$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1046e21-4a33-4415-a524-c10db602b0ec/f20db414-9887-3258-bbe3-5440b1f22bf0.roa File: f20db414-9887-3258-bbe3-5440b1f22bf0.roa (raw, json) Hash identifier: o3qhs1dH2VlJbaqtkaieMnqjrafCZC651lQnmDz+lkQ= Subject key identifier: C8:63:3D:30:EB:19:8C:BB:7D:AB:64:14:AF:76:2B:CF:A1:10:52:F4 Certificate issuer: /CN=a1046e21-4a33-4415-a524-c10db602b0ec Certificate serial: 010D0C9F4328584B609C8AFADF2B13C7B3FCAEC0 Authority key identifier: E8:29:BE:FC:43:BB:9D:31:56:BD:62:E1:85:15:11:AF:0E:F4:A0:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1046e21-4a33-4415-a524-c10db602b0ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1046e21-4a33-4415-a524-c10db602b0ec/f20db414-9887-3258-bbe3-5440b1f22bf0.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 396204 IP address blocks: 2620:22:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1046e21-4a33-4415-a524-c10db602b0ec/a1046e21-4a33-4415-a524-c10db602b0ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1046e21-4a33-4415-a524-c10db602b0ec/a1046e21-4a33-4415-a524-c10db602b0ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1046e21-4a33-4415-a524-c10db602b0ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:8a:fa:df:2b:13:c7:b3:fc:ae:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1046e21-4a33-4415-a524-c10db602b0ec Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=edf035de-4b12-47ed-b4f7-dec3759d44e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b4:38:c9:98:f6:c1:14:eb:f3:64:f6:47:3c: 7e:db:98:b6:86:4e:f1:1d:9d:91:c9:e6:dd:b7:2f: 43:83:a9:eb:4b:fe:0b:c0:7d:39:9c:07:1e:5e:fe: 5f:c1:ab:50:36:cd:b9:f5:71:81:c2:c5:3f:a0:23: 85:13:69:2e:31:ec:e2:59:e3:b5:1a:b2:f8:5f:84: 10:87:9d:6d:c5:a8:62:f2:d9:fa:ea:71:aa:55:03: 01:28:d2:2f:31:23:a2:36:7c:46:6f:7a:a0:fb:53: 2d:67:35:ee:19:13:72:ee:38:ae:01:16:48:f7:0d: 0d:e6:e2:1d:04:aa:3a:22:85:37:65:bd:9a:48:2c: 26:a4:75:b4:60:20:38:b8:c7:60:0a:99:32:4b:d7: 25:c8:5d:d0:cf:36:87:28:f4:3e:cd:d9:1a:b5:a6: 0c:46:dc:9d:f9:96:c6:ea:76:78:aa:d8:61:87:77: 90:4f:36:97:3e:9a:2f:91:ab:64:b9:3c:89:e4:0c: 85:78:20:f6:ef:bd:8a:d7:10:cf:9b:d8:35:f7:92: 09:ec:12:be:2f:32:9b:82:97:f6:bb:7a:37:28:02: f7:f0:67:1c:3c:cf:f4:6c:88:ce:6d:24:ef:eb:5b: 9b:32:e1:3b:3b:eb:c2:e1:a7:07:9a:5c:f7:83:08: ae:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:63:3D:30:EB:19:8C:BB:7D:AB:64:14:AF:76:2B:CF:A1:10:52:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1046e21-4a33-4415-a524-c10db602b0ec/f20db414-9887-3258-bbe3-5440b1f22bf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1046e21-4a33-4415-a524-c10db602b0ec/a1046e21-4a33-4415-a524-c10db602b0ec.crl X509v3 Authority Key Identifier: keyid:E8:29:BE:FC:43:BB:9D:31:56:BD:62:E1:85:15:11:AF:0E:F4:A0:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1046e21-4a33-4415-a524-c10db602b0ec.cer sbgp-ipAddrBlock: critical IPv6: 2620:22:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:92:e0:f2:b6:21:57:b9:e0:f4:cf:59:f4:09:1e:73:74:78: 53:94:8e:d3:61:d7:b3:c3:b7:8c:f7:39:2c:ba:e1:ce:aa:b0: bd:8d:3d:5f:1a:96:1f:56:69:d1:29:e7:ce:cc:68:0d:23:9e: 7a:44:c6:79:47:0d:b3:85:ac:fa:00:09:45:ee:3b:04:b4:22: 18:ad:bd:f4:f2:de:29:e1:a2:4b:87:a4:11:7d:51:ad:de:70: a1:90:1c:f8:5f:98:52:d1:d5:3a:07:89:6b:96:78:94:c3:d6: 68:29:91:0c:cc:1f:a6:20:be:25:8a:a8:a7:cd:70:76:f8:a3: 52:3a:8b:0e:7f:05:ed:9d:5a:fd:7d:72:12:e9:8a:c2:5c:80: 0e:0a:ed:a8:86:c0:d1:02:be:4e:d5:70:1f:02:fa:d2:d3:f4: ac:a9:4f:e5:88:99:db:a0:57:fa:ee:83:69:c7:ef:98:55:47: 28:7d:11:40:5e:da:65:dc:84:ec:e7:5e:e9:65:14:87:06:ca: ad:cb:3e:a9:de:40:93:c4:eb:56:13:ab:c0:47:39:cd:5d:60: 6c:82:ed:1a:04:1f:a4:1f:d2:8e:de:34:cc:f4:8c:5c:4b:6c: 06:fd:37:99:5c:ac:49:d8:e1:b2:a5:e2:a8:d4:1b:f1:95:1d: 21:a1:e9:15 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtgnIr63ysTx7P8rsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTEwNDZlMjEtNGEzMy00NDE1LWE1MjQtYzEwZGI2MDJi MGVjMB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk ZWRmMDM1ZGUtNGIxMi00N2VkLWI0ZjctZGVjMzc1OWQ0NGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbQ4yZj2wRTr82T2Rzx+25i2hk7xHZ2Ryebd ty9Dg6nrS/4LwH05nAceXv5fwatQNs259XGBwsU/oCOFE2kuMeziWeO1GrL4X4QQ h51txahi8tn66nGqVQMBKNIvMSOiNnxGb3qg+1MtZzXuGRNy7jiuARZI9w0N5uId BKo6IoU3Zb2aSCwmpHW0YCA4uMdgCpkyS9clyF3QzzaHKPQ+zdkataYMRtyd+ZbG 6nZ4qthhh3eQTzaXPpovkatkuTyJ5AyFeCD2772K1xDPm9g195IJ7BK+LzKbgpf2 u3o3KAL38GccPM/0bIjObSTv61ubMuE7O+vC4acHmlz3gwiujQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMhjPTDrGYy7fatkFK92K8+hEFL0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hMTA0 NmUyMS00YTMzLTQ0MTUtYTUyNC1jMTBkYjYwMmIwZWMvZjIwZGI0MTQtOTg4Ny0z MjU4LWJiZTMtNTQ0MGIxZjIyYmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTEwNDZlMjEtNGEzMy00NDE1LWE1 MjQtYzEwZGI2MDJiMGVjL2ExMDQ2ZTIxLTRhMzMtNDQxNS1hNTI0LWMxMGRiNjAy YjBlYy5jcmwwHwYDVR0jBBgwFoAU6Cm+/EO7nTFWvWLhhRURrw70oNgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hMTA0NmUyMS00YTMzLTQ0MTUtYTUyNC1jMTBk YjYwMmIwZWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAIqAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADaS4PK2IVe54PTPWfQJHnN0eFOUjtNh17PDt4z3OSy64c6qsL2N PV8alh9WadEp587MaA0jnnpExnlHDbOFrPoACUXuOwS0IhitvfTy3inhokuHpBF9 Ua3ecKGQHPhfmFLR1ToHiWuWeJTD1mgpkQzMH6YgviWKqKfNcHb4o1I6iw5/Be2d Wv19chLpisJcgA4K7aiGwNECvk7VcB8C+tLT9KypT+WImdugV/rug2nH75hVRyh9 EUBe2mXchOznXullFIcGyq3LPqneQJPE61YTq8BHOc1dYGyC7RoEH6Qf0o7eNMz0 jFxLbAb9N5lcrEnY4bKl4qjUG/GVHSGh6RU= -----END CERTIFICATE-----Generated at Mon Oct 20 03:46:50 2025 by rpki-client