$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1c6e98c6-c317-4bae-8a4b-23e26037e1f1/cc57b996-1472-3501-b7aa-16621af1a48c.roa File: cc57b996-1472-3501-b7aa-16621af1a48c.roa (raw, json) Hash identifier: YlrfDiduCgIfsY9pTyVPZE+6jf8EJH2kbwNfGAECXQA= Subject key identifier: 4A:B5:9B:CC:B5:D0:22:95:5B:69:81:BA:5E:B9:0E:4E:B0:70:E8:BB Certificate issuer: /CN=1c6e98c6-c317-4bae-8a4b-23e26037e1f1 Certificate serial: 010D0C9F4328584B8EAD0BB7AD184A440CA6DA80 Authority key identifier: 03:E5:92:7A:88:59:9A:F7:18:56:4F:32:FC:04:9D:9D:6E:45:4A:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1c6e98c6-c317-4bae-8a4b-23e26037e1f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1c6e98c6-c317-4bae-8a4b-23e26037e1f1/cc57b996-1472-3501-b7aa-16621af1a48c.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 393468 IP address blocks: 2620:135:f000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1c6e98c6-c317-4bae-8a4b-23e26037e1f1/1c6e98c6-c317-4bae-8a4b-23e26037e1f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1c6e98c6-c317-4bae-8a4b-23e26037e1f1/1c6e98c6-c317-4bae-8a4b-23e26037e1f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1c6e98c6-c317-4bae-8a4b-23e26037e1f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ad:0b:b7:ad:18:4a:44:0c:a6:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c6e98c6-c317-4bae-8a4b-23e26037e1f1 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=5e5904ff-3c49-4148-91eb-714ee5354e44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ff:c2:f8:06:9f:24:bd:5f:dd:2e:83:bf:3d: e9:ab:58:ab:05:09:d0:f1:aa:4f:59:12:1d:63:5d: 46:ce:7b:6e:42:fe:5f:aa:68:15:d7:49:9f:5b:28: d5:ba:61:62:d9:f0:57:8b:1c:91:dc:b1:c6:6c:92: 09:56:0d:5e:ca:95:a3:66:9a:76:1b:0b:63:ca:4c: 0b:fa:44:a5:7a:29:b7:46:41:09:7a:e5:63:98:ce: ab:e4:e5:42:95:61:25:ac:7a:91:bf:f1:f4:95:cf: 97:7f:db:80:d4:3c:72:f2:e7:65:bf:bb:43:bc:b3: 67:6a:20:48:50:6e:0b:ff:d2:39:19:06:a7:fa:84: 72:b7:a7:af:40:2f:6f:3f:1e:3e:e1:2f:62:a0:3c: 77:65:b9:c2:31:b9:0d:71:74:fd:3d:90:bd:42:15: b3:24:0c:9a:29:ba:c2:02:d6:5e:4c:c1:31:98:92: 8b:1b:89:8f:a9:3c:98:28:4b:13:cc:7a:e1:44:cb: bd:1d:d8:f4:76:e5:87:37:ad:68:94:9c:04:b4:a1: 43:49:5a:a4:6e:2f:43:84:49:e4:2a:1e:89:28:fc: 95:0a:1c:1a:9e:40:4c:ef:72:6c:90:ea:ed:bf:2b: 8a:16:42:8f:49:b6:84:a4:d6:77:15:d8:69:60:d1: 7c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B5:9B:CC:B5:D0:22:95:5B:69:81:BA:5E:B9:0E:4E:B0:70:E8:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1c6e98c6-c317-4bae-8a4b-23e26037e1f1/cc57b996-1472-3501-b7aa-16621af1a48c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1c6e98c6-c317-4bae-8a4b-23e26037e1f1/1c6e98c6-c317-4bae-8a4b-23e26037e1f1.crl X509v3 Authority Key Identifier: keyid:03:E5:92:7A:88:59:9A:F7:18:56:4F:32:FC:04:9D:9D:6E:45:4A:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1c6e98c6-c317-4bae-8a4b-23e26037e1f1.cer sbgp-ipAddrBlock: critical IPv6: 2620:135:f000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:21:77:2d:bc:54:89:23:ed:0f:b3:aa:27:b8:31:04:11:bb: 26:26:44:28:3a:72:30:3e:70:b2:79:ac:d5:71:13:c9:d7:6e: 14:44:9f:8a:03:8d:ac:3f:1d:7b:95:a0:55:64:79:ef:29:6a: 96:b0:38:dd:e1:75:89:bb:e8:f0:92:96:b5:b0:92:23:68:fc: f2:60:77:b5:ff:8e:63:95:80:f1:86:ff:e3:08:4d:df:0f:35: 5c:ba:53:a0:9e:02:96:a4:bb:e0:76:ff:6a:ea:b4:10:bd:6c: ad:5d:db:5c:6f:f2:99:25:af:da:c1:ba:22:1b:29:07:05:0e: e9:a9:19:b4:0e:8d:3b:ae:3e:d4:fe:3b:53:95:bc:26:32:eb: a1:35:e1:23:44:9a:51:9f:16:f5:2c:95:c4:e7:fe:70:06:7f: e5:07:dd:d7:09:62:3a:a8:a5:bd:a1:a0:d4:b7:1c:d7:5f:53: 96:5c:ed:8a:cc:16:f2:53:5b:72:3b:ee:93:89:ee:42:10:ff: e7:b5:57:d0:a2:e0:b6:d6:b0:48:a3:92:97:fa:c1:01:03:73: 3f:19:08:e6:15:9b:93:28:8d:e8:ab:69:97:e6:2e:6b:b0:d0: b0:db:4e:33:9f:22:dd:11:66:64:6a:29:60:a4:5e:b8:b9:69: 03:62:b4:88 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuOrQu3rRhKRAym2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM2ZTk4YzYtYzMxNy00YmFlLThhNGItMjNlMjYwMzdl MWYxMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk NWU1OTA0ZmYtM2M0OS00MTQ4LTkxZWItNzE0ZWU1MzU0ZTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAof/C+AafJL1f3S6Dvz3pq1irBQnQ8apPWRId Y11GzntuQv5fqmgV10mfWyjVumFi2fBXixyR3LHGbJIJVg1eypWjZpp2GwtjykwL +kSleim3RkEJeuVjmM6r5OVClWElrHqRv/H0lc+Xf9uA1Dxy8udlv7tDvLNnaiBI UG4L/9I5GQan+oRyt6evQC9vPx4+4S9ioDx3ZbnCMbkNcXT9PZC9QhWzJAyaKbrC AtZeTMExmJKLG4mPqTyYKEsTzHrhRMu9Hdj0duWHN61olJwEtKFDSVqkbi9DhEnk Kh6JKPyVChwankBM73JskOrtvyuKFkKPSbaEpNZ3FdhpYNF8pQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEq1m8y10CKVW2mBul65Dk6wcOi7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8xYzZl OThjNi1jMzE3LTRiYWUtOGE0Yi0yM2UyNjAzN2UxZjEvY2M1N2I5OTYtMTQ3Mi0z NTAxLWI3YWEtMTY2MjFhZjFhNDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMWM2ZTk4YzYtYzMxNy00YmFlLThh NGItMjNlMjYwMzdlMWYxLzFjNmU5OGM2LWMzMTctNGJhZS04YTRiLTIzZTI2MDM3 ZTFmMS5jcmwwHwYDVR0jBBgwFoAUA+WSeohZmvcYVk8y/ASdnW5FSvswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8xYzZlOThjNi1jMzE3LTRiYWUtOGE0Yi0yM2Uy NjAzN2UxZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABNfAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEEhdy28VIkj7Q+zqie4MQQRuyYmRCg6cjA+cLJ5rNVxE8nXbhRE n4oDjaw/HXuVoFVkee8papawON3hdYm76PCSlrWwkiNo/PJgd7X/jmOVgPGG/+MI Td8PNVy6U6CeApaku+B2/2rqtBC9bK1d21xv8pklr9rBuiIbKQcFDumpGbQOjTuu PtT+O1OVvCYy66E14SNEmlGfFvUslcTn/nAGf+UH3dcJYjqopb2hoNS3HNdfU5Zc 7YrMFvJTW3I77pOJ7kIQ/+e1V9Ci4LbWsEijkpf6wQEDcz8ZCOYVm5MojeiraZfm Lmuw0LDbTjOfIt0RZmRqKWCkXri5aQNitIg= -----END CERTIFICATE-----Generated at Mon Oct 20 15:31:16 2025 by rpki-client