$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/4db7b021-add9-39c3-8875-288dfc88daa8.roa File: 4db7b021-add9-39c3-8875-288dfc88daa8.roa (raw, json) Hash identifier: 5el7gxCy4LhsAYiMpGZELWFyc+Ssz6pkO3aCLtjVN7U= Subject key identifier: 61:09:6B:EC:EB:5C:62:B5:DE:56:DC:A0:A9:1E:B2:77:F7:3C:27:0E Certificate issuer: /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Certificate serial: 010D0C9F4328584BA7CD1B7EC45492561B727200 Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/4db7b021-add9-39c3-8875-288dfc88daa8.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 36692 IP address blocks: 2620:119:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:1b:7e:c4:54:92:56:1b:72:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=2943ead3-9a5a-40e4-819b-392267549d9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1d:74:89:2d:97:5c:19:fa:1b:6e:e3:1d:5e: 3f:83:62:7d:dd:8d:ee:ff:7f:df:b2:76:3f:bb:9d: bd:1a:2c:4a:47:e4:6c:80:55:c6:7c:5f:79:aa:d5: 09:84:92:80:dc:3d:7b:18:d7:3a:54:eb:ff:dd:21: 7d:be:fe:17:d7:7c:46:28:fe:66:87:52:46:11:33: 14:97:cf:d9:e2:ff:79:7b:4b:82:30:c2:56:ec:ae: 52:21:bf:64:7f:c0:81:4c:b9:05:38:df:9c:aa:76: ba:af:ab:e2:16:eb:d5:ca:a3:57:59:6f:be:ec:9c: e3:35:40:24:23:49:c0:d6:55:99:c4:c5:f7:dd:e6: 74:66:6d:fe:03:3f:73:5f:17:89:d8:14:76:ee:07: 76:12:1a:78:74:0a:ad:a7:16:0f:19:ba:19:97:58: 53:b5:c2:a8:54:bb:2a:15:c5:58:30:df:57:fe:57: df:77:b8:c4:97:31:de:7d:69:b5:21:b8:07:fc:57: 77:c2:06:2a:97:1a:06:e1:3b:71:f3:62:14:db:a0: e0:36:e3:86:03:a0:d2:d6:54:7f:10:43:f7:45:24: b3:f0:b4:f3:df:50:69:dc:ae:3a:b4:c1:03:bc:4d: 76:b2:1c:a0:30:b3:7b:e6:e7:98:22:e2:b4:aa:86: 5a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:09:6B:EC:EB:5C:62:B5:DE:56:DC:A0:A9:1E:B2:77:F7:3C:27:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/4db7b021-add9-39c3-8875-288dfc88daa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl X509v3 Authority Key Identifier: keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer sbgp-ipAddrBlock: critical IPv6: 2620:119:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:29:c1:5b:a3:a3:60:32:11:41:1a:f4:37:9b:7f:84:71:51: 45:c0:4d:95:9d:3a:78:b7:66:19:81:ad:e8:cf:f9:88:4c:90: 18:01:15:99:a2:d5:36:87:66:2c:b0:d4:fb:59:0e:35:2f:52: 4d:09:c5:0a:b2:fe:73:0a:6e:03:e8:24:61:dd:25:7b:8b:02: fa:d6:e5:df:20:f1:7f:22:a2:2d:ee:76:05:06:c1:12:3b:bf: a3:4c:a1:43:7a:b6:1a:15:ea:ce:d5:bf:17:5e:78:57:0c:f1: ec:76:66:ed:ad:3e:77:cb:30:ad:c7:b6:c8:c3:55:99:b4:ab: e3:60:87:10:03:3c:1e:08:02:62:05:bd:cf:12:39:81:0a:c1: eb:b7:37:b8:46:a9:47:dc:cc:f5:69:84:2d:f0:54:51:73:d5: 7b:ad:c1:75:07:f6:98:62:57:70:91:5e:bd:e9:aa:63:ed:c9: d5:71:d3:2f:90:e3:af:22:9c:b6:b5:3e:f7:66:e1:d1:99:74: 02:80:8b:d8:e7:df:dc:19:97:18:7c:2d:1c:26:5e:b0:84:79: 37:af:28:58:9f:9c:42:2e:e9:20:94:e4:de:4a:73:22:69:1d: fd:e2:f1:10:2f:3b:6a:43:90:5c:aa:68:65:fa:45:16:c2:3e: f2:bb:ab:96 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEunzRt+xFSSVhtycgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODkxY2MwMWEtMzdiZC00MWNhLThmMmEtMjNjMDYyYmJk ZWZjMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk Mjk0M2VhZDMtOWE1YS00MGU0LTgxOWItMzkyMjY3NTQ5ZDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjx10iS2XXBn6G27jHV4/g2J93Y3u/3/fsnY/ u529GixKR+RsgFXGfF95qtUJhJKA3D17GNc6VOv/3SF9vv4X13xGKP5mh1JGETMU l8/Z4v95e0uCMMJW7K5SIb9kf8CBTLkFON+cqna6r6viFuvVyqNXWW++7JzjNUAk I0nA1lWZxMX33eZ0Zm3+Az9zXxeJ2BR27gd2Ehp4dAqtpxYPGboZl1hTtcKoVLsq FcVYMN9X/lffd7jElzHefWm1IbgH/Fd3wgYqlxoG4Ttx82IU26DgNuOGA6DS1lR/ EEP3RSSz8LTz31Bp3K46tMEDvE12shygMLN75ueYIuK0qoZajwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGEJa+zrXGK13lbcoKkesnf3PCcOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84OTFj YzAxYS0zN2JkLTQxY2EtOGYyYS0yM2MwNjJiYmRlZmMvNGRiN2IwMjEtYWRkOS0z OWMzLTg4NzUtMjg4ZGZjODhkYWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODkxY2MwMWEtMzdiZC00MWNhLThm MmEtMjNjMDYyYmJkZWZjLzg5MWNjMDFhLTM3YmQtNDFjYS04ZjJhLTIzYzA2MmJi ZGVmYy5jcmwwHwYDVR0jBBgwFoAUnjHotKY0A7BPCiCfMGrdCmC4kkswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84OTFjYzAxYS0zN2JkLTQxY2EtOGYyYS0yM2Mw NjJiYmRlZmMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABGQAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG0pwVujo2AyEUEa9Debf4RxUUXATZWdOni3ZhmBrejP+YhMkBgB FZmi1TaHZiyw1PtZDjUvUk0JxQqy/nMKbgPoJGHdJXuLAvrW5d8g8X8ioi3udgUG wRI7v6NMoUN6thoV6s7VvxdeeFcM8ex2Zu2tPnfLMK3HtsjDVZm0q+NghxADPB4I AmIFvc8SOYEKweu3N7hGqUfczPVphC3wVFFz1XutwXUH9phiV3CRXr3pqmPtydVx 0y+Q468inLa1Pvdm4dGZdAKAi9jn39wZlxh8LRwmXrCEeTevKFifnEIu6SCU5N5K cyJpHf3i8RAvO2pDkFyqaGX6RRbCPvK7q5Y= -----END CERTIFICATE-----Generated at Wed Nov 5 12:50:30 2025 by rpki-client