$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/289f1c09-90d7-3bb5-8593-4c6292a9d6c7.roa File: 289f1c09-90d7-3bb5-8593-4c6292a9d6c7.roa (raw, json) Hash identifier: TCjWuKSJhbuRjyUQLPkZyqi4s1BTlEmwEO6SPBRQ+A0= Subject key identifier: 40:80:EA:01:51:B2:21:BC:93:CE:78:EA:91:83:AD:D5:18:D0:7B:A3 Certificate issuer: /CN=6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c Certificate serial: 010D0C9F4328584AF0F15742E8A80019D3D0BD00 Authority key identifier: 89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/289f1c09-90d7-3bb5-8593-4c6292a9d6c7.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 20148 IP address blocks: 2001:5c8:f7fe::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:57:42:e8:a8:00:19:d3:d0:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=df610cc7-2578-442a-8594-be32f99ddbf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:00:bd:e3:82:d9:29:ea:ab:0b:dc:aa:6f:3f: e2:e2:36:6f:46:fb:90:47:bc:cf:53:2a:18:f9:44: 96:d8:25:04:60:7c:11:7e:6b:62:10:db:72:da:b3: d5:ef:92:84:cb:89:21:42:3e:0b:4d:36:c5:a9:18: 94:20:b0:0e:f3:4e:d8:4a:20:08:bc:ef:7f:c0:65: a3:0b:01:f8:34:c4:8e:46:05:3e:c7:f3:02:4f:76: 33:f4:77:75:c6:df:ed:aa:5a:4b:d8:37:5b:0a:1b: c1:67:38:bc:92:fc:2c:11:bd:21:1d:2e:24:00:fc: 73:a4:fc:cb:54:35:e2:7e:e0:03:30:02:58:d5:43: bb:25:2c:a2:34:7d:e0:da:1f:96:f7:11:bb:65:d8: 34:9c:9c:d5:56:21:f0:1e:d8:85:e6:05:19:f4:70: 46:94:65:6f:54:a0:7c:e0:a1:82:1f:bc:86:66:20: 09:0a:6d:61:92:d6:21:b7:2e:5e:4e:cc:67:64:70: 61:a5:b0:33:63:a5:59:51:03:84:b5:1d:25:b3:35: 69:43:5f:ed:51:1b:4c:0d:b7:05:13:a5:b1:d1:e5: 6a:77:f7:f0:ae:2b:48:b4:d3:f0:08:86:30:62:e0: 69:9f:2f:4e:15:e4:e0:16:8e:31:c2:e5:66:74:02: 83:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:80:EA:01:51:B2:21:BC:93:CE:78:EA:91:83:AD:D5:18:D0:7B:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/289f1c09-90d7-3bb5-8593-4c6292a9d6c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.crl X509v3 Authority Key Identifier: keyid:89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer sbgp-ipAddrBlock: critical IPv6: 2001:5c8:f7fe::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:1f:c4:57:b9:ac:15:f2:0b:9f:1d:b9:62:8b:88:cb:77:9b: cb:da:2f:8d:a1:ca:fa:8e:e7:86:7d:10:ef:c0:1e:30:90:b9: d0:9e:16:19:84:e9:ac:0a:df:a9:78:d4:ee:15:db:d7:cf:08: 46:23:9f:4b:c1:ac:6f:75:99:ec:c4:29:da:78:ef:07:7b:75: 1f:ed:75:8d:ac:a1:ab:42:3c:36:aa:46:67:37:cd:d6:d0:86: 56:5d:bd:c4:fa:51:83:3a:0f:15:2f:24:df:8e:64:43:32:08: 92:1b:ab:63:49:f5:8c:4d:bb:ef:c4:26:c4:d2:c0:03:bd:c5: 56:ac:ae:01:cb:64:c1:44:c9:15:41:1d:d3:79:3f:8c:4a:fb: 2a:9d:a8:77:c1:d4:65:a7:bc:f3:63:3a:e4:b5:c4:ba:f4:e5: 8d:ec:8e:2c:1f:f4:1b:59:dc:e7:c3:63:dc:9a:23:e7:fa:8c: c4:a1:ee:2b:73:f6:a1:04:75:e0:fb:84:93:2f:2c:f7:1c:48: 46:83:cb:25:b7:9a:a7:fb:79:3a:b2:1d:d1:cb:65:3d:fc:a3: 84:2c:35:d2:58:6b:52:9e:09:fc:69:d2:d3:2e:e5:83:49:3b: fd:d8:24:99:ad:af:da:b7:4c:57:e1:27:32:f4:fa:70:86:c6: 02:9b:72:8a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8VdC6KgAGdPQvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxYmZiOWQtM2NlNS00ZmEwLTg3YTItNzM1M2VlOGNj MjljMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk ZGY2MTBjYzctMjU3OC00NDJhLTg1OTQtYmUzMmY5OWRkYmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigC944LZKeqrC9yqbz/i4jZvRvuQR7zPUyoY +USW2CUEYHwRfmtiENty2rPV75KEy4khQj4LTTbFqRiUILAO807YSiAIvO9/wGWj CwH4NMSORgU+x/MCT3Yz9Hd1xt/tqlpL2DdbChvBZzi8kvwsEb0hHS4kAPxzpPzL VDXifuADMAJY1UO7JSyiNH3g2h+W9xG7Zdg0nJzVViHwHtiF5gUZ9HBGlGVvVKB8 4KGCH7yGZiAJCm1hktYhty5eTsxnZHBhpbAzY6VZUQOEtR0lszVpQ1/tURtMDbcF E6Wx0eVqd/fwritItNPwCIYwYuBpny9OFeTgFo4xwuVmdAKDGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFECA6gFRsiG8k8546pGDrdUY0HujMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82YjFi ZmI5ZC0zY2U1LTRmYTAtODdhMi03MzUzZWU4Y2MyOWMvMjg5ZjFjMDktOTBkNy0z YmI1LTg1OTMtNGM2MjkyYTlkNmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNmIxYmZiOWQtM2NlNS00ZmEwLTg3 YTItNzM1M2VlOGNjMjljLzZiMWJmYjlkLTNjZTUtNGZhMC04N2EyLTczNTNlZThj YzI5Yy5jcmwwHwYDVR0jBBgwFoAUiZ7PjIFhGc30CeRkoLh5rVZXgTQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82YjFiZmI5ZC0zY2U1LTRmYTAtODdhMi03MzUz ZWU4Y2MyOWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFyPf+ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB4fxFe5rBXyC58duWKLiMt3m8vaL42hyvqO54Z9EO/AHjCQudCe FhmE6awK36l41O4V29fPCEYjn0vBrG91mezEKdp47wd7dR/tdY2soatCPDaqRmc3 zdbQhlZdvcT6UYM6DxUvJN+OZEMyCJIbq2NJ9YxNu+/EJsTSwAO9xVasrgHLZMFE yRVBHdN5P4xK+yqdqHfB1GWnvPNjOuS1xLr05Y3sjiwf9BtZ3OfDY9yaI+f6jMSh 7itz9qEEdeD7hJMvLPccSEaDyyW3mqf7eTqyHdHLZT38o4QsNdJYa1KeCfxp0tMu 5YNJO/3YJJmtr9q3TFfhJzL0+nCGxgKbcoo= -----END CERTIFICATE-----Generated at Sat Oct 25 06:44:09 2025 by rpki-client