$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/a2e41abe-f0a8-3cec-8b93-77811e74fbfc.roa File: a2e41abe-f0a8-3cec-8b93-77811e74fbfc.roa (raw, json) Hash identifier: jU3RA5FQ5u8VPmeuU094sehOnYFncxsYo+vBgvZeHPY= Subject key identifier: A4:21:B5:64:50:74:0C:BE:4B:DA:1D:89:F3:67:D9:36:AF:D5:24:FB Certificate issuer: /CN=820e56e8-763b-4037-929e-b01c8d786e75 Certificate serial: 010D0C9F4328584B21CC26496B8A0CA61EFC6300 Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/a2e41abe-f0a8-3cec-8b93-77811e74fbfc.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 399275 IP address blocks: 2602:fcc0:2222::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:26:49:6b:8a:0c:a6:1e:fc:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=2a48e5a3-83d9-45ea-838b-2529b7f71d1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7e:a1:5d:ed:87:ae:fe:b9:06:4a:df:3f:ee: 39:71:2f:0f:5d:07:a2:11:36:fa:21:9b:b7:66:8d: 76:7f:30:b2:20:9f:44:6f:80:84:0b:8c:ca:6b:05: 92:94:2a:fd:e9:ec:c3:6a:b9:80:a0:39:e4:b5:51: ba:d2:50:39:e9:d4:4d:81:e3:04:c9:aa:5a:80:22: 7a:ef:80:d1:95:8b:7d:77:15:4d:35:0a:fd:34:34: 23:b0:25:a9:8c:4a:57:35:30:60:d3:a6:8a:e8:ea: 78:b5:3d:4d:49:07:b0:0f:46:98:d8:a7:96:52:94: a5:bc:ae:20:0d:aa:58:38:45:87:81:cb:32:93:11: e3:e2:08:e3:60:1a:c8:93:ed:54:c6:2e:d9:48:c6: 84:67:ee:dc:6f:62:5e:42:1f:f0:8a:b3:91:d5:1f: e0:4a:59:75:45:9b:aa:87:eb:2b:c4:26:01:76:5d: da:50:1b:a7:ae:c2:5c:b3:39:19:5b:67:5c:be:21: 6e:b0:ca:00:dd:01:47:3f:cf:01:29:7e:df:b8:bf: d3:1e:19:28:2b:68:9a:c5:87:0c:ff:04:e3:a0:f6: 0e:c3:a6:32:18:5c:f7:44:ec:d4:23:56:6b:73:61: 60:74:79:b9:70:f8:45:89:5f:e9:1f:b7:18:e6:09: c7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:21:B5:64:50:74:0C:BE:4B:DA:1D:89:F3:67:D9:36:AF:D5:24:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/a2e41abe-f0a8-3cec-8b93-77811e74fbfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl X509v3 Authority Key Identifier: keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer sbgp-ipAddrBlock: critical IPv6: 2602:fcc0:2222::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:5a:8a:45:cf:f3:3a:6c:50:70:46:e8:05:1a:a4:3d:4b:cb: 04:e3:19:28:74:05:ea:30:a7:1a:77:61:95:0a:f3:92:59:94: f3:a6:4d:71:b5:6d:b7:50:2e:b3:42:86:de:73:5d:2b:45:c7: 55:11:df:d1:fe:d7:b7:d8:75:66:7c:53:d0:08:5d:a9:5f:47: 9b:aa:5e:02:37:44:27:47:3b:b6:f4:be:f8:88:2f:da:63:ae: 25:4b:e0:83:e1:32:21:42:3d:45:00:b0:74:3d:df:be:11:37: cc:d8:ac:0b:c2:bb:b2:e4:71:65:1f:c2:16:0e:68:ac:8c:91: d3:c3:bb:ce:ef:48:7f:df:c9:e0:82:c0:e0:b3:61:7f:aa:b7: f3:06:0a:61:18:e9:89:20:97:d8:43:75:2a:47:2c:37:71:6a: 53:c9:b1:11:e5:43:ff:d8:38:4f:eb:3c:6a:f5:8c:f6:9f:fb: d6:d6:f5:3b:ea:3d:9c:89:ce:d8:45:e1:36:a2:cc:b7:56:3b: 2d:78:6a:03:35:6a:c2:3f:a2:05:79:02:d9:8b:19:19:53:c8: 21:92:45:4c:8b:ed:a0:3d:51:a2:0c:42:12:4e:95:a9:ff:6a: 41:0f:93:55:f1:6e:2b:f6:74:6e:52:6b:bd:20:c9:b5:8a:cc: b7:d8:b2:14 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEshzCZJa4oMph78YwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIwZTU2ZTgtNzYzYi00MDM3LTkyOWUtYjAxYzhkNzg2 ZTc1MB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk MmE0OGU1YTMtODNkOS00NWVhLTgzOGItMjUyOWI3ZjcxZDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv36hXe2Hrv65BkrfP+45cS8PXQeiETb6IZu3 Zo12fzCyIJ9Eb4CEC4zKawWSlCr96ezDarmAoDnktVG60lA56dRNgeMEyapagCJ6 74DRlYt9dxVNNQr9NDQjsCWpjEpXNTBg06aK6Op4tT1NSQewD0aY2KeWUpSlvK4g DapYOEWHgcsykxHj4gjjYBrIk+1Uxi7ZSMaEZ+7cb2JeQh/wirOR1R/gSll1RZuq h+srxCYBdl3aUBunrsJcszkZW2dcviFusMoA3QFHP88BKX7fuL/THhkoK2iaxYcM /wTjoPYOw6YyGFz3ROzUI1Zrc2FgdHm5cPhFiV/pH7cY5gnH6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKQhtWRQdAy+S9odifNn2Tav1ST7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjBl NTZlOC03NjNiLTQwMzctOTI5ZS1iMDFjOGQ3ODZlNzUvYTJlNDFhYmUtZjBhOC0z Y2VjLThiOTMtNzc4MTFlNzRmYmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODIwZTU2ZTgtNzYzYi00MDM3LTky OWUtYjAxYzhkNzg2ZTc1LzgyMGU1NmU4LTc2M2ItNDAzNy05MjllLWIwMWM4ZDc4 NmU3NS5jcmwwHwYDVR0jBBgwFoAUP3013qVs2g7sbxhuEQO8bIfW0y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MjBlNTZlOC03NjNiLTQwMzctOTI5ZS1iMDFj OGQ3ODZlNzUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8wCIi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHNaikXP8zpsUHBG6AUapD1LywTjGSh0Beowpxp3YZUK85JZlPOm TXG1bbdQLrNCht5zXStFx1UR39H+17fYdWZ8U9AIXalfR5uqXgI3RCdHO7b0vviI L9pjriVL4IPhMiFCPUUAsHQ9374RN8zYrAvCu7LkcWUfwhYOaKyMkdPDu87vSH/f yeCCwOCzYX+qt/MGCmEY6Ykgl9hDdSpHLDdxalPJsRHlQ//YOE/rPGr1jPaf+9bW 9TvqPZyJzthF4TaizLdWOy14agM1asI/ogV5AtmLGRlTyCGSRUyL7aA9UaIMQhJO lan/akEPk1Xxbiv2dG5Sa70gybWKzLfYshQ= -----END CERTIFICATE-----Generated at Wed Sep 17 00:59:13 2025 by rpki-client