$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/3fb7cd4a-dfa1-32e1-a311-ab18aeb1b13a.roa File: 3fb7cd4a-dfa1-32e1-a311-ab18aeb1b13a.roa (raw, json) Hash identifier: xPZMcExjfKG0ZAqcV7q/ROzI8x7Ey9kp9L2crCljFTg= Subject key identifier: 15:9A:D7:2A:E9:C6:F1:7D:AD:89:F8:F2:CC:65:EB:74:69:BE:B2:0B Certificate issuer: /CN=10aa04f0-7421-4813-bfda-269303d05d1d Certificate serial: 010D0C9F4328584B3987080BF3AAA9A84180CF40 Authority key identifier: 4C:67:C6:2B:93:24:A6:E4:6A:F7:D6:8B:AA:7D:A5:9F:6A:13:7E:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/3fb7cd4a-dfa1-32e1-a311-ab18aeb1b13a.roa Signing time: Wed 17 Sep 2025 13:00:41 +0000 ROA not before: Wed 17 Sep 2025 13:00:41 +0000 ROA not after: Tue 16 Dec 2025 14:00:41 +0000 asID: 77 IP address blocks: 2620:0:320::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:87:08:0b:f3:aa:a9:a8:41:80:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10aa04f0-7421-4813-bfda-269303d05d1d Validity Not Before: Sep 17 13:00:41 2025 GMT Not After : Dec 16 14:00:41 2025 GMT Subject: CN=2c40990c-0a98-494c-89c9-ec1a93b2c471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:97:7f:97:a3:ac:2e:45:1b:6c:71:7e:3e:0c: 38:a0:7e:8d:cc:d3:1a:37:9f:19:51:e4:b2:5d:95: 3c:61:e6:b5:d2:f3:c5:96:ed:74:b5:65:45:97:3e: d6:84:27:0d:a9:9c:2e:3c:7f:3d:a3:d7:73:62:a2: 4f:c0:31:05:39:21:f4:b5:da:c2:ff:88:17:60:8f: 5f:c1:4c:0f:c8:ef:fe:a6:72:9f:d8:8a:46:94:2f: 18:f8:27:ef:be:97:a7:a3:0f:e9:4f:8d:c3:d8:6d: 95:c8:05:68:44:e5:eb:bf:43:ab:7e:b0:7a:37:f7: f6:f2:3b:dd:66:ca:c1:13:2a:06:92:e5:59:70:bb: 7d:96:80:7f:ad:85:8d:6b:d4:48:ca:4b:cb:7f:b8: 52:1d:cf:9f:1c:a3:4c:21:d5:4d:cf:61:07:a2:6c: 69:a8:53:af:ef:f2:e0:07:c3:e3:a5:72:04:a9:bf: ab:f8:78:9a:05:7e:cd:14:79:8a:1b:19:1c:45:f3: ca:69:21:d8:23:77:d2:46:a5:27:e2:c1:22:12:0e: 09:ba:29:48:c8:6b:26:5d:b9:05:23:b3:09:1a:40: 3e:5b:d3:25:ea:54:c6:58:14:da:73:1a:2f:42:2b: 7d:2c:bd:53:9c:4d:1a:12:7b:33:6e:28:cd:ec:3b: aa:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:9A:D7:2A:E9:C6:F1:7D:AD:89:F8:F2:CC:65:EB:74:69:BE:B2:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/3fb7cd4a-dfa1-32e1-a311-ab18aeb1b13a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.crl X509v3 Authority Key Identifier: keyid:4C:67:C6:2B:93:24:A6:E4:6A:F7:D6:8B:AA:7D:A5:9F:6A:13:7E:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:320::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:97:ea:75:c8:7b:07:35:bd:9c:99:7d:27:3c:75:2f:8b:ec: dc:b5:58:d2:8d:ce:54:73:5b:22:d5:41:25:5a:96:41:0f:37: 12:2b:c9:c3:28:30:4f:06:73:17:78:ad:a0:da:db:d4:0c:6b: 6f:8b:12:1b:ad:c9:2e:63:61:09:b3:b1:b5:79:8c:a0:2b:65: 47:de:b2:33:ed:eb:7d:91:f0:28:fe:45:ad:6b:e8:4f:56:4d: 06:af:1e:d9:63:5d:d4:87:6c:49:76:bf:a3:f5:37:72:94:1a: 30:08:a5:0d:07:9b:b8:32:2f:9f:7c:27:15:f7:79:2b:80:28: fd:90:5c:40:5b:f4:52:aa:23:47:04:05:cc:ae:6f:a7:22:69: f2:c7:8c:15:97:a1:da:a3:1a:58:b8:d1:d1:63:9c:9d:b5:e3: 34:c1:99:b0:c7:43:19:74:b8:d5:b8:40:b3:18:5c:89:1c:87: 13:29:4d:1f:96:a8:7d:d7:ff:19:47:16:fb:df:19:49:4d:06: 94:52:17:7b:51:a9:0f:2a:60:3e:29:45:6a:1d:6e:7d:3d:54: f2:34:f0:19:53:92:ac:3a:be:42:7f:03:a1:46:b4:b7:af:bb: cf:d6:23:0b:9a:d8:8a:6d:dc:f2:77:94:f6:51:7a:e6:e0:a6: 0d:19:73:e1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs5hwgL86qpqEGAz0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTBhYTA0ZjAtNzQyMS00ODEzLWJmZGEtMjY5MzAzZDA1 ZDFkMB4XDTI1MDkxNzEzMDA0MVoXDTI1MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk MmM0MDk5MGMtMGE5OC00OTRjLTg5YzktZWMxYTkzYjJjNDcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Jd/l6OsLkUbbHF+Pgw4oH6NzNMaN58ZUeSy XZU8Yea10vPFlu10tWVFlz7WhCcNqZwuPH89o9dzYqJPwDEFOSH0tdrC/4gXYI9f wUwPyO/+pnKf2IpGlC8Y+Cfvvpenow/pT43D2G2VyAVoROXrv0OrfrB6N/f28jvd ZsrBEyoGkuVZcLt9loB/rYWNa9RIykvLf7hSHc+fHKNMIdVNz2EHomxpqFOv7/Lg B8PjpXIEqb+r+HiaBX7NFHmKGxkcRfPKaSHYI3fSRqUn4sEiEg4JuilIyGsmXbkF I7MJGkA+W9Ml6lTGWBTacxovQit9LL1TnE0aEnszbijN7DuqewIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBWa1yrpxvF9rYn48sxl63RpvrILMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xMGFh MDRmMC03NDIxLTQ4MTMtYmZkYS0yNjkzMDNkMDVkMWQvM2ZiN2NkNGEtZGZhMS0z MmUxLWEzMTEtYWIxOGFlYjFiMTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTBhYTA0ZjAtNzQyMS00ODEzLWJm ZGEtMjY5MzAzZDA1ZDFkLzEwYWEwNGYwLTc0MjEtNDgxMy1iZmRhLTI2OTMwM2Qw NWQxZC5jcmwwHwYDVR0jBBgwFoAUTGfGK5MkpuRq99aLqn2ln2oTfgIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xMGFhMDRmMC03NDIxLTQ4MTMtYmZkYS0yNjkz MDNkMDVkMWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAAMg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAICX6nXIewc1vZyZfSc8dS+L7Ny1WNKNzlRzWyLVQSValkEPNxIr ycMoME8Gcxd4raDa29QMa2+LEhutyS5jYQmzsbV5jKArZUfesjPt632R8Cj+Ra1r 6E9WTQavHtljXdSHbEl2v6P1N3KUGjAIpQ0Hm7gyL598JxX3eSuAKP2QXEBb9FKq I0cEBcyub6ciafLHjBWXodqjGli40dFjnJ214zTBmbDHQxl0uNW4QLMYXIkchxMp TR+WqH3X/xlHFvvfGUlNBpRSF3tRqQ8qYD4pRWodbn09VPI08BlTkqw6vkJ/A6FG tLevu8/WIwua2Ipt3PJ3lPZReubgpg0Zc+E= -----END CERTIFICATE-----Generated at Wed Nov 5 08:41:57 2025 by rpki-client