$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/9dbb23d5-e76b-3612-aefd-efeb48f58031.roa File: 9dbb23d5-e76b-3612-aefd-efeb48f58031.roa (raw, json) Hash identifier: yVpcVxpRriynp0dlxlcnvDH83IwZjaP9b2dHMYeYh+4= Subject key identifier: 2B:16:61:FC:73:26:CD:E8:2F:DC:15:22:E7:30:AC:DB:8B:EC:13:71 Certificate issuer: /CN=0d1af089-3ace-488d-8f52-6b375c813ba2 Certificate serial: 010D0C9F4328584BA0D2508C8DDD318701311080 Authority key identifier: A6:9C:CE:F2:D7:BC:3F:8C:EE:2F:16:34:59:64:85:BD:CE:1E:2E:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/9dbb23d5-e76b-3612-aefd-efeb48f58031.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 10490 IP address blocks: 2620:88:6000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/0d1af089-3ace-488d-8f52-6b375c813ba2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/0d1af089-3ace-488d-8f52-6b375c813ba2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:50:8c:8d:dd:31:87:01:31:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d1af089-3ace-488d-8f52-6b375c813ba2 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=26e6cb5b-680f-4078-a3ac-643e4732723c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:aa:8d:8d:28:5c:e1:2b:20:59:1e:d7:62:ed: d3:4f:35:d6:93:b9:ae:98:97:f3:d6:e7:4c:94:d5: fa:78:1c:13:83:ba:56:f6:8d:23:ec:9e:ec:9c:fa: 1e:5b:d8:0b:68:4a:12:44:e4:d1:ec:d5:be:79:aa: a0:8a:29:a8:20:5f:b7:a2:bd:12:2b:93:e1:a5:3f: aa:d1:42:36:3c:c0:01:c2:b2:f5:e0:57:14:ed:52: a1:55:de:7f:a8:08:03:0f:f3:20:49:cc:39:49:ca: f4:59:54:14:f2:98:d3:9e:fb:5c:1c:83:9d:a0:e4: c5:c7:a4:ba:83:61:d0:7f:dd:88:bf:12:00:1a:9d: 0f:a7:fc:ff:f8:14:7c:dd:15:74:e0:86:19:00:83: 5e:0a:b2:b8:48:22:05:2e:b2:ca:a9:ef:e7:0a:29: e7:2c:87:58:6f:94:20:21:ba:96:46:5d:b9:ba:fa: 29:8e:8b:c9:75:99:1e:a5:0d:67:76:a3:a8:94:36: f7:d6:3f:52:01:40:0c:c4:31:cc:84:6b:e9:65:f4: 64:d5:5b:82:f4:c0:63:a8:a0:d5:f3:08:37:ec:30: 02:32:c9:12:50:f3:db:fe:e2:28:e9:e0:83:d6:92: df:a3:bc:d7:33:33:35:8b:0a:93:63:66:3e:12:52: a2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:16:61:FC:73:26:CD:E8:2F:DC:15:22:E7:30:AC:DB:8B:EC:13:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/9dbb23d5-e76b-3612-aefd-efeb48f58031.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/0d1af089-3ace-488d-8f52-6b375c813ba2.crl X509v3 Authority Key Identifier: keyid:A6:9C:CE:F2:D7:BC:3F:8C:EE:2F:16:34:59:64:85:BD:CE:1E:2E:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2.cer sbgp-ipAddrBlock: critical IPv6: 2620:88:6000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:af:68:ad:11:23:2b:3e:e4:a3:58:86:af:21:1a:e9:3b:21: d7:97:9b:bc:28:86:cf:1a:5c:96:15:6c:81:6c:c0:1d:ca:82: 31:3c:5b:a5:d8:a3:3e:cf:5e:e3:84:e4:9a:0d:b7:72:54:e9: f2:5f:f3:ab:a0:d9:de:20:0c:98:f3:97:2f:0d:02:4a:d2:7a: 05:72:96:a6:a7:2e:e6:ef:bc:d2:3a:6f:ca:75:69:19:f1:2c: 9b:e9:c2:4c:9f:97:24:87:93:3b:d5:1b:30:d9:4c:c4:28:73: 9a:d4:10:95:55:24:80:46:40:db:ba:5d:8b:c1:4e:d9:45:a5: 4f:7a:86:69:9d:eb:0e:46:9e:c7:1d:8c:5c:cf:33:d2:bd:21: be:f7:b4:ef:06:59:d2:2c:35:40:9f:89:20:5d:b3:9f:27:0b: 4c:f4:9d:b9:1b:0b:f2:55:f4:ab:51:46:9b:9a:18:2c:ac:23: 33:30:ce:76:ab:fe:cb:d0:ce:c6:21:56:66:48:e8:6d:8b:f5: 93:9a:3f:cc:e9:d9:9f:15:4e:42:cb:34:7c:d5:a1:ee:87:dd: fc:15:d5:a2:5d:7f:03:57:85:99:58:fe:6d:5b:9e:5f:5f:11: b2:3d:a1:cb:fe:ea:ab:63:92:0d:fa:57:2b:45:bf:d2:e4:d7: ee:b0:ae:53 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEug0lCMjd0xhwExEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQxYWYwODktM2FjZS00ODhkLThmNTItNmIzNzVjODEz YmEyMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk MjZlNmNiNWItNjgwZi00MDc4LWEzYWMtNjQzZTQ3MzI3MjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqqNjShc4SsgWR7XYu3TTzXWk7mumJfz1udM lNX6eBwTg7pW9o0j7J7snPoeW9gLaEoSROTR7NW+eaqgiimoIF+3or0SK5PhpT+q 0UI2PMABwrL14FcU7VKhVd5/qAgDD/MgScw5Scr0WVQU8pjTnvtcHIOdoOTFx6S6 g2HQf92IvxIAGp0Pp/z/+BR83RV04IYZAINeCrK4SCIFLrLKqe/nCinnLIdYb5Qg IbqWRl25uvopjovJdZkepQ1ndqOolDb31j9SAUAMxDHMhGvpZfRk1VuC9MBjqKDV 8wg37DACMskSUPPb/uIo6eCD1pLfo7zXMzM1iwqTY2Y+ElKimQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCsWYfxzJs3oL9wVIucwrNuL7BNxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wZDFh ZjA4OS0zYWNlLTQ4OGQtOGY1Mi02YjM3NWM4MTNiYTIvOWRiYjIzZDUtZTc2Yi0z NjEyLWFlZmQtZWZlYjQ4ZjU4MDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGQxYWYwODktM2FjZS00ODhkLThm NTItNmIzNzVjODEzYmEyLzBkMWFmMDg5LTNhY2UtNDg4ZC04ZjUyLTZiMzc1Yzgx M2JhMi5jcmwwHwYDVR0jBBgwFoAUppzO8te8P4zuLxY0WWSFvc4eLpQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wZDFhZjA4OS0zYWNlLTQ4OGQtOGY1Mi02YjM3 NWM4MTNiYTIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAiGAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHavaK0RIys+5KNYhq8hGuk7IdeXm7wohs8aXJYVbIFswB3KgjE8 W6XYoz7PXuOE5JoNt3JU6fJf86ug2d4gDJjzly8NAkrSegVylqanLubvvNI6b8p1 aRnxLJvpwkyflySHkzvVGzDZTMQoc5rUEJVVJIBGQNu6XYvBTtlFpU96hmmd6w5G nscdjFzPM9K9Ib73tO8GWdIsNUCfiSBds58nC0z0nbkbC/JV9KtRRpuaGCysIzMw znar/svQzsYhVmZI6G2L9ZOaP8zp2Z8VTkLLNHzVoe6H3fwV1aJdfwNXhZlY/m1b nl9fEbI9ocv+6qtjkg36VytFv9Lk1+6wrlM= -----END CERTIFICATE-----Generated at Wed Nov 5 00:45:52 2025 by rpki-client