$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8/3dee05eb-d60a-34fa-a6aa-92610c4fbcec.roa File: 3dee05eb-d60a-34fa-a6aa-92610c4fbcec.roa (raw, json) Hash identifier: 2bGWt4ikKVskKP6LG9/EnV2jmVpameckU7KM7/v5htI= Subject key identifier: 2E:B3:2F:AD:10:D9:DC:60:87:E7:2C:B6:41:C7:3D:15:5B:0A:4D:3C Certificate issuer: /CN=627df6c2-d60a-4467-85f2-dd6d009eafe8 Certificate serial: 010D0C9F4328584B80B75F9E33B7F04BBBEA3940 Authority key identifier: 3B:AE:19:3B:C4:79:F6:F2:59:AD:1B:B8:56:E6:5F:E1:1E:DF:64:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8/3dee05eb-d60a-34fa-a6aa-92610c4fbcec.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 27218 IP address blocks: 192.30.120.0/23 maxlen: 23 2620:71:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8/627df6c2-d60a-4467-85f2-dd6d009eafe8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8/627df6c2-d60a-4467-85f2-dd6d009eafe8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:5f:9e:33:b7:f0:4b:bb:ea:39:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=627df6c2-d60a-4467-85f2-dd6d009eafe8 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=7ee43924-8b71-4ef9-8eb8-abef5e52a776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:64:f5:7d:de:79:00:73:44:89:76:cb:71:79: 2f:d0:5f:bc:1d:88:e1:20:25:f1:b8:bd:66:8a:0b: 27:29:30:89:e5:26:7a:f3:1d:43:5c:86:b7:49:19: 98:fa:71:8c:b0:74:25:37:d3:66:b9:ff:e5:96:34: 9c:35:f0:79:16:e9:e5:cb:7a:c1:1e:4f:56:6a:38: 49:3f:cd:24:bd:54:e5:0a:8f:90:66:9a:46:cc:53: 1d:6c:25:04:42:d3:6b:d8:2f:23:31:63:db:ec:60: 5d:3e:90:f7:cd:1f:ca:b1:1b:83:ea:39:12:ce:fa: f7:df:aa:cf:e9:46:0a:47:fa:1b:b5:96:6e:1f:53: 7f:22:3d:7a:c7:d2:9d:28:66:77:1f:c3:c4:4d:14: bd:2a:61:08:f3:6b:cd:75:49:32:80:22:f6:c6:f0: a7:37:d5:aa:e6:88:bd:aa:dc:dd:95:83:f3:d3:25: 64:92:c5:e6:11:da:44:5e:00:72:ff:a6:b4:e7:63: 18:e2:70:64:ad:0b:39:82:65:25:af:59:d5:f7:13: 8b:08:70:7f:99:83:74:cc:b6:23:29:a5:04:dc:7b: bd:2b:76:c6:7b:f5:87:85:1e:8a:5c:c3:43:93:9c: 49:08:28:96:8e:fa:7c:0a:18:8e:30:64:a3:30:d8: 8b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:B3:2F:AD:10:D9:DC:60:87:E7:2C:B6:41:C7:3D:15:5B:0A:4D:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8/3dee05eb-d60a-34fa-a6aa-92610c4fbcec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8/627df6c2-d60a-4467-85f2-dd6d009eafe8.crl X509v3 Authority Key Identifier: keyid:3B:AE:19:3B:C4:79:F6:F2:59:AD:1B:B8:56:E6:5F:E1:1E:DF:64:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8.cer sbgp-ipAddrBlock: critical IPv4: 192.30.120.0/23 IPv6: 2620:71:4000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:48:4d:fe:67:f7:02:88:60:9b:47:4a:98:6a:5e:92:02:cf: 7b:df:2b:f1:89:b8:77:39:ee:20:e8:e2:9c:08:a8:76:c5:89: e4:8a:df:3d:44:cb:25:98:97:9f:20:cb:01:b7:27:b6:b9:f0: fe:70:ab:df:3a:55:40:d3:bc:87:9a:69:3a:67:20:e8:ee:be: e2:94:28:c8:5c:9a:09:02:76:04:cb:70:b1:bc:96:9c:18:7d: b8:84:38:d1:55:73:df:11:82:bf:5b:f5:3a:69:04:9a:89:b9: 05:47:94:11:50:43:ed:51:ba:ca:87:91:1f:cf:6b:41:99:bd: 45:6b:09:89:b5:cc:ba:bb:2b:8e:a1:f7:30:53:84:10:0b:26: 05:63:01:f1:a4:20:b2:a0:92:67:a3:b3:36:7e:04:44:8f:dc: 2c:b4:74:23:a1:d1:ba:ff:3a:2a:f7:48:f3:2a:78:ea:6b:83: b0:5c:88:5f:86:0a:70:c4:2d:32:e7:f3:82:8b:84:3b:4d:d2: a1:5d:cf:8d:ab:8b:98:93:c9:09:8d:e2:7b:fe:a8:2d:28:4e: a1:45:00:e6:a4:b6:5a:bc:e5:d2:5a:34:09:74:41:55:76:40: c3:e4:07:7e:6a:a0:a3:fe:77:d2:5f:a9:1b:b5:82:cc:fe:51: 1e:43:86:e8 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEuAt1+eM7fwS7vqOUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjI3ZGY2YzItZDYwYS00NDY3LTg1ZjItZGQ2ZDAwOWVh ZmU4MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk N2VlNDM5MjQtOGI3MS00ZWY5LThlYjgtYWJlZjVlNTJhNzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGT1fd55AHNEiXbLcXkv0F+8HYjhICXxuL1m igsnKTCJ5SZ68x1DXIa3SRmY+nGMsHQlN9Nmuf/lljScNfB5Funly3rBHk9WajhJ P80kvVTlCo+QZppGzFMdbCUEQtNr2C8jMWPb7GBdPpD3zR/KsRuD6jkSzvr336rP 6UYKR/obtZZuH1N/Ij16x9KdKGZ3H8PETRS9KmEI82vNdUkygCL2xvCnN9Wq5oi9 qtzdlYPz0yVkksXmEdpEXgBy/6a052MY4nBkrQs5gmUlr1nV9xOLCHB/mYN0zLYj KaUE3Hu9K3bGe/WHhR6KXMNDk5xJCCiWjvp8ChiOMGSjMNiLQQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFC6zL60Q2dxgh+cstkHHPRVbCk08MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82Mjdk ZjZjMi1kNjBhLTQ0NjctODVmMi1kZDZkMDA5ZWFmZTgvM2RlZTA1ZWItZDYwYS0z NGZhLWE2YWEtOTI2MTBjNGZiY2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjI3ZGY2YzItZDYwYS00NDY3LTg1 ZjItZGQ2ZDAwOWVhZmU4LzYyN2RmNmMyLWQ2MGEtNDQ2Ny04NWYyLWRkNmQwMDll YWZlOC5jcmwwHwYDVR0jBBgwFoAUO64ZO8R59vJZrRu4VuZf4R7fZI8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82MjdkZjZjMi1kNjBhLTQ0NjctODVmMi1kZDZk MDA5ZWFmZTguY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBwB54MA8E AgACMAkDBwAmIABxQAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAKEhN/mf3Aohgm0dKmGpekgLPe98r8Ym4 dznuIOjinAiodsWJ5IrfPUTLJZiXnyDLAbcntrnw/nCr3zpVQNO8h5ppOmcg6O6+ 4pQoyFyaCQJ2BMtwsbyWnBh9uIQ40VVz3xGCv1v1OmkEmom5BUeUEVBD7VG6yoeR H89rQZm9RWsJibXMursrjqH3MFOEEAsmBWMB8aQgsqCSZ6OzNn4ERI/cLLR0I6HR uv86KvdI8yp46muDsFyIX4YKcMQtMufzgouEO03SoV3PjauLmJPJCY3ie/6oLShO oUUA5qS2Wrzl0lo0CXRBVXZAw+QHfmqgo/530l+pG7WCzP5RHkOG6A== -----END CERTIFICATE-----Generated at Wed Nov 5 12:13:12 2025 by rpki-client