$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9abf490e-12d9-3db2-b661-3e64feafa9e2.roa File: 9abf490e-12d9-3db2-b661-3e64feafa9e2.roa (raw, json) Hash identifier: t1WVJCCexiMROz8D3QNFPW6wk4QkljrGyPCdNs9sydY= Subject key identifier: 84:6A:4A:C1:D8:29:15:F4:C1:26:C6:F9:EE:2E:61:F1:AF:80:DA:30 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584B2496C71E43DF7D1FDBFB8580 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9abf490e-12d9-3db2-b661-3e64feafa9e2.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 31898 IP address blocks: 2620:123:208c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:c7:1e:43:df:7d:1f:db:fb:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=d89cef85-5d01-46b0-897c-f5ca2e05eeba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b8:05:34:be:7b:12:85:6c:f4:c0:1f:6d:b1: 37:ad:ee:1e:1b:5b:6b:69:ff:2b:41:cd:39:18:f8: bc:2b:70:f7:1f:47:5b:f8:ac:53:73:68:ee:9b:aa: 86:61:f0:ea:9f:7f:77:85:84:35:82:f3:31:15:71: 4f:4d:8f:e5:4b:66:d0:27:3a:f5:41:62:e9:b3:15: 44:47:36:d8:62:96:f6:e1:75:a8:06:4f:7c:ac:bb: a9:ee:b5:4f:75:d1:5e:54:0f:42:d6:3c:0c:23:c3: 29:bc:af:73:f2:9a:23:e3:e0:a1:84:4c:0f:55:11: ae:4c:2b:c3:51:09:e8:d3:3f:65:22:61:e7:8d:ca: 2b:04:b8:da:b7:08:93:10:17:17:01:f0:1d:19:da: db:a7:7b:73:b8:45:4b:8b:bf:23:97:07:98:ef:ed: 9e:72:35:0b:4b:b6:29:49:db:72:35:ad:05:8e:9c: bb:f4:dc:b3:58:70:ab:11:aa:de:da:d0:88:fe:e1: 17:54:31:1d:e3:64:d8:08:b8:c5:0f:91:3d:a8:e4: 16:69:78:5d:72:b2:a4:e3:36:2a:ec:dc:f2:47:c0: 03:45:80:1b:6e:dd:12:c2:69:b5:9d:a6:fb:c0:e1: 54:17:6c:cd:17:ec:ee:74:14:3d:7a:ff:5f:03:27: 03:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:6A:4A:C1:D8:29:15:F4:C1:26:C6:F9:EE:2E:61:F1:AF:80:DA:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9abf490e-12d9-3db2-b661-3e64feafa9e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv6: 2620:123:208c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:0a:71:19:bc:17:2a:46:81:41:7b:37:3f:94:37:fe:49:d3: 9d:e3:7e:cd:39:45:2b:25:c5:64:18:b6:0f:fc:4b:17:e4:d6: 84:e4:e3:2d:ea:3a:f5:bc:1d:5c:ec:ba:7b:fb:19:64:41:6a: 20:f5:ad:97:54:10:96:77:45:3f:ec:2e:19:aa:b0:b5:6b:1a: 83:b3:77:95:48:e5:84:f6:c9:9d:0b:00:ce:c4:35:74:a7:cf: 2e:e0:3c:74:e7:53:83:48:03:e1:da:5d:e0:7b:11:03:b9:e8: 8f:06:fc:c9:e4:53:d6:98:1d:4b:03:1c:67:59:48:ae:19:86: 39:5d:3d:ce:3c:83:93:64:3d:78:ec:89:47:49:94:ef:90:a3: 9e:da:b5:90:e3:05:01:5a:52:94:a0:5f:d7:01:d5:c3:8f:0e: 33:6f:6c:7e:4c:5d:34:a8:7f:56:3f:b9:d0:fb:85:47:ae:62: 79:18:67:29:f0:44:84:dc:97:8a:67:87:84:f7:16:cc:d9:40: 29:5d:d6:6a:5b:09:4e:fa:61:74:d9:d8:01:07:fb:a4:a4:6a: 25:3a:6f:80:2f:4d:4f:2e:e9:fc:bd:bb:19:49:1d:33:7b:6d: a1:31:21:fd:46:f9:72:68:09:79:8b:ee:19:f0:48:17:1e:fb: 00:ae:19:ab -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsklsceQ999H9v7hYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk ZDg5Y2VmODUtNWQwMS00NmIwLTg5N2MtZjVjYTJlMDVlZWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrgFNL57EoVs9MAfbbE3re4eG1traf8rQc05 GPi8K3D3H0db+KxTc2jum6qGYfDqn393hYQ1gvMxFXFPTY/lS2bQJzr1QWLpsxVE RzbYYpb24XWoBk98rLup7rVPddFeVA9C1jwMI8MpvK9z8poj4+ChhEwPVRGuTCvD UQno0z9lImHnjcorBLjatwiTEBcXAfAdGdrbp3tzuEVLi78jlweY7+2ecjULS7Yp SdtyNa0Fjpy79NyzWHCrEare2tCI/uEXVDEd42TYCLjFD5E9qOQWaXhdcrKk4zYq 7NzyR8ADRYAbbt0Swmm1nab7wOFUF2zNF+zudBQ9ev9fAycD2QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIRqSsHYKRX0wSbG+e4uYfGvgNowMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvOWFiZjQ5MGUtMTJkOS0z ZGIyLWI2NjEtM2U2NGZlYWZhOWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABIyCM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEQKcRm8FypGgUF7Nz+UN/5J053jfs05RSslxWQYtg/8Sxfk1oTk 4y3qOvW8HVzsunv7GWRBaiD1rZdUEJZ3RT/sLhmqsLVrGoOzd5VI5YT2yZ0LAM7E NXSnzy7gPHTnU4NIA+HaXeB7EQO56I8G/MnkU9aYHUsDHGdZSK4ZhjldPc48g5Nk PXjsiUdJlO+Qo57atZDjBQFaUpSgX9cB1cOPDjNvbH5MXTSof1Y/udD7hUeuYnkY ZynwRITcl4pnh4T3FszZQCld1mpbCU76YXTZ2AEH+6SkaiU6b4AvTU8u6fy9uxlJ HTN7baExIf1G+XJoCXmL7hnwSBce+wCuGas= -----END CERTIFICATE-----Generated at Wed Nov 5 19:46:24 2025 by rpki-client