$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/df3cb1ae-b27d-30f9-a9dc-85d3b5b9f72d.roa File: df3cb1ae-b27d-30f9-a9dc-85d3b5b9f72d.roa (raw, json) Hash identifier: abQqLuoKwP5LvwFrnBLONJkKP9N1GJ43wYwRwrM0pv0= Subject key identifier: 16:4F:FB:3B:E5:B0:AF:71:4E:EB:2C:1A:E9:63:D3:C2:84:F3:09:A7 Certificate issuer: /CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Certificate serial: 010D0C9F4328584BA9325A6941E98DF2725C9780 Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/df3cb1ae-b27d-30f9-a9dc-85d3b5b9f72d.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 26211 IP address blocks: 2620:100:9000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:5a:69:41:e9:8d:f2:72:5c:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=cb8c1418-0432-483d-8100-31dc99efe8e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:60:17:26:ae:84:2b:a2:89:84:04:9e:a1:90: 04:ac:7a:dc:46:f9:1d:4f:7d:d0:b1:0e:87:90:a9: 73:6a:6d:8a:5c:66:ab:f9:1e:55:b0:8f:77:2f:fb: 80:48:4d:ff:00:df:d7:35:65:18:05:df:97:d9:74: 11:9d:49:05:13:e3:ee:af:dd:55:a0:a2:49:db:a7: 1e:b0:d5:d0:de:b7:68:2c:2f:9d:86:05:40:f6:a9: 79:2c:73:29:d5:d4:81:d5:9c:dc:d4:5c:c9:87:81: b5:78:0d:5d:43:4f:71:17:60:7c:67:6d:6a:0d:42: ae:21:d4:60:e1:38:d3:36:d2:b7:3a:98:76:57:33: da:35:2c:c8:52:44:e9:8b:ad:92:99:30:99:60:fa: 30:36:ba:24:b9:78:a7:51:53:7f:8f:bb:8a:16:d6: 88:55:1c:24:91:f8:ad:15:33:59:b3:68:b8:c3:d1: c1:3a:df:e6:f4:db:80:cb:18:61:ee:9d:2e:a7:5e: 21:73:72:5a:60:bd:7c:50:e4:04:b3:58:52:f9:7b: b1:4d:43:58:b6:27:51:1d:50:42:09:f1:f3:f5:78: 0c:86:1c:c7:34:51:aa:ca:ea:d6:a2:1a:d6:57:b3: 30:6e:dc:81:95:1f:dc:df:5e:69:38:e7:25:08:b6: 90:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:4F:FB:3B:E5:B0:AF:71:4E:EB:2C:1A:E9:63:D3:C2:84:F3:09:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/df3cb1ae-b27d-30f9-a9dc-85d3b5b9f72d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl X509v3 Authority Key Identifier: keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer sbgp-ipAddrBlock: critical IPv6: 2620:100:9000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:c8:f3:ba:1d:ed:6f:f8:f7:3b:d0:e0:80:fd:df:3a:27:df: 1a:05:cf:07:0b:55:43:03:10:8d:05:3a:9e:c3:ef:45:f0:60: 96:1e:65:2c:89:7b:f5:5a:48:83:d8:3c:c4:0b:5f:b1:1f:25: dc:a9:ae:eb:f1:c9:e0:0a:80:cf:29:3f:7a:ba:aa:1f:8b:97: 59:cf:94:59:9c:d6:20:c0:ec:3b:36:2c:b9:8b:fe:d5:04:e3: 4c:ea:7a:a3:b1:9b:37:78:a5:fc:46:0e:20:fb:08:66:13:4b: 8e:27:1e:c7:3b:12:75:29:09:b4:bc:07:9d:3f:af:ef:e5:ec: f8:bd:57:6b:17:a7:47:03:e7:84:de:19:76:82:24:4f:e6:e2: 80:3c:ee:1c:ce:f1:68:c5:2c:0d:88:9b:d8:9c:10:12:74:47: 40:60:c2:9a:e9:36:f3:9a:cb:3e:c1:84:8b:f9:9e:86:9f:16: 43:cd:4a:1a:49:f9:83:51:15:06:b8:ce:60:98:f6:cb:db:bc: d4:ba:83:24:62:99:a9:97:62:a1:ca:4d:4c:b2:88:4f:00:e1: 60:d3:2f:7d:06:55:4a:87:c9:77:4e:33:c5:da:d0:e8:23:64: af:8b:dd:2d:b9:93:e3:65:8f:a3:2a:01:f6:2d:88:db:68:f1: d0:8c:c6:bd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEupMlppQemN8nJcl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmU5YzU4OTQtZjc5NC00MjA5LWEwMGQtY2YyMzIzNjNk N2M2MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk Y2I4YzE0MTgtMDQzMi00ODNkLTgxMDAtMzFkYzk5ZWZlOGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGAXJq6EK6KJhASeoZAErHrcRvkdT33QsQ6H kKlzam2KXGar+R5VsI93L/uASE3/AN/XNWUYBd+X2XQRnUkFE+Pur91VoKJJ26ce sNXQ3rdoLC+dhgVA9ql5LHMp1dSB1Zzc1FzJh4G1eA1dQ09xF2B8Z21qDUKuIdRg 4TjTNtK3Oph2VzPaNSzIUkTpi62SmTCZYPowNrokuXinUVN/j7uKFtaIVRwkkfit FTNZs2i4w9HBOt/m9NuAyxhh7p0up14hc3JaYL18UOQEs1hS+XuxTUNYtidRHVBC CfHz9XgMhhzHNFGqyurWohrWV7MwbtyBlR/c315pOOclCLaQLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBZP+zvlsK9xTussGulj08KE8wmnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTlj NTg5NC1mNzk0LTQyMDktYTAwZC1jZjIzMjM2M2Q3YzYvZGYzY2IxYWUtYjI3ZC0z MGY5LWE5ZGMtODVkM2I1YjlmNzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmU5YzU4OTQtZjc5NC00MjA5LWEw MGQtY2YyMzIzNjNkN2M2LzZlOWM1ODk0LWY3OTQtNDIwOS1hMDBkLWNmMjMyMzYz ZDdjNi5jcmwwHwYDVR0jBBgwFoAU620+1MghuZYRngwJ/123iIBSlIUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTljNTg5NC1mNzk0LTQyMDktYTAwZC1jZjIz MjM2M2Q3YzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABAJAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFfI87od7W/49zvQ4ID93zon3xoFzwcLVUMDEI0FOp7D70XwYJYe ZSyJe/VaSIPYPMQLX7EfJdypruvxyeAKgM8pP3q6qh+Ll1nPlFmc1iDA7Ds2LLmL /tUE40zqeqOxmzd4pfxGDiD7CGYTS44nHsc7EnUpCbS8B50/r+/l7Pi9V2sXp0cD 54TeGXaCJE/m4oA87hzO8WjFLA2Im9icEBJ0R0BgwprpNvOayz7BhIv5noafFkPN ShpJ+YNRFQa4zmCY9svbvNS6gyRimamXYqHKTUyyiE8A4WDTL30GVUqHyXdOM8Xa 0OgjZK+L3S25k+Nlj6MqAfYtiNto8dCMxr0= -----END CERTIFICATE-----Generated at Wed Nov 5 15:20:26 2025 by rpki-client