$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/6687135c-e3b9-37b1-8160-bc72c0d5954e.roa File: 6687135c-e3b9-37b1-8160-bc72c0d5954e.roa (raw, json) Hash identifier: kQbKt9tNyp3qUueWqVNGmtVmd0F83q/d8QoxVGJcH+E= Subject key identifier: 20:34:E0:5C:1A:19:BF:56:F3:E6:1A:67:95:95:01:99:0C:81:35:78 Certificate issuer: /CN=9e1491d6-2ab7-4c14-bee6-122ee4531127 Certificate serial: 010D0C9F4328584B48E1B36CB20CC7B56AE98640 Authority key identifier: C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/6687135c-e3b9-37b1-8160-bc72c0d5954e.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 396417 IP address blocks: 2600:e800::/28 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:b3:6c:b2:0c:c7:b5:6a:e9:86:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e1491d6-2ab7-4c14-bee6-122ee4531127 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=1ac1b82f-eebc-4c8e-99e6-28090627d242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:24:32:93:ce:cb:44:bc:f7:0d:4c:54:cd:28: 15:9e:88:15:eb:7d:60:a6:8d:b8:9f:44:69:ba:98: 6f:bd:5f:de:4b:8c:fa:3f:4e:63:68:13:93:ed:f6: f1:b6:fa:ee:1d:0c:d6:b9:1c:ed:da:d8:6d:92:e2: 4f:1a:b5:3e:ce:45:43:d4:dc:76:0d:83:76:34:82: 54:d4:e7:2f:80:9f:22:bd:79:70:28:56:9b:39:9b: 64:fb:ee:97:6c:5a:53:8a:6e:5d:7c:a3:1c:c2:48: 29:05:4d:15:a9:bc:1b:af:1d:6a:42:8e:9e:d3:aa: ee:f2:9a:cf:82:ba:52:6a:9f:43:e2:16:a9:dc:4f: 12:b4:cd:fb:6f:20:e3:a2:9c:56:1f:67:35:0d:85: b2:dd:da:b7:90:a7:fb:4b:46:18:c0:b5:f9:d8:46: b4:42:ea:89:c6:c0:0e:6d:5b:11:bf:a5:21:30:af: 58:24:ae:92:4b:d7:96:b3:fb:5b:8a:2c:a3:43:51: 6c:ff:58:b1:5f:e6:e0:75:da:2a:8e:4f:8d:2c:18: 89:cd:7e:ac:b9:a7:6f:78:55:fb:e1:ab:f1:f6:34: ba:79:34:c0:40:59:7f:4d:d2:3d:b4:f0:01:53:06: 2a:08:36:92:56:4a:04:2d:c2:d9:fc:53:31:85:21: b6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:34:E0:5C:1A:19:BF:56:F3:E6:1A:67:95:95:01:99:0C:81:35:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/6687135c-e3b9-37b1-8160-bc72c0d5954e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.crl X509v3 Authority Key Identifier: keyid:C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer sbgp-ipAddrBlock: critical IPv6: 2600:e800::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:6a:cd:f5:f6:60:bb:3d:f5:4f:4f:71:e2:fc:89:13:ad:18: 0a:35:22:39:b6:d4:b5:13:6a:28:2a:2a:94:26:29:55:6e:21: 30:47:72:8e:e2:2d:c8:ae:2e:d7:3b:07:21:41:ab:80:71:13: be:e5:7b:18:f3:67:16:73:1e:e6:99:ff:3b:83:16:db:f0:cc: f2:18:cf:40:27:20:24:55:a4:f8:ea:df:55:43:a0:82:70:5b: dd:64:d1:51:5f:82:51:0a:8b:ee:ac:1c:5d:de:77:b5:6d:0b: 01:b0:98:92:75:b5:fd:41:7b:8f:b4:42:f9:3f:b7:cd:22:e6: 06:5c:04:11:29:ce:f2:f7:2e:52:cf:df:68:d8:fc:29:04:57: e7:98:60:af:5e:91:e8:94:95:c7:ff:91:88:65:a6:61:88:39: 88:cb:8f:98:91:29:a4:c9:da:8c:29:b7:50:30:d2:a5:29:34: 12:fd:09:43:c2:83:f5:70:8b:5b:32:5a:25:42:2a:14:b2:5a: 33:30:e3:77:79:fe:b3:77:d0:f5:1f:07:12:34:d3:1f:56:07: ff:5b:bf:f7:a7:e2:6e:9e:6b:c9:b0:68:eb:90:f6:44:ca:c6: e5:aa:1e:9f:87:18:1f:7f:60:fa:cd:77:d9:04:1f:8c:dc:10: 0c:82:9c:b5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtI4bNssgzHtWrphkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWUxNDkxZDYtMmFiNy00YzE0LWJlZTYtMTIyZWU0NTMx MTI3MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MWFjMWI4MmYtZWViYy00YzhlLTk5ZTYtMjgwOTA2MjdkMjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCQyk87LRLz3DUxUzSgVnogV631gpo24n0Rp uphvvV/eS4z6P05jaBOT7fbxtvruHQzWuRzt2thtkuJPGrU+zkVD1Nx2DYN2NIJU 1OcvgJ8ivXlwKFabOZtk++6XbFpTim5dfKMcwkgpBU0Vqbwbrx1qQo6e06ru8prP grpSap9D4hap3E8StM37byDjopxWH2c1DYWy3dq3kKf7S0YYwLX52Ea0QuqJxsAO bVsRv6UhMK9YJK6SS9eWs/tbiiyjQ1Fs/1ixX+bgddoqjk+NLBiJzX6suadveFX7 4avx9jS6eTTAQFl/TdI9tPABUwYqCDaSVkoELcLZ/FMxhSG2GwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCA04FwaGb9W8+YaZ5WVAZkMgTV4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ZTE0 OTFkNi0yYWI3LTRjMTQtYmVlNi0xMjJlZTQ1MzExMjcvNjY4NzEzNWMtZTNiOS0z N2IxLTgxNjAtYmM3MmMwZDU5NTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWUxNDkxZDYtMmFiNy00YzE0LWJl ZTYtMTIyZWU0NTMxMTI3LzllMTQ5MWQ2LTJhYjctNGMxNC1iZWU2LTEyMmVlNDUz MTEyNy5jcmwwHwYDVR0jBBgwFoAUwrX75YVX4vAqQcTI2tTXBsMOm2gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ZTE0OTFkNi0yYWI3LTRjMTQtYmVlNi0xMjJl ZTQ1MzExMjcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgDoADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCGas319mC7PfVPT3Hi/IkTrRgKNSI5ttS1E2ooKiqUJilVbiEwR3KO 4i3Iri7XOwchQauAcRO+5XsY82cWcx7mmf87gxbb8MzyGM9AJyAkVaT46t9VQ6CC cFvdZNFRX4JRCovurBxd3ne1bQsBsJiSdbX9QXuPtEL5P7fNIuYGXAQRKc7y9y5S z99o2PwpBFfnmGCvXpHolJXH/5GIZaZhiDmIy4+YkSmkydqMKbdQMNKlKTQS/QlD woP1cItbMlolQioUslozMON3ef6zd9D1HwcSNNMfVgf/W7/3p+JunmvJsGjrkPZE ysblqh6fhxgff2D6zXfZBB+M3BAMgpy1 -----END CERTIFICATE-----Generated at Sun Oct 26 21:52:08 2025 by rpki-client