$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/1120f28a-f819-38ee-94b2-70a3a857d7b0.roa File: 1120f28a-f819-38ee-94b2-70a3a857d7b0.roa (raw, json) Hash identifier: xPQII6R8a1gklF3mI96C5GB9VRGcP4hZeOmz0C2dy7I= Subject key identifier: 77:4F:8D:1A:8B:80:F7:48:1F:C3:5F:85:4E:6B:FA:22:DD:4F:3A:98 Certificate issuer: /CN=206290f3-53e1-4d17-8678-29dace17c006 Certificate serial: 010D0C9F4328584B6631FEDD8BB60511846C1FF8 Authority key identifier: B0:75:75:D3:B9:68:A2:49:EF:B9:77:E1:92:46:A5:46:97:EC:1B:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/1120f28a-f819-38ee-94b2-70a3a857d7b0.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 33179 IP address blocks: 2602:fa21:10::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/206290f3-53e1-4d17-8678-29dace17c006.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/206290f3-53e1-4d17-8678-29dace17c006.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:31:fe:dd:8b:b6:05:11:84:6c:1f:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206290f3-53e1-4d17-8678-29dace17c006 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=28134756-5712-4e45-8136-891e712141a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:91:be:d8:de:ef:2a:4e:51:79:e3:81:45:68: 31:b7:e1:28:63:fb:3a:7c:65:d6:88:0c:00:0d:3d: 42:38:bd:53:48:c7:c2:45:56:f3:7d:1e:e8:29:94: 20:de:41:e2:4d:8b:6a:53:ff:55:8a:d3:a3:57:a1: d2:0d:b3:8d:d3:27:f5:3a:ce:67:f2:a9:b1:84:d2: 6d:0f:1b:f6:be:2c:c9:d1:67:75:18:b0:0c:55:c3: 1e:94:a4:67:40:97:a5:fd:2b:e7:c1:09:98:3a:f4: f5:f3:b6:4d:53:af:01:74:97:a9:07:3b:8e:c2:d1: b0:81:95:8f:dc:6c:1d:5e:cb:3e:e4:b9:8e:df:0b: 95:f9:d1:57:eb:33:52:df:a2:88:b8:a7:68:76:28: 11:22:40:6c:52:77:8a:7f:3f:96:5d:d7:72:0e:29: d2:df:aa:c3:6f:cd:aa:ff:90:9a:00:ef:17:9b:4d: 6c:ca:fd:41:d2:d6:77:9b:e3:85:a8:fe:46:64:0a: 1d:fb:f5:f1:ad:12:88:25:27:e9:c1:3a:f9:76:f3: 27:a7:2c:14:cc:1a:cf:97:75:a6:e6:1c:c3:92:c9: 63:5c:ad:7d:28:d3:4e:e1:02:e1:eb:14:64:00:84: c2:b1:3c:2b:ec:de:ff:00:c1:0a:8a:66:14:db:08: 39:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:4F:8D:1A:8B:80:F7:48:1F:C3:5F:85:4E:6B:FA:22:DD:4F:3A:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/1120f28a-f819-38ee-94b2-70a3a857d7b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/206290f3-53e1-4d17-8678-29dace17c006.crl X509v3 Authority Key Identifier: keyid:B0:75:75:D3:B9:68:A2:49:EF:B9:77:E1:92:46:A5:46:97:EC:1B:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa21:10::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:ae:31:b4:b1:63:02:ae:c5:9d:6b:c3:43:f7:35:46:96:42: d5:76:43:a8:9e:20:db:8e:a1:17:21:ef:b1:6f:85:c3:46:4d: fb:de:f9:ad:0d:9c:b1:33:04:bb:02:56:7c:98:5b:21:c5:72: ff:28:ea:43:6a:b4:40:e2:e6:fb:b6:f3:cf:66:9a:66:63:9f: 80:14:18:72:b0:b5:87:34:9b:b5:82:47:f6:65:1e:b8:5e:3e: 9b:89:ff:9a:fb:f9:9d:b0:9c:c9:71:90:4e:fd:98:ca:22:95: f2:ba:07:c2:52:96:fe:e0:fe:32:5d:2f:db:7f:29:7d:6e:a1: 0c:7e:67:7e:30:31:3d:e9:6e:33:f0:0d:4a:eb:1f:0f:ab:e9: 9a:70:2a:19:b9:4f:a7:b2:23:bc:6b:68:51:2c:5e:51:70:bf: c1:65:27:ae:9b:24:b1:83:8a:0e:f0:de:09:6e:e4:f2:60:fe: fa:92:dc:07:f1:93:b2:d2:68:25:d7:bc:c3:3d:6a:06:da:47: 82:94:8b:36:97:34:2a:ae:e1:3f:2a:22:f6:79:42:51:27:5f: 1c:eb:0a:ff:98:84:a3:50:05:67:36:e7:fb:de:28:8c:5e:d0: c6:52:d3:a2:0e:94:b7:19:71:dc:4c:6b:25:9f:bf:cb:c5:ec: 98:21:65:7c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtmMf7di7YFEYRsH/gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA2MjkwZjMtNTNlMS00ZDE3LTg2NzgtMjlkYWNlMTdj MDA2MB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk MjgxMzQ3NTYtNTcxMi00ZTQ1LTgxMzYtODkxZTcxMjE0MWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpG+2N7vKk5ReeOBRWgxt+EoY/s6fGXWiAwA DT1COL1TSMfCRVbzfR7oKZQg3kHiTYtqU/9VitOjV6HSDbON0yf1Os5n8qmxhNJt Dxv2vizJ0Wd1GLAMVcMelKRnQJel/SvnwQmYOvT187ZNU68BdJepBzuOwtGwgZWP 3GwdXss+5LmO3wuV+dFX6zNS36KIuKdodigRIkBsUneKfz+WXddyDinS36rDb82q /5CaAO8Xm01syv1B0tZ3m+OFqP5GZAod+/XxrRKIJSfpwTr5dvMnpywUzBrPl3Wm 5hzDksljXK19KNNO4QLh6xRkAITCsTwr7N7/AMEKimYU2wg5DwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHdPjRqLgPdIH8NfhU5r+iLdTzqYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yMDYy OTBmMy01M2UxLTRkMTctODY3OC0yOWRhY2UxN2MwMDYvMTEyMGYyOGEtZjgxOS0z OGVlLTk0YjItNzBhM2E4NTdkN2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMjA2MjkwZjMtNTNlMS00ZDE3LTg2 NzgtMjlkYWNlMTdjMDA2LzIwNjI5MGYzLTUzZTEtNGQxNy04Njc4LTI5ZGFjZTE3 YzAwNi5jcmwwHwYDVR0jBBgwFoAUsHV107looknvuXfhkkalRpfsG/gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yMDYyOTBmMy01M2UxLTRkMTctODY3OC0yOWRh Y2UxN2MwMDYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgL6IQAQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAeuMbSxYwKuxZ1rw0P3NUaWQtV2Q6ieINuOoRch77FvhcNGTfve +a0NnLEzBLsCVnyYWyHFcv8o6kNqtEDi5vu2889mmmZjn4AUGHKwtYc0m7WCR/Zl HrhePpuJ/5r7+Z2wnMlxkE79mMoilfK6B8JSlv7g/jJdL9t/KX1uoQx+Z34wMT3p bjPwDUrrHw+r6ZpwKhm5T6eyI7xraFEsXlFwv8FlJ66bJLGDig7w3glu5PJg/vqS 3Afxk7LSaCXXvMM9agbaR4KUizaXNCqu4T8qIvZ5QlEnXxzrCv+YhKNQBWc25/ve KIxe0MZS06IOlLcZcdxMayWfv8vF7JghZXw= -----END CERTIFICATE-----Generated at Mon Oct 20 12:01:35 2025 by rpki-client