$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/86f557d8-087d-3afd-a352-3f7763892440.roa File: 86f557d8-087d-3afd-a352-3f7763892440.roa (raw, json) Hash identifier: qt52kcL9TjNBncxWuamz1lsI3dduz6rjFFC2L4jHbmg= Subject key identifier: DD:49:8E:3C:1C:D8:83:40:5C:FD:A8:27:A4:20:CB:A8:7F:55:5A:F7 Certificate issuer: /CN=14c9e0ce-0f12-4bc8-989c-5d332a7cf522 Certificate serial: 010D0C9F4328584B6D2C97940FBB78E15C17D840 Authority key identifier: FD:FA:5F:D3:82:C9:5A:C7:81:E6:B2:B0:54:B4:C9:D1:F0:1C:B5:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/86f557d8-087d-3afd-a352-3f7763892440.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 40271 IP address blocks: 2620:11a:b002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:97:94:0f:bb:78:e1:5c:17:d8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14c9e0ce-0f12-4bc8-989c-5d332a7cf522 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=af288093-aca8-4829-b278-0b746f542e1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:0b:95:88:f5:8d:82:30:43:8a:b8:3d:f0:8b: f9:e0:2d:d7:71:f1:56:66:6d:7a:48:04:4e:a5:c7: fd:8a:8d:94:93:b5:c8:1d:ca:f1:56:f7:78:f2:41: 51:55:19:33:8e:15:2b:92:28:e8:d1:05:27:ac:b2: bf:eb:7d:84:7d:06:ce:a4:4a:8a:8f:3e:5a:85:a0: a6:49:58:95:9e:97:cb:44:71:70:3b:03:3e:e2:58: 8f:1c:cc:99:a5:d4:4c:39:69:51:5a:7f:05:a1:16: 83:9d:33:3f:a5:dd:7d:6f:cf:83:da:00:02:dc:ab: 00:3f:8e:77:38:c6:34:e7:4f:c9:9e:05:70:25:eb: 23:db:0d:56:10:a6:95:53:b4:72:23:c0:11:a1:cc: 53:75:d2:aa:89:b0:33:7b:67:0b:8a:cc:28:54:4d: f3:86:21:33:3c:8b:bd:94:86:18:b1:58:10:c8:ef: a2:6c:18:63:a6:8d:26:29:d3:94:b8:7f:e9:60:62: 98:48:76:ae:1c:6d:38:c2:da:4e:bf:9b:82:1e:82: f4:b5:33:af:e0:12:5b:68:16:ea:0d:43:5c:9a:a0: 5c:00:50:1a:dc:ee:42:b3:ed:7a:1a:b0:f5:66:fb: d5:dd:61:d9:b6:c7:f6:17:cc:27:6f:1c:84:eb:96: a7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:49:8E:3C:1C:D8:83:40:5C:FD:A8:27:A4:20:CB:A8:7F:55:5A:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/86f557d8-087d-3afd-a352-3f7763892440.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.crl X509v3 Authority Key Identifier: keyid:FD:FA:5F:D3:82:C9:5A:C7:81:E6:B2:B0:54:B4:C9:D1:F0:1C:B5:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.cer sbgp-ipAddrBlock: critical IPv6: 2620:11a:b002::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:23:41:6c:10:ba:69:e2:fc:af:68:f3:6f:90:a8:2a:36:93: c6:ad:8c:cf:4b:ea:a0:9a:71:94:b8:17:24:f1:cd:b5:18:ce: 96:6e:e5:71:02:88:78:f7:bc:69:7c:6e:ea:7a:2e:4f:e6:7a: d0:2d:8a:cd:74:2e:b4:fe:d2:6d:b5:de:d2:bd:c4:f5:c7:36: 1f:fb:92:1c:0a:17:4d:ba:cd:af:59:99:45:96:6a:4b:55:8c: 8d:5a:d3:f4:90:b7:84:b2:b9:ca:a2:fe:df:ce:44:96:21:9f: 1f:5d:a1:25:56:e7:6e:08:c7:b4:8c:de:45:92:d7:6a:8f:6b: f3:09:0c:d1:c5:b8:2d:ae:5a:4e:0a:14:0f:e2:8f:3f:4a:c5: 24:2c:29:ec:2a:cf:a5:3d:49:d2:a5:d0:52:83:28:7c:83:fd: 45:05:88:99:ad:3f:93:a1:00:4e:0a:ba:d5:29:84:26:a7:ed: 4a:ed:f8:46:45:0b:9a:cd:92:56:83:19:eb:ad:61:1f:15:8f: 1f:92:d5:42:20:1b:cd:df:81:a9:f7:6c:40:50:9d:45:64:ac: 0b:94:58:b8:f5:4f:c5:4f:79:60:8c:15:48:c8:74:75:7f:82: df:ad:86:9c:52:da:19:31:98:3f:6a:4b:71:35:3c:e2:bd:39: e9:2e:f7:c9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEttLJeUD7t44VwX2EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTRjOWUwY2UtMGYxMi00YmM4LTk4OWMtNWQzMzJhN2Nm NTIyMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk YWYyODgwOTMtYWNhOC00ODI5LWIyNzgtMGI3NDZmNTQyZTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwuViPWNgjBDirg98Iv54C3XcfFWZm16SARO pcf9io2Uk7XIHcrxVvd48kFRVRkzjhUrkijo0QUnrLK/632EfQbOpEqKjz5ahaCm SViVnpfLRHFwOwM+4liPHMyZpdRMOWlRWn8FoRaDnTM/pd19b8+D2gAC3KsAP453 OMY050/JngVwJesj2w1WEKaVU7RyI8ARocxTddKqibAze2cLiswoVE3zhiEzPIu9 lIYYsVgQyO+ibBhjpo0mKdOUuH/pYGKYSHauHG04wtpOv5uCHoL0tTOv4BJbaBbq DUNcmqBcAFAa3O5Cs+16GrD1ZvvV3WHZtsf2F8wnbxyE65anwQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN1Jjjwc2INAXP2oJ6Qgy6h/VVr3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNGM5 ZTBjZS0wZjEyLTRiYzgtOTg5Yy01ZDMzMmE3Y2Y1MjIvODZmNTU3ZDgtMDg3ZC0z YWZkLWEzNTItM2Y3NzYzODkyNDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTRjOWUwY2UtMGYxMi00YmM4LTk4 OWMtNWQzMzJhN2NmNTIyLzE0YzllMGNlLTBmMTItNGJjOC05ODljLTVkMzMyYTdj ZjUyMi5jcmwwHwYDVR0jBBgwFoAU/fpf04LJWseB5rKwVLTJ0fActTwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNGM5ZTBjZS0wZjEyLTRiYzgtOTg5Yy01ZDMz MmE3Y2Y1MjIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABGrAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK0jQWwQumni/K9o82+QqCo2k8atjM9L6qCacZS4FyTxzbUYzpZu 5XECiHj3vGl8bup6Lk/metAtis10LrT+0m213tK9xPXHNh/7khwKF026za9ZmUWW aktVjI1a0/SQt4Syucqi/t/ORJYhnx9doSVW524Ix7SM3kWS12qPa/MJDNHFuC2u Wk4KFA/ijz9KxSQsKewqz6U9SdKl0FKDKHyD/UUFiJmtP5OhAE4KutUphCan7Urt +EZFC5rNklaDGeutYR8Vjx+S1UIgG83fgan3bEBQnUVkrAuUWLj1T8VPeWCMFUjI dHV/gt+thpxS2hkxmD9qS3E1POK9Oeku98k= -----END CERTIFICATE-----Generated at Mon Oct 20 13:55:43 2025 by rpki-client