$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/519ed1cf-da7c-3f80-abd1-d8e4ad9d8789.roa File: 519ed1cf-da7c-3f80-abd1-d8e4ad9d8789.roa (raw, json) Hash identifier: WLI29PO58vcn1kAl7KIMqGK/nF84Nxsnt8MfJO3Tzeo= Subject key identifier: 08:96:2A:14:8E:E0:F8:A9:A4:83:71:73:6E:32:1D:16:6D:D7:37:18 Certificate issuer: /CN=f95a39d1-400d-423a-89c4-37f7f1a145f2 Certificate serial: 010D0C9F4328584B4D11D95826D867A02B38B16C Authority key identifier: 45:8E:89:B4:32:05:8D:58:19:8A:7F:23:01:4B:F6:1F:1D:CD:44:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/519ed1cf-da7c-3f80-abd1-d8e4ad9d8789.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 399844 IP address blocks: 2620:68:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/f95a39d1-400d-423a-89c4-37f7f1a145f2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/f95a39d1-400d-423a-89c4-37f7f1a145f2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:d9:58:26:d8:67:a0:2b:38:b1:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f95a39d1-400d-423a-89c4-37f7f1a145f2 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=4d18018c-0481-469c-84de-de12cc65936c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ef:53:9e:72:7c:3c:45:47:85:9e:34:80:b1: a6:cc:9d:3c:4f:f8:ba:53:b3:04:7a:91:0c:1d:fb: 3a:81:59:b9:21:a7:e0:f4:1b:36:7b:74:9c:54:e5: 85:e2:3c:ca:42:17:8c:68:22:09:1c:48:21:8b:0e: 61:31:14:2f:e8:69:b5:55:91:ce:a5:99:66:b3:aa: 54:5b:c3:07:2e:40:53:a5:b6:51:b5:84:f7:1f:39: a1:ea:a8:d6:64:42:23:a0:b1:71:3d:ca:f6:80:11: 83:a3:c5:17:ba:21:5a:ec:11:66:3a:00:97:8f:9b: 78:0f:16:88:a1:01:eb:b2:a2:7c:fa:70:c6:09:65: 5a:7b:77:98:1c:3f:75:88:74:67:be:9d:5d:52:00: 7d:f8:fb:61:5a:19:bd:9b:6b:be:f7:04:7f:88:64: 20:8b:bd:2b:1e:a7:5c:1d:ed:87:d1:02:a1:f4:36: 14:81:e0:ef:ea:80:55:f2:e6:99:a4:5c:d2:c4:e9: 98:b9:78:18:b3:b7:f2:67:8b:5a:03:be:a6:27:59: da:c9:e1:f9:d5:16:5b:b1:73:9c:35:cf:dd:11:30: 57:be:50:24:bc:fd:f6:61:2e:d6:aa:74:34:51:a1: d1:24:51:d5:e2:f1:44:18:8f:19:56:47:9e:a8:7c: c4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:96:2A:14:8E:E0:F8:A9:A4:83:71:73:6E:32:1D:16:6D:D7:37:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/519ed1cf-da7c-3f80-abd1-d8e4ad9d8789.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/f95a39d1-400d-423a-89c4-37f7f1a145f2.crl X509v3 Authority Key Identifier: keyid:45:8E:89:B4:32:05:8D:58:19:8A:7F:23:01:4B:F6:1F:1D:CD:44:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2.cer sbgp-ipAddrBlock: critical IPv6: 2620:68:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:93:b5:7f:c5:26:80:66:d9:05:2e:7f:07:83:fc:c3:e7:14: 4a:bb:e9:ae:11:9b:a7:f9:9b:85:fd:8e:92:0e:4b:fa:e5:a8: c0:62:ae:99:a2:21:80:b3:f6:f0:63:54:f2:e8:eb:ef:1f:c5: eb:5e:0d:40:a0:b2:bf:76:61:11:8f:82:55:fe:cd:b7:75:66: 31:e1:77:9a:da:a7:27:5c:e4:0f:32:97:23:f4:e1:5b:8a:d3: 0e:b7:f2:2c:14:d1:f8:65:ad:bf:bd:6f:b6:e6:a6:9f:27:10: 08:72:9b:9a:00:99:2e:0b:d0:d0:08:ee:d8:3c:2e:c2:fa:56: 27:9b:ff:d2:fa:48:e1:3f:c4:a2:2a:f8:d0:e2:4e:3b:c0:57: 0b:44:b8:4d:5a:b3:66:b7:f1:95:09:31:f7:b7:54:82:f8:fc: aa:4f:6a:36:33:7d:32:2b:f9:3e:4e:d5:04:f8:1e:69:98:a6: 9b:cd:cd:79:eb:5f:54:07:6a:59:0b:57:dd:9e:32:70:7e:d5: 2b:04:9b:b2:9e:cf:b4:40:b8:c9:91:8c:d4:87:ea:74:7d:eb: 8a:d6:99:7c:c0:91:65:55:b2:f7:46:1e:b2:0a:5a:ee:be:5a: 98:2d:c9:68:79:28:65:39:ab:a9:3c:aa:a7:45:75:73:bb:ac: 30:1d:ce:3f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtNEdlYJthnoCs4sWwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1YTM5ZDEtNDAwZC00MjNhLTg5YzQtMzdmN2YxYTE0 NWYyMB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk NGQxODAxOGMtMDQ4MS00NjljLTg0ZGUtZGUxMmNjNjU5MzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAme9TnnJ8PEVHhZ40gLGmzJ08T/i6U7MEepEM Hfs6gVm5Iafg9Bs2e3ScVOWF4jzKQheMaCIJHEghiw5hMRQv6Gm1VZHOpZlms6pU W8MHLkBTpbZRtYT3Hzmh6qjWZEIjoLFxPcr2gBGDo8UXuiFa7BFmOgCXj5t4DxaI oQHrsqJ8+nDGCWVae3eYHD91iHRnvp1dUgB9+PthWhm9m2u+9wR/iGQgi70rHqdc He2H0QKh9DYUgeDv6oBV8uaZpFzSxOmYuXgYs7fyZ4taA76mJ1nayeH51RZbsXOc Nc/dETBXvlAkvP32YS7WqnQ0UaHRJFHV4vFEGI8ZVkeeqHzEqQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAiWKhSO4PippINxc24yHRZt1zcYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTVh MzlkMS00MDBkLTQyM2EtODljNC0zN2Y3ZjFhMTQ1ZjIvNTE5ZWQxY2YtZGE3Yy0z ZjgwLWFiZDEtZDhlNGFkOWQ4Nzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1YTM5ZDEtNDAwZC00MjNhLTg5 YzQtMzdmN2YxYTE0NWYyL2Y5NWEzOWQxLTQwMGQtNDIzYS04OWM0LTM3ZjdmMWEx NDVmMi5jcmwwHwYDVR0jBBgwFoAURY6JtDIFjVgZin8jAUv2Hx3NRHUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTVhMzlkMS00MDBkLTQyM2EtODljNC0zN2Y3 ZjFhMTQ1ZjIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAaCAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACGTtX/FJoBm2QUufweD/MPnFEq76a4Rm6f5m4X9jpIOS/rlqMBi rpmiIYCz9vBjVPLo6+8fxeteDUCgsr92YRGPglX+zbd1ZjHhd5rapydc5A8ylyP0 4VuK0w638iwU0fhlrb+9b7bmpp8nEAhym5oAmS4L0NAI7tg8LsL6Vieb/9L6SOE/ xKIq+NDiTjvAVwtEuE1as2a38ZUJMfe3VIL4/KpPajYzfTIr+T5O1QT4HmmYppvN zXnrX1QHalkLV92eMnB+1SsEm7Kez7RAuMmRjNSH6nR964rWmXzAkWVVsvdGHrIK Wu6+WpgtyWh5KGU5q6k8qqdFdXO7rDAdzj8= -----END CERTIFICATE-----Generated at Fri Oct 10 19:54:55 2025 by rpki-client