$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893/c665f46b-83a0-3159-8392-368a8eda0dad.roa File: c665f46b-83a0-3159-8392-368a8eda0dad.roa (raw, json) Hash identifier: fFCh0Topt7DOBfKqCFQSFwLBMuJmNK48Mqk2jj/GaI8= Subject key identifier: 5C:65:54:BD:14:27:4F:B8:60:C7:5C:97:9D:65:CE:65:3D:90:BB:7B Certificate issuer: /CN=ca8f0bbc-8cc4-4514-874a-407f328f3893 Certificate serial: 010D0C9F4328584AF7EBDF76136C486D7C28C8A0 Authority key identifier: 4F:36:51:94:5C:EF:74:40:B9:E9:66:B2:64:9B:33:57:70:E7:72:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893/c665f46b-83a0-3159-8392-368a8eda0dad.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 46757 IP address blocks: 2620:123:7000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893/ca8f0bbc-8cc4-4514-874a-407f328f3893.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893/ca8f0bbc-8cc4-4514-874a-407f328f3893.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:df:76:13:6c:48:6d:7c:28:c8:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca8f0bbc-8cc4-4514-874a-407f328f3893 Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=8f359f33-1a9a-409f-90d6-a81122c03e97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:70:c8:2a:e8:e6:20:83:98:c3:e6:34:3d:ba: 6e:04:a2:c1:51:f3:89:ed:40:d3:28:7d:9d:c2:91: f7:bb:b8:fa:c7:31:ba:04:21:e8:69:8b:85:f2:df: 73:c3:ad:34:c8:0a:d3:51:b3:2d:ac:f0:89:6f:ae: 3c:d3:b2:fc:74:f2:02:93:be:fe:b1:b7:ad:5c:ca: e0:6f:b8:83:cf:c6:b9:d0:6c:c9:2c:a9:02:3b:84: c9:b4:a8:6c:28:15:02:bc:31:2c:4d:d3:83:1d:e7: 34:5f:55:5d:bb:7e:33:44:44:9a:73:68:11:56:5e: 69:bd:de:b5:af:8e:ef:fe:ec:c0:38:25:eb:26:3a: f8:98:be:d3:a2:ff:d5:27:8b:42:ba:59:4b:4b:b1: 39:c8:e2:b7:80:b5:c2:ec:50:d8:bc:e8:68:39:0e: ad:25:7e:12:fa:5f:68:5f:57:51:6d:41:f7:22:b1: 0f:a1:3a:43:0f:0e:6e:0a:76:ee:56:47:4c:e3:a0: a9:73:20:38:da:b0:2b:67:06:35:b2:df:d6:30:14: 53:74:5b:36:cd:e1:e3:a8:5f:5e:c6:54:38:64:ec: c9:33:70:76:01:25:b3:59:23:b3:fa:9a:3d:2d:85: 71:6a:dd:8d:8a:e4:69:ef:22:df:64:b3:17:29:a1: d2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:65:54:BD:14:27:4F:B8:60:C7:5C:97:9D:65:CE:65:3D:90:BB:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893/c665f46b-83a0-3159-8392-368a8eda0dad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893/ca8f0bbc-8cc4-4514-874a-407f328f3893.crl X509v3 Authority Key Identifier: keyid:4F:36:51:94:5C:EF:74:40:B9:E9:66:B2:64:9B:33:57:70:E7:72:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893.cer sbgp-ipAddrBlock: critical IPv6: 2620:123:7000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:83:77:da:95:4c:13:7e:0b:82:16:92:11:d2:eb:8a:2f:4c: b1:ef:3b:2c:66:b0:27:75:39:63:ac:59:b2:a6:8f:9b:e5:88: 01:07:83:01:a3:87:75:91:1d:c4:fa:ca:18:82:d9:5c:88:92: 3f:66:cd:15:86:5f:4f:7a:f4:ce:9e:9e:82:83:a0:eb:a0:28: bd:bb:5b:6a:47:e3:76:34:d9:f7:59:00:52:09:a6:1d:6d:57: 7c:bc:20:72:1a:6e:82:04:69:53:56:79:03:b9:ad:8c:6e:a7: 18:43:b8:59:9e:0e:ac:fb:f9:ea:f3:8d:7d:80:a5:a2:65:0f: 5f:fe:2e:38:dd:8b:8a:15:b2:62:75:69:b0:2d:df:c7:72:9e: 4a:a3:79:63:58:9f:a6:ab:2b:ec:25:56:2e:71:2b:03:81:7f: df:b6:67:be:8c:2b:78:2d:a7:5e:25:67:1f:a0:c5:cd:3e:26: f2:29:05:ae:a9:c9:1d:a6:ba:4a:53:3a:a8:dc:ed:cc:3d:1d: a7:29:3c:74:a5:b6:8b:8b:5e:0f:22:7b:90:5c:fe:54:3a:15: 56:12:85:0d:7d:79:bc:c2:f5:47:03:14:b6:e4:56:60:3e:a7: ee:bf:74:e0:13:37:11:a8:b1:41:f9:18:a8:6a:e0:fc:fb:e1: ba:a2:95:ad -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr36992E2xIbXwoyKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2E4ZjBiYmMtOGNjNC00NTE0LTg3NGEtNDA3ZjMyOGYz ODkzMB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk OGYzNTlmMzMtMWE5YS00MDlmLTkwZDYtYTgxMTIyYzAzZTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknDIKujmIIOYw+Y0PbpuBKLBUfOJ7UDTKH2d wpH3u7j6xzG6BCHoaYuF8t9zw600yArTUbMtrPCJb64807L8dPICk77+sbetXMrg b7iDz8a50GzJLKkCO4TJtKhsKBUCvDEsTdODHec0X1Vdu34zRESac2gRVl5pvd61 r47v/uzAOCXrJjr4mL7Tov/VJ4tCullLS7E5yOK3gLXC7FDYvOhoOQ6tJX4S+l9o X1dRbUH3IrEPoTpDDw5uCnbuVkdM46CpcyA42rArZwY1st/WMBRTdFs2zeHjqF9e xlQ4ZOzJM3B2ASWzWSOz+po9LYVxat2NiuRp7yLfZLMXKaHSfQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFxlVL0UJ0+4YMdcl51lzmU9kLt7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYThm MGJiYy04Y2M0LTQ1MTQtODc0YS00MDdmMzI4ZjM4OTMvYzY2NWY0NmItODNhMC0z MTU5LTgzOTItMzY4YThlZGEwZGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2E4ZjBiYmMtOGNjNC00NTE0LTg3 NGEtNDA3ZjMyOGYzODkzL2NhOGYwYmJjLThjYzQtNDUxNC04NzRhLTQwN2YzMjhm Mzg5My5jcmwwHwYDVR0jBBgwFoAUTzZRlFzvdEC56WayZJszV3DncgwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYThmMGJiYy04Y2M0LTQ1MTQtODc0YS00MDdm MzI4ZjM4OTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABI3AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIuDd9qVTBN+C4IWkhHS64ovTLHvOyxmsCd1OWOsWbKmj5vliAEH gwGjh3WRHcT6yhiC2VyIkj9mzRWGX0969M6enoKDoOugKL27W2pH43Y02fdZAFIJ ph1tV3y8IHIaboIEaVNWeQO5rYxupxhDuFmeDqz7+erzjX2ApaJlD1/+Ljjdi4oV smJ1abAt38dynkqjeWNYn6arK+wlVi5xKwOBf9+2Z76MK3gtp14lZx+gxc0+JvIp Ba6pyR2mukpTOqjc7cw9HacpPHSltouLXg8ie5Bc/lQ6FVYShQ19ebzC9UcDFLbk VmA+p+6/dOATNxGosUH5GKhq4Pz74bqila0= -----END CERTIFICATE-----Generated at Wed Nov 5 13:13:01 2025 by rpki-client