$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/9c43d2f1-7a23-39ef-babf-765d6e0412b7.roa File: 9c43d2f1-7a23-39ef-babf-765d6e0412b7.roa (raw, json) Hash identifier: jy2vDoVLKlsFLEXJ3IgRWD2hy5b79WgNpk0QJo8DB6I= Subject key identifier: 31:A1:97:42:8D:DD:68:D4:87:FA:EB:38:4B:F3:68:40:CB:E0:0D:DB Certificate issuer: /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8 Certificate serial: 010D0C9F4328584B715CADD1D58F3F78DAFF2280 Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/9c43d2f1-7a23-39ef-babf-765d6e0412b7.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 394354 IP address blocks: 2620:10a:80ab::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:ad:d1:d5:8f:3f:78:da:ff:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=3f2c5273-11be-470c-a378-1e4736fab26c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3d:9f:b3:a3:f5:01:05:e4:a7:86:b7:d9:b9: e6:59:8e:ba:27:b6:e1:c9:ae:65:1c:09:dd:d6:09: 81:70:fc:26:28:33:fb:93:1b:f7:83:b6:14:ad:a9: 43:90:34:03:f4:f7:37:e1:1a:69:d1:fe:1e:c0:b3: 5c:3a:cb:e1:c8:00:5f:46:df:fa:88:c4:fd:3a:11: 69:99:78:0a:04:e3:82:37:c2:b9:8f:5e:7d:2c:28: 13:69:c9:4a:0b:f4:0d:bf:ec:c6:3e:86:30:82:1b: 14:a4:38:14:65:af:b1:dd:54:5a:8d:93:2b:18:54: 90:cc:57:21:cb:a7:1f:25:0f:a2:8c:86:25:7b:da: 86:de:77:30:0a:88:e8:0d:3d:eb:05:1e:38:71:fc: 75:04:4a:0e:28:4c:7f:bc:4b:4d:c4:b2:50:12:58: 6b:2a:f6:de:52:f2:4b:b7:a8:4c:64:a0:8b:92:0d: 78:74:f5:a4:ea:9f:5e:db:e4:c9:5c:f0:4b:02:ae: 2c:cf:22:8c:24:be:05:83:b9:38:68:8f:e2:71:71: 86:ee:0d:08:b2:e7:e0:53:f7:4e:20:34:be:a0:2c: ae:0f:4a:6f:01:8e:b2:09:0b:97:a4:2d:0c:58:f4: c7:28:e5:cf:df:6c:a6:05:51:28:72:dc:26:f6:42: ca:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A1:97:42:8D:DD:68:D4:87:FA:EB:38:4B:F3:68:40:CB:E0:0D:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/9c43d2f1-7a23-39ef-babf-765d6e0412b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl X509v3 Authority Key Identifier: keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer sbgp-ipAddrBlock: critical IPv6: 2620:10a:80ab::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:c0:3c:d6:e5:13:75:fb:b0:f5:33:e0:30:50:09:f7:3a:fa: c9:bf:0e:db:b8:3a:7a:5f:fc:9c:9b:fe:06:07:0d:04:2a:94: d0:b3:b8:85:68:de:50:79:94:6d:09:49:33:be:22:81:22:a0: f9:ff:68:37:c5:32:fd:ef:1b:e8:c4:a9:bf:02:95:dc:2d:e5: e6:49:f0:d4:fa:ef:a1:d3:1f:0f:56:05:92:9b:0e:83:b9:76: d0:bf:47:59:05:33:67:f4:aa:5e:b9:34:27:fe:16:3a:bf:9d: d2:fb:9b:9a:68:cc:06:21:cd:86:fa:c8:fc:a7:b5:d6:03:7f: 7d:2a:85:8a:4d:97:21:92:d3:2b:75:4d:d3:b4:cf:38:89:9f: bf:30:1d:39:70:b4:5e:a2:37:49:43:83:21:1e:40:40:c8:6d: 02:09:b4:3d:2b:c1:2c:6f:da:c7:85:ed:b9:ac:b0:95:19:37: ca:27:9c:e7:cc:47:50:a3:a4:79:8d:36:f5:ec:49:31:16:ce: 77:a3:8b:10:35:f9:c2:37:8b:59:98:f9:68:61:47:92:e3:78: 2a:04:66:61:d5:8b:e9:32:7b:ef:5b:4c:61:dc:3e:64:ef:e7: 90:0f:fb:1c:99:34:01:66:a0:f5:1b:eb:06:46:a4:ce:76:08: 33:36:5f:c8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtxXK3R1Y8/eNr/IoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJjNjA0ZGUtYWMyYi00OTIxLWI2MDEtYTJjOTc2YWIx OGU4MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk M2YyYzUyNzMtMTFiZS00NzBjLWEzNzgtMWU0NzM2ZmFiMjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzj2fs6P1AQXkp4a32bnmWY66J7bhya5lHAnd 1gmBcPwmKDP7kxv3g7YUralDkDQD9Pc34Rpp0f4ewLNcOsvhyABfRt/6iMT9OhFp mXgKBOOCN8K5j159LCgTaclKC/QNv+zGPoYwghsUpDgUZa+x3VRajZMrGFSQzFch y6cfJQ+ijIYle9qG3ncwCojoDT3rBR44cfx1BEoOKEx/vEtNxLJQElhrKvbeUvJL t6hMZKCLkg14dPWk6p9e2+TJXPBLAq4szyKMJL4Fg7k4aI/icXGG7g0IsufgU/dO IDS+oCyuD0pvAY6yCQuXpC0MWPTHKOXP32ymBVEoctwm9kLKHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDGhl0KN3WjUh/rrOEvzaEDL4A3bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2 MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5NzZhYjE4ZTgvOWM0M2QyZjEtN2EyMy0z OWVmLWJhYmYtNzY1ZDZlMDQxMmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGJjNjA0ZGUtYWMyYi00OTIxLWI2 MDEtYTJjOTc2YWIxOGU4LzRiYzYwNGRlLWFjMmItNDkyMS1iNjAxLWEyYzk3NmFi MThlOC5jcmwwHwYDVR0jBBgwFoAUXezCHp0HnbEJciCnXQk9+uP8rEAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5 NzZhYjE4ZTguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABCoCr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACDAPNblE3X7sPUz4DBQCfc6+sm/Dtu4Onpf/Jyb/gYHDQQqlNCz uIVo3lB5lG0JSTO+IoEioPn/aDfFMv3vG+jEqb8Cldwt5eZJ8NT676HTHw9WBZKb DoO5dtC/R1kFM2f0ql65NCf+Fjq/ndL7m5pozAYhzYb6yPyntdYDf30qhYpNlyGS 0yt1TdO0zziJn78wHTlwtF6iN0lDgyEeQEDIbQIJtD0rwSxv2seF7bmssJUZN8on nOfMR1CjpHmNNvXsSTEWznejixA1+cI3i1mY+WhhR5LjeCoEZmHVi+kye+9bTGHc PmTv55AP+xyZNAFmoPUb6wZGpM52CDM2X8g= -----END CERTIFICATE-----Generated at Mon Oct 20 00:06:57 2025 by rpki-client