$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/e6589685-287e-39e0-a7eb-0aa709e301c6.roa File: e6589685-287e-39e0-a7eb-0aa709e301c6.roa (raw, json) Hash identifier: p+jC/yrOIkEHCA/Rb3PAVkcjS0sFrhP7hOqDRYBnQnk= Subject key identifier: F8:64:91:82:AB:B4:18:BF:18:B9:DE:81:C4:CC:3B:79:33:E5:03:FB Certificate issuer: /CN=20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e Certificate serial: 010D0C9F4328584BB5C254D13E977238221C2380 Authority key identifier: B3:9D:C3:8F:82:1E:92:58:6B:AC:7E:60:33:85:13:34:51:93:A3:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/e6589685-287e-39e0-a7eb-0aa709e301c6.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 21790 IP address blocks: 2602:81a:4000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:54:d1:3e:97:72:38:22:1c:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=efdd8e23-f23c-412a-8163-c656fa41801b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:86:ed:b2:cc:d8:74:14:31:1a:43:1a:2f:95: d9:49:7d:1f:1c:f8:85:e8:d5:fb:46:38:8d:aa:d3: 16:b8:47:07:e1:52:0b:20:7d:93:0f:59:ac:99:1a: 55:32:0e:2e:ae:54:70:2b:fe:8b:79:16:ac:61:24: 70:83:07:38:62:49:4b:e6:a8:ae:fd:93:48:24:96: 08:fa:2d:ee:ab:03:55:a6:80:dc:b6:5e:7e:13:58: c1:ff:35:07:f1:8e:0f:08:ab:e4:27:94:6b:c9:b9: 48:9f:c1:69:08:cf:67:5f:16:a0:79:40:a6:69:0f: a1:57:7d:bb:71:12:3e:8d:63:88:9d:0c:9f:b0:03: fa:03:a2:f1:e5:f9:f0:92:8a:dd:e1:33:65:83:21: f7:91:a8:83:e0:dd:f5:c1:30:b1:11:88:44:6f:03: 10:45:4b:01:6a:49:bd:83:34:09:b2:0d:8d:ee:e9: b9:88:68:f8:c0:a9:91:8f:23:ff:a8:55:a7:9a:ee: 39:17:9d:2c:92:56:38:b9:d6:a5:48:83:77:60:ee: f7:d8:c5:c0:8b:ec:d7:bc:e2:6f:59:38:d2:b6:be: fc:4e:e7:9e:ba:61:43:09:52:3b:f5:ba:1a:22:79: 35:89:8b:60:73:49:75:0b:68:79:d4:5f:de:9c:0e: c2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:64:91:82:AB:B4:18:BF:18:B9:DE:81:C4:CC:3B:79:33:E5:03:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/e6589685-287e-39e0-a7eb-0aa709e301c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.crl X509v3 Authority Key Identifier: keyid:B3:9D:C3:8F:82:1E:92:58:6B:AC:7E:60:33:85:13:34:51:93:A3:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.cer sbgp-ipAddrBlock: critical IPv6: 2602:81a:4000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:8e:70:fa:c9:5f:8a:07:92:23:58:6b:03:a9:ba:57:82:e4: b5:4e:d5:f2:61:af:eb:05:ca:91:fa:46:f1:c7:97:da:97:ed: 72:ca:65:d5:10:10:11:f1:c9:f8:4b:01:78:e3:44:14:3a:6f: 70:c4:f6:94:df:8c:a8:fc:17:58:01:75:4a:7b:93:79:46:2f: 27:81:8d:17:27:a8:db:23:34:bc:3a:72:53:d4:f9:75:e8:99: d5:d2:93:09:b4:f7:ae:76:5c:f4:00:3f:36:61:09:52:1d:a8: 0b:49:be:ed:c0:1e:a6:82:e1:11:c9:44:fe:fa:95:3e:5f:01: 21:78:25:26:04:b3:9f:02:20:63:de:73:c8:29:85:e8:78:52: dd:ab:16:ee:7d:b4:8f:a6:ca:4c:2a:f9:d6:93:92:89:32:23: 9f:12:48:12:68:9e:eb:e5:26:00:c0:4d:f4:81:2f:53:83:c0: 87:3a:ab:7e:53:29:52:91:6a:48:12:d4:c6:1b:ca:56:e1:fe: 4b:de:b5:d3:dc:ad:d2:43:d7:a2:52:33:b4:80:77:c5:dc:32: e5:65:2a:3a:4a:73:5f:10:5d:55:ea:fe:bd:bd:17:e2:26:e9: dc:63:1f:5b:12:42:f0:c1:a3:f6:54:26:51:06:04:7a:74:d3: 63:60:ca:5f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu1wlTRPpdyOCIcI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBmOGJjZTYtZTMzZS00MGU4LWJmYjMtYzRiNWIyMTU5 YTdlMB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk ZWZkZDhlMjMtZjIzYy00MTJhLTgxNjMtYzY1NmZhNDE4MDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkobtsszYdBQxGkMaL5XZSX0fHPiF6NX7RjiN qtMWuEcH4VILIH2TD1msmRpVMg4urlRwK/6LeRasYSRwgwc4YklL5qiu/ZNIJJYI +i3uqwNVpoDctl5+E1jB/zUH8Y4PCKvkJ5RryblIn8FpCM9nXxageUCmaQ+hV327 cRI+jWOInQyfsAP6A6Lx5fnwkord4TNlgyH3kaiD4N31wTCxEYhEbwMQRUsBakm9 gzQJsg2N7um5iGj4wKmRjyP/qFWnmu45F50sklY4udalSIN3YO732MXAi+zXvOJv WTjStr78TueeumFDCVI79boaInk1iYtgc0l1C2h51F/enA7CnwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPhkkYKrtBi/GLnegcTMO3kz5QP7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMGY4 YmNlNi1lMzNlLTQwZTgtYmZiMy1jNGI1YjIxNTlhN2UvZTY1ODk2ODUtMjg3ZS0z OWUwLWE3ZWItMGFhNzA5ZTMwMWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjBmOGJjZTYtZTMzZS00MGU4LWJm YjMtYzRiNWIyMTU5YTdlLzIwZjhiY2U2LWUzM2UtNDBlOC1iZmIzLWM0YjViMjE1 OWE3ZS5jcmwwHwYDVR0jBBgwFoAUs53Dj4IeklhrrH5gM4UTNFGTo1AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMGY4YmNlNi1lMzNlLTQwZTgtYmZiMy1jNGI1 YjIxNTlhN2UuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIGkAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAyOcPrJX4oHkiNYawOpuleC5LVO1fJhr+sFypH6RvHHl9qX7XLK ZdUQEBHxyfhLAXjjRBQ6b3DE9pTfjKj8F1gBdUp7k3lGLyeBjRcnqNsjNLw6clPU +XXomdXSkwm09652XPQAPzZhCVIdqAtJvu3AHqaC4RHJRP76lT5fASF4JSYEs58C IGPec8gpheh4Ut2rFu59tI+mykwq+daTkokyI58SSBJonuvlJgDATfSBL1ODwIc6 q35TKVKRakgS1MYbylbh/kvetdPcrdJD16JSM7SAd8XcMuVlKjpKc18QXVXq/r29 F+Im6dxjH1sSQvDBo/ZUJlEGBHp002Ngyl8= -----END CERTIFICATE-----Generated at Fri Nov 7 11:30:17 2025 by rpki-client