$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/12feb772-5112-4009-90bd-0b1f4d0ef6af/c0a12fa5-438f-3f3d-a6dc-0870f99602e9.roa File: c0a12fa5-438f-3f3d-a6dc-0870f99602e9.roa (raw, json) Hash identifier: myixoDwH3DTFAxEbe7lV+8RMc6vz1ezVU6QQIUGpTU4= Subject key identifier: 3A:88:88:4C:8F:C8:F7:D9:34:F0:74:E2:B1:64:56:38:59:C6:DA:16 Certificate issuer: /CN=12feb772-5112-4009-90bd-0b1f4d0ef6af Certificate serial: 010D0C9F4328584B1AD198613C4A8F7DD760E060 Authority key identifier: 36:54:09:1F:C8:17:3C:44:C9:CC:C7:72:B9:C8:16:CA:B4:DE:4E:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/12feb772-5112-4009-90bd-0b1f4d0ef6af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/12feb772-5112-4009-90bd-0b1f4d0ef6af/c0a12fa5-438f-3f3d-a6dc-0870f99602e9.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 10497 IP address blocks: 2620:1ff:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/12feb772-5112-4009-90bd-0b1f4d0ef6af/12feb772-5112-4009-90bd-0b1f4d0ef6af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/12feb772-5112-4009-90bd-0b1f4d0ef6af/12feb772-5112-4009-90bd-0b1f4d0ef6af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/12feb772-5112-4009-90bd-0b1f4d0ef6af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Sep 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:98:61:3c:4a:8f:7d:d7:60:e0:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12feb772-5112-4009-90bd-0b1f4d0ef6af Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=6071f603-78d3-45d7-96ce-b0ca72710a4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:85:cd:89:22:4e:dd:df:4c:5f:f9:56:cb:2a: 7a:cc:03:c3:49:8a:01:f9:6c:ac:ec:e9:6b:1c:19: 9f:5c:6d:11:74:5f:b2:dc:23:cf:e5:cd:92:85:2f: ce:f0:0f:ac:04:c8:07:0f:b8:1f:fe:50:63:1b:90: 25:a3:83:40:68:23:81:fe:95:55:5f:55:6d:db:7e: 9a:93:71:b2:e3:fc:bd:bb:d8:65:84:90:96:24:77: 02:f2:83:30:fb:4e:a0:0f:70:c1:5e:53:85:76:b0: 3a:f3:2d:4f:10:ca:62:d0:18:47:10:db:19:f8:a2: c2:04:bb:69:5b:e8:c2:41:07:85:90:f4:bc:54:1e: 6e:d3:9e:aa:89:08:9f:56:86:c9:c1:eb:84:b3:d6: b5:1a:14:33:6b:95:b1:bd:b9:81:cf:1d:17:e7:12: 35:11:7e:01:85:3d:f3:d9:c1:45:b5:07:60:c9:1e: c8:da:b7:62:ce:b4:a5:39:e2:cd:c7:0e:16:ad:60: ca:d1:fe:d5:fe:8d:42:a5:a7:b9:15:31:c0:e9:8f: 72:9f:89:83:84:d0:5b:58:af:1a:b4:bd:d2:af:f4: f4:f1:d9:f0:66:c9:6c:27:0f:f3:17:80:b7:ea:f4: ff:48:be:32:89:b4:dc:27:9c:8c:a9:7a:be:3b:77: d1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:88:88:4C:8F:C8:F7:D9:34:F0:74:E2:B1:64:56:38:59:C6:DA:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/12feb772-5112-4009-90bd-0b1f4d0ef6af/c0a12fa5-438f-3f3d-a6dc-0870f99602e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/12feb772-5112-4009-90bd-0b1f4d0ef6af/12feb772-5112-4009-90bd-0b1f4d0ef6af.crl X509v3 Authority Key Identifier: keyid:36:54:09:1F:C8:17:3C:44:C9:CC:C7:72:B9:C8:16:CA:B4:DE:4E:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/12feb772-5112-4009-90bd-0b1f4d0ef6af.cer sbgp-ipAddrBlock: critical IPv6: 2620:1ff:5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:d6:d2:ea:f2:67:b8:31:8f:64:96:84:30:50:ee:9f:30:e6: 26:97:08:64:52:14:a4:88:8e:2d:28:78:9e:14:23:47:8b:a7: 65:b9:91:3b:60:95:d1:1b:45:40:57:11:39:7d:cf:04:db:48: 34:3a:35:d2:ef:11:9d:00:45:01:0f:b9:3e:67:5b:07:34:1f: 1f:1d:09:76:18:6c:ea:1d:ce:5f:43:c6:27:5a:e0:85:2e:9d: 68:40:f5:ae:72:6f:07:dd:04:e7:ac:82:0b:61:36:94:85:2a: c0:54:fd:1f:1e:81:db:d5:5b:3a:07:cd:e9:63:af:ff:09:64: fd:92:2e:fe:a3:27:08:54:87:64:2b:42:3d:cc:b3:0a:3b:4c: 60:e7:e3:0e:f8:a7:48:6c:52:20:7f:ac:0f:16:8b:00:4c:d0: 94:14:84:ef:f7:05:02:c2:95:44:64:a7:96:ec:15:da:de:93: c6:8c:03:fe:4f:18:0b:1c:e2:3c:7d:ad:2c:25:35:9f:ac:5c: d4:21:bd:1a:40:f0:53:cb:b9:82:df:7c:38:02:61:64:37:e1: 7a:5e:2c:8f:14:5e:9d:cb:57:75:f4:45:a2:70:7f:db:8a:55: 9e:53:63:6f:30:78:82:d7:79:43:11:ca:83:07:82:66:f3:ea: 08:ad:d2:d6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsa0ZhhPEqPfddg4GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTJmZWI3NzItNTExMi00MDA5LTkwYmQtMGIxZjRkMGVm NmFmMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk NjA3MWY2MDMtNzhkMy00NWQ3LTk2Y2UtYjBjYTcyNzEwYTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYXNiSJO3d9MX/lWyyp6zAPDSYoB+Wys7Olr HBmfXG0RdF+y3CPP5c2ShS/O8A+sBMgHD7gf/lBjG5Alo4NAaCOB/pVVX1Vt236a k3Gy4/y9u9hlhJCWJHcC8oMw+06gD3DBXlOFdrA68y1PEMpi0BhHENsZ+KLCBLtp W+jCQQeFkPS8VB5u056qiQifVobJweuEs9a1GhQza5WxvbmBzx0X5xI1EX4BhT3z 2cFFtQdgyR7I2rdizrSlOeLNxw4WrWDK0f7V/o1Cpae5FTHA6Y9yn4mDhNBbWK8a tL3Sr/T08dnwZslsJw/zF4C36vT/SL4yibTcJ5yMqXq+O3fRqQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDqIiEyPyPfZNPB04rFkVjhZxtoWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xMmZl Yjc3Mi01MTEyLTQwMDktOTBiZC0wYjFmNGQwZWY2YWYvYzBhMTJmYTUtNDM4Zi0z ZjNkLWE2ZGMtMDg3MGY5OTYwMmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMTJmZWI3NzItNTExMi00MDA5LTkw YmQtMGIxZjRkMGVmNmFmLzEyZmViNzcyLTUxMTItNDAwOS05MGJkLTBiMWY0ZDBl ZjZhZi5jcmwwHwYDVR0jBBgwFoAUNlQJH8gXPETJzMdyucgWyrTeTsEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xMmZlYjc3Mi01MTEyLTQwMDktOTBiZC0wYjFm NGQwZWY2YWYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAB/wAF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC3W0uryZ7gxj2SWhDBQ7p8w5iaXCGRSFKSIji0oeJ4UI0eLp2W5 kTtgldEbRUBXETl9zwTbSDQ6NdLvEZ0ARQEPuT5nWwc0Hx8dCXYYbOodzl9Dxida 4IUunWhA9a5ybwfdBOesggthNpSFKsBU/R8egdvVWzoHzeljr/8JZP2SLv6jJwhU h2QrQj3Mswo7TGDn4w74p0hsUiB/rA8WiwBM0JQUhO/3BQLClURkp5bsFdrek8aM A/5PGAsc4jx9rSwlNZ+sXNQhvRpA8FPLuYLffDgCYWQ34XpeLI8UXp3LV3X0RaJw f9uKVZ5TY28weILXeUMRyoMHgmbz6git0tY= -----END CERTIFICATE-----Generated at Tue Sep 16 23:06:17 2025 by rpki-client