$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/6929cfef-7615-3f63-bffe-70eced470d39.roa File: 6929cfef-7615-3f63-bffe-70eced470d39.roa (raw, json) Hash identifier: ynRJ0EBtPDPPZK2zKvK4Dv7LOa6B51rKmTDIPCYM4aQ= Subject key identifier: 20:1C:46:DB:9B:42:24:F5:37:40:85:2F:15:2A:EF:28:C6:69:DC:8B Certificate issuer: /CN=2fe89f6f-530f-4fd6-8c9f-68c4478b3a40 Certificate serial: 010D0C9F4328584B1C36CE99E5571AA00E058E80 Authority key identifier: EB:C9:0D:BE:3E:5C:11:0A:A1:CA:4A:85:23:5E:B1:30:D8:A6:CA:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/6929cfef-7615-3f63-bffe-70eced470d39.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 2620:c1:e000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:ce:99:e5:57:1a:a0:0e:05:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fe89f6f-530f-4fd6-8c9f-68c4478b3a40 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=e42e2afa-0b15-4138-a16c-b11f5e254c35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3b:cb:c3:3c:71:ba:4c:e7:78:2f:97:a5:e1: a7:4d:e4:c5:31:54:a6:7e:a7:31:2b:75:3c:9c:01: 01:b3:2a:99:59:48:78:8d:02:f8:e6:ae:d1:da:f9: 2c:80:d4:4b:73:0f:61:85:b4:7b:2d:ee:fa:25:f1: b0:05:3d:ff:2c:b6:fb:e6:00:2f:5f:1c:d0:9f:dd: 66:2d:24:9a:e3:19:5c:70:6d:bf:4f:c5:1d:93:88: 34:d3:62:e7:6f:8a:c1:8d:5d:7f:23:c2:48:5c:73: 27:41:9c:2d:e6:1d:53:42:6d:b4:53:78:52:c8:fe: aa:14:7b:21:c5:c4:49:2a:ec:46:f5:e5:26:0a:05: 8b:8c:32:12:c1:2f:07:29:fd:6f:dd:7a:52:b9:01: 58:fe:e2:54:22:24:c9:da:b1:87:f7:3b:f6:79:10: 49:9f:bf:05:5a:64:c5:4d:b6:1f:d0:5b:5e:4e:f1: 8a:64:d2:b8:99:e2:28:8f:25:00:e3:0a:96:a6:66: 74:bf:ca:6c:cf:6f:b7:fe:d7:e9:e5:a7:7c:d2:2e: 3e:88:bb:42:00:1b:6d:22:18:54:68:e5:08:4e:ae: 28:53:e3:49:10:e5:2a:5d:d1:8d:49:ec:bc:35:11: 40:74:7c:5c:08:99:a9:97:26:cc:af:70:f9:d6:1e: 09:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:1C:46:DB:9B:42:24:F5:37:40:85:2F:15:2A:EF:28:C6:69:DC:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/6929cfef-7615-3f63-bffe-70eced470d39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.crl X509v3 Authority Key Identifier: keyid:EB:C9:0D:BE:3E:5C:11:0A:A1:CA:4A:85:23:5E:B1:30:D8:A6:CA:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.cer sbgp-ipAddrBlock: critical IPv6: 2620:c1:e000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:15:36:f3:17:41:47:0c:4e:9a:ab:64:52:6a:df:26:fb:79: 46:4a:a2:29:15:d9:2a:49:0a:d2:98:db:ee:c5:79:ef:4b:76: b1:e8:2a:de:4c:15:9d:37:1a:b7:62:e4:28:2e:01:d6:cc:9b: 32:fd:28:71:86:d3:ee:4a:2a:44:3d:07:87:49:f9:39:de:a9: 2d:ee:e1:b8:1a:de:e6:b0:54:05:c5:96:02:79:53:ed:56:d7: 52:b6:25:22:d1:57:c4:49:5b:7f:c4:9d:8f:3f:39:81:6d:45: fe:4d:92:8b:cc:c0:2b:16:f6:33:8c:96:61:4e:dc:85:3e:2b: 3f:02:ba:55:28:ae:d0:ae:f2:15:74:54:4b:2e:a7:0e:89:43: 35:b5:43:06:3e:5c:3e:a3:6c:87:02:65:29:b3:c6:a6:15:d4: 70:af:ac:e0:64:15:c9:c8:cf:c9:c3:96:0f:d0:7d:97:8b:ba: 0a:bf:7c:79:21:b2:fe:45:c6:ed:20:32:17:56:ff:4d:61:b8: b4:7d:ca:45:08:e8:7d:f6:67:1c:b6:11:e7:57:cf:8c:4f:4f: 8c:3a:bd:dc:3e:14:ca:dc:1a:c3:04:2f:53:f4:07:cb:21:4f: 07:47:bc:a6:db:9c:e6:0a:4a:d7:7a:80:9f:e5:4b:26:48:02: f2:d2:45:9d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEscNs6Z5VcaoA4FjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZlODlmNmYtNTMwZi00ZmQ2LThjOWYtNjhjNDQ3OGIz YTQwMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk ZTQyZTJhZmEtMGIxNS00MTM4LWExNmMtYjExZjVlMjU0YzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijvLwzxxukzneC+XpeGnTeTFMVSmfqcxK3U8 nAEBsyqZWUh4jQL45q7R2vksgNRLcw9hhbR7Le76JfGwBT3/LLb75gAvXxzQn91m LSSa4xlccG2/T8Udk4g002Lnb4rBjV1/I8JIXHMnQZwt5h1TQm20U3hSyP6qFHsh xcRJKuxG9eUmCgWLjDISwS8HKf1v3XpSuQFY/uJUIiTJ2rGH9zv2eRBJn78FWmTF TbYf0FteTvGKZNK4meIojyUA4wqWpmZ0v8psz2+3/tfp5ad80i4+iLtCABttIhhU aOUITq4oU+NJEOUqXdGNSey8NRFAdHxcCJmplybMr3D51h4JtwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCAcRtubQiT1N0CFLxUq7yjGadyLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yZmU4 OWY2Zi01MzBmLTRmZDYtOGM5Zi02OGM0NDc4YjNhNDAvNjkyOWNmZWYtNzYxNS0z ZjYzLWJmZmUtNzBlY2VkNDcwZDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMmZlODlmNmYtNTMwZi00ZmQ2LThj OWYtNjhjNDQ3OGIzYTQwLzJmZTg5ZjZmLTUzMGYtNGZkNi04YzlmLTY4YzQ0Nzhi M2E0MC5jcmwwHwYDVR0jBBgwFoAU68kNvj5cEQqhykqFI16xMNimyscwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yZmU4OWY2Zi01MzBmLTRmZDYtOGM5Zi02OGM0 NDc4YjNhNDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAweAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABYVNvMXQUcMTpqrZFJq3yb7eUZKoikV2SpJCtKY2+7Fee9LdrHo Kt5MFZ03Grdi5CguAdbMmzL9KHGG0+5KKkQ9B4dJ+TneqS3u4bga3uawVAXFlgJ5 U+1W11K2JSLRV8RJW3/EnY8/OYFtRf5NkovMwCsW9jOMlmFO3IU+Kz8CulUortCu 8hV0VEsupw6JQzW1QwY+XD6jbIcCZSmzxqYV1HCvrOBkFcnIz8nDlg/QfZeLugq/ fHkhsv5Fxu0gMhdW/01huLR9ykUI6H32Zxy2EedXz4xPT4w6vdw+FMrcGsMEL1P0 B8shTwdHvKbbnOYKStd6gJ/lSyZIAvLSRZ0= -----END CERTIFICATE-----Generated at Mon Oct 20 13:52:26 2025 by rpki-client