$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/75fe4f8b-c4ba-3401-a256-cab4e53ee5b0.roa File: 75fe4f8b-c4ba-3401-a256-cab4e53ee5b0.roa (raw, json) Hash identifier: H34FeTDim5nb8kQ/VE2SlIJptiQ3Ag7OU7Rh4Cms4Cg= Subject key identifier: 39:9B:83:90:F9:D6:06:AF:ED:BF:45:27:A7:2A:16:FA:CE:38:89:5D Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584BBFA5AC6C0092B2D588BD3E00 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/75fe4f8b-c4ba-3401-a256-cab4e53ee5b0.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 16839 IP address blocks: 2606:3600:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:ac:6c:00:92:b2:d5:88:bd:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=ae96b4bb-5438-4257-8f92-c81178b1b904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:97:46:1f:a6:0f:0c:80:0d:03:2c:52:e0:33: 23:01:98:22:58:6f:6a:c2:67:7e:83:6c:be:27:20: ab:07:00:99:7e:f0:8f:02:dd:03:de:8d:2c:e5:f5: 21:e1:f6:c4:e1:48:1f:8a:c5:db:16:46:8e:d6:2d: 29:1a:d7:7b:12:ae:4a:c2:d5:12:a3:11:b4:1b:60: f3:1c:8a:c1:2e:bb:60:31:09:02:16:a1:29:b8:09: f8:51:d5:bc:94:2c:bd:b8:6e:02:1b:4a:df:c5:93: 4e:58:6a:5d:76:cc:b7:30:f7:84:ab:fa:25:1d:3c: df:9c:08:09:1b:64:7d:4b:67:ff:d2:b6:a2:72:21: 8e:aa:07:f5:b0:32:a8:30:45:ff:4d:4c:67:d2:9b: f2:6f:29:db:a0:38:3e:49:fa:f7:7f:c8:12:17:92: 58:03:dd:4e:1d:ee:8e:fa:bf:1f:dd:49:aa:d2:d1: 51:21:d6:e9:8e:de:d4:4a:91:5c:5d:d1:e9:41:bb: b6:91:5b:a7:2c:3b:1b:01:3c:39:06:22:6e:3f:9d: 99:1c:53:53:f1:ed:80:44:fe:bf:40:f8:7f:4d:8d: 2a:be:bd:fb:2f:c8:55:67:a2:c0:51:02:1c:36:0f: ce:1a:b3:e0:49:78:22:d4:3c:bf:00:38:e3:c8:05: 07:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:9B:83:90:F9:D6:06:AF:ED:BF:45:27:A7:2A:16:FA:CE:38:89:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/75fe4f8b-c4ba-3401-a256-cab4e53ee5b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv6: 2606:3600:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:cf:67:81:2b:5e:c3:f8:f5:78:69:58:3d:c1:39:35:6c:85: 5b:92:b3:73:4d:a3:e3:1c:58:4a:4f:df:08:30:a1:1d:a6:82: 1d:e4:69:22:74:3c:90:dd:90:91:fa:aa:0b:85:70:06:d2:cf: 68:dd:1c:82:7e:6c:0d:e4:bb:0b:ed:00:f4:e0:1b:61:d7:5a: 21:ac:bc:08:83:1c:13:18:bc:21:17:82:ae:b4:f8:0b:94:c8: 31:25:f6:3f:6f:c4:6f:0b:76:da:1a:4d:30:65:79:29:6c:9b: 2c:48:2c:d4:de:8b:67:0a:20:61:a8:10:00:49:cf:84:31:31: f1:bf:c0:66:b3:86:70:ec:60:36:30:60:b8:1b:c0:15:c7:93: c4:6c:6c:f0:19:04:55:3f:b2:a8:b8:80:ea:4b:b4:7e:34:8c: d0:61:a9:87:6c:2e:84:b1:f0:99:09:d9:68:bc:9d:c9:57:7e: a3:d4:cc:98:cd:7e:8f:75:c7:74:eb:0e:5d:03:63:6f:73:21: 72:79:0c:bc:d2:94:36:df:21:fb:e5:4d:02:d4:b4:aa:f2:d9: 0d:7e:ac:b1:70:5e:87:22:48:d0:cd:45:da:5c:af:d0:06:94: bd:7e:f2:e9:66:e0:4b:1d:1e:6a:f4:d0:2b:01:65:6c:61:2b: 44:81:8c:84 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu/paxsAJKy1Yi9PgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk YWU5NmI0YmItNTQzOC00MjU3LThmOTItYzgxMTc4YjFiOTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZdGH6YPDIANAyxS4DMjAZgiWG9qwmd+g2y+ JyCrBwCZfvCPAt0D3o0s5fUh4fbE4UgfisXbFkaO1i0pGtd7Eq5KwtUSoxG0G2Dz HIrBLrtgMQkCFqEpuAn4UdW8lCy9uG4CG0rfxZNOWGpddsy3MPeEq/olHTzfnAgJ G2R9S2f/0raiciGOqgf1sDKoMEX/TUxn0pvybynboDg+Sfr3f8gSF5JYA91OHe6O +r8f3Umq0tFRIdbpjt7USpFcXdHpQbu2kVunLDsbATw5BiJuP52ZHFNT8e2ARP6/ QPh/TY0qvr37L8hVZ6LAUQIcNg/OGrPgSXgi1Dy/ADjjyAUHywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDmbg5D51gav7b9FJ6cqFvrOOIldMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNzVmZTRmOGItYzRiYS0z NDAxLWEyNTYtY2FiNGU1M2VlNWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY2AAEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACLPZ4ErXsP49XhpWD3BOTVshVuSs3NNo+McWEpP3wgwoR2mgh3k aSJ0PJDdkJH6qguFcAbSz2jdHIJ+bA3kuwvtAPTgG2HXWiGsvAiDHBMYvCEXgq60 +AuUyDEl9j9vxG8LdtoaTTBleSlsmyxILNTei2cKIGGoEABJz4QxMfG/wGazhnDs YDYwYLgbwBXHk8RsbPAZBFU/sqi4gOpLtH40jNBhqYdsLoSx8JkJ2Wi8nclXfqPU zJjNfo91x3TrDl0DY29zIXJ5DLzSlDbfIfvlTQLUtKry2Q1+rLFwXociSNDNRdpc r9AGlL1+8ulm4EsdHmr00CsBZWxhK0SBjIQ= -----END CERTIFICATE-----Generated at Wed Nov 5 08:54:32 2025 by rpki-client