$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/5e96c060-eaee-343c-86c3-1129143157cd.roa File: 5e96c060-eaee-343c-86c3-1129143157cd.roa (raw, json) Hash identifier: QlmS1L66GxLqJ1e5WFpNv/Ye9T/7CVCW5kQ4Xq+qZPU= Subject key identifier: 14:D1:7B:55:5E:77:E7:F9:C9:66:27:47:0D:95:19:9F:6B:76:C0:E6 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584B23318446202E2E1C7B6FA3A0 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/5e96c060-eaee-343c-86c3-1129143157cd.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 30103 IP address blocks: 2620:123:20a0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:84:46:20:2e:2e:1c:7b:6f:a3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=67f1b635-e0cc-4e7b-a2cb-a42aa9a8623f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:85:ce:94:2e:51:ed:c2:6a:f1:23:a5:27:1b: 41:6f:b1:01:70:e6:ef:c2:de:83:01:6e:ab:be:c8: 80:c9:0f:12:09:2f:88:b7:4f:75:76:48:be:04:99: ba:16:17:4a:3a:d9:c6:a6:fd:f1:07:40:0d:47:3d: 8e:61:19:2b:a9:04:68:75:d8:56:b6:f5:d2:2e:ed: 72:d2:07:03:40:a3:53:cc:30:95:d4:9f:d5:52:81: 34:76:81:47:91:43:70:01:ca:37:65:c6:59:6f:11: b2:31:7e:46:8f:4d:d4:a2:3e:32:54:be:83:c5:32: a0:2a:96:a2:b1:8a:12:46:34:85:ca:72:24:61:fd: 77:89:69:0d:d6:65:23:f0:18:bd:7c:11:14:ef:06: 53:83:f1:f1:96:de:56:96:e2:7c:d8:17:7d:f3:28: 93:8b:fa:a3:3d:e0:6e:59:69:08:85:90:df:04:48: 60:7d:64:59:93:50:2c:da:46:66:5f:dd:5b:21:38: b8:14:7e:90:38:fe:96:cb:c7:f6:15:8e:f2:81:e0: bd:17:e5:48:3e:ff:95:fe:03:0e:ca:69:a3:ca:a6: bd:57:89:9d:3b:c9:6e:10:c1:5c:6a:0b:94:61:7e: ba:0a:d2:b0:a6:83:31:3a:e2:96:15:b5:3e:88:57: 66:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D1:7B:55:5E:77:E7:F9:C9:66:27:47:0D:95:19:9F:6B:76:C0:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/5e96c060-eaee-343c-86c3-1129143157cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv6: 2620:123:20a0::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:59:8d:6f:e9:72:17:a0:14:0f:61:26:a4:1e:2e:15:1c:1d: e9:83:72:56:07:2a:22:8f:38:a1:dd:2c:e6:b9:a4:21:1e:0c: d9:8b:65:a3:a6:4b:16:c9:f9:5b:f0:66:28:ed:fb:ea:ff:60: 50:9d:c9:1d:53:87:e1:a7:4b:f9:f3:d7:e3:22:b0:2e:41:00: 21:14:38:68:03:70:a3:5b:c0:99:bb:c1:39:5b:34:fc:83:c9: e1:93:05:64:24:cc:f1:6a:61:d9:85:1a:37:81:dc:80:8c:ee: 57:a4:12:54:44:ac:04:db:e9:a4:9b:79:51:74:53:48:d5:8a: c1:e9:cb:a3:8b:b2:84:d1:78:16:ac:93:7b:96:2f:35:c2:e6: 69:c5:80:97:19:ec:bd:fe:1c:83:ca:5b:6e:a7:79:10:54:a1: fb:b7:34:7b:cf:6c:91:b4:55:bf:28:7d:9e:7c:1e:ed:57:17: 57:48:55:0e:e7:dd:a6:82:57:90:95:22:05:f1:01:13:82:73: 3c:39:c7:8c:f2:58:99:ef:9d:7a:02:66:3e:02:59:d3:5b:de: f1:29:53:b4:71:36:40:0d:b8:68:a0:ba:21:97:d1:db:9f:c8: 73:ad:65:b3:e2:1f:f2:2f:d3:66:94:36:8d:b2:86:35:71:95: b6:85:ee:50 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsjMYRGIC4uHHtvo6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk NjdmMWI2MzUtZTBjYy00ZTdiLWEyY2ItYTQyYWE5YTg2MjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYXOlC5R7cJq8SOlJxtBb7EBcObvwt6DAW6r vsiAyQ8SCS+It091dki+BJm6FhdKOtnGpv3xB0ANRz2OYRkrqQRoddhWtvXSLu1y 0gcDQKNTzDCV1J/VUoE0doFHkUNwAco3ZcZZbxGyMX5Gj03Uoj4yVL6DxTKgKpai sYoSRjSFynIkYf13iWkN1mUj8Bi9fBEU7wZTg/Hxlt5WluJ82Bd98yiTi/qjPeBu WWkIhZDfBEhgfWRZk1As2kZmX91bITi4FH6QOP6Wy8f2FY7ygeC9F+VIPv+V/gMO ymmjyqa9V4mdO8luEMFcaguUYX66CtKwpoMxOuKWFbU+iFdmJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBTRe1Ved+f5yWYnRw2VGZ9rdsDmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvNWU5NmMwNjAtZWFlZS0z NDNjLTg2YzMtMTEyOTE0MzE1N2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJiABIyCg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD5ZjW/pchegFA9hJqQeLhUcHemDclYHKiKPOKHdLOa5pCEeDNmL ZaOmSxbJ+VvwZijt++r/YFCdyR1Th+GnS/nz1+MisC5BACEUOGgDcKNbwJm7wTlb NPyDyeGTBWQkzPFqYdmFGjeB3ICM7lekElRErATb6aSbeVF0U0jVisHpy6OLsoTR eBask3uWLzXC5mnFgJcZ7L3+HIPKW26neRBUofu3NHvPbJG0Vb8ofZ58Hu1XF1dI VQ7n3aaCV5CVIgXxAROCczw5x4zyWJnvnXoCZj4CWdNb3vEpU7RxNkANuGiguiGX 0dufyHOtZbPiH/Iv02aUNo2yhjVxlbaF7lA= -----END CERTIFICATE-----Generated at Mon Oct 20 16:31:32 2025 by rpki-client