$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/deb47122-10ca-3a44-aa16-cbc9b61afe4d.roa File: deb47122-10ca-3a44-aa16-cbc9b61afe4d.roa (raw, json) Hash identifier: VMXxLZB9FXLRmg/cChUp6PIc9/S6ZV+WBu3fRtacYmU= Subject key identifier: 4B:5C:90:5F:57:53:56:E5:68:2A:52:24:FF:15:69:65:83:56:74:BC Certificate issuer: /CN=1fb001d4-3a2b-436f-a572-51822a315945 Certificate serial: 010D0C9F4328584B92DCE2A63AC9A303E67F7980 Authority key identifier: 74:A7:7D:4E:AC:37:8A:A8:0C:D0:C2:2B:4C:5D:6F:5B:36:BC:20:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/deb47122-10ca-3a44-aa16-cbc9b61afe4d.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 395363 IP address blocks: 2620:129:6020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:e2:a6:3a:c9:a3:03:e6:7f:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fb001d4-3a2b-436f-a572-51822a315945 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=2f3ca96d-bb77-4cd8-ba3e-2f74d42d02bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:89:48:bd:2b:f6:54:8d:f0:e2:b3:f5:4f:a0: a9:e8:91:b0:10:08:b8:a7:a1:9b:44:66:e6:20:b3: e8:d4:a6:ef:ef:00:cb:c6:dc:29:bf:79:c0:7f:06: b7:0c:d4:09:f6:25:c2:ed:f0:13:4e:93:95:69:37: 68:28:e0:a8:4b:6c:0c:fd:01:3b:9e:94:17:46:4e: be:49:bb:39:ac:7e:eb:31:50:9d:f1:9d:cd:5c:8a: 5c:5d:18:54:d1:d6:55:8a:b1:1a:d4:55:47:58:91: af:b7:41:91:1c:76:95:2b:eb:cf:9a:07:4d:fb:b5: 6b:ab:93:ba:dc:70:63:08:8c:74:52:42:85:48:7f: 00:4e:5f:80:30:5c:1c:dc:45:db:2b:f5:c4:9c:ab: f8:2f:8b:61:f9:02:1d:ef:03:cd:69:27:e1:af:c9: 1b:b8:27:d1:8c:88:cc:c8:67:d4:0e:a0:f3:82:71: ca:e9:55:8c:48:85:42:c0:74:fd:40:ed:60:a5:ba: b8:bc:05:a9:8c:87:63:82:4b:d7:9a:7c:08:08:5d: 2f:78:4f:98:4e:d1:56:a1:a9:ca:f5:e3:38:e8:a8: d7:c6:85:27:05:d3:3c:fb:4d:f0:12:c1:f2:b7:e0: 17:40:a6:4a:fe:12:ec:09:65:e3:3e:e8:e6:5a:d7: 05:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:5C:90:5F:57:53:56:E5:68:2A:52:24:FF:15:69:65:83:56:74:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/deb47122-10ca-3a44-aa16-cbc9b61afe4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.crl X509v3 Authority Key Identifier: keyid:74:A7:7D:4E:AC:37:8A:A8:0C:D0:C2:2B:4C:5D:6F:5B:36:BC:20:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer sbgp-ipAddrBlock: critical IPv6: 2620:129:6020::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:0c:b8:d0:1e:04:99:2f:04:33:28:25:94:b8:16:37:60:ba: 7e:0b:9d:e1:27:46:47:57:9a:e6:5e:08:d4:28:b2:b8:9e:1f: 94:46:47:21:6f:4e:64:05:19:fc:c5:8c:4e:cc:40:45:bd:e7: 58:99:3c:05:d9:eb:58:bd:37:57:ff:89:6d:e3:8b:70:a9:bd: 0b:c3:9b:4a:ae:a5:59:91:f8:21:20:59:c0:4d:2d:7c:2a:f3: f4:5f:ac:fe:d4:3a:a4:aa:07:7d:0b:b1:d8:a0:3a:2d:d6:ca: 0b:34:d4:e7:9f:e9:9e:a5:db:92:a7:82:a6:56:a5:4e:5a:f3: 70:54:97:46:88:89:f8:81:f2:92:2c:1b:30:17:a0:57:66:94: 2f:bc:91:f1:d1:91:23:ee:8d:e9:5e:61:d7:f7:27:d3:65:f6: 12:5c:a1:df:72:09:8c:5b:b3:32:b7:80:28:82:77:6c:ed:ba: bd:ae:15:40:55:7d:09:2d:78:9f:be:2b:e5:f8:88:97:ac:c9: 74:64:90:15:48:6e:f0:87:dc:e2:5d:3f:f6:56:d4:b9:33:44: c0:21:fc:e0:26:b0:d2:a2:84:18:62:ea:92:1a:93:0a:70:bb: 6c:f4:43:c6:f8:d9:47:4a:d3:75:ba:99:86:c8:11:b2:c6:64: 13:18:01:6d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuS3OKmOsmjA+Z/eYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZiMDAxZDQtM2EyYi00MzZmLWE1NzItNTE4MjJhMzE1 OTQ1MB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk MmYzY2E5NmQtYmI3Ny00Y2Q4LWJhM2UtMmY3NGQ0MmQwMmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIlIvSv2VI3w4rP1T6Cp6JGwEAi4p6GbRGbm ILPo1Kbv7wDLxtwpv3nAfwa3DNQJ9iXC7fATTpOVaTdoKOCoS2wM/QE7npQXRk6+ Sbs5rH7rMVCd8Z3NXIpcXRhU0dZVirEa1FVHWJGvt0GRHHaVK+vPmgdN+7Vrq5O6 3HBjCIx0UkKFSH8ATl+AMFwc3EXbK/XEnKv4L4th+QId7wPNaSfhr8kbuCfRjIjM yGfUDqDzgnHK6VWMSIVCwHT9QO1gpbq4vAWpjIdjgkvXmnwICF0veE+YTtFWoanK 9eM46KjXxoUnBdM8+03wEsHyt+AXQKZK/hLsCWXjPujmWtcF+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEtckF9XU1blaCpSJP8VaWWDVnS8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZmIw MDFkNC0zYTJiLTQzNmYtYTU3Mi01MTgyMmEzMTU5NDUvZGViNDcxMjItMTBjYS0z YTQ0LWFhMTYtY2JjOWI2MWFmZTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWZiMDAxZDQtM2EyYi00MzZmLWE1 NzItNTE4MjJhMzE1OTQ1LzFmYjAwMWQ0LTNhMmItNDM2Zi1hNTcyLTUxODIyYTMx NTk0NS5jcmwwHwYDVR0jBBgwFoAUdKd9Tqw3iqgM0MIrTF1vWza8INEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xZmIwMDFkNC0zYTJiLTQzNmYtYTU3Mi01MTgy MmEzMTU5NDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABKWAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACAMuNAeBJkvBDMoJZS4Fjdgun4LneEnRkdXmuZeCNQosrieH5RG RyFvTmQFGfzFjE7MQEW951iZPAXZ61i9N1f/iW3ji3CpvQvDm0qupVmR+CEgWcBN LXwq8/RfrP7UOqSqB30LsdigOi3Wygs01Oef6Z6l25KngqZWpU5a83BUl0aIifiB 8pIsGzAXoFdmlC+8kfHRkSPujeleYdf3J9Nl9hJcod9yCYxbszK3gCiCd2ztur2u FUBVfQkteJ++K+X4iJesyXRkkBVIbvCH3OJdP/ZW1LkzRMAh/OAmsNKihBhi6pIa kwpwu2z0Q8b42UdK03W6mYbIEbLGZBMYAW0= -----END CERTIFICATE-----Generated at Mon Oct 20 11:15:09 2025 by rpki-client