$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/2e25d87f-051d-3d6e-a755-c03b6fb3f1d0.roa File: 2e25d87f-051d-3d6e-a755-c03b6fb3f1d0.roa (raw, json) Hash identifier: o8QJiDSnFMGTifoG/GNimjPgsThjrnVLlrfDTZ6sGz4= Subject key identifier: 19:52:2D:F4:17:21:19:BA:42:D2:F8:67:A1:44:FC:8B:49:5A:6E:92 Certificate issuer: /CN=7a620d45-1f26-460c-9a3e-9bc0cc4a5d59 Certificate serial: 010D0C9F4328584B2496C51F96275B8819DB9A80 Authority key identifier: 29:1C:70:C0:46:C9:AB:DC:28:EE:26:90:9A:DC:7D:D9:00:2B:F4:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/2e25d87f-051d-3d6e-a755-c03b6fb3f1d0.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 36374 IP address blocks: 2604:4200::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:c5:1f:96:27:5b:88:19:db:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a620d45-1f26-460c-9a3e-9bc0cc4a5d59 Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=418ac7a4-f5de-461b-b45d-d9f511062819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f0:ac:10:cf:5c:51:36:79:5e:7a:fb:b0:88: 1e:cd:35:8c:f3:07:6b:32:c8:d7:1e:bf:e7:73:37: 8a:c9:de:75:35:36:03:97:d1:74:20:0b:f9:cb:d7: 86:51:b9:14:1e:c9:fe:00:ec:e5:ea:1c:92:7b:8c: b4:a7:93:de:fc:24:10:35:10:2c:62:0a:52:c0:3c: dc:05:a7:12:f2:83:0a:91:a6:b1:a8:72:54:29:97: d4:c1:94:f4:43:71:72:d6:87:aa:4b:c5:7c:c6:79: 7d:b4:c9:a4:09:96:1f:15:43:4f:29:f6:f9:ea:7c: b8:7f:5a:05:53:28:ae:2c:09:16:fe:58:82:10:8d: 28:8a:b0:38:98:e2:64:51:b8:66:e6:9b:98:65:97: ec:33:99:80:ca:b2:31:7d:8b:98:76:06:f2:6c:48: 36:da:43:02:29:e8:ae:6a:46:c9:6b:c6:bc:be:e8: ea:bd:49:c5:6e:df:ee:72:8a:70:e7:23:64:52:59: 05:c2:b6:a6:75:3b:27:d9:d6:bf:11:2f:82:6c:3b: bd:30:30:a1:c3:06:f3:c1:b5:cd:26:a2:16:77:f3: 54:ef:0e:9f:ee:f9:05:3a:08:89:e5:ef:da:2d:6c: 15:b1:50:3d:60:a4:99:03:3c:14:16:dd:6e:7a:8c: 65:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:52:2D:F4:17:21:19:BA:42:D2:F8:67:A1:44:FC:8B:49:5A:6E:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/2e25d87f-051d-3d6e-a755-c03b6fb3f1d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.crl X509v3 Authority Key Identifier: keyid:29:1C:70:C0:46:C9:AB:DC:28:EE:26:90:9A:DC:7D:D9:00:2B:F4:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer sbgp-ipAddrBlock: critical IPv6: 2604:4200::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:c0:f8:02:67:0f:4b:b3:1f:ec:de:58:bd:d5:93:a4:78:5f: d3:d3:66:4e:de:0d:44:ca:d7:66:99:dc:28:54:a8:96:ae:4e: b6:45:2a:19:43:50:8d:e5:ea:1d:db:16:83:ed:e2:d9:49:0f: 95:fa:af:12:c1:e4:be:9a:a7:14:4b:21:7c:51:7b:cd:61:15: e9:bc:64:0f:ba:73:b6:06:4f:18:6c:be:2b:13:51:4f:84:11: 52:42:25:da:1b:a8:11:97:7d:ea:a4:ec:d5:66:c3:d5:77:e4: ed:09:a4:ee:19:75:ac:53:a5:60:2d:a1:51:c0:d0:b7:0d:9c: 48:fb:16:f1:e4:74:81:ff:72:ed:79:60:8c:24:c0:ea:df:d9: 64:de:4a:1c:17:b9:6f:b9:d6:b5:da:76:5b:ae:2c:3a:72:69: 79:2b:e7:01:98:90:08:bb:0e:65:3e:2f:22:58:d5:08:01:ec: 99:27:f4:f4:c4:93:c5:31:0e:d0:17:de:9b:94:61:58:7d:03: 2d:76:75:11:1e:7d:b9:82:49:44:20:54:67:57:6e:99:40:cb: a9:1e:23:44:44:50:05:20:1b:fe:12:cf:98:88:0c:f6:34:f9: 07:aa:b4:9b:ff:da:de:a9:75:5b:9b:e9:50:68:9b:0c:17:49: fa:29:9d:0a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsklsUflidbiBnbmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2E2MjBkNDUtMWYyNi00NjBjLTlhM2UtOWJjMGNjNGE1 ZDU5MB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk NDE4YWM3YTQtZjVkZS00NjFiLWI0NWQtZDlmNTExMDYyODE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPCsEM9cUTZ5Xnr7sIgezTWM8wdrMsjXHr/n czeKyd51NTYDl9F0IAv5y9eGUbkUHsn+AOzl6hySe4y0p5Pe/CQQNRAsYgpSwDzc BacS8oMKkaaxqHJUKZfUwZT0Q3Fy1oeqS8V8xnl9tMmkCZYfFUNPKfb56ny4f1oF UyiuLAkW/liCEI0oirA4mOJkUbhm5puYZZfsM5mAyrIxfYuYdgbybEg22kMCKeiu akbJa8a8vujqvUnFbt/ucopw5yNkUlkFwramdTsn2da/ES+CbDu9MDChwwbzwbXN JqIWd/NU7w6f7vkFOgiJ5e/aLWwVsVA9YKSZAzwUFt1ueoxlCQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBlSLfQXIRm6QtL4Z6FE/ItJWm6SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTYy MGQ0NS0xZjI2LTQ2MGMtOWEzZS05YmMwY2M0YTVkNTkvMmUyNWQ4N2YtMDUxZC0z ZDZlLWE3NTUtYzAzYjZmYjNmMWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2E2MjBkNDUtMWYyNi00NjBjLTlh M2UtOWJjMGNjNGE1ZDU5LzdhNjIwZDQ1LTFmMjYtNDYwYy05YTNlLTliYzBjYzRh NWQ1OS5jcmwwHwYDVR0jBBgwFoAUKRxwwEbJq9wo7iaQmtx92QAr9MIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YTYyMGQ0NS0xZjI2LTQ2MGMtOWEzZS05YmMw Y2M0YTVkNTkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRCADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCywPgCZw9Lsx/s3li91ZOkeF/T02ZO3g1EytdmmdwoVKiWrk62RSoZ Q1CN5eod2xaD7eLZSQ+V+q8SweS+mqcUSyF8UXvNYRXpvGQPunO2Bk8YbL4rE1FP hBFSQiXaG6gRl33qpOzVZsPVd+TtCaTuGXWsU6VgLaFRwNC3DZxI+xbx5HSB/3Lt eWCMJMDq39lk3kocF7lvuda12nZbriw6cml5K+cBmJAIuw5lPi8iWNUIAeyZJ/T0 xJPFMQ7QF96blGFYfQMtdnURHn25gklEIFRnV26ZQMupHiNERFAFIBv+Es+YiAz2 NPkHqrSb/9reqXVbm+lQaJsMF0n6KZ0K -----END CERTIFICATE-----Generated at Tue Oct 21 17:28:18 2025 by rpki-client