$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/cad164c4-9edc-3cf6-98a3-82da100cb98b.roa File: cad164c4-9edc-3cf6-98a3-82da100cb98b.roa (raw, json) Hash identifier: /PKbFOcmRtFCuwOFC3kxdPFHI5Odbpm0b8kr7v13i7I= Subject key identifier: A9:6B:D2:27:6C:F3:D7:93:12:74:F4:61:E0:97:8C:8B:D8:FD:25:E8 Certificate issuer: /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Certificate serial: 010D0C9F4328584B3DB70368D2B3072E697BC350 Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/cad164c4-9edc-3cf6-98a3-82da100cb98b.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 2620:98:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:03:68:d2:b3:07:2e:69:7b:c3:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=8cd8409e-74d9-4a8b-8f26-8990512166d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:40:9f:1e:ac:e5:2b:10:a1:6a:88:09:35:42: 11:b5:2d:6c:20:d8:45:2b:e5:10:a3:79:77:53:6a: c3:d6:72:6f:50:94:74:99:24:81:54:a7:f9:68:14: 36:42:53:c0:00:92:1b:79:d6:09:35:37:d9:cc:54: ca:23:dd:c6:d8:0d:85:8d:53:6e:c5:3d:94:eb:23: 34:3c:fc:ee:ec:71:8d:50:e8:4c:53:bf:1e:09:93: a4:5c:67:23:60:fb:d6:ec:24:85:a8:bc:00:72:c8: fa:49:af:96:24:83:ae:a8:cd:87:87:b0:a2:5f:0d: 40:5f:0b:6a:8a:bc:8e:6c:5c:fe:fb:e8:37:67:2e: e3:6f:bf:31:60:e9:12:49:21:1b:99:b5:a0:52:26: eb:3f:09:c7:94:3c:05:33:76:64:46:bd:ab:81:02: f9:4b:7f:0b:7a:13:ad:dc:22:ed:81:c1:34:3e:b8: 9c:55:f6:c9:e3:ad:b8:65:b9:eb:09:98:30:63:bc: d5:73:01:d7:63:f1:4f:28:67:7a:78:ab:c0:b7:fc: ef:91:5f:4d:e6:67:cf:8c:39:ce:da:5d:ea:f0:60: d3:8c:08:94:97:4e:63:10:2c:7f:13:b8:15:20:67: 17:a8:9f:57:d3:22:71:73:05:7e:a6:e3:6d:10:21: ac:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:6B:D2:27:6C:F3:D7:93:12:74:F4:61:E0:97:8C:8B:D8:FD:25:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/cad164c4-9edc-3cf6-98a3-82da100cb98b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl X509v3 Authority Key Identifier: keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer sbgp-ipAddrBlock: critical IPv6: 2620:98:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:95:c1:34:bb:ef:38:f9:2b:6d:c1:c3:d0:45:39:8d:3b:08: 3f:36:38:f3:3c:88:c9:83:ba:25:51:52:4a:d2:a6:46:29:54: 09:6e:bc:0c:63:fa:15:6f:67:e8:5a:6f:8b:a2:e1:ac:be:5d: 27:09:b9:0e:7d:de:4a:8f:51:cd:05:e7:17:0e:69:5d:b3:4e: b6:2b:af:21:8a:26:f3:cb:46:0a:90:2a:39:17:92:46:58:c3: 92:a0:36:46:42:3b:fb:c7:40:30:16:f8:c7:f8:7d:32:9f:ee: 9a:ee:4c:98:ee:9c:50:f9:df:ac:8b:f2:0d:3b:af:19:09:c3: ec:f0:60:0b:88:44:e2:85:d0:79:2e:19:4f:55:55:7d:b9:3a: c8:58:dc:21:f8:e3:b3:ed:8c:42:97:2b:6b:0a:42:1e:2b:4e: 73:42:c9:e8:7a:b0:c9:35:cf:e9:ce:5f:3c:c8:d6:63:ab:37: 89:3b:e6:30:41:12:59:68:db:50:c5:2a:3b:39:b0:9c:ef:c4: ea:f3:03:4a:df:15:93:4d:7f:79:f2:8c:4c:9e:c7:4d:d0:52: 35:68:c1:97:c9:d0:d0:49:9e:c0:02:6f:bb:68:60:ae:99:fe: cf:2c:31:0c:a8:f9:13:bd:ce:f8:12:ce:1d:a1:78:93:a0:c0: ae:3d:fe:0b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9twNo0rMHLml7w1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIxOGIyMDktN2VjYy00MzYxLWI4ZjYtZDg2YTVhNTUw NGRhMB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk OGNkODQwOWUtNzRkOS00YThiLThmMjYtODk5MDUxMjE2NmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0CfHqzlKxChaogJNUIRtS1sINhFK+UQo3l3 U2rD1nJvUJR0mSSBVKf5aBQ2QlPAAJIbedYJNTfZzFTKI93G2A2FjVNuxT2U6yM0 PPzu7HGNUOhMU78eCZOkXGcjYPvW7CSFqLwAcsj6Sa+WJIOuqM2Hh7CiXw1AXwtq iryObFz+++g3Zy7jb78xYOkSSSEbmbWgUibrPwnHlDwFM3ZkRr2rgQL5S38LehOt 3CLtgcE0PricVfbJ4624ZbnrCZgwY7zVcwHXY/FPKGd6eKvAt/zvkV9N5mfPjDnO 2l3q8GDTjAiUl05jECx/E7gVIGcXqJ9X0yJxcwV+puNtECGsswIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKlr0ids89eTEnT0YeCXjIvY/SXoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4 YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZhNWE1NTA0ZGEvY2FkMTY0YzQtOWVkYy0z Y2Y2LTk4YTMtODJkYTEwMGNiOThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIxOGIyMDktN2VjYy00MzYxLWI4 ZjYtZDg2YTVhNTUwNGRhL2FiMThiMjA5LTdlY2MtNDM2MS1iOGY2LWQ4NmE1YTU1 MDRkYS5jcmwwHwYDVR0jBBgwFoAU0idx0DJJoJ2AHgnnZ2CCOTtp0mkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZh NWE1NTA0ZGEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAmMAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADGVwTS77zj5K23Bw9BFOY07CD82OPM8iMmDuiVRUkrSpkYpVAlu vAxj+hVvZ+hab4ui4ay+XScJuQ593kqPUc0F5xcOaV2zTrYrryGKJvPLRgqQKjkX kkZYw5KgNkZCO/vHQDAW+Mf4fTKf7pruTJjunFD536yL8g07rxkJw+zwYAuIROKF 0HkuGU9VVX25OshY3CH447PtjEKXK2sKQh4rTnNCyeh6sMk1z+nOXzzI1mOrN4k7 5jBBEllo21DFKjs5sJzvxOrzA0rfFZNNf3nyjEyex03QUjVowZfJ0NBJnsACb7to YK6Z/s8sMQyo+RO9zvgSzh2heJOgwK49/gs= -----END CERTIFICATE-----Generated at Mon Oct 20 13:53:13 2025 by rpki-client