$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a338d603-009d-38f4-ab6b-12f8f20c0959.roa File: a338d603-009d-38f4-ab6b-12f8f20c0959.roa (raw, json) Hash identifier: OzvdFUT8LcYUgRQ/uh/6nQ+J914e49nYDA7R/3Cnquo= Subject key identifier: C2:C5:53:A0:86:8F:B0:56:2E:8D:96:BF:1D:B5:43:87:62:14:8F:5B Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584B2CF6EA631A2A171F53E8C180 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a338d603-009d-38f4-ab6b-12f8f20c0959.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 30103 IP address blocks: 2620:123:2085::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:ea:63:1a:2a:17:1f:53:e8:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=528cba90-72da-4314-8745-f224aa83d801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:78:dd:a4:a8:97:85:e0:59:e5:04:c1:a7:0b: c7:31:87:bd:c9:07:c7:0e:7f:a1:02:de:07:ea:ea: ac:8c:68:15:80:dc:59:75:02:5c:75:ff:0d:00:86: 85:9a:9e:31:d8:1f:2b:4f:01:42:aa:95:f5:ac:bc: 6d:21:e9:61:6d:b3:8e:07:df:d0:a3:ff:2f:37:9e: 03:09:d2:e0:cd:a7:bc:a3:d5:37:23:6b:d6:9a:c2: 70:f0:2f:8f:65:1d:42:ce:04:19:a4:35:ad:13:2c: 1f:fc:a0:b2:52:62:f0:14:68:21:5d:04:a5:ab:84: 9c:58:75:20:e7:30:71:c0:39:df:22:e8:1c:a3:50: c5:74:47:23:79:33:31:ea:97:b4:77:2a:00:1a:fd: 04:af:85:7a:1d:7d:9a:da:b4:f7:02:28:04:2c:26: 6d:11:a6:bc:18:7a:28:7b:1a:52:54:f7:7b:9a:c3: 4e:cd:43:bf:94:80:f5:e1:ab:83:cd:a3:6c:63:9d: c0:4e:c9:ca:02:43:7c:10:1d:0f:1d:b0:ff:f6:0c: 31:4d:10:7e:a4:95:25:57:d8:52:f2:87:42:0f:74: 17:68:7d:c1:32:44:8f:48:bb:19:da:a6:cc:68:12: 41:7d:1d:cd:aa:d7:a2:d6:c9:50:b1:a1:ff:f3:8c: c8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C5:53:A0:86:8F:B0:56:2E:8D:96:BF:1D:B5:43:87:62:14:8F:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a338d603-009d-38f4-ab6b-12f8f20c0959.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv6: 2620:123:2085::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:55:ff:90:39:8a:22:a9:e5:4a:08:24:4e:0b:fe:da:8f:87: 31:2b:40:10:47:32:bf:99:fb:99:fe:da:46:6c:5f:d4:e8:83: 17:56:12:6d:36:72:91:27:e9:91:05:09:62:71:4c:74:44:54: 84:80:1e:71:0e:af:ce:88:b4:8c:e0:cb:3e:31:29:65:0c:2c: cc:8a:5b:13:c9:f0:a4:ef:a9:0f:32:90:b3:51:be:ce:ea:07: a2:ce:d2:82:0b:45:23:88:82:c5:23:bf:a1:35:59:ea:46:dd: 94:1f:bb:0f:28:77:13:fc:04:55:cd:47:69:08:6f:ec:52:a1: b9:1d:53:76:0a:b6:b9:25:d1:ac:94:7c:39:a9:4d:3f:10:3e: e6:b7:b8:c5:db:61:99:8c:52:74:32:47:2e:93:5a:be:cf:11: 2e:91:15:9a:bb:44:89:3c:d8:dd:00:e1:a1:9c:2e:a2:64:d9: 17:ae:e0:79:cf:30:e8:a5:20:ea:90:6e:ee:15:00:95:37:b9: 66:41:2b:26:b0:ae:f2:6d:8a:89:f3:e7:7b:b1:f2:b0:79:65: 86:59:c7:dc:d1:62:1b:1b:48:02:f0:ab:6f:42:71:02:ff:be: 53:77:70:5a:23:26:05:e9:f2:34:5f:df:3f:3a:f6:7d:65:91: 5c:23:1b:8a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEss9upjGioXH1PowYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk NTI4Y2JhOTAtNzJkYS00MzE0LTg3NDUtZjIyNGFhODNkODAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnjdpKiXheBZ5QTBpwvHMYe9yQfHDn+hAt4H 6uqsjGgVgNxZdQJcdf8NAIaFmp4x2B8rTwFCqpX1rLxtIelhbbOOB9/Qo/8vN54D CdLgzae8o9U3I2vWmsJw8C+PZR1CzgQZpDWtEywf/KCyUmLwFGghXQSlq4ScWHUg 5zBxwDnfIugco1DFdEcjeTMx6pe0dyoAGv0Er4V6HX2a2rT3AigELCZtEaa8GHoo expSVPd7msNOzUO/lID14auDzaNsY53ATsnKAkN8EB0PHbD/9gwxTRB+pJUlV9hS 8odCD3QXaH3BMkSPSLsZ2qbMaBJBfR3Nqtei1slQsaH/84zItwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMLFU6CGj7BWLo2Wvx21Q4diFI9bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvYTMzOGQ2MDMtMDA5ZC0z OGY0LWFiNmItMTJmOGYyMGMwOTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABIyCF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJNV/5A5iiKp5UoIJE4L/tqPhzErQBBHMr+Z+5n+2kZsX9TogxdW Em02cpEn6ZEFCWJxTHREVISAHnEOr86ItIzgyz4xKWUMLMyKWxPJ8KTvqQ8ykLNR vs7qB6LO0oILRSOIgsUjv6E1WepG3ZQfuw8odxP8BFXNR2kIb+xSobkdU3YKtrkl 0ayUfDmpTT8QPua3uMXbYZmMUnQyRy6TWr7PES6RFZq7RIk82N0A4aGcLqJk2Reu 4HnPMOilIOqQbu4VAJU3uWZBKyawrvJtionz53ux8rB5ZYZZx9zRYhsbSALwq29C cQL/vlN3cFojJgXp8jRf3z869n1lkVwjG4o= -----END CERTIFICATE-----Generated at Mon Oct 20 16:31:39 2025 by rpki-client