$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/a6d68c1e-9961-33a5-b8a2-3e917f115c56.roa File: a6d68c1e-9961-33a5-b8a2-3e917f115c56.roa (raw, json) Hash identifier: yVKlt/2UETz3op6IsVWxfhJmyQ28nGM2zqnUz/LUhKI= Subject key identifier: BD:F6:68:E1:8A:9C:C0:12:EB:CE:1A:99:A0:B9:10:A7:3B:8D:42:3B Certificate issuer: /CN=58d440e8-959f-43ab-a410-371a599ce552 Certificate serial: 010D0C9F4328584B99D7AF20644C2DD1BA1F5900 Authority key identifier: FA:8F:D3:BC:E0:72:04:46:78:07:43:1B:41:90:EA:40:C1:6E:F8:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/a6d68c1e-9961-33a5-b8a2-3e917f115c56.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 26806 IP address blocks: 2620:f6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/58d440e8-959f-43ab-a410-371a599ce552.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/58d440e8-959f-43ab-a410-371a599ce552.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:af:20:64:4c:2d:d1:ba:1f:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d440e8-959f-43ab-a410-371a599ce552 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=89bfcc25-c887-4738-bf37-f88d3f3d764b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:05:b4:01:4b:e2:d9:92:17:24:cd:e2:9a:f7: 25:ab:c4:1c:49:e6:17:43:41:33:4f:8f:ac:2d:b3: 97:1b:69:9c:8a:a0:24:95:b6:d2:4e:2d:ef:c0:bc: 86:41:0f:ac:57:33:2f:44:13:93:ef:9b:9f:a8:ff: 16:ec:cd:91:8c:8e:76:ce:73:fd:a9:e8:68:55:20: a6:a7:21:35:9b:d6:db:ee:6e:4a:14:55:6d:9e:0e: ff:3b:a8:6b:6c:fa:d8:cc:bd:fd:6c:3c:e5:53:02: 95:78:ca:f2:8b:c3:c2:c7:6d:f4:32:29:28:e2:f2: 70:20:d0:63:cd:59:a4:94:23:d6:94:97:ea:53:07: 70:d4:c8:c8:f7:a8:c9:9f:ab:b2:79:4c:f6:11:ca: 92:6e:b6:53:43:03:39:16:36:2d:5a:5a:b6:ae:39: 9e:b8:91:bc:c8:1b:50:f2:8c:13:18:57:9d:49:07: 7d:bb:17:09:97:6a:5d:10:e3:96:1b:22:46:b6:ef: 4d:86:bc:e0:d7:4e:db:39:af:64:28:f4:69:fa:88: a9:89:a7:9f:d6:84:9b:29:0d:aa:03:c9:ef:37:9a: 75:18:45:35:13:93:59:6b:41:48:95:ac:66:46:f3: 06:2d:85:59:75:71:1e:88:ad:3c:2a:2c:ff:e8:50: 60:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F6:68:E1:8A:9C:C0:12:EB:CE:1A:99:A0:B9:10:A7:3B:8D:42:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/a6d68c1e-9961-33a5-b8a2-3e917f115c56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/58d440e8-959f-43ab-a410-371a599ce552.crl X509v3 Authority Key Identifier: keyid:FA:8F:D3:BC:E0:72:04:46:78:07:43:1B:41:90:EA:40:C1:6E:F8:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552.cer sbgp-ipAddrBlock: critical IPv6: 2620:f6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:18:18:de:fa:1c:5d:0f:c9:02:ef:77:e7:d3:89:5d:c3:2c: 73:1d:11:a8:86:3c:3a:e7:7f:d7:2b:9d:d9:ec:ca:4b:6d:2b: 53:ba:ba:47:eb:ea:57:69:bf:47:c5:12:fd:e0:0c:6b:02:e6: 2f:40:bf:13:0d:c6:2e:52:f6:e1:82:4a:a2:40:f8:d8:68:38: 60:44:11:67:1e:40:52:05:10:82:e2:86:67:0b:6b:25:bd:c5: 2d:f1:5f:21:f5:08:7b:62:6f:67:04:89:09:7b:65:26:f7:74: 86:8e:dd:c3:f1:99:bb:20:ff:1c:be:b2:e6:d7:32:fb:a0:12: 14:94:39:d5:27:8b:0c:17:ae:ae:eb:cc:5e:56:f8:82:dc:e0: d1:94:fc:22:e9:45:dd:c8:0b:f8:2f:57:fc:1d:89:c5:6a:16: c2:24:84:88:03:9a:fe:6f:7e:ff:0e:33:60:0f:ce:99:c8:d2: 96:54:a7:f5:1a:ba:be:e6:d8:10:2d:5a:58:ca:4c:78:33:3a: 21:df:af:5d:ef:20:8d:eb:25:f9:8c:66:49:60:7c:e3:12:de: 02:6d:c2:03:3e:21:63:e5:b5:36:d6:f2:e7:4d:c6:41:01:64: b9:1d:57:7b:07:93:2c:36:c1:85:1f:ff:2f:8e:c1:4c:1e:36: 74:3b:1b:71 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ168gZEwt0bofWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkNDQwZTgtOTU5Zi00M2FiLWE0MTAtMzcxYTU5OWNl NTUyMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ODliZmNjMjUtYzg4Ny00NzM4LWJmMzctZjg4ZDNmM2Q3NjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwW0AUvi2ZIXJM3imvclq8QcSeYXQ0EzT4+s LbOXG2mciqAklbbSTi3vwLyGQQ+sVzMvRBOT75ufqP8W7M2RjI52znP9qehoVSCm pyE1m9bb7m5KFFVtng7/O6hrbPrYzL39bDzlUwKVeMryi8PCx230Miko4vJwINBj zVmklCPWlJfqUwdw1MjI96jJn6uyeUz2EcqSbrZTQwM5FjYtWlq2rjmeuJG8yBtQ 8owTGFedSQd9uxcJl2pdEOOWGyJGtu9Nhrzg107bOa9kKPRp+oipiaef1oSbKQ2q A8nvN5p1GEU1E5NZa0FIlaxmRvMGLYVZdXEeiK08Kiz/6FBg7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL32aOGKnMAS684amaC5EKc7jUI7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81OGQ0 NDBlOC05NTlmLTQzYWItYTQxMC0zNzFhNTk5Y2U1NTIvYTZkNjhjMWUtOTk2MS0z M2E1LWI4YTItM2U5MTdmMTE1YzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNThkNDQwZTgtOTU5Zi00M2FiLWE0 MTAtMzcxYTU5OWNlNTUyLzU4ZDQ0MGU4LTk1OWYtNDNhYi1hNDEwLTM3MWE1OTlj ZTU1Mi5jcmwwHwYDVR0jBBgwFoAU+o/TvOByBEZ4B0MbQZDqQMFu+IMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81OGQ0NDBlOC05NTlmLTQzYWItYTQxMC0zNzFh NTk5Y2U1NTIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAA9gAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADcYGN76HF0PyQLvd+fTiV3DLHMdEaiGPDrnf9crndnsykttK1O6 ukfr6ldpv0fFEv3gDGsC5i9AvxMNxi5S9uGCSqJA+NhoOGBEEWceQFIFEILihmcL ayW9xS3xXyH1CHtib2cEiQl7ZSb3dIaO3cPxmbsg/xy+subXMvugEhSUOdUniwwX rq7rzF5W+ILc4NGU/CLpRd3IC/gvV/wdicVqFsIkhIgDmv5vfv8OM2APzpnI0pZU p/Uaur7m2BAtWljKTHgzOiHfr13vII3rJfmMZklgfOMS3gJtwgM+IWPltTbW8udN xkEBZLkdV3sHkyw2wYUf/y+OwUweNnQ7G3E= -----END CERTIFICATE-----Generated at Sat Oct 25 13:40:19 2025 by rpki-client