$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/e846d785-5904-34ba-ac72-9934a8e084e6.roa File: e846d785-5904-34ba-ac72-9934a8e084e6.roa (raw, json) Hash identifier: fBVGWCdVGLY55BCp0QQNwCwPxtUlte801SYOXZYr+P0= Subject key identifier: A5:AC:A7:21:16:CE:96:38:1A:D3:0D:98:4C:6A:6B:08:D9:04:F0:19 Certificate issuer: /CN=e51abfb2-ff55-4866-8f32-d2fc9346d303 Certificate serial: 010D0C9F4328584AE1966EA4A0D4A475B097BA00 Authority key identifier: 0E:F4:F9:26:E2:FD:E0:9A:05:E4:95:43:52:A6:26:C3:19:A1:EB:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/e846d785-5904-34ba-ac72-9934a8e084e6.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 16509 IP address blocks: 2620:20:8000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/e51abfb2-ff55-4866-8f32-d2fc9346d303.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/e51abfb2-ff55-4866-8f32-d2fc9346d303.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:96:6e:a4:a0:d4:a4:75:b0:97:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e51abfb2-ff55-4866-8f32-d2fc9346d303 Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=20b84ccb-5db4-4e76-b241-152baa430ddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d1:0f:26:e8:f1:c1:e5:5f:b4:5b:3e:e5:ac: f2:87:85:84:90:e1:4b:1b:38:15:4e:1a:76:55:e4: 57:b5:78:ed:13:72:c6:04:c3:5d:c7:c2:d7:4e:95: 0c:9f:80:2f:99:24:46:a8:54:44:5d:1a:6f:58:a4: ad:e8:7c:f0:5b:ce:01:27:3d:55:6e:2d:59:da:f2: 90:65:e6:aa:eb:65:db:03:25:9a:aa:49:a9:fc:df: 3d:8f:bf:63:22:bd:7b:4a:0b:8f:41:e4:3e:7b:1f: ae:64:c8:66:b4:9b:1d:c8:e7:06:24:33:f5:69:8f: 9e:fe:77:6e:aa:b4:c6:a0:0f:77:81:24:f2:2e:8e: 8f:34:d7:76:50:9a:c6:9a:0c:c7:29:d8:22:ef:47: f4:6c:7c:dc:24:86:19:ec:85:bd:c4:86:ce:dc:a2: d5:c8:73:20:c6:e1:44:35:db:e4:77:ee:03:43:17: 4e:99:a5:7e:12:48:35:dd:91:22:b3:82:75:61:cd: 29:71:7c:b7:10:48:d9:5a:43:27:77:7f:39:e4:57: 5b:0c:e4:50:b6:17:51:8b:7a:6d:35:2f:62:4e:66: 3e:32:c2:b6:eb:cb:6a:7b:48:d2:0d:16:8c:66:1b: 99:d0:e1:e5:98:83:b0:f2:14:79:af:ec:fc:94:4f: 34:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:AC:A7:21:16:CE:96:38:1A:D3:0D:98:4C:6A:6B:08:D9:04:F0:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/e846d785-5904-34ba-ac72-9934a8e084e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/e51abfb2-ff55-4866-8f32-d2fc9346d303.crl X509v3 Authority Key Identifier: keyid:0E:F4:F9:26:E2:FD:E0:9A:05:E4:95:43:52:A6:26:C3:19:A1:EB:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303.cer sbgp-ipAddrBlock: critical IPv6: 2620:20:8000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:6b:d4:18:c8:01:4a:e9:0d:5a:0a:3f:39:56:fa:1b:d1:83: f1:b8:3d:31:48:b8:8c:89:c3:28:1b:07:56:36:50:8f:31:01: 0a:79:50:74:7e:0a:ba:e0:8e:91:6a:26:1d:bf:a1:0e:36:22: 37:0f:f2:00:e3:48:2b:a6:cf:ed:ad:70:ca:49:86:ce:55:55: b5:ff:9c:58:a5:29:76:4c:8b:79:2a:bb:4a:19:1c:4c:f6:c9: 29:b8:e9:a5:18:00:04:8a:1a:f7:b5:e6:dd:57:e2:dd:66:7c: d3:1e:4e:a3:72:47:e9:f6:f2:79:89:53:02:64:8f:cf:71:6f: a5:b2:ae:e8:69:9c:ca:87:ab:68:e4:78:07:95:f9:6d:72:da: a8:0c:1f:d5:3c:b7:d7:a4:ad:32:aa:8b:6f:d4:ed:ea:ac:27: 56:e1:c6:4e:08:03:42:2e:17:ff:12:b6:ed:bc:f0:84:60:03: 63:6d:c0:09:83:93:b9:36:e8:e4:73:bd:cb:72:63:5c:41:13: c2:55:c4:e9:1d:4e:f6:86:60:89:7f:27:47:29:48:25:95:fb: 4e:41:77:4f:77:ac:53:83:9f:5f:d4:98:db:8c:e1:1d:48:fc: d4:14:1b:e1:02:38:95:64:71:ef:19:4b:73:31:40:a6:0d:45: a5:53:d1:ea -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErhlm6koNSkdbCXugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTUxYWJmYjItZmY1NS00ODY2LThmMzItZDJmYzkzNDZk MzAzMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk MjBiODRjY2ItNWRiNC00ZTc2LWIyNDEtMTUyYmFhNDMwZGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9EPJujxweVftFs+5azyh4WEkOFLGzgVThp2 VeRXtXjtE3LGBMNdx8LXTpUMn4AvmSRGqFREXRpvWKSt6HzwW84BJz1Vbi1Z2vKQ Zeaq62XbAyWaqkmp/N89j79jIr17SguPQeQ+ex+uZMhmtJsdyOcGJDP1aY+e/ndu qrTGoA93gSTyLo6PNNd2UJrGmgzHKdgi70f0bHzcJIYZ7IW9xIbO3KLVyHMgxuFE Ndvkd+4DQxdOmaV+Ekg13ZEis4J1Yc0pcXy3EEjZWkMnd3855FdbDORQthdRi3pt NS9iTmY+MsK268tqe0jSDRaMZhuZ0OHlmIOw8hR5r+z8lE80WwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKWspyEWzpY4GtMNmExqawjZBPAZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lNTFh YmZiMi1mZjU1LTQ4NjYtOGYzMi1kMmZjOTM0NmQzMDMvZTg0NmQ3ODUtNTkwNC0z NGJhLWFjNzItOTkzNGE4ZTA4NGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTUxYWJmYjItZmY1NS00ODY2LThm MzItZDJmYzkzNDZkMzAzL2U1MWFiZmIyLWZmNTUtNDg2Ni04ZjMyLWQyZmM5MzQ2 ZDMwMy5jcmwwHwYDVR0jBBgwFoAUDvT5JuL94JoF5JVDUqYmwxmh63QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lNTFhYmZiMi1mZjU1LTQ4NjYtOGYzMi1kMmZj OTM0NmQzMDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAIIAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGBr1BjIAUrpDVoKPzlW+hvRg/G4PTFIuIyJwygbB1Y2UI8xAQp5 UHR+CrrgjpFqJh2/oQ42IjcP8gDjSCumz+2tcMpJhs5VVbX/nFilKXZMi3kqu0oZ HEz2ySm46aUYAASKGve15t1X4t1mfNMeTqNyR+n28nmJUwJkj89xb6WyruhpnMqH q2jkeAeV+W1y2qgMH9U8t9ekrTKqi2/U7eqsJ1bhxk4IA0IuF/8Stu288IRgA2Nt wAmDk7k26ORzvctyY1xBE8JVxOkdTvaGYIl/J0cpSCWV+05Bd093rFODn1/UmNuM 4R1I/NQUG+ECOJVkce8ZS3MxQKYNRaVT0eo= -----END CERTIFICATE-----Generated at Wed Nov 5 11:49:46 2025 by rpki-client