$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f70b3d7c-2ee5-345b-984d-ccc55ecd7839.roa File: f70b3d7c-2ee5-345b-984d-ccc55ecd7839.roa (raw, json) Hash identifier: QHGnk6Z9z3ILfGwdsx8yKLffp+sv4VHx9MUQzDaw8DM= Subject key identifier: 72:97:65:BE:94:AF:34:E7:51:2C:69:28:0B:08:B9:3D:A1:FB:75:CD Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD7491950A261896524740 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f70b3d7c-2ee5-345b-984d-ccc55ecd7839.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 36040 IP address blocks: 2001:4860:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:74:91:95:0a:26:18:96:52:47:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=146e6d25-5470-42ba-b6a9-9ad1486418ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:23:96:37:3e:22:03:82:7b:02:08:e2:2f:b3: 1e:e0:ca:b1:43:1e:b5:8a:19:27:16:b6:51:92:b7: c4:bd:e9:be:39:c3:2d:08:e9:dd:5b:c4:e4:1f:67: 74:30:71:11:b9:ae:09:63:53:4c:c2:65:d7:fb:91: b0:d6:50:68:07:6d:ac:52:3f:0d:6f:81:cc:ca:3a: 84:40:46:95:9e:2f:8b:bb:65:61:de:1e:33:0d:9b: 41:de:5e:aa:27:19:4e:fe:86:fd:c3:68:c1:19:04: 66:6a:85:da:d2:47:4a:22:58:e4:06:8f:60:09:f6: 73:5d:73:85:d7:98:7f:00:79:c0:7d:f2:9c:2f:09: 02:ac:17:e3:c3:19:da:af:0b:cd:c3:91:f4:7d:8f: e1:00:98:51:5b:d5:e1:8d:49:31:dd:3e:05:1c:b9: 8b:48:bb:2d:e4:86:c3:b4:1c:14:01:20:81:e5:db: f0:a0:cf:ee:62:6b:e7:36:e7:db:a6:fd:01:06:9b: 0e:94:8d:fc:ad:96:cf:12:63:3b:c7:5d:4d:18:d4: da:92:89:cf:2c:f2:95:ea:c9:60:87:42:8d:51:3f: 4c:1b:99:50:11:db:15:ff:ca:09:ad:f8:e9:11:9e: 88:8a:43:dc:96:18:c2:dc:21:73:61:24:0d:51:ea: c4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:97:65:BE:94:AF:34:E7:51:2C:69:28:0B:08:B9:3D:A1:FB:75:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f70b3d7c-2ee5-345b-984d-ccc55ecd7839.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:1d:57:16:8c:aa:03:d5:8c:48:2c:a6:a9:95:90:c6:43:aa: c3:06:e5:c8:f9:38:1a:fe:5d:1f:4a:46:e9:34:93:38:91:2c: 4d:00:39:1a:3c:ab:09:ac:5f:20:5b:bc:8a:17:b5:34:8c:0e: 40:ed:d9:46:66:e8:3e:fb:76:71:9d:3c:c3:ae:53:fe:a9:d1: 22:43:b3:d7:bf:e2:97:82:28:ad:71:9f:55:5b:44:1c:11:5d: 07:f3:f1:df:7f:3e:39:f7:45:a7:33:80:03:b7:2c:ef:b3:c8: f8:8a:32:16:71:ea:4d:41:0e:e8:9e:5b:72:73:dc:97:a1:3f: 67:25:32:6d:3c:d8:62:de:38:38:9a:a8:5e:47:31:e5:87:f6: f0:79:63:52:5f:59:c0:8a:d7:14:1c:e9:0e:6d:04:f6:8c:b6: 9c:6a:1e:13:b4:a1:8d:0a:b1:9c:61:13:c6:30:08:49:51:55: 3b:78:e0:97:90:48:a8:ac:7a:c7:88:20:4f:74:2d:42:d0:e9: 8b:d6:51:a7:65:04:8e:2d:35:b8:9d:6b:cb:4f:ab:63:3e:f5: db:5b:0c:b8:fd:22:63:ba:2d:15:39:89:11:c4:86:4c:eb:2c: 77:5a:55:9e:6d:61:38:c3:f5:62:90:36:cb:65:cf:c2:df:18: 32:03:24:7f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzXSRlQomGJZSR0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MTQ2ZTZkMjUtNTQ3MC00MmJhLWI2YTktOWFkMTQ4NjQxOGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSOWNz4iA4J7AgjiL7Me4MqxQx61ihknFrZR krfEvem+OcMtCOndW8TkH2d0MHERua4JY1NMwmXX+5Gw1lBoB22sUj8Nb4HMyjqE QEaVni+Lu2Vh3h4zDZtB3l6qJxlO/ob9w2jBGQRmaoXa0kdKIljkBo9gCfZzXXOF 15h/AHnAffKcLwkCrBfjwxnarwvNw5H0fY/hAJhRW9XhjUkx3T4FHLmLSLst5IbD tBwUASCB5dvwoM/uYmvnNufbpv0BBpsOlI38rZbPEmM7x11NGNTakonPLPKV6slg h0KNUT9MG5lQEdsV/8oJrfjpEZ6IikPclhjC3CFzYSQNUerElQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHKXZb6UrzTnUSxpKAsIuT2h+3XNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjcwYjNkN2MtMmVlNS0z NDViLTk4NGQtY2NjNTVlY2Q3ODM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIYAAG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGYdVxaMqgPVjEgspqmVkMZDqsMG5cj5OBr+XR9KRuk0kziRLE0A ORo8qwmsXyBbvIoXtTSMDkDt2UZm6D77dnGdPMOuU/6p0SJDs9e/4peCKK1xn1Vb RBwRXQfz8d9/Pjn3RaczgAO3LO+zyPiKMhZx6k1BDuieW3Jz3JehP2clMm082GLe ODiaqF5HMeWH9vB5Y1JfWcCK1xQc6Q5tBPaMtpxqHhO0oY0KsZxhE8YwCElRVTt4 4JeQSKiseseIIE90LULQ6YvWUadlBI4tNbida8tPq2M+9dtbDLj9ImO6LRU5iRHE hkzrLHdaVZ5tYTjD9WKQNstlz8LfGDIDJH8= -----END CERTIFICATE-----Generated at Fri Oct 17 08:39:54 2025 by rpki-client