$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/c431513d-aaef-3485-b46c-d4c9e32372d8.roa File: c431513d-aaef-3485-b46c-d4c9e32372d8.roa (raw, json) Hash identifier: 0+Lm+P36JpTGgdLrCD+8zqyiuz/q+hJb4ahSuKMeofs= Subject key identifier: 6D:24:07:D3:A4:B7:74:CA:DF:4A:37:5B:2B:99:C5:3B:B3:5E:EE:79 Certificate issuer: /CN=938e1602-8093-4bcd-b527-f5d1756295fc Certificate serial: 010D0C9F4328584B9E07D2EC20BAF1A613011940 Authority key identifier: FC:CC:00:B4:C6:BD:80:7C:69:57:66:2D:19:A9:EB:C2:37:89:78:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/c431513d-aaef-3485-b46c-d4c9e32372d8.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 401482 IP address blocks: 2620:cf:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/938e1602-8093-4bcd-b527-f5d1756295fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/938e1602-8093-4bcd-b527-f5d1756295fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:d2:ec:20:ba:f1:a6:13:01:19:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=938e1602-8093-4bcd-b527-f5d1756295fc Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=bbe09fba-57e6-4aee-a7cf-3a9fcec15cab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e6:64:48:e1:79:30:d7:45:78:e8:53:d4:2d: 88:98:bf:cf:5b:e5:50:f7:df:13:07:b1:fb:a8:96: e6:dc:98:3e:cd:e4:62:21:07:b3:50:99:ac:31:6b: 53:29:0e:16:7b:c9:a1:29:42:50:cf:d7:3a:34:26: f8:f2:c4:da:33:80:d3:0a:2e:69:06:78:75:33:67: 5c:cf:59:65:31:2a:f5:53:93:cc:41:55:aa:1c:9c: 82:02:28:2e:ef:9f:00:f1:8a:34:b5:1c:bf:07:ad: f9:3a:03:20:75:53:c2:81:83:a1:6a:4f:c6:72:55: 0c:33:6d:d9:7b:26:55:32:1b:22:14:49:9c:f9:86: c9:07:26:d0:28:8d:e4:72:04:c6:94:16:d8:6b:d1: 1b:fc:23:4f:f4:c9:95:23:fe:06:16:9a:a7:49:46: 49:0c:96:c0:f5:0a:62:21:2f:23:4e:79:82:6b:5b: 4b:72:84:d7:a2:3a:4f:09:f8:bd:b0:66:17:43:4d: 44:76:68:bf:7b:e8:0d:0d:41:b8:e7:38:ce:04:c3: 86:7d:e6:32:ee:26:68:82:03:cd:e8:25:4e:3f:f6: eb:52:d0:de:bc:19:ae:12:6e:e1:54:55:f0:9e:d5: 69:a7:87:d1:46:4e:2b:f9:ea:38:77:65:e1:50:93: c1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:24:07:D3:A4:B7:74:CA:DF:4A:37:5B:2B:99:C5:3B:B3:5E:EE:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/c431513d-aaef-3485-b46c-d4c9e32372d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/938e1602-8093-4bcd-b527-f5d1756295fc.crl X509v3 Authority Key Identifier: keyid:FC:CC:00:B4:C6:BD:80:7C:69:57:66:2D:19:A9:EB:C2:37:89:78:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc.cer sbgp-ipAddrBlock: critical IPv6: 2620:cf:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:9f:70:1e:8c:ce:cc:e5:45:7b:6c:40:ff:d1:83:e1:bf:48: 16:88:6b:f8:3d:6f:af:57:53:ea:de:67:3f:e8:c5:19:e2:59: e4:f6:0b:41:90:b7:4c:99:eb:25:e7:52:4d:52:ee:6f:03:80: 8b:c2:fa:1d:dc:b6:1c:8f:b7:64:41:48:e7:ff:02:85:de:cf: b1:84:a6:3a:16:31:0b:bc:ae:8e:7f:01:be:3a:df:47:ba:14: 56:26:71:30:98:2b:10:cf:80:9a:68:d3:8a:b6:4f:5d:ba:45: 21:70:f7:e1:90:8d:40:63:2a:72:ae:53:4a:73:ee:0e:d7:0b: fd:4b:a7:91:b9:64:07:3c:5b:b6:b2:39:d7:57:4c:67:02:ee: 8d:7f:b9:4d:f7:f7:58:33:d1:6c:83:26:f8:68:87:8d:a7:65: b4:61:d6:c8:00:87:7a:51:46:41:73:a3:66:cf:48:13:72:a7: ea:d9:ba:e9:0d:5b:e2:72:e1:57:25:de:17:ba:b2:ef:6c:86: 2e:6a:e0:de:1c:ce:59:56:7e:0a:f8:96:d8:d8:3d:34:d1:2e: 19:de:17:4a:61:55:1a:12:9c:1d:d8:44:55:aa:3d:f8:e9:c5: ea:00:6a:08:a6:9e:0f:de:62:17:5a:d4:df:8d:5e:b6:5b:5e: a2:36:11:7e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEueB9LsILrxphMBGUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM4ZTE2MDItODA5My00YmNkLWI1MjctZjVkMTc1NjI5 NWZjMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk YmJlMDlmYmEtNTdlNi00YWVlLWE3Y2YtM2E5ZmNlYzE1Y2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOZkSOF5MNdFeOhT1C2ImL/PW+VQ998TB7H7 qJbm3Jg+zeRiIQezUJmsMWtTKQ4We8mhKUJQz9c6NCb48sTaM4DTCi5pBnh1M2dc z1llMSr1U5PMQVWqHJyCAigu758A8Yo0tRy/B635OgMgdVPCgYOhak/GclUMM23Z eyZVMhsiFEmc+YbJBybQKI3kcgTGlBbYa9Eb/CNP9MmVI/4GFpqnSUZJDJbA9Qpi IS8jTnmCa1tLcoTXojpPCfi9sGYXQ01Edmi/e+gNDUG45zjOBMOGfeYy7iZoggPN 6CVOP/brUtDevBmuEm7hVFXwntVpp4fRRk4r+eo4d2XhUJPBwwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG0kB9Okt3TK30o3WyuZxTuzXu55MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85Mzhl MTYwMi04MDkzLTRiY2QtYjUyNy1mNWQxNzU2Mjk1ZmMvYzQzMTUxM2QtYWFlZi0z NDg1LWI0NmMtZDRjOWUzMjM3MmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTM4ZTE2MDItODA5My00YmNkLWI1 MjctZjVkMTc1NjI5NWZjLzkzOGUxNjAyLTgwOTMtNGJjZC1iNTI3LWY1ZDE3NTYy OTVmYy5jcmwwHwYDVR0jBBgwFoAU/MwAtMa9gHxpV2YtGanrwjeJePYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85MzhlMTYwMi04MDkzLTRiY2QtYjUyNy1mNWQx NzU2Mjk1ZmMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAz6AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEmfcB6MzszlRXtsQP/Rg+G/SBaIa/g9b69XU+reZz/oxRniWeT2 C0GQt0yZ6yXnUk1S7m8DgIvC+h3cthyPt2RBSOf/AoXez7GEpjoWMQu8ro5/Ab46 30e6FFYmcTCYKxDPgJpo04q2T126RSFw9+GQjUBjKnKuU0pz7g7XC/1Lp5G5ZAc8 W7ayOddXTGcC7o1/uU3391gz0WyDJvhoh42nZbRh1sgAh3pRRkFzo2bPSBNyp+rZ uukNW+Jy4Vcl3he6su9shi5q4N4czllWfgr4ltjYPTTRLhneF0phVRoSnB3YRFWq PfjpxeoAagimng/eYhda1N+NXrZbXqI2EX4= -----END CERTIFICATE-----Generated at Thu Nov 6 00:23:58 2025 by rpki-client