$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/0165a1df-b963-39c5-a8ea-56b2f7123fb3.roa File: 0165a1df-b963-39c5-a8ea-56b2f7123fb3.roa (raw, json) Hash identifier: 6PmE62R3j6tFEYFFsJqW775VddGJGfKRgcojA6bOD0c= Subject key identifier: 21:A8:04:64:66:BC:43:09:42:F2:7C:F5:36:A0:A6:14:FC:45:98:0B Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584B1AD18C37655A7C9FD29CE318 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/0165a1df-b963-39c5-a8ea-56b2f7123fb3.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 30103 IP address blocks: 2620:123:20c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:8c:37:65:5a:7c:9f:d2:9c:e3:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=b36a1ba1-ba02-4ecc-b60c-a236ef0ab96d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ab:92:a9:fa:22:4b:15:84:1c:b4:6a:7a:5d: b4:bf:56:43:1f:8f:87:74:65:0c:6f:e1:d6:3d:5c: 38:47:01:7d:be:fd:71:87:8c:a4:f1:ed:d2:94:1d: b2:6b:97:33:e1:a8:80:75:d2:4a:4a:49:db:b6:a3: b6:9b:cc:50:83:11:c3:a9:02:b4:00:49:e9:e1:9b: dc:3b:0f:61:4c:db:3d:41:b5:2b:58:b3:9a:cd:36: ff:1b:b0:41:89:d2:d9:d4:0e:e2:75:de:7f:45:3c: 18:e6:7e:ee:7e:65:ba:14:d1:2e:06:f6:2a:2d:1c: 66:26:a9:1a:3b:2f:3e:5a:96:eb:5f:f1:b7:ae:7e: 73:a4:35:88:12:fd:f7:51:d1:6e:a5:2c:e8:f8:62: c8:54:c7:3e:b2:22:18:2b:75:24:9f:98:38:8b:d7: 0e:9e:fa:c5:d5:36:ee:2e:e0:95:03:8d:20:62:69: 98:09:23:bb:4e:02:32:c5:23:84:2a:a6:db:db:46: 62:99:84:fc:32:c9:65:3c:b7:5e:a9:ea:2b:0e:3c: 69:48:96:39:e9:a2:6b:4a:78:c8:1f:97:52:36:b2: bf:1c:d3:99:b0:92:77:35:cb:7b:fd:cd:80:53:97: 67:89:c8:40:12:06:27:78:cf:da:60:b4:68:bc:c7: 4b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A8:04:64:66:BC:43:09:42:F2:7C:F5:36:A0:A6:14:FC:45:98:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/0165a1df-b963-39c5-a8ea-56b2f7123fb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv6: 2620:123:20c1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:3f:f8:ab:30:74:03:e7:d5:ba:b8:31:05:f8:e8:82:07:97: 59:b7:cd:33:fd:ff:1a:ac:15:02:f8:12:6b:92:11:35:c2:71: ea:a0:8a:c1:f6:e5:63:45:4b:7c:3e:7a:4e:ff:b8:87:eb:79: f0:f0:f6:15:92:f8:c9:57:cc:9a:1f:75:db:64:e9:a0:f7:e5: c0:b8:d5:bc:78:be:ea:97:3c:0d:84:d2:82:ef:23:f1:30:f4: e9:e5:1d:f9:2d:ba:50:c3:23:c8:03:aa:f0:50:7d:cb:4b:57: fd:73:5e:d4:d5:ec:d1:4a:f9:07:44:e1:7e:44:f2:88:ab:8f: 92:58:71:86:c7:84:9f:b8:40:60:8d:b3:d1:5f:1c:f9:5e:4c: 2e:6c:64:ee:4e:90:94:d1:c2:c6:68:a7:1b:98:44:92:9f:8b: 42:fb:d6:43:2b:10:de:b0:38:07:34:e0:06:77:33:06:cd:c4: af:b0:cc:64:91:77:8f:f5:23:36:a7:a8:db:ed:e2:17:fc:bd: e5:c5:92:4b:bf:09:5f:26:78:ba:0f:7b:60:85:35:c4:81:e2: a1:41:1f:77:91:26:00:db:59:60:c3:e7:47:0d:cc:b8:2b:ee: e2:cf:d4:09:73:56:d4:e5:b4:be:42:d7:91:b2:20:4d:b3:9d: 93:9e:1e:76 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsa0Yw3ZVp8n9Kc4xgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk YjM2YTFiYTEtYmEwMi00ZWNjLWI2MGMtYTIzNmVmMGFiOTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6uSqfoiSxWEHLRqel20v1ZDH4+HdGUMb+HW PVw4RwF9vv1xh4yk8e3SlB2ya5cz4aiAddJKSknbtqO2m8xQgxHDqQK0AEnp4Zvc Ow9hTNs9QbUrWLOazTb/G7BBidLZ1A7idd5/RTwY5n7ufmW6FNEuBvYqLRxmJqka Oy8+WpbrX/G3rn5zpDWIEv33UdFupSzo+GLIVMc+siIYK3Ukn5g4i9cOnvrF1Tbu LuCVA40gYmmYCSO7TgIyxSOEKqbb20ZimYT8MsllPLdeqeorDjxpSJY56aJrSnjI H5dSNrK/HNOZsJJ3Nct7/c2AU5dnichAEgYneM/aYLRovMdLcwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCGoBGRmvEMJQvJ89TagphT8RZgLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvMDE2NWExZGYtYjk2My0z OWM1LWE4ZWEtNTZiMmY3MTIzZmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABIyDB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEg/+KswdAPn1bq4MQX46IIHl1m3zTP9/xqsFQL4EmuSETXCceqg isH25WNFS3w+ek7/uIfrefDw9hWS+MlXzJofddtk6aD35cC41bx4vuqXPA2E0oLv I/Ew9OnlHfktulDDI8gDqvBQfctLV/1zXtTV7NFK+QdE4X5E8oirj5JYcYbHhJ+4 QGCNs9FfHPleTC5sZO5OkJTRwsZopxuYRJKfi0L71kMrEN6wOAc04AZ3MwbNxK+w zGSRd4/1IzanqNvt4hf8veXFkku/CV8meLoPe2CFNcSB4qFBH3eRJgDbWWDD50cN zLgr7uLP1AlzVtTltL5C15GyIE2znZOeHnY= -----END CERTIFICATE-----Generated at Mon Oct 20 16:31:37 2025 by rpki-client