$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/4af36c30-68b2-3899-961c-a1d8cbaed381.roa File: 4af36c30-68b2-3899-961c-a1d8cbaed381.roa (raw, json) Hash identifier: I7YEuW8AtwolGBBMZoGvmCd0SDT+C2MrXI+2HwZ/cbk= Subject key identifier: 22:89:61:8B:90:A4:71:CA:79:1A:E9:8B:88:A7:EA:03:2F:A8:86:3B Certificate issuer: /CN=820e56e8-763b-4037-929e-b01c8d786e75 Certificate serial: 010D0C9F4328584B4E7718B62960DACB04D86700 Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/4af36c30-68b2-3899-961c-a1d8cbaed381.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 399275 IP address blocks: 2602:fcc0:5555::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:18:b6:29:60:da:cb:04:d8:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=ff08bb6e-ce7c-44d8-9b32-a9029b499e64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7d:36:c3:81:ea:20:19:88:86:1b:6f:e8:26: 83:2f:6a:72:8b:4c:d1:52:0d:6b:79:13:2c:c9:2a: c9:5c:4f:60:ca:16:d6:c1:5b:c0:4d:19:f5:a0:c0: 18:9f:53:21:76:bb:1f:2d:31:a0:40:a6:54:4b:01: 8d:fe:f5:db:e4:bc:7b:89:77:68:0f:ab:c8:85:0d: 26:d1:c9:a1:a3:8e:5d:c0:5c:17:2f:40:a3:9b:96: f9:37:19:77:89:4e:f1:45:08:b5:f1:61:d7:e8:0c: f8:61:46:7b:fb:a1:47:28:0a:03:bc:b3:86:c7:75: fb:95:9d:e1:7d:09:f4:72:4e:eb:8f:7d:2a:1e:15: db:58:06:1d:e7:62:54:b6:ec:47:97:a7:de:ed:48: 36:2f:c9:60:c4:ce:9c:fb:1f:09:0c:8f:a1:b7:2d: 1b:5f:c5:6c:62:51:6b:d9:a0:d9:3b:9f:2b:77:df: 6b:28:31:0f:12:36:16:1c:6e:2e:74:ea:8b:b7:5e: 4f:d5:d7:0e:ec:f7:40:1f:b9:d4:6e:e6:6f:00:4e: 43:a1:91:63:70:01:f3:58:6b:f1:f4:f7:09:96:83: e4:0d:0f:97:20:63:f2:e3:21:45:e5:ae:69:06:3d: 3f:52:b0:28:ad:7a:9e:2a:36:6d:b7:f5:78:20:48: 07:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:89:61:8B:90:A4:71:CA:79:1A:E9:8B:88:A7:EA:03:2F:A8:86:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/4af36c30-68b2-3899-961c-a1d8cbaed381.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl X509v3 Authority Key Identifier: keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer sbgp-ipAddrBlock: critical IPv6: 2602:fcc0:5555::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:41:05:85:be:c5:a4:70:9a:4e:f2:e0:fb:4f:bb:5e:ad:b7: ea:3f:bc:d7:64:56:3c:7d:11:ff:cb:d4:d0:b5:0d:35:5c:dd: 57:3a:ce:5e:c9:a9:c2:fe:07:92:54:50:e7:58:e7:19:ab:62: cc:b8:49:2d:5b:8b:db:a4:63:e4:36:a4:83:7e:16:38:60:a4: 69:e0:41:bc:af:a5:61:f1:9c:73:3b:53:97:ec:ee:f1:f3:44: a2:7e:61:e0:62:29:6e:0a:51:38:9d:1c:0f:8c:5c:77:a2:47: 43:e4:e8:25:4f:6f:75:7b:2f:d3:24:c7:4b:2e:55:b6:e6:9d: 3d:0d:57:95:b6:d3:bc:77:63:29:be:14:20:18:7c:39:ed:23: e1:bd:7d:dd:b8:9a:7a:ce:9d:b8:fe:61:c7:8f:75:79:03:c7: 2e:19:38:d4:b5:97:36:71:90:5e:91:bf:72:1b:dd:45:7d:84: 19:d8:72:65:1a:f6:52:fe:41:02:d8:44:98:a3:83:c1:44:79: 2a:47:8d:31:51:f9:08:b6:16:cc:e4:dc:fe:a9:8d:9b:36:c9: cd:eb:c4:9a:6a:f3:19:2d:24:16:57:a9:34:ce:72:71:dd:d3: f9:cc:c6:94:1c:fc:ed:fb:bc:94:21:6e:e1:89:f8:61:ce:16: e7:85:05:dc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtOdxi2KWDaywTYZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIwZTU2ZTgtNzYzYi00MDM3LTkyOWUtYjAxYzhkNzg2 ZTc1MB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk ZmYwOGJiNmUtY2U3Yy00NGQ4LTliMzItYTkwMjliNDk5ZTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm302w4HqIBmIhhtv6CaDL2pyi0zRUg1reRMs ySrJXE9gyhbWwVvATRn1oMAYn1MhdrsfLTGgQKZUSwGN/vXb5Lx7iXdoD6vIhQ0m 0cmho45dwFwXL0Cjm5b5Nxl3iU7xRQi18WHX6Az4YUZ7+6FHKAoDvLOGx3X7lZ3h fQn0ck7rj30qHhXbWAYd52JUtuxHl6fe7Ug2L8lgxM6c+x8JDI+hty0bX8VsYlFr 2aDZO58rd99rKDEPEjYWHG4udOqLt15P1dcO7PdAH7nUbuZvAE5DoZFjcAHzWGvx 9PcJloPkDQ+XIGPy4yFF5a5pBj0/UrAorXqeKjZtt/V4IEgHHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCKJYYuQpHHKeRrpi4in6gMvqIY7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjBl NTZlOC03NjNiLTQwMzctOTI5ZS1iMDFjOGQ3ODZlNzUvNGFmMzZjMzAtNjhiMi0z ODk5LTk2MWMtYTFkOGNiYWVkMzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODIwZTU2ZTgtNzYzYi00MDM3LTky OWUtYjAxYzhkNzg2ZTc1LzgyMGU1NmU4LTc2M2ItNDAzNy05MjllLWIwMWM4ZDc4 NmU3NS5jcmwwHwYDVR0jBBgwFoAUP3013qVs2g7sbxhuEQO8bIfW0y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MjBlNTZlOC03NjNiLTQwMzctOTI5ZS1iMDFj OGQ3ODZlNzUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8wFVV MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIlBBYW+xaRwmk7y4PtPu16tt+o/vNdkVjx9Ef/L1NC1DTVc3Vc6 zl7JqcL+B5JUUOdY5xmrYsy4SS1bi9ukY+Q2pIN+FjhgpGngQbyvpWHxnHM7U5fs 7vHzRKJ+YeBiKW4KUTidHA+MXHeiR0Pk6CVPb3V7L9Mkx0suVbbmnT0NV5W207x3 Yym+FCAYfDntI+G9fd24mnrOnbj+YcePdXkDxy4ZONS1lzZxkF6Rv3Ib3UV9hBnY cmUa9lL+QQLYRJijg8FEeSpHjTFR+Qi2Fszk3P6pjZs2yc3rxJpq8xktJBZXqTTO cnHd0/nMxpQc/O37vJQhbuGJ+GHOFueFBdw= -----END CERTIFICATE-----Generated at Mon Oct 20 06:56:06 2025 by rpki-client