$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/aa1473b6-960d-3817-97b5-bf62bcaacb1c.roa File: aa1473b6-960d-3817-97b5-bf62bcaacb1c.roa (raw, json) Hash identifier: MYp0/7J4NsPhP6Gyx+KZeX8wE/VXDe3tJ/MaxQUN1As= Subject key identifier: 64:C9:C5:48:5C:4C:E7:91:C3:C1:30:94:FF:7D:DB:36:55:42:11:72 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584B25FC46A210F2F30478B76100 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/aa1473b6-960d-3817-97b5-bf62bcaacb1c.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 20473 IP address blocks: 2606:f180:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:46:a2:10:f2:f3:04:78:b7:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=135ae867-c899-44c6-ab19-591f81050a56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7c:41:c9:3f:d6:58:74:0b:f6:39:69:10:3a: b7:64:61:b3:41:33:39:fa:9d:27:11:2e:0f:1c:62: 9f:bd:74:5b:5b:14:56:ff:6f:0c:c4:f8:fe:11:83: 65:34:80:38:23:e0:75:39:49:7b:1e:92:a0:44:f2: 10:3e:8b:40:91:8e:ed:1e:86:45:b7:c6:89:57:f8: c4:02:c6:02:bf:8a:df:90:32:81:11:15:04:d6:55: ec:4e:3a:f8:b1:5e:5b:7b:88:93:1f:c6:d4:6d:08: 97:b8:55:d0:2b:32:4b:de:e6:7f:d6:3f:55:ef:90: af:82:52:17:dc:1d:79:86:9d:cd:9e:6e:63:fa:42: c4:ff:35:5e:68:85:e3:22:aa:6f:f7:05:f0:c4:97: a1:dd:bd:3f:92:d4:78:ca:4d:f0:ed:bf:3c:fd:ce: 2d:5c:b8:b5:ae:b5:71:7b:a2:73:05:4a:1f:11:e3: d2:7f:08:49:93:3a:c0:1b:2a:e2:43:28:18:a0:90: dd:d0:39:e0:c9:24:80:4e:9b:f1:37:4b:6d:ac:c7: f6:4b:e2:b2:fb:55:a7:12:b0:d7:63:15:ac:11:5a: 7d:7e:ad:e7:10:3a:44:20:fb:e2:47:dc:4a:8a:09: 7b:fe:c6:dc:5e:0c:66:75:f7:cb:fa:c6:95:33:74: f1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:C9:C5:48:5C:4C:E7:91:C3:C1:30:94:FF:7D:DB:36:55:42:11:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/aa1473b6-960d-3817-97b5-bf62bcaacb1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv6: 2606:f180:5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:1c:4c:45:e2:c6:b9:2b:eb:eb:3a:32:0d:8a:af:1c:10:8c: 64:70:33:45:bb:fe:81:f6:94:72:c5:99:8e:80:b9:78:74:1a: 32:1d:7e:ea:73:69:85:ae:7a:be:41:2c:69:47:9a:75:10:71: 50:17:8a:e1:67:a6:90:1d:d5:a6:0b:51:eb:1c:b1:34:6f:b4: d1:0f:26:e0:72:95:17:cc:c0:ac:ad:56:d1:15:33:6b:24:c4: 6e:39:bd:02:39:8e:f7:3f:8a:f8:2f:b9:0e:56:4b:5c:2b:20: b2:1d:d5:cc:7f:52:a0:e4:26:79:9f:07:f6:4b:a4:6c:ae:43: e7:26:e3:f5:ab:4a:c6:fa:f9:7e:34:41:71:d8:7a:84:d2:df: 0c:a1:1b:3f:bf:d0:67:56:19:bd:71:71:1b:eb:69:d4:84:f8: 36:e5:1c:5d:87:7b:72:9d:5c:e2:ba:1a:43:d2:1e:0b:f5:6d: 1d:b4:00:98:68:61:7a:7d:09:f8:c9:09:49:24:d1:66:c8:58: 37:74:2a:e9:d1:93:10:97:7c:74:d5:fc:2d:cd:9d:48:ba:e7: 3f:01:f9:12:c7:8d:85:4a:26:a4:56:a7:70:fa:df:d5:89:c3: ad:90:67:e7:a5:63:53:74:4f:a3:93:fe:f4:9e:2f:3c:24:7b: 8b:79:27:74 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsl/EaiEPLzBHi3YQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk MTM1YWU4NjctYzg5OS00NGM2LWFiMTktNTkxZjgxMDUwYTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnxByT/WWHQL9jlpEDq3ZGGzQTM5+p0nES4P HGKfvXRbWxRW/28MxPj+EYNlNIA4I+B1OUl7HpKgRPIQPotAkY7tHoZFt8aJV/jE AsYCv4rfkDKBERUE1lXsTjr4sV5be4iTH8bUbQiXuFXQKzJL3uZ/1j9V75CvglIX 3B15hp3Nnm5j+kLE/zVeaIXjIqpv9wXwxJeh3b0/ktR4yk3w7b88/c4tXLi1rrVx e6JzBUofEePSfwhJkzrAGyriQygYoJDd0DngySSATpvxN0ttrMf2S+Ky+1WnErDX YxWsEVp9fq3nEDpEIPviR9xKigl7/sbcXgxmdffL+saVM3TxBQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGTJxUhcTOeRw8EwlP992zZVQhFyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvYWExNDczYjYtOTYwZC0z ODE3LTk3YjUtYmY2MmJjYWFjYjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgbxgAAF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFocTEXixrkr6+s6Mg2KrxwQjGRwM0W7/oH2lHLFmY6AuXh0GjId fupzaYWuer5BLGlHmnUQcVAXiuFnppAd1aYLUescsTRvtNEPJuBylRfMwKytVtEV M2skxG45vQI5jvc/ivgvuQ5WS1wrILId1cx/UqDkJnmfB/ZLpGyuQ+cm4/WrSsb6 +X40QXHYeoTS3wyhGz+/0GdWGb1xcRvradSE+DblHF2He3KdXOK6GkPSHgv1bR20 AJhoYXp9CfjJCUkk0WbIWDd0KunRkxCXfHTV/C3NnUi65z8B+RLHjYVKJqRWp3D6 39WJw62QZ+elY1N0T6OT/vSeLzwke4t5J3Q= -----END CERTIFICATE-----Generated at Thu Oct 9 20:11:14 2025 by rpki-client