$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/c006e98f-3ece-3757-bd45-4b1d0796733d.roa File: c006e98f-3ece-3757-bd45-4b1d0796733d.roa (raw, json) Hash identifier: P3XoPIuREokNGk35cRCjh3pRWc0g7rdduzFPp0p6f4g= Subject key identifier: 98:58:DF:93:27:4D:91:7D:F1:EB:79:5F:BA:7F:6E:31:47:80:44:3E Certificate issuer: /CN=c0ae1cff-309c-40d1-9760-3a89a481e998 Certificate serial: 010D0C9F4328584B8BE215D2147487C498BCC180 Authority key identifier: 3D:5C:C9:D2:DF:E0:F1:12:4E:09:59:BF:BE:75:A7:C9:39:BB:13:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/c006e98f-3ece-3757-bd45-4b1d0796733d.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 14907 IP address blocks: 2620:0:860::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/c0ae1cff-309c-40d1-9760-3a89a481e998.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/c0ae1cff-309c-40d1-9760-3a89a481e998.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:15:d2:14:74:87:c4:98:bc:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0ae1cff-309c-40d1-9760-3a89a481e998 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=a732f1d0-f96e-4158-8624-020201195691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:04:58:ee:b8:5a:7f:2d:a2:a5:ea:5f:65:03: 90:48:5d:12:3a:46:7b:69:2d:64:3c:da:d9:43:c3: e3:ee:a1:04:3f:ac:09:7e:72:26:dd:d1:91:ed:25: ba:2d:cc:de:e4:62:16:c6:1a:ee:23:3e:89:35:6e: 97:fd:b6:c0:db:fc:97:55:21:23:3c:ee:b6:d8:cd: 50:a6:a1:93:5f:44:5b:17:48:b9:51:fd:76:a1:c1: 1f:5c:b6:60:40:9d:af:16:61:a6:8d:2a:43:f9:cc: f6:70:20:d7:90:08:63:a1:5a:45:6d:4a:a9:b6:a9: de:86:fb:41:ab:cf:cd:9c:6c:64:cb:94:b0:1f:7e: 12:c9:e4:ab:51:9d:1a:d8:15:fe:c1:9d:04:18:c8: 7d:7b:74:a1:c1:6c:bd:c8:9b:41:cc:de:cc:81:7e: 63:5a:4d:af:0e:8a:2f:cd:b1:23:2e:95:96:43:e5: 7a:4d:05:67:21:69:0d:31:56:15:00:ec:dd:ea:e4: 84:e7:c9:73:26:4a:e3:d8:49:d9:0c:3d:02:ed:41: 0a:12:f3:f7:c4:40:e8:3a:b8:57:52:8c:ad:13:75: e8:bc:20:b7:ab:b9:32:b3:48:96:e8:25:c9:ab:28: 0a:88:7f:f8:c2:0d:c8:63:f0:61:9d:54:62:e6:56: bd:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:58:DF:93:27:4D:91:7D:F1:EB:79:5F:BA:7F:6E:31:47:80:44:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/c006e98f-3ece-3757-bd45-4b1d0796733d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/c0ae1cff-309c-40d1-9760-3a89a481e998.crl X509v3 Authority Key Identifier: keyid:3D:5C:C9:D2:DF:E0:F1:12:4E:09:59:BF:BE:75:A7:C9:39:BB:13:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:860::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:31:07:7b:48:b9:60:28:26:31:48:52:4f:29:21:05:41:37: b9:0e:1b:40:1d:7c:17:a9:97:17:5e:a6:87:40:a1:dd:5b:5c: 77:b0:3d:3e:ae:c0:ec:4a:c2:c8:91:32:a1:3e:2a:6e:ee:47: 00:fc:89:4e:59:04:bb:34:80:8e:7c:be:f5:74:d1:87:7e:76: d4:a6:1f:3f:aa:76:0e:51:ef:d9:07:2a:32:58:cd:74:b3:46: 14:b1:2f:ff:c7:ee:90:ae:f2:37:eb:83:7c:d2:f7:1d:da:26: a3:ed:87:b2:d0:58:21:c1:0b:fb:f5:fc:5f:35:3e:ad:1a:e1: 6e:42:79:e7:5c:46:8d:10:2e:15:5c:6c:b2:34:ea:e4:97:b1: 2d:c8:21:06:9a:aa:27:9f:4b:2a:06:a8:b7:fd:34:41:02:d6: 08:8e:af:e3:9e:04:08:16:a7:ee:7c:32:cc:35:9e:37:67:20: 52:94:b7:f4:2b:fc:e2:d0:3c:a8:24:b1:13:27:72:b7:4f:b3: 56:88:df:ca:e4:61:2e:ab:6e:c5:eb:b7:60:96:28:51:c6:05: 38:56:26:d5:8e:70:a8:58:31:9d:ef:f7:12:ea:aa:0c:3c:74: 7b:ba:12:15:bd:83:3d:64:42:c9:c3:89:44:7f:81:c2:a3:a3: dd:98:7e:38 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuL4hXSFHSHxJi8wYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzBhZTFjZmYtMzA5Yy00MGQxLTk3NjAtM2E4OWE0ODFl OTk4MB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk YTczMmYxZDAtZjk2ZS00MTU4LTg2MjQtMDIwMjAxMTk1NjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQRY7rhafy2ipepfZQOQSF0SOkZ7aS1kPNrZ Q8Pj7qEEP6wJfnIm3dGR7SW6Lcze5GIWxhruIz6JNW6X/bbA2/yXVSEjPO622M1Q pqGTX0RbF0i5Uf12ocEfXLZgQJ2vFmGmjSpD+cz2cCDXkAhjoVpFbUqptqnehvtB q8/NnGxky5SwH34SyeSrUZ0a2BX+wZ0EGMh9e3ShwWy9yJtBzN7MgX5jWk2vDoov zbEjLpWWQ+V6TQVnIWkNMVYVAOzd6uSE58lzJkrj2EnZDD0C7UEKEvP3xEDoOrhX UoytE3XovCC3q7kys0iW6CXJqygKiH/4wg3IY/BhnVRi5la9JwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJhY35MnTZF98et5X7p/bjFHgEQ+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMGFl MWNmZi0zMDljLTQwZDEtOTc2MC0zYTg5YTQ4MWU5OTgvYzAwNmU5OGYtM2VjZS0z NzU3LWJkNDUtNGIxZDA3OTY3MzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzBhZTFjZmYtMzA5Yy00MGQxLTk3 NjAtM2E4OWE0ODFlOTk4L2MwYWUxY2ZmLTMwOWMtNDBkMS05NzYwLTNhODlhNDgx ZTk5OC5jcmwwHwYDVR0jBBgwFoAUPVzJ0t/g8RJOCVm/vnWnyTm7EwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMGFlMWNmZi0zMDljLTQwZDEtOTc2MC0zYTg5 YTQ4MWU5OTguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAAhg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKsxB3tIuWAoJjFIUk8pIQVBN7kOG0AdfBeplxdepodAod1bXHew PT6uwOxKwsiRMqE+Km7uRwD8iU5ZBLs0gI58vvV00Yd+dtSmHz+qdg5R79kHKjJY zXSzRhSxL//H7pCu8jfrg3zS9x3aJqPth7LQWCHBC/v1/F81Pq0a4W5CeedcRo0Q LhVcbLI06uSXsS3IIQaaqiefSyoGqLf9NEEC1giOr+OeBAgWp+58Msw1njdnIFKU t/Qr/OLQPKgksRMncrdPs1aI38rkYS6rbsXrt2CWKFHGBThWJtWOcKhYMZ3v9xLq qgw8dHu6EhW9gz1kQsnDiUR/gcKjo92Yfjg= -----END CERTIFICATE-----Generated at Wed Nov 5 13:50:16 2025 by rpki-client