$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125/1a1c8cd4-86d7-3c34-bbeb-9c1e4b632348.roa File: 1a1c8cd4-86d7-3c34-bbeb-9c1e4b632348.roa (raw, json) Hash identifier: oCQnZD2w884xo7Rsp6BWkm9+s2FGarr18FlFvGxrRRg= Subject key identifier: CA:4B:44:92:E1:36:13:58:F7:77:BB:CF:D8:42:B7:DB:A6:2B:C4:D4 Certificate issuer: /CN=1d25e0e4-3256-419b-9e99-0f045d2a1125 Certificate serial: 010D0C9F4328584AF52130AEF44447A66A85B680 Authority key identifier: E0:41:83:40:9B:53:F0:4A:26:F2:03:CA:E0:7B:11:29:54:E7:A4:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125/1a1c8cd4-86d7-3c34-bbeb-9c1e4b632348.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 25776 IP address blocks: 2620:0:2b20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125/1d25e0e4-3256-419b-9e99-0f045d2a1125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125/1d25e0e4-3256-419b-9e99-0f045d2a1125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:30:ae:f4:44:47:a6:6a:85:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d25e0e4-3256-419b-9e99-0f045d2a1125 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=26bf398b-ff4b-4377-8a9d-010f697ae6d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0f:ef:45:0d:7d:9b:56:76:60:9d:1f:35:e2: 37:e5:06:52:26:f4:45:fa:8e:36:4b:bf:5c:a9:39: 7d:ec:28:d6:c8:8b:87:ff:d3:84:1f:85:8f:df:5a: ca:4c:c0:9d:4e:47:a6:7a:4d:4c:c1:25:82:eb:59: 9a:c4:8d:7a:0b:7a:71:67:e0:a2:7a:70:eb:d5:9c: 35:04:8b:f3:5a:7b:d8:9a:56:c0:97:47:7e:7f:f1: f5:44:78:d3:03:d3:1c:27:4e:a2:fb:d4:4f:fe:e5: 0d:d1:38:48:8a:5e:7e:c7:fc:81:09:4e:10:b6:64: dc:c8:15:b2:68:86:20:54:ba:14:35:6d:d7:25:ca: ad:48:d1:c9:b6:2d:95:ad:0a:73:14:41:4c:2d:5b: 8e:cf:55:26:64:c5:08:57:7f:00:8d:5c:f8:6a:c3: 6a:d0:3c:62:3e:e7:e7:79:1f:04:30:75:f1:17:13: 60:5e:0f:41:4d:f6:1e:fe:bf:cf:b2:c8:13:1c:0a: 8a:6a:b9:43:48:db:e3:e4:f1:7b:79:59:ca:55:36: 3b:5f:57:f0:83:48:0e:17:53:a6:54:78:9c:15:36: aa:74:ec:90:26:b7:46:c3:be:ab:6d:1b:41:0e:e1: b6:4d:df:9b:35:fb:46:32:a2:54:6a:95:15:86:cc: d2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:4B:44:92:E1:36:13:58:F7:77:BB:CF:D8:42:B7:DB:A6:2B:C4:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125/1a1c8cd4-86d7-3c34-bbeb-9c1e4b632348.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125/1d25e0e4-3256-419b-9e99-0f045d2a1125.crl X509v3 Authority Key Identifier: keyid:E0:41:83:40:9B:53:F0:4A:26:F2:03:CA:E0:7B:11:29:54:E7:A4:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:2b20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:97:78:47:c1:33:89:97:26:71:fd:f6:21:c3:d5:3e:a4:69: cb:c4:21:cb:a3:ed:d6:d2:8c:22:a9:bc:5a:1c:ec:dd:45:fb: 1e:f7:c9:77:79:e7:82:f8:95:3e:2e:fd:13:6d:83:74:f8:5e: 1d:77:1f:83:26:c8:94:39:74:c1:99:11:a6:ce:9c:23:3f:74: 7f:8d:76:35:9d:55:44:67:bf:ac:65:47:f7:9b:33:c1:e6:4f: 0b:e7:53:91:dd:c9:d0:85:9b:46:a0:16:62:83:b0:1e:e5:76: e7:ba:89:be:67:01:ba:8f:8b:8f:25:cb:51:9f:93:80:b4:15: 0c:f4:dc:89:de:4c:46:df:8f:df:72:1b:8e:f2:de:08:f2:3b: 8f:d0:11:ec:e1:32:0f:58:90:b1:8d:54:68:74:2a:f3:04:73: 17:17:49:c7:04:37:a3:43:cb:5e:d6:01:a5:3f:18:e7:75:84: a3:1f:c5:f5:7c:26:7f:ae:b1:94:d3:b5:b5:38:f6:68:5e:ce: f3:fc:8a:ec:17:f9:04:db:38:ee:0a:a2:e9:b0:f9:cf:4e:29: dd:74:0b:87:65:79:f0:f9:82:8d:08:53:cb:c5:1d:0b:90:aa: 7b:d6:fe:9d:69:ac:d8:c3:bb:6e:68:50:51:4c:c0:80:b8:4c: bf:c1:95:0b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr1ITCu9ERHpmqFtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyNWUwZTQtMzI1Ni00MTliLTllOTktMGYwNDVkMmEx MTI1MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk MjZiZjM5OGItZmY0Yi00Mzc3LThhOWQtMDEwZjY5N2FlNmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjg/vRQ19m1Z2YJ0fNeI35QZSJvRF+o42S79c qTl97CjWyIuH/9OEH4WP31rKTMCdTkemek1MwSWC61maxI16C3pxZ+CienDr1Zw1 BIvzWnvYmlbAl0d+f/H1RHjTA9McJ06i+9RP/uUN0ThIil5+x/yBCU4QtmTcyBWy aIYgVLoUNW3XJcqtSNHJti2VrQpzFEFMLVuOz1UmZMUIV38AjVz4asNq0DxiPufn eR8EMHXxFxNgXg9BTfYe/r/PssgTHAqKarlDSNvj5PF7eVnKVTY7X1fwg0gOF1Om VHicFTaqdOyQJrdGw76rbRtBDuG2Td+bNftGMqJUapUVhszSjwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMpLRJLhNhNY93e7z9hCt9umK8TUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDI1 ZTBlNC0zMjU2LTQxOWItOWU5OS0wZjA0NWQyYTExMjUvMWExYzhjZDQtODZkNy0z YzM0LWJiZWItOWMxZTRiNjMyMzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyNWUwZTQtMzI1Ni00MTliLTll OTktMGYwNDVkMmExMTI1LzFkMjVlMGU0LTMyNTYtNDE5Yi05ZTk5LTBmMDQ1ZDJh MTEyNS5jcmwwHwYDVR0jBBgwFoAU4EGDQJtT8Eom8gPK4HsRKVTnpJ8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDI1ZTBlNC0zMjU2LTQxOWItOWU5OS0wZjA0 NWQyYTExMjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAACsg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJGXeEfBM4mXJnH99iHD1T6kacvEIcuj7dbSjCKpvFoc7N1F+x73 yXd554L4lT4u/RNtg3T4Xh13H4MmyJQ5dMGZEabOnCM/dH+NdjWdVURnv6xlR/eb M8HmTwvnU5HdydCFm0agFmKDsB7ldue6ib5nAbqPi48ly1Gfk4C0FQz03IneTEbf j99yG47y3gjyO4/QEezhMg9YkLGNVGh0KvMEcxcXSccEN6NDy17WAaU/GOd1hKMf xfV8Jn+usZTTtbU49mhezvP8iuwX+QTbOO4Koumw+c9OKd10C4dlefD5go0IU8vF HQuQqnvW/p1prNjDu25oUFFMwIC4TL/BlQs= -----END CERTIFICATE-----Generated at Wed Nov 5 10:20:47 2025 by rpki-client