$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/bb32bb6b-e68d-3f07-abe8-33529005d4da.roa File: bb32bb6b-e68d-3f07-abe8-33529005d4da.roa (raw, json) Hash identifier: stRctkzIyC68v66MmwbypxfC1jnTJLi6mp4sY1Y4UMA= Subject key identifier: 5E:5B:4D:FF:3E:FD:10:79:AA:43:0B:75:37:8C:4C:EA:66:BB:64:71 Certificate issuer: /CN=8a9663d9-43e8-4ddb-be80-8316cf022a7a Certificate serial: 010D0C9F4328584B0B769F6B06B631499D05D780 Authority key identifier: 1E:DA:F3:05:FE:C0:E4:DB:96:3C:B8:01:F5:37:3A:C1:C5:3E:EE:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/bb32bb6b-e68d-3f07-abe8-33529005d4da.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 3379 IP address blocks: 2620:190::/32 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:9f:6b:06:b6:31:49:9d:05:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a9663d9-43e8-4ddb-be80-8316cf022a7a Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=186d4a1c-0e4b-4693-bcfb-708eb68b77d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:bc:0f:dc:2e:7a:a1:9c:5f:fd:03:80:5c:7e: bc:00:6b:bb:1b:7a:1d:b4:54:1f:58:bb:7e:4a:85: 3c:43:64:18:09:a2:45:28:8c:0e:11:ec:57:03:03: ec:b6:41:51:92:a3:3b:d8:8b:21:ca:ac:2a:f5:b4: 3c:77:36:18:9c:9f:cd:89:a7:96:28:2b:30:39:e7: 24:bf:87:c6:67:e9:49:71:f0:5b:0b:97:34:91:cd: aa:7a:63:12:71:90:4a:4a:35:b4:15:25:f6:55:dc: 67:fa:14:2a:ae:b9:fb:26:0f:31:55:18:74:63:30: a0:92:ee:82:75:5e:8f:2c:9a:eb:df:9c:cf:14:cd: 71:e3:53:d1:56:72:19:27:ea:72:9c:6a:44:ec:79: d3:d2:e8:a4:29:5c:40:e1:00:b5:d5:25:68:f9:33: 11:05:4f:85:ea:d9:1f:d5:d4:d0:67:d5:16:63:e4: c4:6b:76:eb:07:4b:d2:d3:44:2e:4d:94:b3:a5:20: 56:be:19:bf:e3:17:6c:52:d9:5d:72:ba:67:96:ee: d2:13:96:16:7f:1f:36:87:dc:c2:34:ad:5d:94:07: 8c:7c:ed:7e:64:1d:83:88:99:7e:58:f9:d4:d8:69: 86:82:81:38:bc:36:30:ee:4c:a9:2b:55:95:2e:53: 39:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:5B:4D:FF:3E:FD:10:79:AA:43:0B:75:37:8C:4C:EA:66:BB:64:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/bb32bb6b-e68d-3f07-abe8-33529005d4da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.crl X509v3 Authority Key Identifier: keyid:1E:DA:F3:05:FE:C0:E4:DB:96:3C:B8:01:F5:37:3A:C1:C5:3E:EE:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a.cer sbgp-ipAddrBlock: critical IPv6: 2620:190::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:62:0c:de:7a:dc:1b:62:14:fd:2a:a5:c0:de:73:d5:15:fb: 46:d0:8c:5f:26:55:66:b2:6b:55:fb:0a:4c:e1:22:8c:32:37: ea:3f:39:ab:ad:e1:bd:9a:68:5b:e7:e1:1f:88:65:b6:b5:73: 62:14:9a:3c:96:bb:c6:8d:28:24:f1:0d:81:97:19:cc:86:38: 6f:1d:13:6a:50:9d:90:af:e7:d5:23:d1:07:5c:5f:44:e4:8a: dc:16:69:80:67:82:4c:6c:e3:03:51:bc:2f:38:44:c7:a3:46: fc:b3:20:fe:03:92:c5:41:38:8d:42:ce:80:97:78:b8:bc:26: 0d:b7:ea:43:9b:8d:82:ad:ce:24:17:77:c1:0a:75:2c:2f:5c: 1d:eb:c2:b1:77:17:8f:6d:4e:16:9d:bd:88:ae:14:33:0f:e8: f9:f1:1f:c4:d4:b7:3b:42:a2:49:51:ed:ac:77:29:fc:29:ba: 92:63:c3:13:b2:87:56:be:90:3b:0d:b8:2e:f8:13:4c:b2:2b: f7:a7:2a:c6:27:ad:cd:96:9a:34:c3:b2:67:7e:89:87:32:86: fc:b2:0d:f5:d0:92:31:2f:34:d0:49:75:c0:09:e9:2c:65:82: b8:b4:a8:4f:cd:4e:43:df:55:be:f9:c6:a5:d4:b4:61:e8:91: 1d:80:6d:1f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsLdp9rBrYxSZ0F14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE5NjYzZDktNDNlOC00ZGRiLWJlODAtODMxNmNmMDIy YTdhMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk MTg2ZDRhMWMtMGU0Yi00NjkzLWJjZmItNzA4ZWI2OGI3N2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirwP3C56oZxf/QOAXH68AGu7G3odtFQfWLt+ SoU8Q2QYCaJFKIwOEexXAwPstkFRkqM72Ishyqwq9bQ8dzYYnJ/NiaeWKCswOeck v4fGZ+lJcfBbC5c0kc2qemMScZBKSjW0FSX2Vdxn+hQqrrn7Jg8xVRh0YzCgku6C dV6PLJrr35zPFM1x41PRVnIZJ+pynGpE7HnT0uikKVxA4QC11SVo+TMRBU+F6tkf 1dTQZ9UWY+TEa3brB0vS00QuTZSzpSBWvhm/4xdsUtldcrpnlu7SE5YWfx82h9zC NK1dlAeMfO1+ZB2DiJl+WPnU2GmGgoE4vDYw7kypK1WVLlM5XQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFF5bTf8+/RB5qkMLdTeMTOpmu2RxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84YTk2 NjNkOS00M2U4LTRkZGItYmU4MC04MzE2Y2YwMjJhN2EvYmIzMmJiNmItZTY4ZC0z ZjA3LWFiZTgtMzM1MjkwMDVkNGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGE5NjYzZDktNDNlOC00ZGRiLWJl ODAtODMxNmNmMDIyYTdhLzhhOTY2M2Q5LTQzZTgtNGRkYi1iZTgwLTgzMTZjZjAy MmE3YS5jcmwwHwYDVR0jBBgwFoAUHtrzBf7A5NuWPLgB9Tc6wcU+7oAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84YTk2NjNkOS00M2U4LTRkZGItYmU4MC04MzE2 Y2YwMjJhN2EuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJiABkDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCDYgzeetwbYhT9KqXA3nPVFftG0IxfJlVmsmtV+wpM4SKMMjfqPzmr reG9mmhb5+EfiGW2tXNiFJo8lrvGjSgk8Q2BlxnMhjhvHRNqUJ2Qr+fVI9EHXF9E 5IrcFmmAZ4JMbOMDUbwvOETHo0b8syD+A5LFQTiNQs6Al3i4vCYNt+pDm42Crc4k F3fBCnUsL1wd68KxdxePbU4Wnb2IrhQzD+j58R/E1Lc7QqJJUe2sdyn8KbqSY8MT sodWvpA7Dbgu+BNMsiv3pyrGJ63Nlpo0w7JnfomHMob8sg310JIxLzTQSXXACeks ZYK4tKhPzU5D31W++cal1LRh6JEdgG0f -----END CERTIFICATE-----Generated at Sat Oct 11 09:43:20 2025 by rpki-client