$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/db497315-9bbe-3565-b74f-2aed8cfd4fe0.roa File: db497315-9bbe-3565-b74f-2aed8cfd4fe0.roa (raw, json) Hash identifier: 9ftozk9YrJnDlQVc6Er7FZeta9dK0DhqRYuDhVPNioQ= Subject key identifier: 09:C8:DF:46:79:98:33:A4:6E:C5:80:76:12:D7:B3:DE:A3:3E:FE:0A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B62020C4A6F90C5905849C680 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/db497315-9bbe-3565-b74f-2aed8cfd4fe0.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 54113 IP address blocks: 2620:0:890::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:0c:4a:6f:90:c5:90:58:49:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=239f0f10-5583-4798-984a-07b8332d3846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b9:83:90:2e:b7:01:07:e8:aa:99:b1:95:cc: 6c:da:13:1c:3b:7d:b8:0c:eb:11:fe:3c:b2:26:a0: c8:0d:4e:82:8d:25:0d:83:9d:42:9d:f1:c7:db:47: 34:10:30:09:4f:20:5d:44:ae:af:6a:3b:98:87:a3: 8e:69:07:34:8b:bb:1f:e8:1d:d7:c3:37:06:ee:d1: ad:b8:d9:e6:dd:d0:71:59:f1:7e:1a:26:88:dd:9c: 61:fb:e5:4b:8d:d9:f0:b8:a3:54:6d:e2:9d:c2:38: c0:8e:0e:8e:1f:29:04:e9:3b:cd:97:a5:09:db:b0: cf:eb:5c:7c:13:1f:a4:ab:77:93:f3:d9:bf:48:ed: a9:61:ab:80:78:85:9f:ba:ef:6f:74:43:51:4b:ec: 05:97:63:31:45:20:04:b5:31:2e:f1:22:fe:b4:1b: 49:21:12:57:39:d3:cd:bb:9e:34:7f:16:d7:0f:b8: 2f:75:13:7c:70:7b:dc:66:33:a9:a4:27:b1:41:d3: ab:fe:b2:b8:1e:21:aa:26:a6:da:7d:ef:1f:34:2c: bb:03:44:0a:0a:bd:d5:68:d6:db:61:96:80:92:86: c3:5e:95:b0:df:84:54:16:dd:e3:e6:f2:8e:29:d1: 13:ae:20:45:9a:62:50:ca:1f:5c:25:2b:a7:a2:44: 59:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C8:DF:46:79:98:33:A4:6E:C5:80:76:12:D7:B3:DE:A3:3E:FE:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/db497315-9bbe-3565-b74f-2aed8cfd4fe0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:890::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:68:38:62:05:29:48:e2:d2:39:10:e9:d6:72:96:a8:6c:3a: e4:cc:c4:8a:7a:28:3f:2f:fa:7e:28:ae:5f:34:58:22:11:99: 2a:69:a4:47:b5:4a:da:8a:ca:26:32:6b:cd:3f:47:c5:b8:02: bd:34:da:9a:8c:62:b8:89:d4:34:93:0e:b3:d0:f6:6c:9f:81: 75:72:f7:e8:a7:6e:d6:a3:47:61:88:7c:02:63:ab:7e:f4:cb: 41:c8:e9:12:0a:d3:46:d2:39:ad:16:d8:07:a6:f4:0a:39:90: fa:0b:5f:f5:aa:83:ac:1a:4a:81:b1:f7:cb:d5:ae:0e:de:43: a9:31:f2:bf:49:59:66:0a:71:dd:66:19:62:86:a9:59:00:1a: 3c:80:5b:5a:4c:24:60:ca:91:68:fb:f0:db:7c:5f:4c:4c:f7: ed:b2:e1:fd:e8:ec:2b:98:64:58:4d:f1:18:86:00:86:da:f9: 26:79:45:38:9c:d6:5d:30:d2:7a:42:e2:72:9a:2c:4d:f3:9b: b6:6b:81:3a:34:d8:94:0a:6f:98:a4:88:6b:40:93:f1:05:d5: e6:76:3b:8d:57:ad:fa:2a:c9:b4:93:a2:42:b9:48:a6:f9:25: 9a:ef:68:fb:e1:71:94:85:08:d5:77:ae:75:3f:1d:c6:f9:32: fb:30:c5:c0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAgxKb5DFkFhJxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk MjM5ZjBmMTAtNTU4My00Nzk4LTk4NGEtMDdiODMzMmQzODQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLmDkC63AQfoqpmxlcxs2hMcO324DOsR/jyy JqDIDU6CjSUNg51CnfHH20c0EDAJTyBdRK6vajuYh6OOaQc0i7sf6B3XwzcG7tGt uNnm3dBxWfF+GiaI3Zxh++VLjdnwuKNUbeKdwjjAjg6OHykE6TvNl6UJ27DP61x8 Ex+kq3eT89m/SO2pYauAeIWfuu9vdENRS+wFl2MxRSAEtTEu8SL+tBtJIRJXOdPN u540fxbXD7gvdRN8cHvcZjOppCexQdOr/rK4HiGqJqbafe8fNCy7A0QKCr3VaNbb YZaAkobDXpWw34RUFt3j5vKOKdETriBFmmJQyh9cJSunokRZawIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAnI30Z5mDOkbsWAdhLXs96jPv4KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGI0OTczMTUtOWJiZS0z NTY1LWI3NGYtMmFlZDhjZmQ0ZmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAAiQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIpoOGIFKUji0jkQ6dZylqhsOuTMxIp6KD8v+n4orl80WCIRmSpp pEe1StqKyiYya80/R8W4Ar002pqMYriJ1DSTDrPQ9myfgXVy9+inbtajR2GIfAJj q370y0HI6RIK00bSOa0W2Aem9Ao5kPoLX/Wqg6waSoGx98vVrg7eQ6kx8r9JWWYK cd1mGWKGqVkAGjyAW1pMJGDKkWj78Nt8X0xM9+2y4f3o7CuYZFhN8RiGAIba+SZ5 RTic1l0w0npC4nKaLE3zm7ZrgTo02JQKb5ikiGtAk/EF1eZ2O41XrfoqybSTokK5 SKb5JZrvaPvhcZSFCNV3rnU/Hcb5MvswxcA= -----END CERTIFICATE-----Generated at Tue Nov 4 23:24:33 2025 by rpki-client