$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/18a7b006-bca2-30b0-b588-6f3437d24a3c.roa File: 18a7b006-bca2-30b0-b588-6f3437d24a3c.roa (raw, json) Hash identifier: Ji9SctDfy9Tb8eVi1WqlK80fcZ3eG4RXWIe7n7P7pKw= Subject key identifier: 20:A4:EB:A0:38:DF:63:57:6F:10:EB:60:DA:55:98:FC:DF:6B:8A:66 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584BBFA5AC7EF8CCB1A3AE159300 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/18a7b006-bca2-30b0-b588-6f3437d24a3c.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 16839 IP address blocks: 2606:3600:130::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:ac:7e:f8:cc:b1:a3:ae:15:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=100afd33-7d7a-4edc-ad1f-cb37fca39cd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:42:16:18:4c:08:5a:40:eb:83:8f:b5:12:19: f7:68:01:e2:7e:13:88:47:7c:63:78:de:5b:41:4b: 7c:3a:1b:72:85:77:0e:36:f0:37:7e:cd:9d:d0:7c: a7:ec:62:64:fd:0a:dc:96:2b:01:74:7d:2b:d8:61: cd:9f:ac:a6:dc:98:02:bb:44:bf:2b:5b:47:32:47: 75:b6:53:2b:82:09:98:38:85:02:69:23:5b:af:f0: 9b:78:17:05:1a:6e:96:e1:d2:51:7a:3d:78:e7:e9: 02:27:8e:03:2e:bd:d0:52:1d:42:58:52:28:e4:23: 48:37:bb:0e:e9:7f:4c:52:b5:e1:5e:69:4f:5e:91: d2:69:44:79:08:79:7f:2f:46:de:7b:66:b6:e8:29: 0c:f7:9b:c8:1c:d7:3c:63:92:b4:2b:b3:df:fa:6a: de:40:51:65:75:e9:3b:c3:e7:48:97:0a:54:93:6f: cf:eb:60:84:84:14:d5:7a:0c:3b:4c:1c:43:a2:bf: 9a:d1:0a:9f:ec:de:c1:dd:a2:ad:25:b5:ae:41:95: bf:f5:13:f2:f1:a9:f2:c7:16:aa:ea:6e:58:93:81: 52:8b:68:d2:89:bd:60:b6:87:e6:45:5f:0a:59:ee: 21:2c:ea:c0:c8:4b:7a:dd:ea:34:86:b0:ef:f9:b9: 60:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A4:EB:A0:38:DF:63:57:6F:10:EB:60:DA:55:98:FC:DF:6B:8A:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/18a7b006-bca2-30b0-b588-6f3437d24a3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv6: 2606:3600:130::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:c5:4a:b4:49:a3:07:41:78:88:ae:e1:87:72:5f:a9:0c:af: d7:42:ec:ac:49:b2:ac:2d:f1:45:f9:48:9a:fe:38:2c:ab:01: d2:58:20:9f:b8:81:86:a7:de:26:83:85:c0:08:11:7e:04:b4: ab:f8:fa:29:04:3f:e9:19:4a:40:0d:8d:b0:69:4e:2f:c4:a1: 84:52:f6:26:97:07:66:f3:7b:c9:6c:73:34:9f:e1:00:a1:ff: fd:62:f4:7d:b5:90:18:71:ed:d7:fa:57:a1:c4:2e:cb:b6:c4: d1:1e:64:c5:f7:2e:08:5a:c2:7a:d5:a9:be:be:22:73:8f:43: a6:b6:94:5e:73:fe:ac:7a:0c:71:63:db:6a:20:ef:38:74:4f: e7:a6:c4:ef:6f:ac:9c:da:c1:32:a9:cb:b1:a1:89:a0:ec:d5: 24:e9:88:60:b4:da:4c:c9:9f:97:0d:29:30:f2:46:28:d8:cf: f6:d9:fd:23:7c:7b:2b:1c:82:41:3b:a9:43:ed:5b:38:06:09: e7:25:59:18:58:93:99:88:a3:1f:2a:87:f4:b8:4c:79:e6:9d: 62:bb:b7:78:ae:45:58:b8:1b:3d:0d:48:65:6d:2f:e6:50:13: f2:da:78:20:2c:11:09:42:e1:97:9f:70:81:ac:43:dd:c9:e7: 4c:8b:f1:6e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu/pax++Myxo64VkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk MTAwYWZkMzMtN2Q3YS00ZWRjLWFkMWYtY2IzN2ZjYTM5Y2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUIWGEwIWkDrg4+1Ehn3aAHifhOIR3xjeN5b QUt8OhtyhXcONvA3fs2d0Hyn7GJk/QrclisBdH0r2GHNn6ym3JgCu0S/K1tHMkd1 tlMrggmYOIUCaSNbr/CbeBcFGm6W4dJRej145+kCJ44DLr3QUh1CWFIo5CNIN7sO 6X9MUrXhXmlPXpHSaUR5CHl/L0bee2a26CkM95vIHNc8Y5K0K7Pf+mreQFFldek7 w+dIlwpUk2/P62CEhBTVegw7TBxDor+a0Qqf7N7B3aKtJbWuQZW/9RPy8anyxxaq 6m5Yk4FSi2jSib1gtofmRV8KWe4hLOrAyEt63eo0hrDv+blgcwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCCk66A432NXbxDrYNpVmPzfa4pmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMThhN2IwMDYtYmNhMi0z MGIwLWI1ODgtNmYzNDM3ZDI0YTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY2AAEw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAErFSrRJowdBeIiu4YdyX6kMr9dC7KxJsqwt8UX5SJr+OCyrAdJY IJ+4gYan3iaDhcAIEX4EtKv4+ikEP+kZSkANjbBpTi/EoYRS9iaXB2bze8lsczSf 4QCh//1i9H21kBhx7df6V6HELsu2xNEeZMX3LghawnrVqb6+InOPQ6a2lF5z/qx6 DHFj22og7zh0T+emxO9vrJzawTKpy7GhiaDs1STpiGC02kzJn5cNKTDyRijYz/bZ /SN8eyscgkE7qUPtWzgGCeclWRhYk5mIox8qh/S4THnmnWK7t3iuRVi4Gz0NSGVt L+ZQE/LaeCAsEQlC4ZefcIGsQ93J50yL8W4= -----END CERTIFICATE-----Generated at Wed Nov 5 12:19:50 2025 by rpki-client