$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/06a378f5-3b42-3d66-bdd7-278251c6fa98.roa File: 06a378f5-3b42-3d66-bdd7-278251c6fa98.roa (raw, json) Hash identifier: KoZuydZ3pb53ZVaX9ghZLqAgiPChP7ja/uVyKmCH9nM= Subject key identifier: CE:18:A4:CC:AA:A0:C9:1E:CA:F8:65:A4:10:64:63:49:DE:15:D6:C8 Certificate issuer: /CN=c28b7c13-301c-47fc-b39b-2201e763c4dd Certificate serial: 010D0C9F4328584BA9326BF261E16EC4D7DAC780 Authority key identifier: E4:00:44:49:6A:F4:E0:C2:47:22:B9:1B:EC:F8:50:C2:2B:7B:AC:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/06a378f5-3b42-3d66-bdd7-278251c6fa98.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 8111 IP address blocks: 2620:21:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/c28b7c13-301c-47fc-b39b-2201e763c4dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/c28b7c13-301c-47fc-b39b-2201e763c4dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:6b:f2:61:e1:6e:c4:d7:da:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c28b7c13-301c-47fc-b39b-2201e763c4dd Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=d8298ce9-6fdb-46ea-89a4-691eb3009449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:32:e2:29:0a:0c:c6:c3:3a:27:0b:2e:2d:af: 34:6b:63:ef:63:5e:0c:90:f0:67:75:96:59:2b:e3: 00:3d:b5:6d:a4:1a:3a:30:ca:88:ab:90:dc:2d:ed: 3b:72:91:a4:91:40:09:e8:61:23:49:71:65:72:15: cd:d6:6c:32:4f:3c:7b:45:d4:59:a3:7a:33:10:bc: 60:c1:a4:2d:ee:99:8f:90:7d:1e:e9:90:01:3e:79: 8b:fe:1d:9f:73:db:e3:08:de:12:a7:e7:d9:91:94: d9:45:95:0d:55:5e:46:05:1e:e6:1e:ae:4a:ce:c7: 96:7a:90:c1:fa:61:ad:dd:1e:4d:8c:a2:29:46:f8: e8:dd:f2:8d:d6:f0:41:ee:39:82:f1:d5:12:8a:a1: cc:9d:1d:b4:e1:a8:0f:70:1c:d9:3e:78:ea:71:38: 60:d3:70:d0:96:cc:7d:5e:03:e2:a3:f1:e9:65:de: 23:84:e3:22:bf:c2:cc:1b:e2:5e:5d:57:c6:52:7f: e6:5f:c7:f5:32:61:fe:c1:4b:6b:14:13:e5:8c:ce: 05:2c:19:d0:01:1f:d9:d1:cd:07:b7:38:dd:a1:19: 0d:a0:45:d8:f2:6b:a6:60:03:a8:65:18:44:2c:bf: 7f:90:2d:b8:df:08:3e:62:27:00:06:bb:86:68:d6: 44:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:18:A4:CC:AA:A0:C9:1E:CA:F8:65:A4:10:64:63:49:DE:15:D6:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/06a378f5-3b42-3d66-bdd7-278251c6fa98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/c28b7c13-301c-47fc-b39b-2201e763c4dd.crl X509v3 Authority Key Identifier: keyid:E4:00:44:49:6A:F4:E0:C2:47:22:B9:1B:EC:F8:50:C2:2B:7B:AC:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd.cer sbgp-ipAddrBlock: critical IPv6: 2620:21:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:bb:a7:80:7c:f0:8d:72:44:ae:40:83:eb:1d:b0:8a:0f:c6: 05:75:22:eb:4f:57:c2:06:5b:6a:14:1d:88:19:df:bc:57:11: 96:15:2f:49:3c:52:17:fb:4d:52:43:9f:91:3a:ee:07:02:35: ac:25:5c:a9:d8:0a:32:7a:6b:9f:e9:6e:70:53:bd:d9:40:65: ef:68:29:6b:ca:ab:c1:52:66:1c:78:2f:86:e3:c8:86:8b:b6: 5a:62:50:e1:9b:a1:92:ce:4f:c3:43:b1:07:81:27:8f:b9:2a: 5d:10:03:cf:65:61:0c:fe:28:0b:df:d6:3f:2d:01:01:2c:99: 28:c7:af:5e:81:3d:cd:c0:c5:45:e2:b0:83:7b:92:64:0b:b9: 3f:f2:aa:9c:07:27:e9:ba:51:84:b6:cc:c7:d8:51:4a:fd:a4: 72:ac:01:4f:c4:6e:62:2c:4a:63:f2:fd:c2:78:ef:9c:60:14: 91:4b:c1:20:78:cb:7a:f7:e4:d9:12:58:f9:b9:4f:4d:27:c4: bf:e6:5f:1c:4d:3e:82:c8:cf:57:22:25:bc:c9:76:bb:5e:eb: a5:67:f7:5b:91:6c:36:46:06:dd:19:53:bf:4a:36:d8:8a:81: 47:67:43:30:11:85:6c:5d:76:03:3c:7a:4e:c7:ef:7e:3b:00: 3e:32:94:5c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEupMmvyYeFuxNfax4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzI4YjdjMTMtMzAxYy00N2ZjLWIzOWItMjIwMWU3NjNj NGRkMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk ZDgyOThjZTktNmZkYi00NmVhLTg5YTQtNjkxZWIzMDA5NDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDLiKQoMxsM6JwsuLa80a2PvY14MkPBndZZZ K+MAPbVtpBo6MMqIq5DcLe07cpGkkUAJ6GEjSXFlchXN1mwyTzx7RdRZo3ozELxg waQt7pmPkH0e6ZABPnmL/h2fc9vjCN4Sp+fZkZTZRZUNVV5GBR7mHq5KzseWepDB +mGt3R5NjKIpRvjo3fKN1vBB7jmC8dUSiqHMnR204agPcBzZPnjqcThg03DQlsx9 XgPio/HpZd4jhOMiv8LMG+JeXVfGUn/mX8f1MmH+wUtrFBPljM4FLBnQAR/Z0c0H tzjdoRkNoEXY8mumYAOoZRhELL9/kC243wg+YicABruGaNZEOwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM4YpMyqoMkeyvhlpBBkY0neFdbIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jMjhi N2MxMy0zMDFjLTQ3ZmMtYjM5Yi0yMjAxZTc2M2M0ZGQvMDZhMzc4ZjUtM2I0Mi0z ZDY2LWJkZDctMjc4MjUxYzZmYTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzI4YjdjMTMtMzAxYy00N2ZjLWIz OWItMjIwMWU3NjNjNGRkL2MyOGI3YzEzLTMwMWMtNDdmYy1iMzliLTIyMDFlNzYz YzRkZC5jcmwwHwYDVR0jBBgwFoAU5ABESWr04MJHIrkb7PhQwit7rIowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jMjhiN2MxMy0zMDFjLTQ3ZmMtYjM5Yi0yMjAx ZTc2M2M0ZGQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAIcAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE+7p4B88I1yRK5Ag+sdsIoPxgV1IutPV8IGW2oUHYgZ37xXEZYV L0k8Uhf7TVJDn5E67gcCNawlXKnYCjJ6a5/pbnBTvdlAZe9oKWvKq8FSZhx4L4bj yIaLtlpiUOGboZLOT8NDsQeBJ4+5Kl0QA89lYQz+KAvf1j8tAQEsmSjHr16BPc3A xUXisIN7kmQLuT/yqpwHJ+m6UYS2zMfYUUr9pHKsAU/EbmIsSmPy/cJ475xgFJFL wSB4y3r35NkSWPm5T00nxL/mXxxNPoLIz1ciJbzJdrte66Vn91uRbDZGBt0ZU79K NtiKgUdnQzARhWxddgM8ek7H7347AD4ylFw= -----END CERTIFICATE-----Generated at Wed Nov 5 12:12:09 2025 by rpki-client