$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3af3759a-1d33-3553-bb4a-6789e2c80c41.roa File: 3af3759a-1d33-3553-bb4a-6789e2c80c41.roa (raw, json) Hash identifier: dm5CaHQsgPGBz0V7PIdZSiaMRnrdbfh38tfNyk3/jR4= Subject key identifier: B0:8C:23:CF:05:CC:84:75:C5:D5:DE:1D:83:9B:2B:B7:49:CD:B7:B2 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584B1806DD7EF224828A7065A400 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3af3759a-1d33-3553-bb4a-6789e2c80c41.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 30103 IP address blocks: 2620:123:200b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:dd:7e:f2:24:82:8a:70:65:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=b5fc8285-4df5-4fb0-b22c-7f4a102a0fdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a1:6c:05:18:ee:1c:de:48:1c:3a:4b:96:ab: bb:3a:6a:90:37:f3:ca:72:86:90:bb:a2:fe:64:0e: a0:bf:fb:9f:44:b7:1b:85:a7:6b:ab:c7:ba:2d:6e: bc:38:c4:23:76:5d:e9:af:3d:9a:8d:f9:07:44:5d: 9e:d8:c6:7e:10:15:0e:ed:40:b2:7a:13:0e:70:01: 96:69:8e:50:28:30:d6:86:bb:cd:46:32:8c:fa:c3: fd:d0:31:ba:ee:d7:53:15:a2:76:58:88:92:83:c3: e2:30:eb:2f:55:48:3f:33:ca:69:0d:1e:a4:df:a0: 58:ea:99:0e:07:f4:24:c4:be:56:16:50:2b:07:ad: 51:08:8c:41:d7:9b:63:47:06:d3:96:4e:ab:da:d2: 60:5e:69:b3:91:7b:d5:a2:73:13:64:55:3a:af:7b: f8:c2:d8:36:6a:59:d5:63:44:8e:5a:6f:ed:0a:44: 04:70:d4:09:99:46:8e:62:ed:c9:8a:e4:cc:61:8f: 45:ed:a8:c1:35:46:2a:93:73:a4:4f:b7:e4:56:db: f3:2a:a6:95:2f:83:62:3b:46:00:e9:09:c9:ab:c1: 36:de:39:58:d4:27:48:8e:13:94:f8:d6:05:a9:99: 14:66:d5:e1:9c:51:d7:70:22:50:ba:b5:f1:a6:e5: b6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:8C:23:CF:05:CC:84:75:C5:D5:DE:1D:83:9B:2B:B7:49:CD:B7:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3af3759a-1d33-3553-bb4a-6789e2c80c41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv6: 2620:123:200b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:9b:3a:ea:98:e0:a2:c8:bc:54:79:80:13:03:fa:f5:e7:46: ce:ca:0d:ea:61:c6:26:ad:47:fd:ab:61:86:75:a3:9d:fa:38: 73:1f:99:bf:46:a1:b8:11:a3:7c:5d:82:f8:6e:37:c2:de:d7: e7:93:d6:e8:fa:69:14:ba:27:d1:5c:5c:81:e5:f6:1d:86:e2: 2d:37:e2:54:d9:5e:04:ba:77:9f:c9:a8:c0:03:84:c6:a5:18: 4c:04:2a:da:1c:5c:1c:92:90:e0:66:7b:cd:94:87:f4:84:af: 3b:27:7c:6f:1f:70:2d:56:23:ae:c2:dd:0c:a1:fd:77:d7:f1: 02:9d:7b:0e:fd:26:af:d9:1e:6d:33:1e:fb:50:a1:77:43:37: 03:80:90:28:74:a8:c0:0b:5a:a1:25:ac:34:c5:4f:6e:81:6c: 07:78:12:85:f6:56:a2:5a:e5:bf:0c:1d:b4:be:55:db:32:45: 9d:da:ac:c1:34:7e:c4:36:f6:07:3f:8b:21:7b:f6:25:1f:d7: 8a:a8:3f:a9:ce:b6:a9:1b:e8:58:65:02:87:6c:ea:0b:41:b1: d6:2b:8c:ad:fb:ed:c0:9f:1b:3b:44:15:37:47:a2:37:96:d8: 30:07:a2:14:a9:df:e6:23:7e:d5:8b:ec:b6:2b:a8:91:fd:65: 78:66:eb:9d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsYBt1+8iSCinBlpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk YjVmYzgyODUtNGRmNS00ZmIwLWIyMmMtN2Y0YTEwMmEwZmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6FsBRjuHN5IHDpLlqu7OmqQN/PKcoaQu6L+ ZA6gv/ufRLcbhadrq8e6LW68OMQjdl3prz2ajfkHRF2e2MZ+EBUO7UCyehMOcAGW aY5QKDDWhrvNRjKM+sP90DG67tdTFaJ2WIiSg8PiMOsvVUg/M8ppDR6k36BY6pkO B/QkxL5WFlArB61RCIxB15tjRwbTlk6r2tJgXmmzkXvVonMTZFU6r3v4wtg2alnV Y0SOWm/tCkQEcNQJmUaOYu3JiuTMYY9F7ajBNUYqk3OkT7fkVtvzKqaVL4NiO0YA 6QnJq8E23jlY1CdIjhOU+NYFqZkUZtXhnFHXcCJQurXxpuW2QQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLCMI88FzIR1xdXeHYObK7dJzbeyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvM2FmMzc1OWEtMWQzMy0z NTUzLWJiNGEtNjc4OWUyYzgwYzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABIyAL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHKbOuqY4KLIvFR5gBMD+vXnRs7KDephxiatR/2rYYZ1o536OHMf mb9GobgRo3xdgvhuN8Le1+eT1uj6aRS6J9FcXIHl9h2G4i034lTZXgS6d5/JqMAD hMalGEwEKtocXBySkOBme82Uh/SErzsnfG8fcC1WI67C3Qyh/XfX8QKdew79Jq/Z Hm0zHvtQoXdDNwOAkCh0qMALWqElrDTFT26BbAd4EoX2VqJa5b8MHbS+VdsyRZ3a rME0fsQ29gc/iyF79iUf14qoP6nOtqkb6FhlAods6gtBsdYrjK377cCfGztEFTdH ojeW2DAHohSp3+YjftWL7LYrqJH9ZXhm650= -----END CERTIFICATE-----Generated at Mon Oct 20 16:31:27 2025 by rpki-client