$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/50a3b1a6-d073-3466-ab1b-13bfbf7e1207.roa File: 50a3b1a6-d073-3466-ab1b-13bfbf7e1207.roa (raw, json) Hash identifier: E3KgTF87sM/KXwL+MR1MllGDDcAdr33pO9MUaBEDiDc= Subject key identifier: B9:C7:9C:1C:65:DD:A1:16:7A:D7:0D:FA:CE:E2:25:E1:5D:8E:6A:FB Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD7460C672B6E978ADC9C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/50a3b1a6-d073-3466-ab1b-13bfbf7e1207.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 36040 IP address blocks: 2001:4860:6::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:74:60:c6:72:b6:e9:78:ad:c9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=1cf15031-74e1-4979-93d8-5a88135d1f95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:75:a6:be:8d:41:89:8a:8a:f9:1e:34:89:31: 3c:ee:33:8e:6d:c1:22:3a:0a:0c:52:b5:68:39:d8: 27:ba:83:8e:93:75:3c:a1:3e:4a:7d:75:ac:44:aa: fd:e3:13:7d:6a:18:83:f8:e2:36:91:35:6c:34:36: 39:79:bb:6d:07:92:1a:a3:52:db:ee:50:1a:d6:0e: 8e:7f:94:4f:a2:98:18:d1:b9:cb:3a:dc:95:d0:1e: 69:4b:b1:01:f9:62:8f:75:c4:a3:2b:37:03:6e:18: 80:1b:89:0c:e3:99:9d:fa:18:eb:cf:85:7e:99:3d: ba:2c:38:f8:a0:c2:3b:f8:1b:7e:80:84:5e:b7:48: d4:51:61:29:03:68:94:0b:77:2b:cb:51:9f:9d:1e: 42:a3:c7:0e:27:47:cb:c1:4b:2d:e3:65:dc:78:83: 9e:88:4b:62:98:4f:f8:0b:ea:c4:e7:76:0c:e8:72: 54:d2:d6:a1:a0:b5:d2:42:8f:0e:15:24:7a:98:23: 67:8e:c0:32:a7:79:fe:91:a0:a7:73:2b:64:a6:0e: 9e:a7:0d:0c:3c:72:ae:ff:69:a3:c5:71:89:12:4f: 65:68:20:7e:67:61:af:bf:d3:68:59:73:04:8b:20: 34:9c:35:0c:c2:ae:74:77:09:ad:d0:53:ad:9c:68: 37:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:C7:9C:1C:65:DD:A1:16:7A:D7:0D:FA:CE:E2:25:E1:5D:8E:6A:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/50a3b1a6-d073-3466-ab1b-13bfbf7e1207.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:6::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:a9:05:f8:80:b3:55:ee:d1:9f:9f:29:21:f4:ca:fe:90:c9: 00:56:46:b4:23:dd:6e:5c:6c:95:04:80:04:d5:ea:a1:7a:7f: a1:ea:a8:ae:42:03:ad:17:f1:1d:bb:15:fa:4a:c8:10:66:fa: 37:ff:e3:d0:77:fd:40:a2:e9:bd:1a:bd:e5:f5:e2:95:10:18: 8a:d9:af:7e:e0:82:3e:f4:ee:cc:b1:f9:16:89:cb:97:16:41: 82:64:00:90:6c:8c:24:7e:41:56:0c:5c:3e:e6:80:0b:a6:85: d3:f4:c3:9e:6e:c4:04:5d:f7:b2:8c:06:05:33:f4:25:09:89: f9:b5:31:ec:76:c1:20:41:f8:3f:d6:1e:59:17:71:02:f1:bb: 2a:ed:62:cb:75:73:6c:72:db:e3:f8:ff:38:73:41:2a:8a:cf: 48:f5:d8:1a:7a:0e:5c:47:34:a5:b6:49:e3:11:ad:b9:7e:f5: ab:3a:6e:43:99:02:6c:14:3d:6f:b9:b3:b2:3b:55:2a:0d:0f: 60:4f:39:32:d8:0e:c8:8b:d4:80:9d:e7:5e:b5:54:c7:2b:7b: b9:f4:56:25:96:de:f6:f4:41:61:70:14:b7:92:5e:36:8e:80: 3e:f1:58:ea:cd:25:fd:8f:c6:b7:e2:45:57:89:83:2f:74:c3: b9:51:92:fe -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEtkzXRgxnK26XitycAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MWNmMTUwMzEtNzRlMS00OTc5LTkzZDgtNWE4ODEzNWQxZjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23Wmvo1BiYqK+R40iTE87jOObcEiOgoMUrVo OdgnuoOOk3U8oT5KfXWsRKr94xN9ahiD+OI2kTVsNDY5ebttB5Iao1Lb7lAa1g6O f5RPopgY0bnLOtyV0B5pS7EB+WKPdcSjKzcDbhiAG4kM45md+hjrz4V+mT26LDj4 oMI7+Bt+gIRet0jUUWEpA2iUC3cry1GfnR5Co8cOJ0fLwUst42XceIOeiEtimE/4 C+rE53YM6HJU0tahoLXSQo8OFSR6mCNnjsAyp3n+kaCncytkpg6epw0MPHKu/2mj xXGJEk9laCB+Z2Gvv9NoWXMEiyA0nDUMwq50dwmt0FOtnGg3qwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFLnHnBxl3aEWetcN+s7iJeFdjmr7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTBhM2IxYTYtZDA3My0z NDY2LWFiMWItMTNiZmJmN2UxMjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAFIYAAG AAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAKqkF+ICzVe7Rn58pIfTK/pDJAFZGtCPdblxslQSABNXqoXp/ oeqorkIDrRfxHbsV+krIEGb6N//j0Hf9QKLpvRq95fXilRAYitmvfuCCPvTuzLH5 FonLlxZBgmQAkGyMJH5BVgxcPuaAC6aF0/TDnm7EBF33sowGBTP0JQmJ+bUx7HbB IEH4P9YeWRdxAvG7Ku1iy3VzbHLb4/j/OHNBKorPSPXYGnoOXEc0pbZJ4xGtuX71 qzpuQ5kCbBQ9b7mzsjtVKg0PYE85MtgOyIvUgJ3nXrVUxyt7ufRWJZbe9vRBYXAU t5JeNo6APvFY6s0l/Y/Gt+JFV4mDL3TDuVGS/g== -----END CERTIFICATE-----Generated at Mon Oct 20 02:33:30 2025 by rpki-client