$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/9c5e49fc-a177-3465-bd18-2f3d04e61638.roa File: 9c5e49fc-a177-3465-bd18-2f3d04e61638.roa (raw, json) Hash identifier: vz3kpgS4E9r394ZQaPMa3dK9ILmujQV6gJCMQvMDhD0= Subject key identifier: 99:F5:B5:03:48:E1:95:D7:BD:12:41:25:2B:95:D9:16:EF:9B:94:53 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584BBFA5ACFEE5149958889398C0 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/9c5e49fc-a177-3465-bd18-2f3d04e61638.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 16839 IP address blocks: 2606:3600:5520::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:ac:fe:e5:14:99:58:88:93:98:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=e02d0fc8-8535-41e7-b08f-7b2d86a7ecf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c0:6d:90:d6:77:80:e1:ba:d7:3c:0b:ed:7d: 48:25:39:4e:04:d5:96:59:c3:b9:14:2f:95:dc:92: 95:df:d7:ae:f6:37:a3:78:9f:7a:0d:f1:d4:59:d5: 2c:84:17:3a:b1:43:35:54:ee:dc:ad:44:ef:68:3c: 35:3d:e6:01:5a:69:dd:91:a5:17:73:0c:d1:c3:59: 97:d6:ef:07:9a:ea:ca:96:aa:78:6b:36:b7:0f:c2: 7d:87:b8:df:80:d6:19:72:a4:00:3a:51:50:f0:c0: 78:36:ec:76:f5:07:a5:e7:7c:c8:30:6f:64:86:63: a8:ea:11:60:59:7c:1d:15:f3:d8:ef:8d:7d:4f:61: ec:85:5d:31:8c:e5:cc:f0:9f:4e:46:d7:66:8f:96: 5b:62:30:d7:fa:f6:9e:d9:73:44:59:c0:1a:96:d3: 03:b2:1a:ef:0e:cf:35:15:43:57:28:18:6f:7b:a2: 3d:c4:52:88:2f:55:31:05:ee:e3:63:6c:40:18:e4: 50:4c:f3:f5:c9:9b:a4:5b:8c:76:52:77:53:36:10: 3d:59:2b:5e:18:43:63:5c:d8:a9:06:15:a7:e0:5a: 23:08:89:88:02:b6:6f:e1:24:f3:f7:12:e2:b6:90: d3:a7:fb:34:31:48:11:cd:1f:bf:58:8d:d3:87:0b: cd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F5:B5:03:48:E1:95:D7:BD:12:41:25:2B:95:D9:16:EF:9B:94:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/9c5e49fc-a177-3465-bd18-2f3d04e61638.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv6: 2606:3600:5520::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:11:ad:2b:2f:6e:2b:28:0b:73:c3:f0:c1:70:49:c5:53:76: c8:c7:ad:b4:bb:2c:62:f8:c5:c7:a5:ef:1f:14:63:82:d3:aa: 0d:ee:0d:85:92:f4:e9:18:e9:f0:ef:bc:19:f0:4a:09:98:c8: dc:95:94:9e:64:58:d0:93:d1:72:bb:a8:6d:d9:21:88:7f:b7: e9:f9:15:66:0d:df:80:34:a9:fd:b0:32:18:bc:3d:7e:c8:d2: 19:cb:3a:65:a3:64:14:17:c1:86:d2:e0:41:bb:27:ed:18:bc: 12:98:c4:81:05:ec:6a:25:a1:e7:4d:40:ca:22:9c:ca:d9:92: 52:05:e4:aa:17:fb:3d:8e:21:51:14:91:21:43:29:23:15:48: 14:76:ed:0d:b1:7e:8b:0d:b3:9d:5f:05:95:d3:70:a3:64:54: eb:df:8e:12:ce:9d:85:19:65:85:7e:d8:0e:af:c8:42:34:75: 86:36:53:1c:ac:f4:90:19:99:0d:08:02:29:e4:89:79:ba:9d: 4f:d4:6e:05:81:a7:6e:86:f1:83:12:86:06:32:c4:02:f9:be: ba:c8:2a:89:86:e7:1a:9e:05:72:3e:7f:d8:ca:f6:81:53:c5: 3f:8b:4f:59:77:da:03:e6:93:8a:b9:26:42:14:d0:c6:24:a4: 49:96:9b:17 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu/paz+5RSZWIiTmMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk ZTAyZDBmYzgtODUzNS00MWU3LWIwOGYtN2IyZDg2YTdlY2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMBtkNZ3gOG61zwL7X1IJTlOBNWWWcO5FC+V 3JKV39eu9jejeJ96DfHUWdUshBc6sUM1VO7crUTvaDw1PeYBWmndkaUXcwzRw1mX 1u8HmurKlqp4aza3D8J9h7jfgNYZcqQAOlFQ8MB4Nux29Qel53zIMG9khmOo6hFg WXwdFfPY7419T2HshV0xjOXM8J9ORtdmj5ZbYjDX+vae2XNEWcAaltMDshrvDs81 FUNXKBhve6I9xFKIL1UxBe7jY2xAGORQTPP1yZukW4x2UndTNhA9WSteGENjXNip BhWn4FojCImIArZv4STz9xLitpDTp/s0MUgRzR+/WI3ThwvNJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJn1tQNI4ZXXvRJBJSuV2Rbvm5RTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvOWM1ZTQ5ZmMtYTE3Ny0z NDY1LWJkMTgtMmYzZDA0ZTYxNjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY2AFUg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI4RrSsvbisoC3PD8MFwScVTdsjHrbS7LGL4xcel7x8UY4LTqg3u DYWS9OkY6fDvvBnwSgmYyNyVlJ5kWNCT0XK7qG3ZIYh/t+n5FWYN34A0qf2wMhi8 PX7I0hnLOmWjZBQXwYbS4EG7J+0YvBKYxIEF7GoloedNQMoinMrZklIF5KoX+z2O IVEUkSFDKSMVSBR27Q2xfosNs51fBZXTcKNkVOvfjhLOnYUZZYV+2A6vyEI0dYY2 Uxys9JAZmQ0IAinkiXm6nU/UbgWBp26G8YMShgYyxAL5vrrIKomG5xqeBXI+f9jK 9oFTxT+LT1l32gPmk4q5JkIU0MYkpEmWmxc= -----END CERTIFICATE-----Generated at Wed Nov 5 16:10:58 2025 by rpki-client