$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7c60acb6-e66f-3866-91b0-c419376b9117.roa File: 7c60acb6-e66f-3866-91b0-c419376b9117.roa (raw, json) Hash identifier: HtpOoP0xBMc7UPd9+SIpB0HWUixv6k6PCd/E1nJY+94= Subject key identifier: BD:B9:66:68:61:22:69:14:F3:A2:A9:80:23:A3:3C:29:A1:24:31:7B Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584BBFA5B2B68E65B795504024E0 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7c60acb6-e66f-3866-91b0-c419376b9117.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 16839 IP address blocks: 2606:3600:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:b2:b6:8e:65:b7:95:50:40:24:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=04c09667-e131-4e3f-9f6b-4ff43de8730b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:11:8f:ac:30:cf:c1:23:b5:ca:a9:e1:e1:c6: 45:31:d5:99:dd:ac:82:11:96:f8:15:13:6a:ad:b5: 10:53:67:fe:4f:65:53:b7:90:c6:f7:3e:93:1d:d4: d5:d8:38:7c:de:3f:d6:2f:69:30:11:8a:5b:dc:ee: df:2b:60:2c:98:89:5e:0e:cb:11:55:96:d7:03:40: e1:ce:8c:73:34:f1:f1:d1:1b:f2:c0:b2:d1:e8:83: 64:1d:72:71:7c:9d:6f:10:25:ac:bc:fb:00:7e:a8: f4:0a:56:51:e9:b2:fa:cb:c6:cb:1f:9f:4b:5a:85: 2e:6f:fc:d5:9f:79:4f:ae:ef:cd:55:5e:70:9a:55: 48:ef:83:d9:ae:a6:2c:38:a7:83:bf:69:1e:c6:31: ff:45:8a:28:da:e4:cb:a3:0b:8f:44:db:b4:89:d7: a9:74:45:b3:68:c4:4d:8c:74:01:05:8c:69:63:d5: 88:a1:a7:de:c8:8c:be:72:e9:2f:be:ed:1e:aa:14: a7:df:f1:fc:c7:68:5a:13:f0:40:c4:57:55:3d:7e: 8e:62:a8:5f:a6:7b:53:1d:25:77:c4:23:8b:38:da: 44:5c:94:d2:ab:c0:ef:82:5d:8b:fc:98:87:3e:ba: 8c:0e:eb:5e:c8:f0:38:d3:bd:15:64:e4:17:f8:18: bb:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:B9:66:68:61:22:69:14:F3:A2:A9:80:23:A3:3C:29:A1:24:31:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7c60acb6-e66f-3866-91b0-c419376b9117.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv6: 2606:3600:2000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:df:7f:c2:09:2d:c3:fd:8d:ae:4a:96:f7:a4:67:4a:48:33: 27:f4:92:6c:8b:ed:3c:56:f2:dc:c9:a3:ad:a3:6f:95:89:a1: b4:41:21:e7:b7:de:f3:87:df:ad:05:31:78:bd:a0:1a:3b:90: eb:7b:9c:3d:23:a5:92:39:69:b6:f4:0a:42:3d:4d:de:df:d2: 38:74:4e:05:b1:cd:75:fc:e5:14:8e:9e:e6:ca:04:d5:31:a4: 5f:cc:de:50:8e:e1:89:80:0a:25:11:a1:63:b5:03:32:9b:ad: c4:ad:61:72:31:13:18:99:f6:f0:90:64:10:4e:2d:39:f6:6b: 00:10:7a:41:6e:1e:3d:eb:5e:3e:88:bf:5d:b8:d7:62:14:f0: 4e:95:51:0a:30:a3:29:1d:6a:76:12:ca:83:43:61:3c:e5:44: 95:a9:80:c4:35:87:6b:4b:ba:66:69:bc:1b:27:9a:05:f7:9a: f3:39:50:ac:60:96:5b:b7:5e:12:bf:a7:c7:61:45:f8:a1:d2: 04:5e:35:ad:61:cf:10:63:c3:c9:f6:2c:52:82:ea:ec:64:c0: b5:55:8a:3b:c6:5f:91:ae:55:46:1e:55:d8:2f:54:63:14:49: 2b:31:f9:75:2d:3f:64:67:a8:5e:43:28:40:bd:74:32:38:93: 3a:50:03:02 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEu/pbK2jmW3lVBAJOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk MDRjMDk2NjctZTEzMS00ZTNmLTlmNmItNGZmNDNkZTg3MzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxGPrDDPwSO1yqnh4cZFMdWZ3ayCEZb4FRNq rbUQU2f+T2VTt5DG9z6THdTV2Dh83j/WL2kwEYpb3O7fK2AsmIleDssRVZbXA0Dh zoxzNPHx0RvywLLR6INkHXJxfJ1vECWsvPsAfqj0ClZR6bL6y8bLH59LWoUub/zV n3lPru/NVV5wmlVI74PZrqYsOKeDv2kexjH/RYoo2uTLowuPRNu0idepdEWzaMRN jHQBBYxpY9WIoafeyIy+cukvvu0eqhSn3/H8x2haE/BAxFdVPX6OYqhfpntTHSV3 xCOLONpEXJTSq8Dvgl2L/JiHPrqMDuteyPA4070VZOQX+Bi7wwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFL25ZmhhImkU86KpgCOjPCmhJDF7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvN2M2MGFjYjYtZTY2Zi0z ODY2LTkxYjAtYzQxOTM3NmI5MTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgY2ACAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAiN9/wgktw/2NrkqW96RnSkgzJ/SSbIvtPFby3MmjraNvlYmhtEEh 57fe84ffrQUxeL2gGjuQ63ucPSOlkjlptvQKQj1N3t/SOHROBbHNdfzlFI6e5soE 1TGkX8zeUI7hiYAKJRGhY7UDMputxK1hcjETGJn28JBkEE4tOfZrABB6QW4ePete Poi/XbjXYhTwTpVRCjCjKR1qdhLKg0NhPOVElamAxDWHa0u6Zmm8GyeaBfea8zlQ rGCWW7deEr+nx2FF+KHSBF41rWHPEGPDyfYsUoLq7GTAtVWKO8Zfka5VRh5V2C9U YxRJKzH5dS0/ZGeoXkMoQL10MjiTOlADAg== -----END CERTIFICATE-----Generated at Wed Nov 5 10:50:57 2025 by rpki-client