$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/778754ac-5240-4fc0-85b4-8e68334c69e2/170f4f6b-e785-3c28-8d0e-a4f739d30084.roa File: 170f4f6b-e785-3c28-8d0e-a4f739d30084.roa (raw, json) Hash identifier: a6k6iLtJLoFoLsMRsn2tZ0Kh8onu4j8dNOxq3sImEpU= Subject key identifier: 65:10:DB:A7:B7:8C:A9:0D:36:AA:F9:96:D3:93:CC:52:CD:FC:0F:2B Certificate issuer: /CN=778754ac-5240-4fc0-85b4-8e68334c69e2 Certificate serial: 010D0C9F4328584B52A72E078B94BAFA54D1E140 Authority key identifier: 92:27:67:71:6F:20:AC:78:18:51:BD:00:75:85:C4:A4:B0:D3:02:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/778754ac-5240-4fc0-85b4-8e68334c69e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/778754ac-5240-4fc0-85b4-8e68334c69e2/170f4f6b-e785-3c28-8d0e-a4f739d30084.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 377 IP address blocks: 2620:106:6000::/44 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/778754ac-5240-4fc0-85b4-8e68334c69e2/778754ac-5240-4fc0-85b4-8e68334c69e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/778754ac-5240-4fc0-85b4-8e68334c69e2/778754ac-5240-4fc0-85b4-8e68334c69e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/778754ac-5240-4fc0-85b4-8e68334c69e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:2e:07:8b:94:ba:fa:54:d1:e1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=778754ac-5240-4fc0-85b4-8e68334c69e2 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=c698e3d3-d55a-4e1e-be58-c9852051a4ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c9:24:7e:07:5b:9c:72:51:c0:8a:99:fb:b7: 1d:15:20:a4:1b:54:bc:9c:83:e0:ac:48:19:75:d6: 76:da:e7:23:b2:a7:6d:51:4d:e4:52:0b:e2:bd:03: 96:02:e9:75:31:76:ec:7a:06:72:00:d7:f3:c5:26: 5f:78:75:dc:32:f5:52:c7:36:83:1f:9a:48:a8:cb: a0:5e:66:27:c3:1b:0b:c5:7e:58:61:36:da:cc:60: a2:cc:5a:b1:f5:0f:9c:d9:3c:fe:09:ef:47:d2:87: 8c:cc:e7:0a:8a:2f:d1:3a:fe:91:d1:98:f6:15:e1: 61:7d:07:60:ca:97:21:7f:46:0b:34:fc:73:c0:e5: a8:33:93:ef:d9:1b:06:38:29:e2:8b:0d:ea:94:fe: 22:a1:bc:f5:e0:1c:56:d7:e7:97:8e:4f:81:b5:1e: 60:89:bc:b0:01:23:a0:16:67:5d:ba:6b:b1:90:c2: 1c:fc:51:7e:4a:e0:a7:52:17:89:2a:4f:f7:31:cd: 11:89:2b:a7:cb:76:ad:68:5c:18:b8:82:95:d5:78: bf:ae:0f:49:12:7a:eb:01:14:c7:d5:d7:fb:dc:74: 54:dd:26:0f:41:74:47:e0:8d:21:b2:62:ee:7b:bf: 47:d1:e1:4e:aa:67:a9:cb:8c:2d:85:65:9b:3a:c1: 78:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:10:DB:A7:B7:8C:A9:0D:36:AA:F9:96:D3:93:CC:52:CD:FC:0F:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/778754ac-5240-4fc0-85b4-8e68334c69e2/170f4f6b-e785-3c28-8d0e-a4f739d30084.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/778754ac-5240-4fc0-85b4-8e68334c69e2/778754ac-5240-4fc0-85b4-8e68334c69e2.crl X509v3 Authority Key Identifier: keyid:92:27:67:71:6F:20:AC:78:18:51:BD:00:75:85:C4:A4:B0:D3:02:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/778754ac-5240-4fc0-85b4-8e68334c69e2.cer sbgp-ipAddrBlock: critical IPv6: 2620:106:6000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:15:99:8b:50:8f:02:a6:95:12:3a:36:64:65:da:6f:3d:b6: 2f:17:49:61:08:d9:0f:5f:5e:1a:4a:1c:ec:54:b2:f2:0a:4d: ef:24:28:ab:66:97:5c:d7:ad:94:2b:6d:9c:9b:ee:ed:cc:12: 1b:1a:df:91:50:e5:18:e7:86:d4:bc:ef:55:09:59:37:7f:01: f7:c8:05:9d:04:ec:e5:47:00:54:71:82:40:f7:04:7e:87:d0: d1:c5:bc:c1:a0:10:7d:bd:0e:28:00:7d:c9:a3:7c:48:8f:82: 89:b8:e0:c3:5e:3e:e3:23:ac:89:00:ec:68:c9:33:79:c7:63: 51:12:95:f5:58:22:02:e8:1d:c1:7b:9d:16:59:4b:6c:90:53: ba:e7:30:18:2a:d9:e3:2f:d9:a5:58:9f:54:47:27:d8:aa:55: da:20:cd:16:4f:06:e8:b4:59:fc:64:ea:dd:9a:16:31:8e:a8: d8:df:b4:5e:15:8b:5e:8a:9e:ed:19:2c:49:03:86:62:12:46: e0:06:4d:16:a8:59:46:f1:c1:b1:9e:d3:af:d1:1e:98:7c:de: 62:50:8b:10:d4:3f:2d:76:be:72:d9:81:ff:02:df:4a:ba:be: b0:1e:28:16:6a:b8:62:45:4c:39:c6:f5:da:ad:a9:69:6b:92: 85:f6:29:db -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtSpy4Hi5S6+lTR4UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc4NzU0YWMtNTI0MC00ZmMwLTg1YjQtOGU2ODMzNGM2 OWUyMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk YzY5OGUzZDMtZDU1YS00ZTFlLWJlNTgtYzk4NTIwNTFhNGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhckkfgdbnHJRwIqZ+7cdFSCkG1S8nIPgrEgZ ddZ22ucjsqdtUU3kUgvivQOWAul1MXbsegZyANfzxSZfeHXcMvVSxzaDH5pIqMug XmYnwxsLxX5YYTbazGCizFqx9Q+c2Tz+Ce9H0oeMzOcKii/ROv6R0Zj2FeFhfQdg ypchf0YLNPxzwOWoM5Pv2RsGOCniiw3qlP4iobz14BxW1+eXjk+BtR5gibywASOg FmddumuxkMIc/FF+SuCnUheJKk/3Mc0RiSuny3ataFwYuIKV1Xi/rg9JEnrrARTH 1df73HRU3SYPQXRH4I0hsmLue79H0eFOqmepy4wthWWbOsF4owIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGUQ26e3jKkNNqr5ltOTzFLN/A8rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83Nzg3 NTRhYy01MjQwLTRmYzAtODViNC04ZTY4MzM0YzY5ZTIvMTcwZjRmNmItZTc4NS0z YzI4LThkMGUtYTRmNzM5ZDMwMDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzc4NzU0YWMtNTI0MC00ZmMwLTg1 YjQtOGU2ODMzNGM2OWUyLzc3ODc1NGFjLTUyNDAtNGZjMC04NWI0LThlNjgzMzRj NjllMi5jcmwwHwYDVR0jBBgwFoAUkidncW8grHgYUb0AdYXEpLDTAuIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83Nzg3NTRhYy01MjQwLTRmYzAtODViNC04ZTY4 MzM0YzY5ZTIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABBmAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFoVmYtQjwKmlRI6NmRl2m89ti8XSWEI2Q9fXhpKHOxUsvIKTe8k KKtml1zXrZQrbZyb7u3MEhsa35FQ5RjnhtS871UJWTd/AffIBZ0E7OVHAFRxgkD3 BH6H0NHFvMGgEH29DigAfcmjfEiPgom44MNePuMjrIkA7GjJM3nHY1ESlfVYIgLo HcF7nRZZS2yQU7rnMBgq2eMv2aVYn1RHJ9iqVdogzRZPBui0Wfxk6t2aFjGOqNjf tF4Vi16Knu0ZLEkDhmISRuAGTRaoWUbxwbGe06/RHph83mJQixDUPy12vnLZgf8C 30q6vrAeKBZquGJFTDnG9dqtqWlrkoX2Kds= -----END CERTIFICATE-----Generated at Mon Oct 20 13:55:33 2025 by rpki-client