$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/e666913e-9906-3516-98a8-a6e27a69ef82.roa File: e666913e-9906-3516-98a8-a6e27a69ef82.roa (raw, json) Hash identifier: MQSaI4SEfEIhIKMpB2E8SVReX2ZvCwRdPt47A6yqTOo= Subject key identifier: CD:5C:22:17:D8:E4:5F:5F:94:DA:04:C6:CB:99:48:D4:DC:AD:D5:08 Certificate issuer: /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Certificate serial: 010D0C9F4328584B1D9C2B6C72FC5E1392679D40 Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/e666913e-9906-3516-98a8-a6e27a69ef82.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 8075 IP address blocks: 2620:12c:9005::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:2b:6c:72:fc:5e:13:92:67:9d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=3a13892a-8c7b-4b3c-bdbf-ea0041020628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:59:82:a8:9b:fa:81:91:1a:2e:15:ae:73:da: bf:6d:0e:72:fb:b7:3b:d3:d1:8a:f1:e3:f0:53:c4: f8:be:9f:a2:c0:b6:40:b0:0b:bc:dc:8a:14:84:8e: c4:12:37:cf:50:e2:35:ab:8a:73:a2:b6:36:72:d2: 90:9f:d4:4e:4a:94:f5:d4:fc:c7:68:32:1f:05:85: 36:38:2e:77:c8:4d:6c:3d:13:f4:2f:bf:a9:5d:9e: d3:0e:fa:f0:00:e8:08:81:c7:4e:28:91:77:c2:a4: 3c:8f:14:22:bf:01:7f:df:6f:b3:a2:09:ef:e6:fc: b6:95:b1:02:2a:87:4f:3c:6d:83:09:e6:da:0f:64: 0d:0a:a3:48:89:76:36:34:1f:15:f7:d4:53:cc:52: 84:0d:94:13:a9:6d:1a:f9:18:00:f8:fd:de:9e:8e: 57:32:ea:8e:d0:f8:0a:4d:d0:9b:49:ab:c0:fa:9f: 38:83:07:5d:66:bd:d8:21:c4:81:37:2f:65:43:ca: 16:bc:0d:52:aa:45:aa:b9:e6:78:d4:71:f1:c2:63: fc:f9:eb:fc:c7:58:2a:a5:45:21:af:3e:39:1b:cf: 3f:d0:01:98:ce:f1:6a:c9:cb:65:5c:9a:09:da:93: ef:df:c5:2c:c9:27:d1:6c:ce:e3:37:57:07:6e:4a: 2f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:5C:22:17:D8:E4:5F:5F:94:DA:04:C6:CB:99:48:D4:DC:AD:D5:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/e666913e-9906-3516-98a8-a6e27a69ef82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl X509v3 Authority Key Identifier: keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer sbgp-ipAddrBlock: critical IPv6: 2620:12c:9005::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:81:b3:31:be:6e:fa:ca:2d:f1:82:07:1e:b2:ce:50:4c:d2: 5a:64:13:33:75:14:4f:24:cc:b9:21:f7:1b:93:09:17:90:e7: 4a:9a:5a:54:f1:aa:dd:26:58:e0:49:5b:62:06:af:08:93:5e: 54:2a:19:53:c4:28:de:93:1d:c8:1b:1a:42:9f:4a:74:b9:56: d5:76:0c:73:f7:9e:42:80:37:59:a7:50:46:93:52:06:30:34: 5f:e6:fb:90:fd:db:0d:6e:3f:50:6e:34:92:8f:18:6a:bd:fb: 4e:0d:21:e2:19:c3:fb:2d:0e:81:78:54:68:37:53:cf:6b:7c: 2d:77:08:26:0e:92:8f:a3:75:a9:16:d8:9a:61:36:c7:cc:08: e5:08:65:b0:8a:2a:c1:0e:42:10:61:d8:c2:bb:7b:09:b7:84: e7:24:c0:dc:5f:e6:c1:e6:dd:91:5f:1a:ad:6c:ec:c0:25:ac: 7d:a6:3a:5f:cc:70:76:09:75:e6:b8:d5:39:8e:8b:66:ad:41: 0c:ec:74:c4:b1:8b:6c:c6:79:3b:55:d3:a6:43:f1:1b:51:bd: 14:92:c8:47:23:e5:e9:a8:ce:b5:06:12:77:6b:31:e5:25:4f: dd:4c:c5:7e:15:84:e6:6e:4c:2e:e5:25:bf:1b:57:27:dd:8d: ff:16:63:f0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsdnCtscvxeE5JnnUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI0ZGZiNWYtODU4MC00OGZmLWIzMmUtZmQzOTNmYTdk Y2M0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk M2ExMzg5MmEtOGM3Yi00YjNjLWJkYmYtZWEwMDQxMDIwNjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVmCqJv6gZEaLhWuc9q/bQ5y+7c709GK8ePw U8T4vp+iwLZAsAu83IoUhI7EEjfPUOI1q4pzorY2ctKQn9ROSpT11PzHaDIfBYU2 OC53yE1sPRP0L7+pXZ7TDvrwAOgIgcdOKJF3wqQ8jxQivwF/32+zognv5vy2lbEC KodPPG2DCebaD2QNCqNIiXY2NB8V99RTzFKEDZQTqW0a+RgA+P3eno5XMuqO0PgK TdCbSavA+p84gwddZr3YIcSBNy9lQ8oWvA1SqkWqueZ41HHxwmP8+ev8x1gqpUUh rz45G88/0AGYzvFqyctlXJoJ2pPv38UsySfRbM7jN1cHbkovAQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM1cIhfY5F9flNoExsuZSNTcrdUIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84MjRk ZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5M2ZhN2RjYzQvZTY2NjkxM2UtOTkwNi0z NTE2LTk4YTgtYTZlMjdhNjllZjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODI0ZGZiNWYtODU4MC00OGZmLWIz MmUtZmQzOTNmYTdkY2M0LzgyNGRmYjVmLTg1ODAtNDhmZi1iMzJlLWZkMzkzZmE3 ZGNjNC5jcmwwHwYDVR0jBBgwFoAU2YT8ASUa9eXtm7NpUFgxtxJHKZYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84MjRkZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5 M2ZhN2RjYzQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABLJAF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAASBszG+bvrKLfGCBx6yzlBM0lpkEzN1FE8kzLkh9xuTCReQ50qa WlTxqt0mWOBJW2IGrwiTXlQqGVPEKN6THcgbGkKfSnS5VtV2DHP3nkKAN1mnUEaT UgYwNF/m+5D92w1uP1BuNJKPGGq9+04NIeIZw/stDoF4VGg3U89rfC13CCYOko+j dakW2JphNsfMCOUIZbCKKsEOQhBh2MK7ewm3hOckwNxf5sHm3ZFfGq1s7MAlrH2m Ol/McHYJdea41TmOi2atQQzsdMSxi2zGeTtV06ZD8RtRvRSSyEcj5emozrUGEndr MeUlT91MxX4VhOZuTC7lJb8bVyfdjf8WY/A= -----END CERTIFICATE-----Generated at Sun Oct 19 23:04:26 2025 by rpki-client