$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/404125c1-db53-3460-abc1-3e2005096ff7.roa File: 404125c1-db53-3460-abc1-3e2005096ff7.roa (raw, json) Hash identifier: 2hjUKYp+9lbGsZ15dav6xRAwP7W4DK79pOr6o2ed0CA= Subject key identifier: 1A:3F:C1:02:A7:77:E8:9D:C2:3F:81:B7:C6:0E:5B:A8:FF:30:1D:D9 Certificate issuer: /CN=a550f64c-4633-45f0-b896-3ac7bdf7e5b8 Certificate serial: 010D0C9F4328584B864CB4FA7AE69B5733656220 Authority key identifier: D1:B2:BF:09:00:99:CE:ED:2B:1A:71:E6:A3:98:5A:61:5E:47:3E:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/404125c1-db53-3460-abc1-3e2005096ff7.roa Signing time: Wed 15 Oct 2025 01:00:30 +0000 ROA not before: Wed 15 Oct 2025 01:00:30 +0000 ROA not after: Tue 13 Jan 2026 02:00:30 +0000 asID: 16509 IP address blocks: 2620:117:5200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:86:4c:b4:fa:7a:e6:9b:57:33:65:62:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a550f64c-4633-45f0-b896-3ac7bdf7e5b8 Validity Not Before: Oct 15 01:00:30 2025 GMT Not After : Jan 13 02:00:30 2026 GMT Subject: CN=17464980-bed0-4b48-9912-5a230b284430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8e:fe:f0:57:4b:d9:68:d9:59:52:81:44:f3: 7b:3b:7c:d5:7b:28:2a:24:53:ee:09:de:40:c4:42: 84:33:59:c9:77:6d:7e:30:29:cf:d8:34:89:36:93: 87:90:4c:35:ce:28:94:d0:34:6a:44:9d:a1:ab:0f: 8e:04:67:50:52:e0:0c:2f:77:09:bd:83:c6:df:97: 22:51:da:aa:77:29:d4:6a:2c:7e:cd:f4:97:0f:1f: 61:96:18:23:4e:dd:0f:7b:37:ad:27:70:a3:50:a6: a7:4f:5c:f0:fc:92:17:6d:f9:38:73:7c:83:86:84: e1:39:3e:73:c5:13:19:dc:2a:2d:16:42:f5:37:7d: 62:fc:1e:ab:9a:10:69:38:a5:bb:92:0a:a4:73:51: c8:5c:9d:37:3b:fb:53:b5:dc:6b:99:a1:7b:d2:14: a5:4c:e6:01:6b:c8:69:36:bc:68:66:c4:35:c5:09: 95:8f:4d:30:e6:08:ac:1c:d5:44:0e:3a:42:10:44: 2e:9d:80:28:6b:08:91:64:99:62:f4:e6:ff:bd:a5: 80:29:0b:a8:8d:03:5f:6e:e0:f4:24:dc:54:f9:73: ea:2b:dc:80:eb:cb:02:07:5e:fa:d2:d3:bc:17:68: e3:20:d0:ab:c7:79:fc:e7:12:d8:44:c7:a9:16:ab: f5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:3F:C1:02:A7:77:E8:9D:C2:3F:81:B7:C6:0E:5B:A8:FF:30:1D:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/404125c1-db53-3460-abc1-3e2005096ff7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.crl X509v3 Authority Key Identifier: keyid:D1:B2:BF:09:00:99:CE:ED:2B:1A:71:E6:A3:98:5A:61:5E:47:3E:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.cer sbgp-ipAddrBlock: critical IPv6: 2620:117:5200::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:ba:f7:f6:14:f3:c3:8c:0f:a3:90:51:91:18:82:e8:83:3f: 2b:19:3b:3e:c1:e5:27:6e:14:95:f4:45:93:7d:51:57:e6:2d: 71:7d:39:09:ad:14:5a:76:0f:a0:47:6d:79:5e:84:05:52:f2: ef:ca:37:15:a2:eb:65:dc:7b:09:9f:d1:9e:14:e0:f0:e7:40: 28:a5:b3:95:ed:13:12:d8:93:8a:fb:fe:76:00:12:65:53:64: e2:5d:f2:ba:d3:49:5f:bc:d4:31:ed:dd:a0:2c:04:c7:f7:eb: 07:14:3e:34:28:65:f6:4c:58:4f:40:b8:97:a5:b8:45:6c:42: 0e:2e:e4:bd:4b:9c:e1:44:54:bc:f7:f9:1e:e5:e1:01:60:80: 9d:64:fb:1e:38:04:0a:36:a8:36:ef:af:06:ea:ea:48:ae:d6: bb:75:8a:50:ed:7f:7c:6d:51:cc:40:e6:e7:1d:90:9d:69:f9: 27:c9:e1:8d:69:bb:dc:df:b0:18:43:24:5e:18:0e:25:0c:25: 12:a2:ba:ca:dd:36:2f:eb:38:6d:54:d0:1f:25:2a:76:c2:4d: ef:18:47:17:d9:64:5f:69:78:2d:49:a6:71:01:0d:cb:9f:37: dc:7d:40:34:f0:1f:ce:ee:0c:29:13:0d:f8:69:0b:71:08:0b: d0:e5:f3:42 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuGTLT6euabVzNlYiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTU1MGY2NGMtNDYzMy00NWYwLWI4OTYtM2FjN2JkZjdl NWI4MB4XDTI1MTAxNTAxMDAzMFoXDTI2MDExMzAyMDAzMFowLzEtMCsGA1UEAxMk MTc0NjQ5ODAtYmVkMC00YjQ4LTk5MTItNWEyMzBiMjg0NDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk47+8FdL2WjZWVKBRPN7O3zVeygqJFPuCd5A xEKEM1nJd21+MCnP2DSJNpOHkEw1ziiU0DRqRJ2hqw+OBGdQUuAML3cJvYPG35ci UdqqdynUaix+zfSXDx9hlhgjTt0PezetJ3CjUKanT1zw/JIXbfk4c3yDhoThOT5z xRMZ3CotFkL1N31i/B6rmhBpOKW7kgqkc1HIXJ03O/tTtdxrmaF70hSlTOYBa8hp NrxoZsQ1xQmVj00w5gisHNVEDjpCEEQunYAoawiRZJli9Ob/vaWAKQuojQNfbuD0 JNxU+XPqK9yA68sCB1760tO8F2jjINCrx3n85xLYRMepFqv1/wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBo/wQKnd+idwj+Bt8YOW6j/MB3ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hNTUw ZjY0Yy00NjMzLTQ1ZjAtYjg5Ni0zYWM3YmRmN2U1YjgvNDA0MTI1YzEtZGI1My0z NDYwLWFiYzEtM2UyMDA1MDk2ZmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTU1MGY2NGMtNDYzMy00NWYwLWI4 OTYtM2FjN2JkZjdlNWI4L2E1NTBmNjRjLTQ2MzMtNDVmMC1iODk2LTNhYzdiZGY3 ZTViOC5jcmwwHwYDVR0jBBgwFoAU0bK/CQCZzu0rGnHmo5haYV5HPtAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hNTUwZjY0Yy00NjMzLTQ1ZjAtYjg5Ni0zYWM3 YmRmN2U1YjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABF1Iw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAr7r39hTzw4wPo5BRkRiC6IM/Kxk7PsHlJ24UlfRFk31RV+YtcX05 Ca0UWnYPoEdteV6EBVLy78o3FaLrZdx7CZ/RnhTg8OdAKKWzle0TEtiTivv+dgAS ZVNk4l3yutNJX7zUMe3doCwEx/frBxQ+NChl9kxYT0C4l6W4RWxCDi7kvUuc4URU vPf5HuXhAWCAnWT7HjgECjaoNu+vBurqSK7Wu3WKUO1/fG1RzEDm5x2QnWn5J8nh jWm73N+wGEMkXhgOJQwlEqK6yt02L+s4bVTQHyUqdsJN7xhHF9lkX2l4LUmmcQEN y5833H1ANPAfzu4MKRMN+GkLcQgL0OXzQg== -----END CERTIFICATE-----Generated at Mon Oct 20 13:52:23 2025 by rpki-client