$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/2afcd3d2-508e-374d-8a63-62f8e2cfdafe.roa File: 2afcd3d2-508e-374d-8a63-62f8e2cfdafe.roa (raw, json) Hash identifier: 1058Kp88Q0q8ZX0RY8Vdh41MRGH3Uwxdiy6L5Cwz/g8= Subject key identifier: C2:F9:1E:9B:52:AD:6D:59:C4:BA:61:F2:F7:3F:E9:D0:D7:A2:BF:F4 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584BBFA5AC904D5B9F8C26065680 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/2afcd3d2-508e-374d-8a63-62f8e2cfdafe.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 16839 IP address blocks: 2606:3600:160::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:ac:90:4d:5b:9f:8c:26:06:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=f579080f-e8b1-48b5-b6e1-b4c7e8d49d10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:18:e7:04:a3:09:21:43:d4:96:cf:13:e1:12: b7:d5:ac:dc:14:21:a1:0e:a4:7a:62:39:96:b7:97: e8:95:89:f7:00:bf:58:ab:5e:2c:b3:4c:2a:c8:87: 15:eb:c7:f9:11:34:6c:7e:53:a4:a8:3c:5a:18:a6: 70:28:55:e0:e0:b1:1b:10:e9:b1:00:23:b0:79:1d: b0:fa:ce:f4:f3:88:09:a0:fc:ab:34:be:7f:81:f2: dc:43:e8:75:cb:4b:48:7c:70:ad:39:e5:d0:b1:68: 0d:89:18:4c:a6:6a:d1:46:84:8e:b4:de:79:a4:4e: e5:a4:b5:31:54:92:2d:f1:2a:6a:94:82:fa:54:04: 57:61:ba:9c:ee:27:9a:7d:e2:19:1e:26:86:bf:b1: 51:6b:1b:ae:eb:44:75:29:d7:c5:62:06:b5:58:6f: ba:9d:55:c4:77:71:c8:03:82:82:44:b8:cd:c6:f3: ed:e8:70:c2:ae:12:a5:fb:59:60:c6:69:e2:f3:04: 7a:8b:31:a3:3d:2a:24:18:3b:4e:88:80:ef:ed:aa: 2c:56:ee:3c:33:32:78:56:a8:f1:82:fc:08:74:7d: 1a:1c:57:38:41:c4:e5:25:5a:fc:fd:74:57:24:02: 72:86:ce:b6:9c:11:75:3b:4a:1d:8a:da:f0:d6:eb: e9:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F9:1E:9B:52:AD:6D:59:C4:BA:61:F2:F7:3F:E9:D0:D7:A2:BF:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/2afcd3d2-508e-374d-8a63-62f8e2cfdafe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv6: 2606:3600:160::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:5f:80:3f:d7:51:40:14:93:9d:48:87:f9:db:25:cb:fc:ec: bb:ae:67:7d:59:b0:e9:d2:4d:e1:9b:c5:8c:87:17:9d:d2:4f: 48:63:f9:98:49:b7:09:f0:71:62:5e:b0:a3:52:f6:37:df:62: 56:80:b9:d3:6a:d6:5a:89:be:c3:2b:5c:f6:eb:fb:4c:ce:e7: 67:f2:6c:bd:c4:3a:5b:cf:31:a5:f0:02:8f:00:52:f2:59:19: 4a:87:01:65:19:aa:d8:15:32:d7:83:79:1e:11:54:65:fc:da: 85:85:f8:26:f7:b0:15:26:c8:a1:18:29:6d:3e:4a:e3:15:1c: ef:d0:b7:dd:44:cc:af:91:b8:19:12:20:0f:5c:8f:71:33:e4: 9b:c8:8c:44:6f:15:fe:5f:ee:10:43:f1:9c:12:4b:8a:61:07: 8a:d3:1e:46:a3:82:41:07:7c:7f:b3:59:6c:1b:c3:51:4f:e7: 3c:7f:d4:1d:4e:05:1a:2a:b7:2d:30:cc:13:5b:ef:3e:ae:c3: ba:81:0e:c3:3d:6d:62:ab:73:e8:59:94:a6:82:b0:8e:73:35: 92:3c:27:62:73:ac:b9:89:d9:b0:dd:d0:ee:7c:33:e8:9c:13: 63:96:d2:6c:e0:d5:94:9c:2e:01:00:b3:9a:58:60:73:b6:7d: 2b:55:bc:14 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu/payQTVufjCYGVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk ZjU3OTA4MGYtZThiMS00OGI1LWI2ZTEtYjRjN2U4ZDQ5ZDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxjnBKMJIUPUls8T4RK31azcFCGhDqR6YjmW t5folYn3AL9Yq14ss0wqyIcV68f5ETRsflOkqDxaGKZwKFXg4LEbEOmxACOweR2w +s7084gJoPyrNL5/gfLcQ+h1y0tIfHCtOeXQsWgNiRhMpmrRRoSOtN55pE7lpLUx VJIt8SpqlIL6VARXYbqc7ieafeIZHiaGv7FRaxuu60R1KdfFYga1WG+6nVXEd3HI A4KCRLjNxvPt6HDCrhKl+1lgxmni8wR6izGjPSokGDtOiIDv7aosVu48MzJ4Vqjx gvwIdH0aHFc4QcTlJVr8/XRXJAJyhs62nBF1O0oditrw1uvpLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFML5HptSrW1ZxLph8vc/6dDXor/0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMmFmY2QzZDItNTA4ZS0z NzRkLThhNjMtNjJmOGUyY2ZkYWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY2AAFg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAClfgD/XUUAUk51Ih/nbJcv87LuuZ31ZsOnSTeGbxYyHF53ST0hj +ZhJtwnwcWJesKNS9jffYlaAudNq1lqJvsMrXPbr+0zO52fybL3EOlvPMaXwAo8A UvJZGUqHAWUZqtgVMteDeR4RVGX82oWF+Cb3sBUmyKEYKW0+SuMVHO/Qt91EzK+R uBkSIA9cj3Ez5JvIjERvFf5f7hBD8ZwSS4phB4rTHkajgkEHfH+zWWwbw1FP5zx/ 1B1OBRoqty0wzBNb7z6uw7qBDsM9bWKrc+hZlKaCsI5zNZI8J2JzrLmJ2bDd0O58 M+icE2OW0mzg1ZScLgEAs5pYYHO2fStVvBQ= -----END CERTIFICATE-----Generated at Wed Nov 5 09:03:10 2025 by rpki-client