$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/e9e4b82a-5d02-3ff9-8293-d43f1c276845.roa File: e9e4b82a-5d02-3ff9-8293-d43f1c276845.roa (raw, json) Hash identifier: MPpWkwlYx9etZL+dKJACj6Dd2lSvJeFC5+HIvhVivO0= Subject key identifier: 24:CD:90:FD:44:62:75:1C:D6:10:41:7E:87:7B:E8:32:02:0D:FC:75 Certificate issuer: /CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Certificate serial: 010D0C9F4328584BA9325A7C396C6012C17E8900 Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/e9e4b82a-5d02-3ff9-8293-d43f1c276845.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 22843 IP address blocks: 2620:100:9000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:5a:7c:39:6c:60:12:c1:7e:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=fbf4f4e3-ca73-4859-9c33-7e47d1d019e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:26:58:c4:b1:98:00:8a:ae:3e:9d:b5:96:78: 68:46:d0:83:e0:a1:98:47:76:5c:fa:5f:bc:c4:96: c5:09:85:49:b5:f9:17:f3:ef:65:aa:86:44:9e:92: b8:8c:e4:cc:98:f6:60:85:57:9c:26:dd:1e:e7:a8: 1f:2a:16:21:fa:6a:ad:3b:b7:45:5c:f6:91:88:8e: 38:87:9f:c2:43:b1:01:dd:ba:e7:c6:a6:ae:b0:f0: 21:33:49:c4:f9:b4:30:4c:db:51:98:db:82:ea:10: f6:30:67:36:36:0f:b8:38:52:a6:6d:06:0d:73:72: 5b:c1:0d:e0:b5:72:d0:f1:c5:30:de:a1:1d:c0:85: e8:84:1b:4a:1a:95:a0:07:bf:66:17:ce:81:29:ac: fd:01:40:c9:08:61:ad:18:07:be:75:79:f2:c1:31: 26:00:06:45:c9:d0:6a:9d:33:70:e5:17:dc:1e:dd: d4:1e:de:66:c1:80:ff:b6:4c:15:ac:15:46:d0:c5: ed:6f:a2:a2:21:96:a5:3d:d5:ab:35:61:73:17:87: e4:4a:69:7d:45:8f:8c:0f:22:f5:81:32:2d:d2:b4: aa:e9:de:ef:49:a1:40:e6:66:a0:62:c2:0c:50:de: 25:a2:93:35:b0:af:34:c0:8c:84:e0:e3:8f:54:0f: 9d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:CD:90:FD:44:62:75:1C:D6:10:41:7E:87:7B:E8:32:02:0D:FC:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/e9e4b82a-5d02-3ff9-8293-d43f1c276845.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl X509v3 Authority Key Identifier: keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer sbgp-ipAddrBlock: critical IPv6: 2620:100:9000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:0b:72:9f:3e:9b:6d:90:af:7b:6d:52:dd:04:44:ab:d0:45: db:6f:6b:86:b5:48:c6:92:69:86:12:cc:45:08:66:55:16:7f: 4b:f9:b4:46:31:75:bd:e4:e7:ac:fa:f1:cd:81:69:c7:f0:77: f5:ba:aa:48:3b:8e:38:8c:40:9e:07:c0:f0:78:2b:34:a8:53: f8:9d:d5:d3:30:0a:04:0a:f3:27:74:15:c3:b6:1a:20:96:8f: e1:81:4f:be:ed:8b:f9:ad:fa:6c:4c:4a:f3:dd:21:c4:9b:c1: ae:6d:eb:97:a5:66:11:65:f1:48:7d:08:16:c9:8b:59:f8:70: 39:cc:1b:5b:38:25:ca:7c:d6:24:23:15:e7:43:ae:ca:2d:aa: 5a:a7:be:ff:82:5f:a5:6b:1e:01:f8:fc:8c:8d:66:f8:e0:a2: 49:e2:3f:66:ee:a2:67:cd:a9:70:b2:3c:52:69:38:cc:4d:5b: 77:29:cd:21:7b:3f:f6:a8:e5:36:9e:9c:ab:e4:61:33:6e:a1: 95:9b:71:a8:4f:bb:16:14:4b:98:43:ec:67:66:42:68:bb:52: 0f:11:9b:25:b3:08:8e:25:49:b7:52:43:af:f3:15:dc:38:c7: 62:fb:3c:5a:c5:cc:3a:94:94:08:17:49:ef:31:58:ab:cf:d9: 50:00:80:c6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEupMlp8OWxgEsF+iQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmU5YzU4OTQtZjc5NC00MjA5LWEwMGQtY2YyMzIzNjNk N2M2MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk ZmJmNGY0ZTMtY2E3My00ODU5LTljMzMtN2U0N2QxZDAxOWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCZYxLGYAIquPp21lnhoRtCD4KGYR3Zc+l+8 xJbFCYVJtfkX8+9lqoZEnpK4jOTMmPZghVecJt0e56gfKhYh+mqtO7dFXPaRiI44 h5/CQ7EB3brnxqausPAhM0nE+bQwTNtRmNuC6hD2MGc2Ng+4OFKmbQYNc3JbwQ3g tXLQ8cUw3qEdwIXohBtKGpWgB79mF86BKaz9AUDJCGGtGAe+dXnywTEmAAZFydBq nTNw5RfcHt3UHt5mwYD/tkwVrBVG0MXtb6KiIZalPdWrNWFzF4fkSml9RY+MDyL1 gTIt0rSq6d7vSaFA5magYsIMUN4lopM1sK80wIyE4OOPVA+d2wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCTNkP1EYnUc1hBBfod76DICDfx1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTlj NTg5NC1mNzk0LTQyMDktYTAwZC1jZjIzMjM2M2Q3YzYvZTllNGI4MmEtNWQwMi0z ZmY5LTgyOTMtZDQzZjFjMjc2ODQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmU5YzU4OTQtZjc5NC00MjA5LWEw MGQtY2YyMzIzNjNkN2M2LzZlOWM1ODk0LWY3OTQtNDIwOS1hMDBkLWNmMjMyMzYz ZDdjNi5jcmwwHwYDVR0jBBgwFoAU620+1MghuZYRngwJ/123iIBSlIUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTljNTg5NC1mNzk0LTQyMDktYTAwZC1jZjIz MjM2M2Q3YzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABAJAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALELcp8+m22Qr3ttUt0ERKvQRdtva4a1SMaSaYYSzEUIZlUWf0v5 tEYxdb3k56z68c2Bacfwd/W6qkg7jjiMQJ4HwPB4KzSoU/id1dMwCgQK8yd0FcO2 GiCWj+GBT77ti/mt+mxMSvPdIcSbwa5t65elZhFl8Uh9CBbJi1n4cDnMG1s4Jcp8 1iQjFedDrsotqlqnvv+CX6VrHgH4/IyNZvjgokniP2buomfNqXCyPFJpOMxNW3cp zSF7P/ao5TaenKvkYTNuoZWbcahPuxYUS5hD7GdmQmi7Ug8RmyWzCI4lSbdSQ6/z Fdw4x2L7PFrFzDqUlAgXSe8xWKvP2VAAgMY= -----END CERTIFICATE-----Generated at Wed Nov 5 06:54:44 2025 by rpki-client