$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432/05c6d20e-a2be-3e86-aac7-d24c2a55e38d.roa File: 05c6d20e-a2be-3e86-aac7-d24c2a55e38d.roa (raw, json) Hash identifier: prXDHSlrh/7lR810YBz8Y05Qo/5h94QKgDvAgotAOaM= Subject key identifier: C5:EE:80:94:AA:63:7A:01:5F:5B:59:13:E9:79:AD:FD:DF:20:77:1A Certificate issuer: /CN=9531f556-030e-49b4-a31b-60b469425432 Certificate serial: 010D0C9F4328584BA39D19FCB0A862A65E310780 Authority key identifier: 4E:A2:50:27:DE:23:09:65:81:B1:7D:37:DE:80:5E:05:7C:08:BC:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432/05c6d20e-a2be-3e86-aac7-d24c2a55e38d.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 8075 IP address blocks: 2620:bc:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432/9531f556-030e-49b4-a31b-60b469425432.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432/9531f556-030e-49b4-a31b-60b469425432.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:19:fc:b0:a8:62:a6:5e:31:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9531f556-030e-49b4-a31b-60b469425432 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=50f7c4fd-ee00-4956-a93c-c71664b55549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:17:67:b3:b6:71:29:0a:ae:81:65:27:68:5d: 40:2d:f0:47:24:10:f5:90:b2:1f:0f:3c:85:90:0f: fb:48:b8:3a:4b:2c:36:cc:2a:d7:cf:3f:07:02:30: 7f:5d:30:7e:5f:17:aa:3d:8a:bb:fe:6d:11:fd:0f: c0:a7:ca:c2:cc:cb:b1:ac:45:da:b3:99:8e:b4:4a: c3:91:3f:19:83:d2:b3:1a:f6:90:98:9d:54:da:6a: 8b:6c:2a:41:13:48:9b:4b:2f:db:62:2e:c3:ea:7b: 67:86:30:8a:ce:4d:0f:f0:19:f3:9f:21:cf:bc:80: 5c:9e:1f:2f:f2:cc:4b:a8:fe:f7:81:54:c2:06:03: d9:4e:e8:0c:5c:04:a0:19:f8:26:24:eb:fa:48:71: a3:ce:2b:d9:e9:f3:ff:de:5c:37:ca:01:c7:91:5b: dd:fe:87:14:36:8c:92:43:94:39:61:8a:05:0f:12: 90:fc:ed:55:2c:00:7c:8e:43:0b:ec:04:cd:a6:58: 3f:49:96:4e:96:f3:e5:ad:e2:2d:a7:6b:5e:02:40: 0c:71:c0:05:1e:f6:78:c1:2b:5a:49:06:f0:6c:9e: dc:86:16:cc:53:29:32:cd:5a:c8:e4:3c:24:a8:53: ba:ba:a0:78:50:c8:5a:0c:26:0b:a1:42:13:16:d7: bc:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:EE:80:94:AA:63:7A:01:5F:5B:59:13:E9:79:AD:FD:DF:20:77:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432/05c6d20e-a2be-3e86-aac7-d24c2a55e38d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432/9531f556-030e-49b4-a31b-60b469425432.crl X509v3 Authority Key Identifier: keyid:4E:A2:50:27:DE:23:09:65:81:B1:7D:37:DE:80:5E:05:7C:08:BC:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432.cer sbgp-ipAddrBlock: critical IPv6: 2620:bc:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:1b:17:6d:7f:7a:92:ec:fa:2b:e7:d3:f9:fe:5c:9e:12:91: 5b:7d:e4:23:a4:d7:7e:f2:3b:23:5f:04:06:8a:07:3d:f3:44: ec:fa:81:41:1e:08:e9:70:3b:ad:a0:12:b5:bc:ea:82:6e:61: 72:db:ea:98:49:5e:e3:1e:6c:95:f4:e2:a7:ea:22:bc:aa:23: 74:18:2c:98:a3:db:66:d3:76:51:15:59:45:b4:3f:7d:30:a9: f4:bc:b6:42:75:54:ca:2d:a0:33:e7:40:dc:8e:36:e0:cb:62: 44:ef:21:5a:f3:3f:cc:84:32:9f:7c:09:b8:9b:00:3a:9f:4b: 97:05:ce:15:4b:20:23:97:21:83:24:b6:61:c6:09:8f:ec:7e: b7:7e:a6:5d:6a:e6:bd:a7:13:f6:4c:23:bd:02:1d:0e:d6:20: 30:ce:fc:14:10:64:d9:73:3a:6c:13:5d:5b:2b:c7:8b:aa:48: 34:d7:bb:30:e3:fd:19:d8:1d:64:69:c4:1c:6a:bb:bc:ea:a9: a5:cf:01:c5:c0:be:70:b1:4e:7e:4e:fc:e2:1b:7c:b7:64:93: f7:e9:24:37:1b:01:e9:52:d9:05:3c:fc:f7:b0:dc:fc:b5:2d: 66:49:ee:d4:25:b5:df:12:90:1c:97:ef:e7:b6:ad:45:57:d4: 66:5c:eb:c1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEujnRn8sKhipl4xB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTUzMWY1NTYtMDMwZS00OWI0LWEzMWItNjBiNDY5NDI1 NDMyMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NTBmN2M0ZmQtZWUwMC00OTU2LWE5M2MtYzcxNjY0YjU1NTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxdns7ZxKQqugWUnaF1ALfBHJBD1kLIfDzyF kA/7SLg6Syw2zCrXzz8HAjB/XTB+XxeqPYq7/m0R/Q/Ap8rCzMuxrEXas5mOtErD kT8Zg9KzGvaQmJ1U2mqLbCpBE0ibSy/bYi7D6ntnhjCKzk0P8BnznyHPvIBcnh8v 8sxLqP73gVTCBgPZTugMXASgGfgmJOv6SHGjzivZ6fP/3lw3ygHHkVvd/ocUNoyS Q5Q5YYoFDxKQ/O1VLAB8jkML7ATNplg/SZZOlvPlreItp2teAkAMccAFHvZ4wSta SQbwbJ7chhbMUykyzVrI5DwkqFO6uqB4UMhaDCYLoUITFte85wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMXugJSqY3oBX1tZE+l5rf3fIHcaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NTMx ZjU1Ni0wMzBlLTQ5YjQtYTMxYi02MGI0Njk0MjU0MzIvMDVjNmQyMGUtYTJiZS0z ZTg2LWFhYzctZDI0YzJhNTVlMzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTUzMWY1NTYtMDMwZS00OWI0LWEz MWItNjBiNDY5NDI1NDMyLzk1MzFmNTU2LTAzMGUtNDliNC1hMzFiLTYwYjQ2OTQy NTQzMi5jcmwwHwYDVR0jBBgwFoAUTqJQJ94jCWWBsX033oBeBXwIvEswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NTMxZjU1Ni0wMzBlLTQ5YjQtYTMxYi02MGI0 Njk0MjU0MzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAvCAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAkbF21/epLs+ivn0/n+XJ4SkVt95COk137yOyNfBAaKBz3zROz6 gUEeCOlwO62gErW86oJuYXLb6phJXuMebJX04qfqIryqI3QYLJij22bTdlEVWUW0 P30wqfS8tkJ1VMotoDPnQNyONuDLYkTvIVrzP8yEMp98CbibADqfS5cFzhVLICOX IYMktmHGCY/sfrd+pl1q5r2nE/ZMI70CHQ7WIDDO/BQQZNlzOmwTXVsrx4uqSDTX uzDj/RnYHWRpxBxqu7zqqaXPAcXAvnCxTn5O/OIbfLdkk/fpJDcbAelS2QU8/Pew 3Py1LWZJ7tQltd8SkByX7+e2rUVX1GZc68E= -----END CERTIFICATE-----Generated at Wed Nov 5 07:09:20 2025 by rpki-client