$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/d9d50e0c-e315-3a3a-af07-d97371184c8b.roa File: d9d50e0c-e315-3a3a-af07-d97371184c8b.roa (raw, json) Hash identifier: ZFsnb+oEFwSxqUijNg8w4e3lArbHqCEcLOVKL9EwNAU= Subject key identifier: E8:B8:C8:28:DD:15:98:1A:7D:9F:D0:68:69:92:59:5F:3D:45:4F:88 Certificate issuer: /CN=0b8b20ca-2a1e-4742-b63c-4b3b1d151f15 Certificate serial: 010D0C9F4328584B36BC4E58B5BC87007CA40F00 Authority key identifier: F3:FF:58:AA:40:01:5E:1D:D0:5D:10:B7:78:A8:F8:65:D2:9D:42:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/d9d50e0c-e315-3a3a-af07-d97371184c8b.roa Signing time: Tue 16 Sep 2025 13:00:41 +0000 ROA not before: Tue 16 Sep 2025 13:00:41 +0000 ROA not after: Mon 15 Dec 2025 14:00:41 +0000 asID: 14702 IP address blocks: 2620:0:2b80::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:36:bc:4e:58:b5:bc:87:00:7c:a4:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b8b20ca-2a1e-4742-b63c-4b3b1d151f15 Validity Not Before: Sep 16 13:00:41 2025 GMT Not After : Dec 15 14:00:41 2025 GMT Subject: CN=57e0c2e9-03c9-4d50-959a-a20b7b0dbe49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7a:34:cf:a9:86:5e:db:1a:b6:ad:fb:98:10: 9f:1b:26:11:2a:3f:7e:19:6a:75:a9:34:93:58:d5: ac:6a:50:fe:84:b7:10:f8:56:40:14:3c:e3:4e:69: ea:d6:e7:81:a1:59:74:d0:d3:f4:94:72:9e:53:60: be:36:89:77:e4:fd:43:f0:93:46:be:16:ea:f1:17: fe:35:98:5e:6a:ab:f3:b6:ce:7f:c3:4d:92:a1:01: 00:f6:4c:91:69:38:f9:13:eb:c4:d7:86:46:c3:df: cb:19:71:d2:85:43:1c:46:8f:fc:23:c0:26:c4:34: 86:c6:c4:03:df:9f:25:2a:a9:93:23:12:0b:5a:db: d2:72:2c:29:91:33:1e:67:a9:61:41:fd:cf:41:67: eb:4d:e0:00:7a:ed:dc:3c:6b:e1:36:12:7b:19:e2: 69:45:06:81:16:06:ed:f8:67:27:b3:9b:82:dd:d5: f7:3f:39:d0:25:49:d5:0d:f0:8c:ed:4f:6f:3a:77: 1a:5c:e9:34:3d:ac:d1:21:a2:d9:76:e8:a4:66:b8: 4f:1a:1d:70:d2:d2:60:6f:b8:87:8a:d6:40:6c:ff: 50:64:85:80:d2:d0:74:13:4a:08:55:ab:11:54:b0: 7a:3d:6f:48:04:18:a2:cb:bc:d8:15:fa:17:1d:a3: 3a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:B8:C8:28:DD:15:98:1A:7D:9F:D0:68:69:92:59:5F:3D:45:4F:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/d9d50e0c-e315-3a3a-af07-d97371184c8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.crl X509v3 Authority Key Identifier: keyid:F3:FF:58:AA:40:01:5E:1D:D0:5D:10:B7:78:A8:F8:65:D2:9D:42:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:2b80::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:6b:18:ee:07:d6:06:f6:73:e8:56:b7:ec:92:53:49:76:3d: a6:0f:84:c9:47:29:95:90:49:5f:46:1f:c5:24:30:76:6e:66: 97:d5:c2:1f:ae:5e:11:3d:ba:33:ae:39:ed:a9:38:90:ba:2c: 74:99:bd:3a:27:b9:4a:62:f2:93:e9:c2:d7:ba:f8:5a:e7:c4: 9b:78:5d:d3:29:f6:31:4c:db:31:4f:3b:80:37:ef:ac:07:c6: 3f:e2:7a:76:1d:0f:36:c1:d4:90:7a:f8:95:58:d3:87:b6:61: a5:ba:a7:c0:ef:60:b8:13:f3:f7:6c:65:bb:a2:8c:5a:6d:48: 57:e5:a4:41:c7:c7:49:66:25:c2:39:c2:e0:71:81:20:e5:31: 10:83:72:8d:41:88:53:6d:98:6f:c4:31:6e:ce:bd:07:93:b6: cb:58:c2:f6:dc:02:43:c3:88:66:7a:ec:ab:a6:6a:fb:04:05: fd:37:78:68:f9:2a:e5:86:26:69:a9:b7:cf:b2:eb:f8:3c:0d: 81:23:b6:2c:4a:77:c6:0b:ee:08:0e:c2:8f:63:08:57:d9:97: 19:5a:cd:8a:cb:f3:86:88:f1:2e:17:c0:66:68:97:1e:3d:7a: 21:f4:fb:da:42:ea:a6:b3:4a:ad:eb:7c:90:50:92:23:79:86: 20:5a:67:57 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs2vE5YtbyHAHykDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGI4YjIwY2EtMmExZS00NzQyLWI2M2MtNGIzYjFkMTUx ZjE1MB4XDTI1MDkxNjEzMDA0MVoXDTI1MTIxNTE0MDA0MVowLzEtMCsGA1UEAxMk NTdlMGMyZTktMDNjOS00ZDUwLTk1OWEtYTIwYjdiMGRiZTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHo0z6mGXtsatq37mBCfGyYRKj9+GWp1qTST WNWsalD+hLcQ+FZAFDzjTmnq1ueBoVl00NP0lHKeU2C+Nol35P1D8JNGvhbq8Rf+ NZheaqvzts5/w02SoQEA9kyRaTj5E+vE14ZGw9/LGXHShUMcRo/8I8AmxDSGxsQD 358lKqmTIxILWtvSciwpkTMeZ6lhQf3PQWfrTeAAeu3cPGvhNhJ7GeJpRQaBFgbt +Gcns5uC3dX3PznQJUnVDfCM7U9vOncaXOk0PazRIaLZduikZrhPGh1w0tJgb7iH itZAbP9QZIWA0tB0E0oIVasRVLB6PW9IBBiiy7zYFfoXHaM6uwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOi4yCjdFZgafZ/QaGmSWV89RU+IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYjhi MjBjYS0yYTFlLTQ3NDItYjYzYy00YjNiMWQxNTFmMTUvZDlkNTBlMGMtZTMxNS0z YTNhLWFmMDctZDk3MzcxMTg0YzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGI4YjIwY2EtMmExZS00NzQyLWI2 M2MtNGIzYjFkMTUxZjE1LzBiOGIyMGNhLTJhMWUtNDc0Mi1iNjNjLTRiM2IxZDE1 MWYxNS5jcmwwHwYDVR0jBBgwFoAU8/9YqkABXh3QXRC3eKj4ZdKdQgwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYjhiMjBjYS0yYTFlLTQ3NDItYjYzYy00YjNi MWQxNTFmMTUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAAACuA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHhrGO4H1gb2c+hWt+ySU0l2PaYPhMlHKZWQSV9GH8UkMHZuZpfV wh+uXhE9ujOuOe2pOJC6LHSZvTonuUpi8pPpwte6+FrnxJt4XdMp9jFM2zFPO4A3 76wHxj/ienYdDzbB1JB6+JVY04e2YaW6p8DvYLgT8/dsZbuijFptSFflpEHHx0lm JcI5wuBxgSDlMRCDco1BiFNtmG/EMW7OvQeTtstYwvbcAkPDiGZ67KumavsEBf03 eGj5KuWGJmmpt8+y6/g8DYEjtixKd8YL7ggOwo9jCFfZlxlazYrL84aI8S4XwGZo lx49eiH0+9pC6qazSq3rfJBQkiN5hiBaZ1c= -----END CERTIFICATE-----Generated at Wed Nov 5 23:34:25 2025 by rpki-client