$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c/43384fc3-deb1-37e9-988c-78d975951fe7.roa File: 43384fc3-deb1-37e9-988c-78d975951fe7.roa (raw, json) Hash identifier: dCHjgjrxa8Xs6aN1wnwNzhMgYEDVQxr3KscHY2H2M1U= Subject key identifier: 0F:21:FA:69:19:F2:9B:29:42:93:A0:D4:6A:5B:40:B9:30:0A:3A:76 Certificate issuer: /CN=f0682b49-784e-4da6-8c82-9a4562d0b08c Certificate serial: 010D0C9F4328584B13D6B6730CC94099DD2ABD20 Authority key identifier: C3:76:B5:48:78:AD:92:A1:DA:19:D5:D4:9D:0D:28:22:AA:E7:47:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c/43384fc3-deb1-37e9-988c-78d975951fe7.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 19382 IP address blocks: 2620:13c:e000::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c/f0682b49-784e-4da6-8c82-9a4562d0b08c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c/f0682b49-784e-4da6-8c82-9a4562d0b08c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:b6:73:0c:c9:40:99:dd:2a:bd:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0682b49-784e-4da6-8c82-9a4562d0b08c Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=67c38477-0a5a-4a2d-85db-131e92e6657a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:62:04:eb:88:32:99:25:41:a9:5b:d2:74:d6: 47:84:70:08:52:40:3b:b8:63:86:76:0e:4c:71:b9: 8b:c8:f3:37:08:b0:43:65:8a:0f:c6:4e:90:b7:92: 8d:c6:d2:8b:72:e0:79:88:78:a8:b7:ed:04:1a:67: a7:86:f7:fb:8e:00:ad:b6:8a:1d:68:71:12:ed:57: 70:95:dd:15:65:72:a1:2f:a0:64:2c:9b:dd:a1:0b: a3:05:d9:e9:6d:50:49:73:08:d5:6a:7e:ae:66:7e: fa:82:55:9f:d1:de:74:85:f8:52:24:0c:cd:03:7d: 9e:19:6e:d6:1a:16:b5:6d:5f:34:d8:f4:0f:29:f2: aa:60:71:22:b8:53:3b:4c:42:74:6f:df:92:9a:87: 54:6e:a4:17:2e:65:2c:7a:41:0b:53:9d:15:c3:16: 2c:67:6f:5a:c6:4c:b9:7e:82:00:18:7d:c6:88:f5: 6c:9d:e5:d4:21:2d:57:b3:b8:44:18:3c:33:2f:37: a0:fa:b0:2f:97:4d:4b:fb:be:3f:0d:9b:ce:0f:63: d2:ad:30:9a:ba:3a:d3:83:df:18:52:eb:9a:c6:ea: c0:0e:fd:8b:e5:ea:c1:df:cc:75:0e:7e:e2:d2:fb: 20:3b:5d:ce:c1:4b:9b:26:7d:dd:8a:57:d8:47:36: 68:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:21:FA:69:19:F2:9B:29:42:93:A0:D4:6A:5B:40:B9:30:0A:3A:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c/43384fc3-deb1-37e9-988c-78d975951fe7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c/f0682b49-784e-4da6-8c82-9a4562d0b08c.crl X509v3 Authority Key Identifier: keyid:C3:76:B5:48:78:AD:92:A1:DA:19:D5:D4:9D:0D:28:22:AA:E7:47:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c.cer sbgp-ipAddrBlock: critical IPv6: 2620:13c:e000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:ec:b3:02:c1:4e:d4:11:45:bc:5e:de:0e:b1:e1:6f:b2:58: 3f:e3:78:15:fd:1b:37:fc:d6:f7:e0:4e:07:69:48:2b:0c:eb: 33:9d:aa:0f:b8:dc:3e:4f:88:0a:a8:30:76:c7:5b:0b:06:f0: d6:5f:18:cf:8b:2f:ef:c4:5b:f5:ae:e3:b8:63:21:9b:32:09: 37:c7:a6:1e:9a:7b:7f:8f:33:7e:26:db:9d:80:91:24:1d:d0: c2:ac:e3:54:98:50:6f:bf:e1:d2:21:66:61:8e:14:f5:8d:67: a1:f6:ec:cd:34:30:b8:ea:b4:68:f1:f8:ef:3b:81:2f:0a:89: 2f:f0:c7:a2:bf:d9:a8:50:d4:52:36:6d:02:92:48:a1:3f:f8: 9c:ba:3e:58:f8:da:b1:27:38:30:c2:d9:2f:d5:b6:94:ad:55: 1b:8f:0c:a0:8a:9a:71:80:67:41:15:48:1c:bf:f9:4e:a7:56: 40:83:92:85:d7:4a:e5:bb:da:d6:b8:a6:9b:d8:3a:0a:36:72: 5c:22:5c:84:4d:80:f1:ab:a4:02:e9:3d:58:bf:97:7f:72:53: b9:3c:3a:7e:c6:26:e2:96:1c:9e:a9:7d:83:3b:00:db:96:72: b0:ac:25:a1:9f:ad:b7:42:64:49:91:eb:60:3c:3c:85:3a:6a: 80:7a:6b:70 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsT1rZzDMlAmd0qvSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjA2ODJiNDktNzg0ZS00ZGE2LThjODItOWE0NTYyZDBi MDhjMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk NjdjMzg0NzctMGE1YS00YTJkLTg1ZGItMTMxZTkyZTY2NTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGIE64gymSVBqVvSdNZHhHAIUkA7uGOGdg5M cbmLyPM3CLBDZYoPxk6Qt5KNxtKLcuB5iHiot+0EGmenhvf7jgCttoodaHES7Vdw ld0VZXKhL6BkLJvdoQujBdnpbVBJcwjVan6uZn76glWf0d50hfhSJAzNA32eGW7W Gha1bV802PQPKfKqYHEiuFM7TEJ0b9+SmodUbqQXLmUsekELU50VwxYsZ29axky5 foIAGH3GiPVsneXUIS1Xs7hEGDwzLzeg+rAvl01L+74/DZvOD2PSrTCaujrTg98Y UuuaxurADv2L5erB38x1Dn7i0vsgO13OwUubJn3dilfYRzZonwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA8h+mkZ8pspQpOg1GpbQLkwCjp2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMDY4 MmI0OS03ODRlLTRkYTYtOGM4Mi05YTQ1NjJkMGIwOGMvNDMzODRmYzMtZGViMS0z N2U5LTk4OGMtNzhkOTc1OTUxZmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjA2ODJiNDktNzg0ZS00ZGE2LThj ODItOWE0NTYyZDBiMDhjL2YwNjgyYjQ5LTc4NGUtNGRhNi04YzgyLTlhNDU2MmQw YjA4Yy5jcmwwHwYDVR0jBBgwFoAUw3a1SHitkqHaGdXUnQ0oIqrnR4YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMDY4MmI0OS03ODRlLTRkYTYtOGM4Mi05YTQ1 NjJkMGIwOGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABPOAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFfsswLBTtQRRbxe3g6x4W+yWD/jeBX9Gzf81vfgTgdpSCsM6zOd qg+43D5PiAqoMHbHWwsG8NZfGM+LL+/EW/Wu47hjIZsyCTfHph6ae3+PM34m252A kSQd0MKs41SYUG+/4dIhZmGOFPWNZ6H27M00MLjqtGjx+O87gS8KiS/wx6K/2ahQ 1FI2bQKSSKE/+Jy6Plj42rEnODDC2S/VtpStVRuPDKCKmnGAZ0EVSBy/+U6nVkCD koXXSuW72ta4ppvYOgo2clwiXIRNgPGrpALpPVi/l39yU7k8On7GJuKWHJ6pfYM7 ANuWcrCsJaGfrbdCZEmR62A8PIU6aoB6a3A= -----END CERTIFICATE-----Generated at Fri Oct 17 14:27:40 2025 by rpki-client