$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/1c51f95f-cdb6-36f2-ac22-87e17bd6475b.roa File: 1c51f95f-cdb6-36f2-ac22-87e17bd6475b.roa (raw, json) Hash identifier: /KQsZAx2tTcnVj5eJnspCbO2W4V5EaaFuDz14XWszcY= Subject key identifier: 85:29:D3:9B:C1:61:0A:FD:EB:29:92:FA:4E:55:2C:9A:80:49:9E:64 Certificate issuer: /CN=820e56e8-763b-4037-929e-b01c8d786e75 Certificate serial: 010D0C9F4328584B9E07BD933BF2A0681B6C6E00 Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/1c51f95f-cdb6-36f2-ac22-87e17bd6475b.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 399275 IP address blocks: 2602:fcc0:8888::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:bd:93:3b:f2:a0:68:1b:6c:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=20ad2d9b-e37c-44a8-a292-c4fb3ba5ecf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:06:b8:61:e0:d9:2f:c9:e4:19:6a:6e:8c:67: cd:8f:32:4c:01:49:05:08:e4:0c:77:9f:d2:04:af: cb:31:ca:48:48:c6:20:54:39:38:d8:6a:48:82:28: 98:9f:95:12:64:d3:2b:b3:7f:0e:81:aa:9c:05:4c: 41:96:13:06:63:eb:fb:a1:0c:47:50:6b:8b:2f:86: 24:3d:f1:11:ed:9b:84:df:59:5e:7a:05:83:16:85: 87:ac:e4:03:90:9d:6f:26:2f:40:4a:10:af:df:e0: 37:1f:bf:3e:94:47:78:9f:2c:ff:81:2e:9e:0c:f5: 1c:73:2f:32:ce:13:3d:4c:19:f6:cc:44:92:69:e9: 19:3f:81:e2:b6:f3:77:c8:97:17:c7:89:4f:c5:62: 4d:55:cf:ac:2d:15:69:76:2f:3a:29:1e:e5:00:ce: f5:bf:e1:78:55:42:50:ee:45:6d:3b:72:48:57:ea: 64:86:4d:bd:c3:5a:d3:04:6c:5d:2c:8d:f3:37:ee: 20:06:1d:de:f0:95:46:fc:2f:6c:8a:9d:2e:a6:5a: db:95:76:07:6f:ce:15:95:49:c1:19:1d:fe:2f:c0: 90:77:f4:ae:85:db:56:32:bb:d2:ee:cd:3f:c5:25: 65:74:7e:e2:38:48:2b:86:6b:d5:e3:2e:28:8e:f6: 70:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:29:D3:9B:C1:61:0A:FD:EB:29:92:FA:4E:55:2C:9A:80:49:9E:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/1c51f95f-cdb6-36f2-ac22-87e17bd6475b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl X509v3 Authority Key Identifier: keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer sbgp-ipAddrBlock: critical IPv6: 2602:fcc0:8888::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:e0:b8:4c:8c:eb:52:c5:14:34:e1:32:c4:c6:96:2e:9b:07: 4c:5c:ee:14:a2:7c:d0:78:9e:af:32:1d:b5:5c:88:1a:25:83: 4a:49:ea:8d:3a:4a:11:61:23:be:56:d5:db:97:04:f7:25:b0: cd:07:13:83:ff:79:57:80:58:24:b8:cd:53:09:e7:d3:f1:ae: 93:51:d6:4e:30:bc:8e:b3:2a:09:f3:18:3d:df:61:09:af:b5: 43:85:80:e2:01:49:56:26:b1:6e:6e:29:2c:a7:0b:be:c0:2f: e2:d9:b5:e4:27:48:64:0e:b4:f5:f1:09:51:7d:d7:ad:74:08: 5e:59:ac:de:ba:49:9c:c8:84:be:1f:c2:97:f8:b5:91:61:72: 6e:56:be:de:e2:5f:ec:58:48:42:f7:b2:fe:90:43:08:e3:3d: f7:05:d3:14:9a:61:cc:a8:56:8d:4f:bd:bb:fb:d9:fc:cb:1e: 09:db:ea:c7:0c:1c:63:a9:70:c4:57:8a:6d:35:9a:2a:74:67: 4e:48:67:b2:02:7e:82:b9:bf:51:3a:50:9f:76:ea:64:71:e5: 54:2b:6d:b0:7a:ac:4e:f5:35:cf:03:3b:27:53:0c:46:fa:d4: dc:c3:82:7e:dd:9e:40:dd:22:0e:97:93:3f:d9:b3:51:be:9e: b6:58:7f:ce -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEueB72TO/KgaBtsbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIwZTU2ZTgtNzYzYi00MDM3LTkyOWUtYjAxYzhkNzg2 ZTc1MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk MjBhZDJkOWItZTM3Yy00NGE4LWEyOTItYzRmYjNiYTVlY2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmga4YeDZL8nkGWpujGfNjzJMAUkFCOQMd5/S BK/LMcpISMYgVDk42GpIgiiYn5USZNMrs38OgaqcBUxBlhMGY+v7oQxHUGuLL4Yk PfER7ZuE31leegWDFoWHrOQDkJ1vJi9AShCv3+A3H78+lEd4nyz/gS6eDPUccy8y zhM9TBn2zESSaekZP4HitvN3yJcXx4lPxWJNVc+sLRVpdi86KR7lAM71v+F4VUJQ 7kVtO3JIV+pkhk29w1rTBGxdLI3zN+4gBh3e8JVG/C9sip0uplrblXYHb84VlUnB GR3+L8CQd/SuhdtWMrvS7s0/xSVldH7iOEgrhmvV4y4ojvZwpQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIUp05vBYQr96ymS+k5VLJqASZ5kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjBl NTZlOC03NjNiLTQwMzctOTI5ZS1iMDFjOGQ3ODZlNzUvMWM1MWY5NWYtY2RiNi0z NmYyLWFjMjItODdlMTdiZDY0NzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODIwZTU2ZTgtNzYzYi00MDM3LTky OWUtYjAxYzhkNzg2ZTc1LzgyMGU1NmU4LTc2M2ItNDAzNy05MjllLWIwMWM4ZDc4 NmU3NS5jcmwwHwYDVR0jBBgwFoAUP3013qVs2g7sbxhuEQO8bIfW0y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MjBlNTZlOC03NjNiLTQwMzctOTI5ZS1iMDFj OGQ3ODZlNzUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8wIiI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKnguEyM61LFFDThMsTGli6bB0xc7hSifNB4nq8yHbVciBolg0pJ 6o06ShFhI75W1duXBPclsM0HE4P/eVeAWCS4zVMJ59PxrpNR1k4wvI6zKgnzGD3f YQmvtUOFgOIBSVYmsW5uKSynC77AL+LZteQnSGQOtPXxCVF91610CF5ZrN66SZzI hL4fwpf4tZFhcm5Wvt7iX+xYSEL3sv6QQwjjPfcF0xSaYcyoVo1Pvbv72fzLHgnb 6scMHGOpcMRXim01mip0Z05IZ7ICfoK5v1E6UJ926mRx5VQrbbB6rE71Nc8DOydT DEb61NzDgn7dnkDdIg6Xkz/Zs1G+nrZYf84= -----END CERTIFICATE-----Generated at Wed Nov 5 08:36:49 2025 by rpki-client