-4350-82f7-7b884151238a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b51b96b-674e-4350-82f7-7b884151238a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:86:cc:84:e7:64:92:c9:c6:ce:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b51b96b-674e-4350-82f7-7b884151238a Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=bb2e5dcd-36ac-4d6c-8e51-e28f3a8e72fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:95:5e:c9:4a:a6:06:66:e4:1d:5b:71:54:ee: 73:d8:19:67:81:9b:53:30:81:13:63:a1:39:32:b0: a5:0e:69:20:6c:1c:b9:66:0b:b0:5e:3a:22:01:21: 09:9a:8a:d7:77:59:fc:44:77:5b:2f:85:87:e8:16: 28:b8:c2:ff:d1:36:36:1c:f1:9c:b3:b6:be:11:dc: 1c:96:c6:97:70:d1:b7:f2:b8:e2:0f:c5:18:98:83: ff:dc:47:6d:4e:c8:0c:75:f3:33:67:68:b6:36:99: c8:4f:fa:74:72:5b:74:cf:8d:7e:5a:20:00:bf:1c: a6:a7:10:8d:76:37:b9:76:cd:14:5b:07:63:82:f2: de:92:05:c0:25:a8:f6:6f:ac:f3:8f:f1:ae:61:cb: a5:1e:5a:95:a6:65:b6:28:36:be:06:54:1c:cd:47: 5c:af:f8:28:34:71:d2:09:7b:01:fe:bc:95:52:bb: ce:92:7f:6a:37:e7:66:51:17:4f:ce:bd:14:43:3a: e7:5c:ae:60:d3:eb:27:44:77:03:9d:98:6a:80:59: 8b:b6:ce:bf:17:de:04:f5:7b:0c:b9:7a:c3:6b:33: 54:a4:24:c4:a1:1c:4b:d2:bd:aa:e9:8e:21:7c:a6: 31:e6:1b:91:52:f1:68:30:b9:14:9f:a6:1d:e8:3f: 48:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:22:66:D5:A9:48:55:EE:30:88:10:21:78:73:3B:14:8D:7B:83:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b51b96b-674e-4350-82f7-7b884151238a/9a40f8e3-7939-3f15-98eb-d27eb397e980.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b51b96b-674e-4350-82f7-7b884151238a/9b51b96b-674e-4350-82f7-7b884151238a.crl X509v3 Authority Key Identifier: keyid:93:25:DD:83:88:43:05:29:7A:B1:A8:37:23:B2:07:06:D3:17:A3:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b51b96b-674e-4350-82f7-7b884151238a.cer sbgp-ipAddrBlock: critical IPv6: 2620:b8:4000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:ab:d9:80:eb:55:3e:1e:8b:47:19:bc:91:28:13:be:28:fa: 01:94:66:32:f8:a6:96:8b:bc:39:03:42:ed:48:8e:fa:e5:05: b7:c0:9d:65:b9:d6:c0:d0:60:21:11:c4:73:cb:16:1c:ea:2d: fd:21:3b:9e:af:3d:f3:a2:ab:4d:45:fa:63:92:3f:9f:38:82: 13:71:43:06:09:f3:9e:33:6a:f3:9a:40:c8:b2:35:61:80:87: 32:71:bb:59:4e:90:cb:ed:44:60:5a:05:bf:d4:28:aa:93:7e: 01:88:7e:51:73:04:d8:43:fa:f8:36:8e:04:0c:90:25:71:00: 6f:9b:b2:67:51:2e:5c:ed:8f:c9:69:c7:2a:1d:60:a0:2f:b5: 22:c6:cf:de:8c:5e:bd:a0:76:c5:d4:49:d1:f5:16:f1:a5:1a: 92:2c:e7:9a:5f:14:80:c8:86:01:24:8c:81:4e:59:29:b5:48: 02:e2:b0:71:57:3d:d6:3f:33:cc:b0:cd:6d:f3:df:5b:5d:8a: 25:8b:32:4c:22:a5:79:2a:5a:b4:d0:54:72:ed:31:cf:c5:ac: e5:69:1d:65:95:94:ce:37:d0:4d:15:08:41:34:ec:26:26:a7: 6d:73:f1:25:13:56:53:06:12:6a:b2:6c:30:a2:e6:17:fc:bf: 1c:fb:45:d9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuVp4bMhOdkksnGzkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWI1MWI5NmItNjc0ZS00MzUwLTgyZjctN2I4ODQxNTEy MzhhMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YmIyZTVkY2QtMzZhYy00ZDZjLThlNTEtZTI4ZjNhOGU3MmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZVeyUqmBmbkHVtxVO5z2BlngZtTMIETY6E5 MrClDmkgbBy5ZguwXjoiASEJmorXd1n8RHdbL4WH6BYouML/0TY2HPGcs7a+Edwc lsaXcNG38rjiD8UYmIP/3EdtTsgMdfMzZ2i2NpnIT/p0clt0z41+WiAAvxympxCN dje5ds0UWwdjgvLekgXAJaj2b6zzj/GuYculHlqVpmW2KDa+BlQczUdcr/goNHHS CXsB/ryVUrvOkn9qN+dmURdPzr0UQzrnXK5g0+snRHcDnZhqgFmLts6/F94E9XsM uXrDazNUpCTEoRxL0r2q6Y4hfKYx5huRUvFoMLkUn6Yd6D9I9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCwiZtWpSFXuMIgQIXhzOxSNe4MxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy85YjUx Yjk2Yi02NzRlLTQzNTAtODJmNy03Yjg4NDE1MTIzOGEvOWE0MGY4ZTMtNzkzOS0z ZjE1LTk4ZWItZDI3ZWIzOTdlOTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOWI1MWI5NmItNjc0ZS00MzUwLTgy ZjctN2I4ODQxNTEyMzhhLzliNTFiOTZiLTY3NGUtNDM1MC04MmY3LTdiODg0MTUx MjM4YS5jcmwwHwYDVR0jBBgwFoAUkyXdg4hDBSl6sag3I7IHBtMXozEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy85YjUxYjk2Yi02NzRlLTQzNTAtODJmNy03Yjg4 NDE1MTIzOGEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAuEAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADOr2YDrVT4ei0cZvJEoE74o+gGUZjL4ppaLvDkDQu1IjvrlBbfA nWW51sDQYCERxHPLFhzqLf0hO56vPfOiq01F+mOSP584ghNxQwYJ854zavOaQMiy NWGAhzJxu1lOkMvtRGBaBb/UKKqTfgGIflFzBNhD+vg2jgQMkCVxAG+bsmdRLlzt j8lpxyodYKAvtSLGz96MXr2gdsXUSdH1FvGlGpIs55pfFIDIhgEkjIFOWSm1SALi sHFXPdY/M8ywzW3z31tdiiWLMkwipXkqWrTQVHLtMc/FrOVpHWWVlM430E0VCEE0 7CYmp21z8SUTVlMGEmqybDCi5hf8vxz7Rdk= -----END CERTIFICATE-----Generated at Mon Oct 20 15:32:22 2025 by rpki-client