$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/4d858919-717c-34a0-af03-e397e8e819f1.roa File: 4d858919-717c-34a0-af03-e397e8e819f1.roa (raw, json) Hash identifier: JXgYNflxDq/4QBWOa1he1hVdeWOnWFjRBfYdW9Wu5kI= Subject key identifier: 88:E2:1D:84:B3:43:07:FE:DC:1F:5E:70:72:84:CD:D3:A3:32:DB:FB Certificate issuer: /CN=9305060e-d479-4a8f-8eba-23b31106c750 Certificate serial: 010D0C9F4328584B5B0762232A3B199FF94BF940 Authority key identifier: CD:10:96:99:5A:E6:48:93:8D:20:B3:D5:48:0A:82:61:73:F5:E4:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/4d858919-717c-34a0-af03-e397e8e819f1.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 16509 IP address blocks: 2620:12c:8041::/48 maxlen: 48 2620:12c:8051::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/9305060e-d479-4a8f-8eba-23b31106c750.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/9305060e-d479-4a8f-8eba-23b31106c750.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:62:23:2a:3b:19:9f:f9:4b:f9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9305060e-d479-4a8f-8eba-23b31106c750 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=8afe6576-f67f-48d9-88c7-e8b06855b0ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ff:67:de:18:b7:9c:40:80:ea:d0:ae:9b:e0: 3f:f3:cf:a7:5f:7a:c1:66:a8:32:98:be:5f:3d:be: f6:73:ca:9c:df:b3:9b:d8:fb:b2:20:4a:57:ad:75: 63:26:1f:c1:84:d7:1d:9f:6c:45:8c:82:58:a3:b5: 67:05:89:0d:62:d6:57:b4:9d:76:ed:ee:f8:ce:c5: 31:ca:ea:b0:02:1c:9f:f4:89:b5:6b:a0:5d:51:a1: 9e:d0:03:79:91:60:c5:a8:14:ea:0f:25:c0:0a:b4: 44:75:09:12:3a:79:cf:08:8f:66:f2:e3:ff:32:5c: 48:89:79:ee:f7:ee:a6:88:50:a7:eb:86:7c:3c:bb: dd:ee:92:b2:6d:d9:d9:e7:f4:2c:18:20:da:38:02: 58:a6:dc:04:6c:9b:f9:f4:f4:d2:2a:20:b6:5b:dc: a8:4f:20:8f:66:ba:a3:30:3d:1f:61:47:64:88:53: 52:a5:0a:54:42:ec:75:37:1a:a6:9d:2d:85:af:16: 7d:27:2b:4b:5a:d7:e9:86:f2:12:2f:72:6e:fc:a2: 47:af:ec:8c:88:63:97:79:97:43:95:d1:d3:2b:e0: 9c:62:44:2b:71:96:f1:75:7b:1a:58:0c:b1:1e:07: 0e:c6:5f:55:77:73:1b:eb:55:23:8c:0f:c2:3b:2e: 98:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:E2:1D:84:B3:43:07:FE:DC:1F:5E:70:72:84:CD:D3:A3:32:DB:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/4d858919-717c-34a0-af03-e397e8e819f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/9305060e-d479-4a8f-8eba-23b31106c750.crl X509v3 Authority Key Identifier: keyid:CD:10:96:99:5A:E6:48:93:8D:20:B3:D5:48:0A:82:61:73:F5:E4:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750.cer sbgp-ipAddrBlock: critical IPv6: 2620:12c:8041::/48 2620:12c:8051::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:24:c4:8a:74:81:7d:99:5d:a1:6b:0e:ee:f1:20:41:1f:c9: b1:a8:2f:d4:5e:2b:39:96:d0:96:92:3b:0b:de:16:e0:84:4e: 4c:e9:58:41:71:b5:58:a1:01:87:41:3a:e7:9e:de:df:cb:b6: d2:61:0c:e2:4f:54:23:44:a1:a6:e9:80:9a:ee:2a:e5:ca:05: 90:44:62:7d:83:aa:15:e2:ff:30:55:9e:cb:e4:7b:66:30:2b: a7:75:68:6e:c2:61:74:74:08:f5:05:ce:1a:f3:aa:0c:6c:38: df:05:7e:78:9d:4b:79:14:96:31:b7:65:27:3c:3e:f2:1f:42: a0:d7:f1:95:fb:38:29:12:ba:bb:e2:56:cf:ff:f1:5a:e9:9e: ee:d0:15:f2:7a:cb:ae:c5:97:2a:25:98:91:6e:64:a8:cd:e2: bb:5d:fb:c3:45:96:7c:f2:50:55:ef:64:73:ee:45:ea:78:b8: d3:dd:ff:44:15:f9:14:d2:18:7d:ff:b3:9c:31:8d:15:c0:17: 9b:7b:11:cf:2a:d9:f6:53:af:34:5f:79:99:5d:d6:51:99:24: cd:e9:19:46:7d:a4:8d:1f:80:24:f3:ca:46:5c:1b:62:20:b5: f0:1e:af:50:a5:2b:ba:29:e3:8e:c5:b5:a1:7c:5d:67:75:3f: b8:ee:8c:b4 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEtbB2IjKjsZn/lL+UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTMwNTA2MGUtZDQ3OS00YThmLThlYmEtMjNiMzExMDZj NzUwMB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk OGFmZTY1NzYtZjY3Zi00OGQ5LTg4YzctZThiMDY4NTViMGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgP9n3hi3nECA6tCum+A/88+nX3rBZqgymL5f Pb72c8qc37Ob2PuyIEpXrXVjJh/BhNcdn2xFjIJYo7VnBYkNYtZXtJ127e74zsUx yuqwAhyf9Im1a6BdUaGe0AN5kWDFqBTqDyXACrREdQkSOnnPCI9m8uP/MlxIiXnu 9+6miFCn64Z8PLvd7pKybdnZ5/QsGCDaOAJYptwEbJv59PTSKiC2W9yoTyCPZrqj MD0fYUdkiFNSpQpUQux1NxqmnS2FrxZ9JytLWtfphvISL3Ju/KJHr+yMiGOXeZdD ldHTK+CcYkQrcZbxdXsaWAyxHgcOxl9Vd3Mb61UjjA/COy6YDQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFIjiHYSzQwf+3B9ecHKEzdOjMtv7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85MzA1 MDYwZS1kNDc5LTRhOGYtOGViYS0yM2IzMTEwNmM3NTAvNGQ4NTg5MTktNzE3Yy0z NGEwLWFmMDMtZTM5N2U4ZTgxOWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTMwNTA2MGUtZDQ3OS00YThmLThl YmEtMjNiMzExMDZjNzUwLzkzMDUwNjBlLWQ0NzktNGE4Zi04ZWJhLTIzYjMxMTA2 Yzc1MC5jcmwwHwYDVR0jBBgwFoAUzRCWmVrmSJONILPVSAqCYXP15AEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85MzA1MDYwZS1kNDc5LTRhOGYtOGViYS0yM2Iz MTEwNmM3NTAuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAJiABLIBB AwcAJiABLIBRMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAHUkxIp0gX2ZXaFrDu7xIEEfybGoL9ReKzmW0JaS OwveFuCETkzpWEFxtVihAYdBOuee3t/LttJhDOJPVCNEoabpgJruKuXKBZBEYn2D qhXi/zBVnsvke2YwK6d1aG7CYXR0CPUFzhrzqgxsON8FfnidS3kUljG3ZSc8PvIf QqDX8ZX7OCkSurviVs//8Vrpnu7QFfJ6y67FlyolmJFuZKjN4rtd+8NFlnzyUFXv ZHPuRep4uNPd/0QV+RTSGH3/s5wxjRXAF5t7Ec8q2fZTrzRfeZld1lGZJM3pGUZ9 pI0fgCTzykZcG2IgtfAer1ClK7op447FtaF8XWd1P7jujLQ= -----END CERTIFICATE-----Generated at Wed Nov 5 05:46:20 2025 by rpki-client