$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/8dde01f3-144b-3f64-9c50-533507cff3ae.roa File: 8dde01f3-144b-3f64-9c50-533507cff3ae.roa (raw, json) Hash identifier: Cw25gktDQS0U2CP23+Tq8TeYlfOQzh/OLPxHpSd8WhI= Subject key identifier: 22:7F:EB:97:B7:15:9E:6C:E8:24:A6:0C:10:4F:85:38:7B:3B:4C:5E Certificate issuer: /CN=603ec9c3-6a7f-4455-baee-5999e253e735 Certificate serial: 010D0C9F4328584B80B75C92A3FCB2437D666990 Authority key identifier: 8E:2C:C0:E0:03:39:DF:F9:32:13:AA:61:21:F8:AB:2D:67:F8:BA:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/8dde01f3-144b-3f64-9c50-533507cff3ae.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 3677 IP address blocks: 2620:0:e58::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:5c:92:a3:fc:b2:43:7d:66:69:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=603ec9c3-6a7f-4455-baee-5999e253e735 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=6c681438-dcf6-44ab-8b01-892fecde89fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:fe:11:c9:c6:f8:f1:9f:e4:51:56:be:f8:ed: 80:91:32:7d:56:ac:73:94:0a:26:cb:4e:ac:fb:c8: b7:69:03:e9:82:b1:c1:36:67:2a:71:67:a0:f1:e0: 4f:6d:0c:c0:e7:84:23:36:a7:c1:f7:69:78:ea:4e: 9d:94:f3:8e:8a:e4:e0:bb:9e:42:97:5e:7a:1b:7c: 85:bd:5c:fe:97:61:0f:8f:1e:bb:21:5f:b1:39:36: ea:32:41:46:15:83:6e:82:05:3e:8f:7c:59:0a:dc: b6:95:7b:dd:50:15:b4:67:bd:ee:4a:da:69:dd:2f: 59:bc:ab:df:60:2f:92:94:28:68:96:55:5b:74:a6: 4b:1f:3f:cf:04:fc:63:a8:fb:56:fc:a7:6b:66:9c: cb:86:e7:b6:7a:d4:95:7e:13:f9:f1:61:ab:ae:97: 3e:ba:79:2a:d6:39:fc:9d:28:cb:5f:f7:44:93:09: 65:39:6a:e2:ae:b0:66:98:3b:88:55:db:48:26:81: 9f:a0:f2:26:61:46:ba:59:88:35:d3:da:3e:f8:50: 07:fe:ed:a3:06:df:47:a4:35:2b:3b:cd:0d:e5:8b: 48:16:5c:e6:60:c3:a3:b6:31:e1:f6:ba:4f:14:31: 0d:26:f1:50:43:de:69:45:4a:63:05:4a:a4:ba:ea: 38:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:7F:EB:97:B7:15:9E:6C:E8:24:A6:0C:10:4F:85:38:7B:3B:4C:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/8dde01f3-144b-3f64-9c50-533507cff3ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.crl X509v3 Authority Key Identifier: keyid:8E:2C:C0:E0:03:39:DF:F9:32:13:AA:61:21:F8:AB:2D:67:F8:BA:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:e58::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:f3:43:33:2d:be:e9:1d:da:8f:b4:38:24:d3:a4:6c:76:a7: c5:a6:54:85:a9:89:dd:0f:9d:d5:02:0c:17:29:c3:f3:c8:52: da:38:80:5a:e1:29:3e:60:56:13:d3:3a:f8:bf:ef:0d:a1:6e: 47:14:39:c1:13:27:18:50:8d:bf:6d:6b:0a:42:04:bf:04:33: d4:40:7b:20:88:3e:ae:bd:55:4f:2d:41:ff:67:cb:21:c3:a0: a8:49:a9:b2:a1:ae:59:0e:4a:d2:1a:e5:a0:74:cf:38:5f:83: 7f:35:e2:c8:cd:85:6f:69:da:fd:77:2a:b0:a4:bc:56:48:3d: 8e:03:60:46:b8:b0:79:74:19:a9:58:7b:31:a5:dd:2f:e7:8a: ca:50:16:c7:1b:bd:e3:b0:36:33:4e:30:05:56:29:16:1c:4e: 82:1d:ac:33:68:63:ec:f4:1e:ed:62:c3:a5:12:64:d2:18:34: 42:4e:b4:03:57:01:51:32:0b:a0:07:1f:b6:c8:85:1c:7b:65: 8a:ac:2b:b3:f0:5b:72:b9:93:ff:fd:9d:75:82:c1:e3:0e:6c: 57:68:e8:1b:39:af:99:ea:33:21:ce:fc:e2:00:49:62:cb:ef: 70:d1:17:0c:84:01:d8:c2:56:d6:5a:e2:7e:95:39:a8:1b:8b: 24:c7:15:47 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuAt1ySo/yyQ31maZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAzZWM5YzMtNmE3Zi00NDU1LWJhZWUtNTk5OWUyNTNl NzM1MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk NmM2ODE0MzgtZGNmNi00NGFiLThiMDEtODkyZmVjZGU4OWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhf4Rycb48Z/kUVa++O2AkTJ9VqxzlAomy06s +8i3aQPpgrHBNmcqcWeg8eBPbQzA54QjNqfB92l46k6dlPOOiuTgu55Cl156G3yF vVz+l2EPjx67IV+xOTbqMkFGFYNuggU+j3xZCty2lXvdUBW0Z73uStpp3S9ZvKvf YC+SlChollVbdKZLHz/PBPxjqPtW/KdrZpzLhue2etSVfhP58WGrrpc+unkq1jn8 nSjLX/dEkwllOWrirrBmmDuIVdtIJoGfoPImYUa6WYg109o++FAH/u2jBt9HpDUr O80N5YtIFlzmYMOjtjHh9rpPFDENJvFQQ95pRUpjBUqkuuo4DQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCJ/65e3FZ5s6CSmDBBPhTh7O0xeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82MDNl YzljMy02YTdmLTQ0NTUtYmFlZS01OTk5ZTI1M2U3MzUvOGRkZTAxZjMtMTQ0Yi0z ZjY0LTljNTAtNTMzNTA3Y2ZmM2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjAzZWM5YzMtNmE3Zi00NDU1LWJh ZWUtNTk5OWUyNTNlNzM1LzYwM2VjOWMzLTZhN2YtNDQ1NS1iYWVlLTU5OTllMjUz ZTczNS5jcmwwHwYDVR0jBBgwFoAUjizA4AM53/kyE6phIfirLWf4uvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82MDNlYzljMy02YTdmLTQ0NTUtYmFlZS01OTk5 ZTI1M2U3MzUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAA5Y MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJDzQzMtvukd2o+0OCTTpGx2p8WmVIWpid0PndUCDBcpw/PIUto4 gFrhKT5gVhPTOvi/7w2hbkcUOcETJxhQjb9tawpCBL8EM9RAeyCIPq69VU8tQf9n yyHDoKhJqbKhrlkOStIa5aB0zzhfg3814sjNhW9p2v13KrCkvFZIPY4DYEa4sHl0 GalYezGl3S/nispQFscbveOwNjNOMAVWKRYcToIdrDNoY+z0Hu1iw6USZNIYNEJO tANXAVEyC6AHH7bIhRx7ZYqsK7PwW3K5k//9nXWCweMObFdo6Bs5r5nqMyHO/OIA SWLL73DRFwyEAdjCVtZa4n6VOagbiyTHFUc= -----END CERTIFICATE-----Generated at Wed Nov 5 12:21:23 2025 by rpki-client