$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/74fdd2d4-0d8c-30a6-8cb7-ec025616e29e.roa File: 74fdd2d4-0d8c-30a6-8cb7-ec025616e29e.roa (raw, json) Hash identifier: kgx7kY+1mgp7Y4syoA4Quvfxx/weCO9/gOS6BW5OwW4= Subject key identifier: 1B:69:FC:8B:C4:60:E1:0E:81:35:32:14:59:C2:B1:44:44:2F:CC:31 Certificate issuer: /CN=0c82e125-4df5-4912-a714-101a1caa5b99 Certificate serial: 010D0C9F4328584B76F22C80B4F81C3C66319A80 Authority key identifier: C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/74fdd2d4-0d8c-30a6-8cb7-ec025616e29e.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 396981 IP address blocks: 2620:8c:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:2c:80:b4:f8:1c:3c:66:31:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c82e125-4df5-4912-a714-101a1caa5b99 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=c47d7e9b-1ef6-48ac-aa46-bd7bf204a53c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d3:c0:88:8d:70:b1:84:28:a5:f8:75:1c:bc: d4:e8:ca:08:d5:bd:72:fd:a9:bf:91:49:23:47:9a: 4d:d4:7f:2a:ab:aa:28:81:88:c2:f7:b5:9b:5b:74: 4c:5e:58:f0:d9:0b:b1:d5:49:67:86:13:00:3d:d3: a4:cf:24:69:f4:e3:56:fe:d5:9e:a0:28:b5:77:d5: fb:90:f4:49:af:f1:6d:19:3d:92:7c:9a:91:58:4b: c2:41:28:ff:b2:9c:2c:99:3c:2f:d2:ee:d3:36:07: 71:56:d0:8a:ea:99:57:3e:df:e1:a1:a5:1f:46:97: de:4d:76:24:1a:04:cf:72:0b:bb:f8:96:bd:e4:27: 06:1a:68:89:da:87:4f:34:58:92:ae:b0:7c:38:80: 5b:74:6a:4d:29:fc:2d:10:29:48:d8:35:43:91:17: 21:b3:58:99:91:42:2a:7d:7e:d1:c0:e1:d1:3a:da: e1:de:89:84:69:a3:6e:e8:a6:6a:e5:92:ad:0b:62: 35:f9:d5:a7:73:70:41:c7:e2:47:12:bf:d1:13:97: 56:e1:64:c6:a4:4d:4e:0e:ed:b2:24:29:ba:4a:5c: cb:c2:2a:59:1a:5a:e3:2c:74:b9:d0:96:e7:87:87: af:b8:dd:14:57:b5:7e:91:5c:17:3f:8d:89:e7:65: 72:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:69:FC:8B:C4:60:E1:0E:81:35:32:14:59:C2:B1:44:44:2F:CC:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/74fdd2d4-0d8c-30a6-8cb7-ec025616e29e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.crl X509v3 Authority Key Identifier: keyid:C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer sbgp-ipAddrBlock: critical IPv6: 2620:8c:4000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:42:66:a2:5b:0d:ca:5c:b3:8e:87:2a:d1:cf:d0:44:84:44: e0:bf:16:18:63:f7:52:2e:27:b0:63:24:0a:ea:9c:9b:cb:ca: d4:03:ba:33:75:f1:65:8a:d5:f3:e9:ba:c7:dd:d0:8f:2b:77: de:79:18:1c:ff:75:e9:2d:94:2f:11:ba:44:2d:cd:75:88:2c: 11:7b:34:f2:f3:fb:86:84:dd:15:8c:de:37:9f:97:1d:c5:fe: d8:f7:1b:d3:98:05:fb:77:09:82:cb:31:68:c9:f8:ff:21:ec: 13:da:eb:ea:13:cd:e2:67:f0:97:98:76:45:5c:be:07:67:59: df:91:74:fe:39:9f:f5:5c:ac:66:e5:71:bb:be:ce:9f:fc:8b: c4:87:70:ab:4b:18:b6:b7:18:96:cf:ec:71:b6:39:0e:32:8f: 1b:4a:70:3a:7f:c3:6d:4b:7b:f2:fb:43:c8:1a:23:05:69:6c: b1:cd:48:78:12:97:62:35:fc:5e:7d:fc:26:bf:f9:03:c7:29: 0a:ef:95:4f:26:99:f4:cf:60:f6:60:5d:9e:81:f7:fb:f4:f4: 8c:75:ab:4c:96:bb:5c:75:ee:26:c5:56:4e:9a:96:51:8f:81: 48:ce:38:66:fd:40:4d:7e:d1:be:f2:da:63:e9:2f:f9:1d:87: 25:8d:7a:f5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt28iyAtPgcPGYxmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM4MmUxMjUtNGRmNS00OTEyLWE3MTQtMTAxYTFjYWE1 Yjk5MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk YzQ3ZDdlOWItMWVmNi00OGFjLWFhNDYtYmQ3YmYyMDRhNTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9PAiI1wsYQopfh1HLzU6MoI1b1y/am/kUkj R5pN1H8qq6oogYjC97WbW3RMXljw2Qux1UlnhhMAPdOkzyRp9ONW/tWeoCi1d9X7 kPRJr/FtGT2SfJqRWEvCQSj/spwsmTwv0u7TNgdxVtCK6plXPt/hoaUfRpfeTXYk GgTPcgu7+Ja95CcGGmiJ2odPNFiSrrB8OIBbdGpNKfwtEClI2DVDkRchs1iZkUIq fX7RwOHROtrh3omEaaNu6KZq5ZKtC2I1+dWnc3BBx+JHEr/RE5dW4WTGpE1ODu2y JCm6SlzLwipZGlrjLHS50Jbnh4evuN0UV7V+kVwXP42J52VypQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBtp/IvEYOEOgTUyFFnCsUREL8wxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYzgy ZTEyNS00ZGY1LTQ5MTItYTcxNC0xMDFhMWNhYTViOTkvNzRmZGQyZDQtMGQ4Yy0z MGE2LThjYjctZWMwMjU2MTZlMjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGM4MmUxMjUtNGRmNS00OTEyLWE3 MTQtMTAxYTFjYWE1Yjk5LzBjODJlMTI1LTRkZjUtNDkxMi1hNzE0LTEwMWExY2Fh NWI5OS5jcmwwHwYDVR0jBBgwFoAUyDy4ggA7MgjtxRD3UBDgaNSWRPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYzgyZTEyNS00ZGY1LTQ5MTItYTcxNC0xMDFh MWNhYTViOTkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAjEAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACVCZqJbDcpcs46HKtHP0ESEROC/Fhhj91IuJ7BjJArqnJvLytQD ujN18WWK1fPpusfd0I8rd955GBz/dektlC8RukQtzXWILBF7NPLz+4aE3RWM3jef lx3F/tj3G9OYBft3CYLLMWjJ+P8h7BPa6+oTzeJn8JeYdkVcvgdnWd+RdP45n/Vc rGblcbu+zp/8i8SHcKtLGLa3GJbP7HG2OQ4yjxtKcDp/w21Le/L7Q8gaIwVpbLHN SHgSl2I1/F59/Ca/+QPHKQrvlU8mmfTPYPZgXZ6B9/v09Ix1q0yWu1x17ibFVk6a llGPgUjOOGb9QE1+0b7y2mPpL/kdhyWNevU= -----END CERTIFICATE-----Generated at Tue Oct 21 11:45:16 2025 by rpki-client