$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ec25543d-3cb7-423d-8835-8cb4591d6704/b546c263-53de-32c1-932c-b6d4a20b2c97.roa File: b546c263-53de-32c1-932c-b6d4a20b2c97.roa (raw, json) Hash identifier: qSVfAvGdHaEUPSG8i6K+ppxzekm6SjNmDqrA3/VYKw8= Subject key identifier: 9B:39:02:C7:39:B2:B7:CA:42:CC:C2:C6:2B:63:45:63:EC:51:8D:41 Certificate issuer: /CN=ec25543d-3cb7-423d-8835-8cb4591d6704 Certificate serial: 010D0C9F4328584B5571E1CCEDD1C21587A0FA80 Authority key identifier: 59:CA:20:17:46:68:02:F1:4E:32:4D:7C:04:E6:1B:03:BC:A9:E4:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ec25543d-3cb7-423d-8835-8cb4591d6704.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ec25543d-3cb7-423d-8835-8cb4591d6704/b546c263-53de-32c1-932c-b6d4a20b2c97.roa Signing time: Sat 27 Sep 2025 13:00:41 +0000 ROA not before: Sat 27 Sep 2025 13:00:41 +0000 ROA not after: Fri 26 Dec 2025 14:00:41 +0000 asID: 12161 IP address blocks: 2620:124:1000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ec25543d-3cb7-423d-8835-8cb4591d6704/ec25543d-3cb7-423d-8835-8cb4591d6704.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ec25543d-3cb7-423d-8835-8cb4591d6704/ec25543d-3cb7-423d-8835-8cb4591d6704.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ec25543d-3cb7-423d-8835-8cb4591d6704.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:55:71:e1:cc:ed:d1:c2:15:87:a0:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec25543d-3cb7-423d-8835-8cb4591d6704 Validity Not Before: Sep 27 13:00:41 2025 GMT Not After : Dec 26 14:00:41 2025 GMT Subject: CN=10a29740-1179-4031-86d0-1b2a7e167cec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b5:71:08:2c:63:8f:1f:c7:4e:38:8b:d2:47: 65:f2:d0:a0:27:84:b7:c4:7a:6a:05:15:93:2b:6b: 02:66:a9:1f:30:35:21:11:4c:7c:36:91:95:4d:ab: 56:18:f2:1f:80:3a:b2:52:65:20:15:5f:41:31:b3: bc:ec:c2:98:d3:6b:dd:9c:01:da:86:19:e0:75:45: 26:f5:dc:87:83:c5:f6:37:dd:34:85:c5:b6:9c:a9: ee:9a:64:c4:a7:93:fd:83:0b:9e:bd:6a:e7:21:43: a0:4a:ab:b4:5a:80:7c:6d:16:4f:10:bb:dc:f0:9a: e7:3d:82:5b:1e:3f:64:86:5b:a1:a8:f1:60:ad:96: 90:e9:ee:7d:fa:cd:ed:09:54:5e:82:e3:7d:5d:7e: ea:63:9b:8e:e1:de:27:61:f0:23:fa:a7:9c:fb:a4: fb:f5:c5:05:1c:a1:96:27:a9:00:9d:7d:7c:a7:a3: 12:fc:a4:39:73:f8:67:c7:55:c5:4a:56:78:e9:a7: 2a:e5:63:79:ab:e7:83:a9:9e:a8:8c:60:6a:d0:26: 70:4f:e6:6e:c9:97:ea:b6:73:de:ff:ca:e2:3c:1f: 55:96:3d:c6:9f:00:63:93:4a:fe:09:64:c9:91:e2: be:fa:54:61:59:85:86:eb:e9:a5:20:d3:f5:cf:e6: 06:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:39:02:C7:39:B2:B7:CA:42:CC:C2:C6:2B:63:45:63:EC:51:8D:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ec25543d-3cb7-423d-8835-8cb4591d6704/b546c263-53de-32c1-932c-b6d4a20b2c97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ec25543d-3cb7-423d-8835-8cb4591d6704/ec25543d-3cb7-423d-8835-8cb4591d6704.crl X509v3 Authority Key Identifier: keyid:59:CA:20:17:46:68:02:F1:4E:32:4D:7C:04:E6:1B:03:BC:A9:E4:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ec25543d-3cb7-423d-8835-8cb4591d6704.cer sbgp-ipAddrBlock: critical IPv6: 2620:124:1000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:c5:23:7f:ce:ad:18:ed:9a:24:4c:c9:da:79:ad:59:6a:35: 67:32:3d:67:77:f9:74:cd:46:03:fd:21:3f:6a:80:ce:66:a0: 09:2e:99:55:e0:6d:bb:8c:b3:da:41:ed:1b:86:51:2c:fe:f4: 1b:d8:3c:8f:9d:16:0c:40:3f:69:61:dc:14:5a:01:98:17:66: 7a:52:b5:6e:0b:0c:b6:be:65:e3:8e:d9:f0:77:a4:e6:cf:6d: bf:60:85:d9:59:d1:62:1e:f1:ff:dd:bd:fb:8a:74:4a:06:a7: 71:14:0d:6e:ec:65:f9:72:1d:bb:38:82:38:da:27:02:20:db: 69:44:8d:53:c0:fc:25:21:54:44:47:d8:5a:5a:b3:d6:7b:b8: 97:ed:58:f5:7d:aa:78:a1:78:5d:07:94:26:5d:40:59:6e:77: 22:69:b3:09:63:bb:58:91:1e:36:f7:e4:45:39:3e:65:86:1f: 02:a7:80:05:38:c6:41:1d:a4:42:4b:d7:2b:aa:eb:c0:8e:05: 99:ab:de:b8:80:e2:51:cc:92:f9:23:49:6e:68:5b:dc:c6:11: 86:36:16:d5:12:2b:8e:07:fe:39:d5:62:c9:85:f5:28:6b:75: 6d:0b:0f:7d:9e:d2:fb:3a:e0:1e:d4:5d:c6:ec:80:f2:84:21: 4a:f0:13:77 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtVceHM7dHCFYeg+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWMyNTU0M2QtM2NiNy00MjNkLTg4MzUtOGNiNDU5MWQ2 NzA0MB4XDTI1MDkyNzEzMDA0MVoXDTI1MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk MTBhMjk3NDAtMTE3OS00MDMxLTg2ZDAtMWIyYTdlMTY3Y2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7VxCCxjjx/HTjiL0kdl8tCgJ4S3xHpqBRWT K2sCZqkfMDUhEUx8NpGVTatWGPIfgDqyUmUgFV9BMbO87MKY02vdnAHahhngdUUm 9dyHg8X2N900hcW2nKnummTEp5P9gwuevWrnIUOgSqu0WoB8bRZPELvc8JrnPYJb Hj9khluhqPFgrZaQ6e59+s3tCVReguN9XX7qY5uO4d4nYfAj+qec+6T79cUFHKGW J6kAnX18p6MS/KQ5c/hnx1XFSlZ46acq5WN5q+eDqZ6ojGBq0CZwT+ZuyZfqtnPe /8riPB9Vlj3GnwBjk0r+CWTJkeK++lRhWYWG6+mlINP1z+YG9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJs5Asc5srfKQszCxitjRWPsUY1BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9lYzI1 NTQzZC0zY2I3LTQyM2QtODgzNS04Y2I0NTkxZDY3MDQvYjU0NmMyNjMtNTNkZS0z MmMxLTkzMmMtYjZkNGEyMGIyYzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZWMyNTU0M2QtM2NiNy00MjNkLTg4 MzUtOGNiNDU5MWQ2NzA0L2VjMjU1NDNkLTNjYjctNDIzZC04ODM1LThjYjQ1OTFk NjcwNC5jcmwwHwYDVR0jBBgwFoAUWcogF0ZoAvFOMk18BOYbA7yp5IIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9lYzI1NTQzZC0zY2I3LTQyM2QtODgzNS04Y2I0 NTkxZDY3MDQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABJBAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJTFI3/OrRjtmiRMydp5rVlqNWcyPWd3+XTNRgP9IT9qgM5moAku mVXgbbuMs9pB7RuGUSz+9BvYPI+dFgxAP2lh3BRaAZgXZnpStW4LDLa+ZeOO2fB3 pObPbb9ghdlZ0WIe8f/dvfuKdEoGp3EUDW7sZflyHbs4gjjaJwIg22lEjVPA/CUh VERH2Fpas9Z7uJftWPV9qniheF0HlCZdQFludyJpswlju1iRHjb35EU5PmWGHwKn gAU4xkEdpEJL1yuq68COBZmr3riA4lHMkvkjSW5oW9zGEYY2FtUSK44H/jnVYsmF 9ShrdW0LD32e0vs64B7UXcbsgPKEIUrwE3c= -----END CERTIFICATE-----Generated at Tue Oct 21 06:54:26 2025 by rpki-client