$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/d20775c3-e8c6-3670-bcaa-7f7e68cebf51.roa File: d20775c3-e8c6-3670-bcaa-7f7e68cebf51.roa (raw, json) Hash identifier: E1+uC5XOUw0nTtG7OGFJS2bf3JODlQrswqL9+l3fN3Q= Subject key identifier: 67:5C:4A:8E:FC:65:17:54:8C:0D:FE:4B:16:16:83:5C:00:BE:A1:2C Certificate issuer: /CN=f1fa0620-c80f-4a94-9e95-ead44fb79978 Certificate serial: 010D0C9F4328584B6BC75A3210C11179BCD74300 Authority key identifier: A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/d20775c3-e8c6-3670-bcaa-7f7e68cebf51.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 399358 IP address blocks: 2607:6bc0::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:5a:32:10:c1:11:79:bc:d7:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1fa0620-c80f-4a94-9e95-ead44fb79978 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=16b8cf6a-35ba-4fe7-b859-b0f5aca2b929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6d:a7:23:c9:ce:e5:ec:b9:e2:8d:3f:4c:ec: c9:d6:d2:27:8a:6a:99:31:78:34:86:d9:2c:f8:58: de:6f:e7:3b:c0:5c:5f:59:30:03:dc:ea:77:65:92: 31:8e:6c:eb:4a:41:67:80:2c:f3:aa:37:29:8b:1e: df:2c:9b:24:2e:da:2c:09:84:27:3c:00:0a:aa:4d: 88:4e:5b:b4:f4:12:a0:1f:e7:9c:9a:96:d1:4a:3f: db:91:c7:68:71:b5:b8:7e:cf:51:51:13:86:8b:d0: f2:9f:a9:32:79:27:2a:96:41:d8:59:eb:53:66:77: bf:e8:87:0f:1f:90:82:06:90:4d:5e:29:a3:27:a8: 6d:43:3c:81:64:18:5c:4c:a9:87:b6:2d:1e:aa:ab: 78:10:20:39:26:92:f7:44:18:c7:e9:ec:80:71:9e: 05:f3:9d:9f:5f:1c:96:50:86:58:24:a9:bf:1c:df: 72:af:e0:a5:2d:e1:ca:6e:81:31:80:30:20:d5:56: 5f:b7:be:d0:72:2d:09:75:5c:8f:54:98:89:1c:a1: 88:be:4c:1c:65:fe:a1:1a:01:c7:06:b5:e7:ad:1b: 61:32:87:d8:03:11:aa:03:e9:50:30:77:14:d0:29: 88:de:e4:75:2b:29:23:6a:d7:b2:3d:b5:b1:b2:37: a6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:5C:4A:8E:FC:65:17:54:8C:0D:FE:4B:16:16:83:5C:00:BE:A1:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/d20775c3-e8c6-3670-bcaa-7f7e68cebf51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.crl X509v3 Authority Key Identifier: keyid:A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer sbgp-ipAddrBlock: critical IPv6: 2607:6bc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:7a:7b:4d:bd:24:62:49:07:26:63:92:40:90:8e:11:39:75: f6:4d:b9:e6:5c:05:8d:50:db:fd:d3:e9:91:63:26:3f:bc:47: d6:2e:e2:84:55:5f:f4:5b:45:78:93:15:f9:8b:9d:2a:66:cf: be:cd:42:b2:04:ca:94:40:66:e7:6a:e7:63:7c:1c:0a:ae:2d: 86:4a:59:56:36:9f:2f:7d:14:b3:87:66:b0:6d:8e:88:52:eb: d6:27:a9:4a:cf:27:18:83:14:44:c7:60:8c:ca:12:c7:22:e6: 4d:84:f2:b9:97:3c:50:ae:17:66:1f:08:a5:95:92:90:98:1f: 95:d2:cc:c3:07:73:29:54:62:93:5d:1d:06:5a:1e:13:e7:67: 43:9b:d5:26:58:ad:ee:fa:a2:93:96:7a:bb:68:30:08:2f:84: 54:31:da:8f:50:c4:cc:e2:a3:11:bd:69:f9:09:65:d3:66:08: bf:f4:9e:df:a9:f5:d7:96:ed:ae:2f:ce:08:3c:c7:88:75:1d: 9f:a8:89:bd:9c:85:0d:b2:20:34:dc:66:f4:4c:10:c8:13:1b: 37:71:4d:43:26:d7:25:ca:8e:54:80:cd:88:c0:92:56:d8:db: 6f:8f:0f:59:e8:db:6a:1c:c2:89:bc:f5:6a:07:af:35:de:d5: c2:12:3e:ee -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtrx1oyEMERebzXQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjFmYTA2MjAtYzgwZi00YTk0LTllOTUtZWFkNDRmYjc5 OTc4MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk MTZiOGNmNmEtMzViYS00ZmU3LWI4NTktYjBmNWFjYTJiOTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2m2nI8nO5ey54o0/TOzJ1tInimqZMXg0htks +Fjeb+c7wFxfWTAD3Op3ZZIxjmzrSkFngCzzqjcpix7fLJskLtosCYQnPAAKqk2I Tlu09BKgH+ecmpbRSj/bkcdocbW4fs9RUROGi9Dyn6kyeScqlkHYWetTZne/6IcP H5CCBpBNXimjJ6htQzyBZBhcTKmHti0eqqt4ECA5JpL3RBjH6eyAcZ4F852fXxyW UIZYJKm/HN9yr+ClLeHKboExgDAg1VZft77Qci0JdVyPVJiJHKGIvkwcZf6hGgHH BrXnrRthMofYAxGqA+lQMHcU0CmI3uR1KykjateyPbWxsjemRQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGdcSo78ZRdUjA3+SxYWg1wAvqEsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9mMWZh MDYyMC1jODBmLTRhOTQtOWU5NS1lYWQ0NGZiNzk5NzgvZDIwNzc1YzMtZThjNi0z NjcwLWJjYWEtN2Y3ZTY4Y2ViZjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZjFmYTA2MjAtYzgwZi00YTk0LTll OTUtZWFkNDRmYjc5OTc4L2YxZmEwNjIwLWM4MGYtNGE5NC05ZTk1LWVhZDQ0ZmI3 OTk3OC5jcmwwHwYDVR0jBBgwFoAUphG/cQGHxBw5AaKqJrnTgQz+K3QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9mMWZhMDYyMC1jODBmLTRhOTQtOWU5NS1lYWQ0 NGZiNzk5NzguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdrwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCwentNvSRiSQcmY5JAkI4ROXX2TbnmXAWNUNv90+mRYyY/vEfWLuKE VV/0W0V4kxX5i50qZs++zUKyBMqUQGbnaudjfBwKri2GSllWNp8vfRSzh2awbY6I UuvWJ6lKzycYgxREx2CMyhLHIuZNhPK5lzxQrhdmHwillZKQmB+V0szDB3MpVGKT XR0GWh4T52dDm9UmWK3u+qKTlnq7aDAIL4RUMdqPUMTM4qMRvWn5CWXTZgi/9J7f qfXXlu2uL84IPMeIdR2fqIm9nIUNsiA03Gb0TBDIExs3cU1DJtclyo5UgM2IwJJW 2Ntvjw9Z6NtqHMKJvPVqB6813tXCEj7u -----END CERTIFICATE-----Generated at Wed Nov 5 08:46:33 2025 by rpki-client