$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9c6c3dcf-7e8f-3ee7-bcca-e9363f66db3b.roa File: 9c6c3dcf-7e8f-3ee7-bcca-e9363f66db3b.roa (raw, json) Hash identifier: //0WEPSFTeap5VBDR4HwbV4Q5DCFnJ+TXfY3EcCbou0= Subject key identifier: D8:21:04:AF:6A:B1:86:B5:57:D5:38:3C:B3:F7:1A:D3:4F:26:97:BB Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584B2A2C3D97EB0FD48A65BB8040 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9c6c3dcf-7e8f-3ee7-bcca-e9363f66db3b.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 30103 IP address blocks: 2620:123:2009::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:3d:97:eb:0f:d4:8a:65:bb:80:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=ba6bf1af-dacc-41c0-80b6-1b63402bd851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c0:e0:9b:a3:18:f6:94:17:0b:1d:46:b0:21: 6f:67:fd:66:ca:35:ae:ce:57:c0:07:0b:6f:35:9a: ab:53:e6:59:8d:37:6d:e8:0e:b7:b6:c6:a2:a1:da: b7:9d:70:38:39:98:f2:2f:dd:80:fa:5a:2f:f1:9b: 57:85:fc:fa:e4:83:a4:07:45:88:e1:3e:13:b0:a4: e9:49:6c:5b:66:d9:be:e0:b8:aa:d8:2b:0e:90:f8: c7:f3:04:52:5f:05:37:3b:82:54:79:a2:86:94:63: 6f:3f:0f:a2:92:3c:cf:eb:f8:da:25:c5:dc:0f:99: ae:31:1e:c9:9b:28:40:d6:a6:73:66:9d:72:39:6d: ff:43:83:85:eb:d4:45:21:7f:08:48:1c:cc:76:f3: 64:54:e2:f2:7f:8c:4b:1d:ad:15:db:9c:0a:4d:b5: be:22:48:77:98:eb:ff:d4:20:d1:80:5e:31:f9:e8: 80:57:2d:3c:b6:2c:db:35:2c:7f:9a:14:3a:3e:49: 6c:61:3b:25:7f:bb:51:e3:b7:3f:50:58:04:ca:0c: e4:6d:44:8f:8c:98:a4:9d:2e:80:42:ba:ca:81:58: f7:d6:87:28:d2:fe:25:cb:41:e3:80:26:6c:32:22: 7a:91:c0:9a:3b:e1:6d:18:2f:bc:78:cb:eb:72:06: 9d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:21:04:AF:6A:B1:86:B5:57:D5:38:3C:B3:F7:1A:D3:4F:26:97:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9c6c3dcf-7e8f-3ee7-bcca-e9363f66db3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv6: 2620:123:2009::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:4e:27:5a:60:07:2b:3f:a2:ff:4e:12:a4:0f:2e:40:75:0f: f7:d6:9d:09:79:2c:04:c4:88:e2:44:e3:ed:fc:c3:16:8f:18: e7:fe:2e:b6:17:16:07:ba:f2:0b:2a:da:be:54:eb:41:00:b8: 03:b7:e4:dc:67:cd:30:19:2d:2d:48:1b:12:b6:dc:28:b3:9f: 2e:d5:96:b1:42:ce:09:e1:b3:36:34:9a:de:74:bf:4f:e1:2f: 1a:66:4b:0d:62:b1:9a:ca:ba:b8:00:6c:12:84:20:ba:69:c9: 8d:f0:e7:b0:4e:8a:30:f3:0c:92:e8:5c:96:91:c5:3e:60:1e: b1:83:bf:b2:3b:df:3a:97:5b:90:47:b9:53:12:a0:56:a4:89: ff:c4:7c:13:ff:32:9e:84:71:a9:40:5e:94:83:c2:f4:5c:90: 00:43:c6:1f:f0:7a:f3:d7:38:b3:63:ce:94:d0:bd:a4:63:f7: c6:7f:1e:5d:ce:86:7c:5f:83:78:3c:de:3c:88:b8:e1:46:04: 23:5e:d2:ab:a2:e6:a7:6c:af:89:17:8e:46:45:5b:44:64:42: c0:72:95:ea:a9:02:d5:7c:6a:9b:f5:05:72:84:d2:9b:e3:0b: 45:d0:51:8a:4a:4b:a6:26:bd:63:48:6d:ab:18:37:60:9a:67: e6:e0:f0:57 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsqLD2X6w/UimW7gEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk YmE2YmYxYWYtZGFjYy00MWMwLTgwYjYtMWI2MzQwMmJkODUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MDgm6MY9pQXCx1GsCFvZ/1myjWuzlfABwtv NZqrU+ZZjTdt6A63tsaiodq3nXA4OZjyL92A+lov8ZtXhfz65IOkB0WI4T4TsKTp SWxbZtm+4Liq2CsOkPjH8wRSXwU3O4JUeaKGlGNvPw+ikjzP6/jaJcXcD5muMR7J myhA1qZzZp1yOW3/Q4OF69RFIX8ISBzMdvNkVOLyf4xLHa0V25wKTbW+Ikh3mOv/ 1CDRgF4x+eiAVy08tizbNSx/mhQ6PklsYTslf7tR47c/UFgEygzkbUSPjJiknS6A QrrKgVj31oco0v4ly0HjgCZsMiJ6kcCaO+FtGC+8eMvrcgad0wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNghBK9qsYa1V9U4PLP3GtNPJpe7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvOWM2YzNkY2YtN2U4Zi0z ZWU3LWJjY2EtZTkzNjNmNjZkYjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABIyAJ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJxOJ1pgBys/ov9OEqQPLkB1D/fWnQl5LATEiOJE4+38wxaPGOf+ LrYXFge68gsq2r5U60EAuAO35NxnzTAZLS1IGxK23Cizny7VlrFCzgnhszY0mt50 v0/hLxpmSw1isZrKurgAbBKEILppyY3w57BOijDzDJLoXJaRxT5gHrGDv7I73zqX W5BHuVMSoFakif/EfBP/Mp6EcalAXpSDwvRckABDxh/wevPXOLNjzpTQvaRj98Z/ Hl3Ohnxfg3g83jyIuOFGBCNe0qui5qdsr4kXjkZFW0RkQsByleqpAtV8apv1BXKE 0pvjC0XQUYpKS6YmvWNIbasYN2CaZ+bg8Fc= -----END CERTIFICATE-----Generated at Mon Oct 20 16:31:40 2025 by rpki-client