$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/5da813c6-3362-3a15-8c8f-01d933e11263.roa File: 5da813c6-3362-3a15-8c8f-01d933e11263.roa (raw, json) Hash identifier: DR0noMSPnHGI6hW1Gh/3TClxKDfFIz8gFAbN5BnUwcQ= Subject key identifier: 4F:D6:55:AD:6F:03:87:B3:DF:69:DC:B1:D8:74:A8:BC:DA:C0:7D:2E Certificate issuer: /CN=4cef7db1-d0f7-4a95-8c36-d162a28a52c6 Certificate serial: 010D0C9F4328584B6BC74B0E0C785A7834BF1600 Authority key identifier: 6C:4A:22:A1:E5:F2:F8:1B:6B:4B:F3:FA:34:57:8E:82:E1:17:BB:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/5da813c6-3362-3a15-8c8f-01d933e11263.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 16509 IP address blocks: 2620:10b:b008::/45 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:4b:0e:0c:78:5a:78:34:bf:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cef7db1-d0f7-4a95-8c36-d162a28a52c6 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=9350f19a-aa06-438d-b9bf-e5e4b98bde2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:66:a1:05:cd:05:07:1d:8e:91:61:e2:50:59: db:9c:e1:32:9b:92:4a:0c:ad:c1:e6:bf:f4:a5:1f: 34:fc:52:79:8b:6e:c9:75:8d:73:6d:90:1e:f1:54: b9:d6:59:ea:98:f9:9f:cd:87:27:40:c9:2f:7c:c5: 21:7a:a4:a5:77:0f:ad:3b:10:65:cf:da:18:5e:39: 19:46:16:70:9b:1d:e5:51:43:eb:a0:32:d0:b6:36: 1a:f3:94:11:d7:87:c5:2e:28:26:c7:27:5b:cc:e2: ec:9d:bf:68:0e:a8:97:d0:7a:92:12:80:73:15:5a: 55:04:8f:12:1f:ba:2d:95:7a:57:b5:7b:d4:66:90: 89:70:23:89:61:22:62:cb:fc:90:25:5f:7e:a6:e0: 69:73:fb:fb:27:0c:27:26:52:f3:40:2b:4d:86:2f: 82:35:c0:a7:5f:45:47:1d:10:7d:b8:6e:68:43:b0: 40:24:4f:8b:89:49:73:b3:7e:19:20:5c:32:44:c2: 27:4c:44:e7:c0:d3:e8:77:80:0e:5d:ca:cd:48:cc: 4c:82:84:27:9d:53:53:50:ce:f8:aa:d9:95:52:cc: 14:33:00:fa:36:5b:09:55:ad:50:c8:77:4f:80:59: 69:25:03:b1:42:cf:f8:a7:39:35:54:ef:a1:03:d7: 3d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D6:55:AD:6F:03:87:B3:DF:69:DC:B1:D8:74:A8:BC:DA:C0:7D:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/5da813c6-3362-3a15-8c8f-01d933e11263.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.crl X509v3 Authority Key Identifier: keyid:6C:4A:22:A1:E5:F2:F8:1B:6B:4B:F3:FA:34:57:8E:82:E1:17:BB:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.cer sbgp-ipAddrBlock: critical IPv6: 2620:10b:b008::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:48:4c:27:29:ab:93:01:c4:2b:e4:e4:1f:26:26:22:c3:cb: 18:bc:1a:31:ee:2a:a6:a1:bf:f9:d2:bd:61:ac:f0:18:8c:0b: 48:33:49:ef:35:77:f6:b7:92:f6:8f:02:1c:21:54:f1:c3:46: da:cf:ec:0b:43:88:75:18:85:19:96:01:1d:ee:87:c7:75:c4: e9:29:7f:00:e2:8c:10:35:72:e8:42:ab:41:34:69:48:75:43: 53:68:1f:1b:07:a6:3f:07:8f:68:e3:4a:67:82:20:e4:85:5d: b9:11:cf:40:50:71:7d:c4:74:8a:30:89:7d:f7:4c:52:44:55: aa:34:55:2b:cb:bd:08:45:c8:75:6f:78:be:91:8f:d7:23:7d: cf:27:f3:5b:62:0c:a1:fb:52:e3:2d:e9:e5:27:27:24:19:60: 48:45:b8:1b:d5:85:e3:78:d8:24:a1:75:3a:91:62:ee:0a:84: 2e:f5:78:09:65:9b:39:76:9a:f6:d8:b5:a0:0e:1b:70:18:fa: a3:39:ef:63:2a:e8:60:85:6f:a5:1c:6c:55:27:f5:95:37:39: 03:a0:0c:da:32:2f:c1:5f:b8:d8:24:61:ef:30:6c:79:e0:1a: ef:9e:90:7a:03:06:d2:7b:22:f4:1e:c2:c9:65:f2:da:63:2f: 22:a8:c9:bd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtrx0sODHhaeDS/FgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNlZjdkYjEtZDBmNy00YTk1LThjMzYtZDE2MmEyOGE1 MmM2MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk OTM1MGYxOWEtYWEwNi00MzhkLWI5YmYtZTVlNGI5OGJkZTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomahBc0FBx2OkWHiUFnbnOEym5JKDK3B5r/0 pR80/FJ5i27JdY1zbZAe8VS51lnqmPmfzYcnQMkvfMUheqSldw+tOxBlz9oYXjkZ RhZwmx3lUUProDLQtjYa85QR14fFLigmxydbzOLsnb9oDqiX0HqSEoBzFVpVBI8S H7otlXpXtXvUZpCJcCOJYSJiy/yQJV9+puBpc/v7JwwnJlLzQCtNhi+CNcCnX0VH HRB9uG5oQ7BAJE+LiUlzs34ZIFwyRMInTETnwNPod4AOXcrNSMxMgoQnnVNTUM74 qtmVUswUMwD6NlsJVa1QyHdPgFlpJQOxQs/4pzk1VO+hA9c9pQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE/WVa1vA4ez32ncsdh0qLzawH0uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80Y2Vm N2RiMS1kMGY3LTRhOTUtOGMzNi1kMTYyYTI4YTUyYzYvNWRhODEzYzYtMzM2Mi0z YTE1LThjOGYtMDFkOTMzZTExMjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGNlZjdkYjEtZDBmNy00YTk1LThj MzYtZDE2MmEyOGE1MmM2LzRjZWY3ZGIxLWQwZjctNGE5NS04YzM2LWQxNjJhMjhh NTJjNi5jcmwwHwYDVR0jBBgwFoAUbEoioeXy+BtrS/P6NFeOguEXuyMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80Y2VmN2RiMS1kMGY3LTRhOTUtOGMzNi1kMTYy YTI4YTUyYzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJiABC7AI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEpITCcpq5MBxCvk5B8mJiLDyxi8GjHuKqahv/nSvWGs8BiMC0gz Se81d/a3kvaPAhwhVPHDRtrP7AtDiHUYhRmWAR3uh8d1xOkpfwDijBA1cuhCq0E0 aUh1Q1NoHxsHpj8Hj2jjSmeCIOSFXbkRz0BQcX3EdIowiX33TFJEVao0VSvLvQhF yHVveL6Rj9cjfc8n81tiDKH7UuMt6eUnJyQZYEhFuBvVheN42CShdTqRYu4KhC71 eAllmzl2mvbYtaAOG3AY+qM572Mq6GCFb6UcbFUn9ZU3OQOgDNoyL8FfuNgkYe8w bHngGu+ekHoDBtJ7IvQewsll8tpjLyKoyb0= -----END CERTIFICATE-----Generated at Fri Oct 10 22:01:37 2025 by rpki-client