$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ed9aba72-cce4-4dbe-b91d-f6cc07f49dba/68de2bdf-61d2-3c51-9da8-f1d0064114bc.roa File: 68de2bdf-61d2-3c51-9da8-f1d0064114bc.roa (raw, json) Hash identifier: wysPS1Y5yOA4SE1NlCOBckNd35a2hyL+DQeBEZVjR6M= Subject key identifier: 30:F4:89:4E:9A:10:67:4C:1E:D6:64:4D:31:08:8C:A2:FF:C9:B3:22 Certificate issuer: /CN=ed9aba72-cce4-4dbe-b91d-f6cc07f49dba Certificate serial: 010D0C9F4328584B715CA2C8F794F8044BEF4400 Authority key identifier: F2:F7:9D:DC:35:6B:B7:E1:90:03:3C:F4:68:4A:76:FA:86:4C:82:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ed9aba72-cce4-4dbe-b91d-f6cc07f49dba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ed9aba72-cce4-4dbe-b91d-f6cc07f49dba/68de2bdf-61d2-3c51-9da8-f1d0064114bc.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 399879 IP address blocks: 2620:9a:e000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ed9aba72-cce4-4dbe-b91d-f6cc07f49dba/ed9aba72-cce4-4dbe-b91d-f6cc07f49dba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ed9aba72-cce4-4dbe-b91d-f6cc07f49dba/ed9aba72-cce4-4dbe-b91d-f6cc07f49dba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ed9aba72-cce4-4dbe-b91d-f6cc07f49dba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:a2:c8:f7:94:f8:04:4b:ef:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed9aba72-cce4-4dbe-b91d-f6cc07f49dba Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=536d8e56-6d38-41ec-a07f-af9c1ed9ca8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5e:c9:8d:3c:ca:63:85:5d:3a:65:68:ba:1d: 8d:b1:5b:63:0c:c8:3f:e1:44:cd:05:47:f7:8d:59: 73:a6:22:32:d3:30:8b:15:8b:6e:70:45:4a:1d:d8: 6e:07:63:e9:2e:eb:ba:c6:81:d1:32:0c:b4:e8:3d: 28:73:da:ee:d0:e7:e9:c0:22:6f:47:9e:9e:4b:16: 74:ad:5b:ef:73:df:8a:c9:34:bd:a0:f2:86:14:f4: 15:3e:fa:80:74:9e:e2:69:d0:72:66:9a:d1:c4:82: 73:98:92:36:1d:99:e4:9c:20:77:79:61:5c:90:4c: f9:a2:e8:26:bb:a2:c5:3a:3c:68:6f:62:62:bc:62: c3:e9:c9:44:5c:ac:2e:23:ed:0b:4d:10:4b:f5:a7: 2b:32:4e:37:7f:5f:44:97:f6:c3:fc:94:19:88:51: e4:9d:7a:f0:d0:cb:c2:d8:ff:b6:4a:32:98:cc:ba: bc:95:99:67:04:3b:70:b2:4e:3f:c5:21:c8:7f:9e: 11:d7:c1:e6:93:79:05:bb:24:65:22:40:c7:b2:f4: cd:b1:28:b7:12:28:b0:5b:3a:40:2b:17:18:6e:f0: 97:ad:58:75:b0:b8:0f:23:a0:80:cf:af:ac:29:d8: 69:c6:06:8b:b0:26:29:93:47:86:e8:9c:9a:2f:49: b0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:F4:89:4E:9A:10:67:4C:1E:D6:64:4D:31:08:8C:A2:FF:C9:B3:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ed9aba72-cce4-4dbe-b91d-f6cc07f49dba/68de2bdf-61d2-3c51-9da8-f1d0064114bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ed9aba72-cce4-4dbe-b91d-f6cc07f49dba/ed9aba72-cce4-4dbe-b91d-f6cc07f49dba.crl X509v3 Authority Key Identifier: keyid:F2:F7:9D:DC:35:6B:B7:E1:90:03:3C:F4:68:4A:76:FA:86:4C:82:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ed9aba72-cce4-4dbe-b91d-f6cc07f49dba.cer sbgp-ipAddrBlock: critical IPv6: 2620:9a:e000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:b6:11:47:85:cc:e4:14:eb:b2:f6:3b:4f:e4:e1:2b:25:db: 90:b9:84:1a:bf:fe:98:87:d8:4b:0a:23:7d:c1:91:f2:99:6a: 62:1f:23:0a:e7:ff:6b:c2:dd:d8:33:f2:c9:11:04:c2:7b:eb: d1:f6:03:1c:26:fd:be:c3:eb:1d:d8:08:a2:5c:fb:d8:68:73: 07:7b:95:33:f1:74:dc:2e:03:5c:50:34:7f:0c:f0:1c:c9:52: 88:ff:1d:53:3d:6e:ce:f8:a1:c0:66:fb:e7:76:52:c4:6b:d7: b3:56:e6:1a:9f:3f:86:c2:e2:25:00:09:3e:bf:3f:ea:73:83: 5b:c5:e9:7d:7d:7a:12:c5:58:9e:5a:61:c2:1f:06:64:68:ee: 43:c6:0e:66:56:1d:ed:62:3a:83:03:9a:25:c1:c3:7d:b1:f7: f4:0e:5b:3c:fe:7e:94:7e:df:a2:9f:16:6d:38:2d:51:b6:4d: b4:48:09:f6:96:ea:8c:6f:a2:32:e0:60:a2:9e:8b:20:5d:4f: a9:18:7c:1b:e0:3b:73:76:07:97:bd:a7:d8:54:f2:46:9e:74: f1:79:40:37:03:97:4e:c0:83:f0:2b:43:5e:be:15:b6:68:8b: c1:d7:8c:b1:6f:b4:00:8b:c6:bb:2f:91:fa:60:0f:4d:13:b1: 98:13:88:52 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtxXKLI95T4BEvvRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWQ5YWJhNzItY2NlNC00ZGJlLWI5MWQtZjZjYzA3ZjQ5 ZGJhMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NTM2ZDhlNTYtNmQzOC00MWVjLWEwN2YtYWY5YzFlZDljYThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnV7JjTzKY4VdOmVouh2NsVtjDMg/4UTNBUf3 jVlzpiIy0zCLFYtucEVKHdhuB2PpLuu6xoHRMgy06D0oc9ru0OfpwCJvR56eSxZ0 rVvvc9+KyTS9oPKGFPQVPvqAdJ7iadByZprRxIJzmJI2HZnknCB3eWFckEz5ougm u6LFOjxob2JivGLD6clEXKwuI+0LTRBL9acrMk43f19El/bD/JQZiFHknXrw0MvC 2P+2SjKYzLq8lZlnBDtwsk4/xSHIf54R18Hmk3kFuyRlIkDHsvTNsSi3EiiwWzpA KxcYbvCXrVh1sLgPI6CAz6+sKdhpxgaLsCYpk0eG6JyaL0mw7QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDD0iU6aEGdMHtZkTTEIjKL/ybMiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lZDlh YmE3Mi1jY2U0LTRkYmUtYjkxZC1mNmNjMDdmNDlkYmEvNjhkZTJiZGYtNjFkMi0z YzUxLTlkYTgtZjFkMDA2NDExNGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWQ5YWJhNzItY2NlNC00ZGJlLWI5 MWQtZjZjYzA3ZjQ5ZGJhL2VkOWFiYTcyLWNjZTQtNGRiZS1iOTFkLWY2Y2MwN2Y0 OWRiYS5jcmwwHwYDVR0jBBgwFoAU8ved3DVrt+GQAzz0aEp2+oZMgrcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lZDlhYmE3Mi1jY2U0LTRkYmUtYjkxZC1mNmNj MDdmNDlkYmEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAAmuAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG+2EUeFzOQU67L2O0/k4Ssl25C5hBq//piH2EsKI33BkfKZamIf Iwrn/2vC3dgz8skRBMJ769H2Axwm/b7D6x3YCKJc+9hocwd7lTPxdNwuA1xQNH8M 8BzJUoj/HVM9bs74ocBm++d2UsRr17NW5hqfP4bC4iUACT6/P+pzg1vF6X19ehLF WJ5aYcIfBmRo7kPGDmZWHe1iOoMDmiXBw32x9/QOWzz+fpR+36KfFm04LVG2TbRI CfaW6oxvojLgYKKeiyBdT6kYfBvgO3N2B5e9p9hU8kaedPF5QDcDl07Ag/ArQ16+ FbZoi8HXjLFvtACLxrsvkfpgD00TsZgTiFI= -----END CERTIFICATE-----Generated at Wed Nov 5 14:05:46 2025 by rpki-client