$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/21006f88-25cc-321a-bb06-e692d318c31d.roa File: 21006f88-25cc-321a-bb06-e692d318c31d.roa (raw, json) Hash identifier: 5wyCVlZ0H0kMMBUJP+Dx71aIIy1jfWFvhIQuk5xPcuw= Subject key identifier: 86:FF:39:02:7E:3C:BB:52:CB:E4:A4:F4:C6:DB:80:DA:0D:E2:19:CB Certificate issuer: /CN=820e56e8-763b-4037-929e-b01c8d786e75 Certificate serial: 010D0C9F4328584B9E07BD708972D3F90C990D80 Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/21006f88-25cc-321a-bb06-e692d318c31d.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 399275 IP address blocks: 2602:fcc0:6666::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:bd:70:89:72:d3:f9:0c:99:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=8e543ffe-c924-4c8b-bd10-4a767b3916ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:35:25:6e:00:3e:d2:a8:d6:3a:76:94:62:d3: f9:0f:64:59:e1:36:bf:7d:1f:99:dd:f4:83:c9:fc: 44:a2:55:5b:78:16:94:f3:8a:52:00:ab:78:39:89: 7a:73:b7:97:a6:21:65:3c:9f:0c:ee:c0:78:86:23: 9f:c7:7d:86:03:0a:82:7a:75:6c:bf:e7:8e:dc:64: 4a:c5:8e:f9:f9:5d:5e:29:b3:ac:9c:3a:6b:07:8e: 55:2b:28:aa:69:63:18:d8:99:0c:8e:97:5c:22:42: 52:40:65:18:f4:bf:d2:7e:08:2e:e7:94:3d:ae:35: e2:e7:ca:b8:2f:51:ec:cb:33:21:47:e0:ac:e7:b8: 8a:da:1c:2d:25:16:8d:f0:06:e1:ee:66:62:c2:34: 92:89:cc:cd:96:0c:c6:89:38:f8:16:2a:e1:7a:e7: e3:30:4e:5e:f8:f0:0c:7f:8a:39:48:74:83:2d:a8: 10:d0:f3:a5:a3:0a:36:b9:59:70:eb:1a:4a:7e:3a: 9e:ed:7f:03:f5:1c:8e:1d:fe:37:28:93:a2:06:19: 17:b1:8c:d8:5a:f2:e3:b5:4a:76:c5:30:39:59:15: 0b:fd:61:2b:55:4b:5f:7a:cd:35:e0:25:4c:fc:1f: 8b:95:10:77:08:fa:77:e3:08:21:22:ba:59:d3:29: 31:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:FF:39:02:7E:3C:BB:52:CB:E4:A4:F4:C6:DB:80:DA:0D:E2:19:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/21006f88-25cc-321a-bb06-e692d318c31d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl X509v3 Authority Key Identifier: keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer sbgp-ipAddrBlock: critical IPv6: 2602:fcc0:6666::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:30:2b:70:89:92:ea:8e:36:c2:18:7a:95:a2:1c:be:56:ad: 2f:71:97:e7:fa:66:31:6d:40:3f:18:20:36:7f:7f:dc:4b:46: c6:0c:d4:f0:d2:35:24:6c:5e:21:d3:b1:11:87:4a:11:d3:2f: 42:42:a0:1a:dd:50:73:dd:6e:7c:13:22:ff:0e:f5:16:dd:98: 1a:54:df:1f:e9:fe:79:6f:10:83:a7:76:0d:f4:16:3c:60:47: 4e:1a:4e:4c:5b:8d:6a:81:e3:16:7a:3b:2a:ea:1c:46:b0:b1: 50:ed:0e:3a:41:56:7b:64:99:85:06:ef:7f:38:60:87:53:28: f1:c4:3a:db:dc:7c:7a:aa:dc:94:25:42:46:c8:d7:59:fe:3f: cf:19:f6:83:0f:6a:96:0a:6f:c1:7f:96:f1:d8:c5:52:db:29: 43:26:e5:e6:da:2e:dc:47:5e:06:f8:5d:94:13:e0:80:3d:d3: 87:c1:11:ca:b0:23:a1:9e:cf:82:cd:8d:2b:14:4f:4f:a6:2f: f4:75:e0:34:c0:ca:69:37:f7:3d:14:aa:e3:d2:57:0b:18:42: 7d:17:8f:30:b2:ba:22:54:3b:6b:8f:3a:a2:d9:28:ae:82:bd: 02:cb:e1:b5:15:3a:fc:6a:7c:35:79:a0:a2:23:08:23:c2:ec: 5f:e8:df:7c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEueB71wiXLT+QyZDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIwZTU2ZTgtNzYzYi00MDM3LTkyOWUtYjAxYzhkNzg2 ZTc1MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk OGU1NDNmZmUtYzkyNC00YzhiLWJkMTAtNGE3NjdiMzkxNmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizUlbgA+0qjWOnaUYtP5D2RZ4Ta/fR+Z3fSD yfxEolVbeBaU84pSAKt4OYl6c7eXpiFlPJ8M7sB4hiOfx32GAwqCenVsv+eO3GRK xY75+V1eKbOsnDprB45VKyiqaWMY2JkMjpdcIkJSQGUY9L/Sfggu55Q9rjXi58q4 L1HsyzMhR+Cs57iK2hwtJRaN8Abh7mZiwjSSiczNlgzGiTj4FirheufjME5e+PAM f4o5SHSDLagQ0POlowo2uVlw6xpKfjqe7X8D9RyOHf43KJOiBhkXsYzYWvLjtUp2 xTA5WRUL/WErVUtfes014CVM/B+LlRB3CPp34wghIrpZ0ykxDQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIb/OQJ+PLtSy+Sk9MbbgNoN4hnLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjBl NTZlOC03NjNiLTQwMzctOTI5ZS1iMDFjOGQ3ODZlNzUvMjEwMDZmODgtMjVjYy0z MjFhLWJiMDYtZTY5MmQzMThjMzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODIwZTU2ZTgtNzYzYi00MDM3LTky OWUtYjAxYzhkNzg2ZTc1LzgyMGU1NmU4LTc2M2ItNDAzNy05MjllLWIwMWM4ZDc4 NmU3NS5jcmwwHwYDVR0jBBgwFoAUP3013qVs2g7sbxhuEQO8bIfW0y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MjBlNTZlOC03NjNiLTQwMzctOTI5ZS1iMDFj OGQ3ODZlNzUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8wGZm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFAwK3CJkuqONsIYepWiHL5WrS9xl+f6ZjFtQD8YIDZ/f9xLRsYM 1PDSNSRsXiHTsRGHShHTL0JCoBrdUHPdbnwTIv8O9RbdmBpU3x/p/nlvEIOndg30 FjxgR04aTkxbjWqB4xZ6OyrqHEawsVDtDjpBVntkmYUG7384YIdTKPHEOtvcfHqq 3JQlQkbI11n+P88Z9oMPapYKb8F/lvHYxVLbKUMm5ebaLtxHXgb4XZQT4IA904fB EcqwI6Gez4LNjSsUT0+mL/R14DTAymk39z0UquPSVwsYQn0XjzCyuiJUO2uPOqLZ KK6CvQLL4bUVOvxqfDV5oKIjCCPC7F/o33w= -----END CERTIFICATE-----Generated at Wed Nov 5 11:16:05 2025 by rpki-client