$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/503a28c0-4f23-38d6-94cd-f22d4c077e71.roa File: 503a28c0-4f23-38d6-94cd-f22d4c077e71.roa (raw, json) Hash identifier: yylDjFkWbbCb7Hl6+fFDlt/yPiPNKA990zhcCmOo/e4= Subject key identifier: 31:49:53:C9:21:B3:0C:47:22:3A:28:42:02:2D:C3:41:75:7C:98:80 Certificate issuer: /CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6 Certificate serial: 010D0C9F4328584B047BFE0E9229E61C4CD5BE60 Authority key identifier: 42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/503a28c0-4f23-38d6-94cd-f22d4c077e71.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 30242 IP address blocks: 2620:84:c000::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7b:fe:0e:92:29:e6:1c:4c:d5:be:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=1b81c329-ad76-4f41-a655-6d48b24f47b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:86:eb:2a:92:be:11:38:2e:c9:69:28:0c:df: b7:bb:e4:55:d5:0f:a1:5b:b9:8f:17:2e:50:c3:58: 73:12:56:c7:1c:44:73:0e:0d:61:1f:b2:b8:7a:c2: b0:b4:a2:db:66:39:e5:b8:5b:58:3d:93:b6:74:b6: 87:4d:b5:44:84:1d:fb:c5:35:34:b5:be:4f:96:69: 02:bd:c5:d6:b4:a4:88:d2:bd:fa:e9:ad:33:a7:af: 0a:03:a4:25:6d:ce:00:d2:60:4f:a9:21:55:9f:b1: 66:07:c4:b0:f1:29:30:80:c8:fc:0e:93:2d:76:c9: 8f:f5:bf:4d:e7:92:03:73:60:e2:e5:64:06:c3:2b: 27:c5:97:e6:ae:60:aa:6b:c6:90:2c:0c:ed:f2:71: 57:79:dc:2f:08:03:21:62:02:01:e5:30:d6:8e:a4: 2d:e3:bc:16:71:a6:ca:2a:ff:a4:8d:3b:e5:6c:5c: 7e:57:6c:98:9a:4e:39:55:f8:ab:96:b2:a0:da:74: 49:b6:eb:7d:88:1d:d6:e6:9b:d6:ea:89:b8:78:5d: f7:52:e0:00:49:03:8b:89:3e:0f:db:46:6e:70:4f: c4:4f:b5:0f:e8:f3:7d:b1:c4:e7:af:7a:f3:e5:74: a2:35:7c:8a:89:38:27:77:2f:47:7b:05:49:be:b1: 6b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:49:53:C9:21:B3:0C:47:22:3A:28:42:02:2D:C3:41:75:7C:98:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/503a28c0-4f23-38d6-94cd-f22d4c077e71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl X509v3 Authority Key Identifier: keyid:42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer sbgp-ipAddrBlock: critical IPv6: 2620:84:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:9f:d3:4a:60:85:b8:49:a0:64:34:f5:c3:a8:67:b3:5b:d4: ea:5a:d5:e7:6e:55:50:e5:87:8a:37:bd:b9:3d:a7:25:be:ac: 57:0e:3e:31:01:58:9f:46:42:c5:8b:e4:ba:fc:8c:ca:35:d2: 71:7f:fd:10:ae:38:78:6c:6f:cd:ad:af:5e:c1:37:49:53:0c: cd:e0:ae:7a:9f:35:11:9b:ee:c6:cf:00:1a:4f:75:bc:d5:53: bd:c7:12:b0:50:8a:67:fd:d3:4f:9b:a6:d0:99:ef:df:9c:70: 19:5d:11:a5:4c:81:1a:1a:57:ff:bf:4f:1b:63:18:73:2c:30: 99:5a:1e:62:86:92:d9:f2:cc:50:dc:65:49:97:e6:72:8a:9b: bd:30:0a:33:ee:75:64:37:64:2f:f2:b8:3c:ed:0b:06:72:da: a4:a4:06:15:fc:b5:88:33:24:79:8d:c3:12:85:94:53:0a:6f: 9a:45:7a:7d:00:71:3b:35:2f:cc:ec:68:a8:00:6b:e5:e5:3e: cb:25:83:a3:bb:50:f9:2b:92:01:7e:9f:ec:f2:56:74:5d:f6: 7c:49:b0:ba:f1:2c:29:25:c7:3a:a3:ca:73:22:14:da:c8:46: cf:fb:e0:bb:b1:b1:e0:e4:c5:56:38:f2:f8:ca:20:51:53:3d: 7d:ec:54:5d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsEe/4OkinmHEzVvmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFkZDY4NjAtNzE5ZS00NmMwLThiN2MtODliOWU4ZDg4 ZGE2MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk MWI4MWMzMjktYWQ3Ni00ZjQxLWE2NTUtNmQ0OGIyNGY0N2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YbrKpK+ETguyWkoDN+3u+RV1Q+hW7mPFy5Q w1hzElbHHERzDg1hH7K4esKwtKLbZjnluFtYPZO2dLaHTbVEhB37xTU0tb5PlmkC vcXWtKSI0r366a0zp68KA6Qlbc4A0mBPqSFVn7FmB8Sw8SkwgMj8DpMtdsmP9b9N 55IDc2Di5WQGwysnxZfmrmCqa8aQLAzt8nFXedwvCAMhYgIB5TDWjqQt47wWcabK Kv+kjTvlbFx+V2yYmk45VfirlrKg2nRJtut9iB3W5pvW6om4eF33UuAASQOLiT4P 20ZucE/ET7UP6PN9scTnr3rz5XSiNXyKiTgndy9HewVJvrFr4wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDFJU8khswxHIjooQgItw0F1fJiAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMWRk Njg2MC03MTllLTQ2YzAtOGI3Yy04OWI5ZThkODhkYTYvNTAzYTI4YzAtNGYyMy0z OGQ2LTk0Y2QtZjIyZDRjMDc3ZTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjFkZDY4NjAtNzE5ZS00NmMwLThi N2MtODliOWU4ZDg4ZGE2LzIxZGQ2ODYwLTcxOWUtNDZjMC04YjdjLTg5YjllOGQ4 OGRhNi5jcmwwHwYDVR0jBBgwFoAUQnmNqghyfHSiXcmRrdvqyi78pSgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMWRkNjg2MC03MTllLTQ2YzAtOGI3Yy04OWI5 ZThkODhkYTYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAhMAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIif00pghbhJoGQ09cOoZ7Nb1Opa1eduVVDlh4o3vbk9pyW+rFcO PjEBWJ9GQsWL5Lr8jMo10nF//RCuOHhsb82tr17BN0lTDM3grnqfNRGb7sbPABpP dbzVU73HErBQimf900+bptCZ79+ccBldEaVMgRoaV/+/TxtjGHMsMJlaHmKGktny zFDcZUmX5nKKm70wCjPudWQ3ZC/yuDztCwZy2qSkBhX8tYgzJHmNwxKFlFMKb5pF en0AcTs1L8zsaKgAa+XlPsslg6O7UPkrkgF+n+zyVnRd9nxJsLrxLCklxzqjynMi FNrIRs/74LuxseDkxVY48vjKIFFTPX3sVF0= -----END CERTIFICATE-----Generated at Sat Oct 11 07:46:29 2025 by rpki-client