$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/b20be8f7-0638-3370-8715-f0aae40447c9.roa File: b20be8f7-0638-3370-8715-f0aae40447c9.roa (raw, json) Hash identifier: A/jfUz4h0VwT2ubvOhSxUmb80CyVmHRyJckYsAbwNXM= Subject key identifier: 2B:E6:12:C5:49:BF:13:5E:E6:F3:AD:B3:C1:EA:E3:82:43:29:EF:27 Certificate issuer: /CN=820e56e8-763b-4037-929e-b01c8d786e75 Certificate serial: 010D0C9F4328584B21CC2670FE271FBCBC04A300 Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/b20be8f7-0638-3370-8715-f0aae40447c9.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 399275 IP address blocks: 2602:fcc0:4444::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:26:70:fe:27:1f:bc:bc:04:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=5f3e2788-f0d4-4853-903a-9f67fa60ca43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:92:7e:fe:48:57:10:ca:f7:4a:c2:34:0d:14: e0:82:39:6e:d0:fc:7d:c5:24:39:1c:5e:82:74:8c: 69:31:0a:f7:60:b5:18:db:e7:04:8f:f1:70:c6:e9: fe:06:fb:4b:c1:ba:41:0d:c5:bb:e2:f0:51:39:5f: 97:57:9b:f6:f0:73:35:dc:10:4b:30:44:ce:b8:17: 24:f3:0d:0b:a6:0a:8a:83:66:6c:d5:28:4f:15:46: e8:5f:b9:fb:ac:02:31:36:40:ff:8f:92:2c:d4:52: 25:ca:b2:66:86:a9:be:4f:aa:36:dd:e0:0a:50:4d: 2a:4a:98:6e:79:15:94:99:5f:19:2b:5f:d1:66:88: 9a:9e:1a:09:24:12:31:b5:1d:3f:a7:45:89:c4:ed: 40:c5:91:6f:a8:70:f8:a6:1a:44:33:1c:18:ea:93: cd:d0:94:09:71:e8:ce:b5:79:ad:42:a6:e6:84:e5: aa:48:54:cc:0b:61:b3:b9:fe:34:14:37:6c:63:12: cc:60:b1:42:db:4f:ae:02:58:8d:3b:af:64:35:96: 26:3a:f9:ea:c6:d8:1d:53:d3:e8:b9:58:d3:99:49: ae:fc:99:ed:8d:10:d6:b6:aa:f5:70:fa:20:09:cd: b6:ef:ff:1a:1f:95:87:94:44:96:08:81:92:ef:2b: c6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E6:12:C5:49:BF:13:5E:E6:F3:AD:B3:C1:EA:E3:82:43:29:EF:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/b20be8f7-0638-3370-8715-f0aae40447c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl X509v3 Authority Key Identifier: keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer sbgp-ipAddrBlock: critical IPv6: 2602:fcc0:4444::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:f3:e0:ae:5b:86:24:af:8b:95:59:55:5b:98:87:07:27:23: 18:3e:35:c6:d8:04:02:57:8e:21:24:b7:34:91:c5:72:ab:0a: e2:06:69:cf:78:8c:aa:b4:27:fb:50:26:12:3f:7b:62:69:e0: 1c:2d:50:3b:1f:ce:0f:68:7a:ef:5f:85:0c:53:f9:f0:00:ad: 28:9f:93:58:11:76:da:e6:84:08:08:9b:90:24:e4:36:ee:24: 5d:d9:af:ba:a7:69:52:57:a6:fc:88:0b:5c:83:1a:32:16:3e: 27:7f:40:63:58:2d:bc:85:39:c9:4b:a7:c0:a5:5f:20:dd:df: 62:4a:32:66:e0:7a:64:87:44:da:d2:98:dd:9f:84:4e:04:a7: c6:4c:92:43:4c:95:cb:34:c3:ca:d1:5e:ae:46:37:56:8e:9a: aa:84:80:75:71:85:84:2b:65:82:9d:fb:1a:d0:eb:56:5a:fd: bb:de:a3:c8:7b:5f:b1:82:74:5a:9c:46:85:e7:d4:7a:96:7c: 0e:c5:d9:bb:dd:ca:f9:80:d1:77:3d:62:f6:2f:b7:d2:18:21: 30:a3:2f:cc:5d:5f:02:8a:13:4d:19:4c:b1:46:a4:12:49:d2: b2:0d:01:00:71:fc:f5:c1:0f:00:c5:4a:02:f3:e2:94:c9:7e: 11:be:ab:e0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEshzCZw/icfvLwEowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIwZTU2ZTgtNzYzYi00MDM3LTkyOWUtYjAxYzhkNzg2 ZTc1MB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk NWYzZTI3ODgtZjBkNC00ODUzLTkwM2EtOWY2N2ZhNjBjYTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5J+/khXEMr3SsI0DRTggjlu0Px9xSQ5HF6C dIxpMQr3YLUY2+cEj/Fwxun+BvtLwbpBDcW74vBROV+XV5v28HM13BBLMETOuBck 8w0LpgqKg2Zs1ShPFUboX7n7rAIxNkD/j5Is1FIlyrJmhqm+T6o23eAKUE0qSphu eRWUmV8ZK1/RZoianhoJJBIxtR0/p0WJxO1AxZFvqHD4phpEMxwY6pPN0JQJcejO tXmtQqbmhOWqSFTMC2Gzuf40FDdsYxLMYLFC20+uAliNO69kNZYmOvnqxtgdU9Po uVjTmUmu/JntjRDWtqr1cPogCc227/8aH5WHlESWCIGS7yvGywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCvmEsVJvxNe5vOts8Hq44JDKe8nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjBl NTZlOC03NjNiLTQwMzctOTI5ZS1iMDFjOGQ3ODZlNzUvYjIwYmU4ZjctMDYzOC0z MzcwLTg3MTUtZjBhYWU0MDQ0N2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODIwZTU2ZTgtNzYzYi00MDM3LTky OWUtYjAxYzhkNzg2ZTc1LzgyMGU1NmU4LTc2M2ItNDAzNy05MjllLWIwMWM4ZDc4 NmU3NS5jcmwwHwYDVR0jBBgwFoAUP3013qVs2g7sbxhuEQO8bIfW0y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MjBlNTZlOC03NjNiLTQwMzctOTI5ZS1iMDFj OGQ3ODZlNzUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8wERE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGPz4K5bhiSvi5VZVVuYhwcnIxg+NcbYBAJXjiEktzSRxXKrCuIG ac94jKq0J/tQJhI/e2Jp4BwtUDsfzg9oeu9fhQxT+fAArSifk1gRdtrmhAgIm5Ak 5DbuJF3Zr7qnaVJXpvyIC1yDGjIWPid/QGNYLbyFOclLp8ClXyDd32JKMmbgemSH RNrSmN2fhE4Ep8ZMkkNMlcs0w8rRXq5GN1aOmqqEgHVxhYQrZYKd+xrQ61Za/bve o8h7X7GCdFqcRoXn1HqWfA7F2bvdyvmA0Xc9YvYvt9IYITCjL8xdXwKKE00ZTLFG pBJJ0rINAQBx/PXBDwDFSgLz4pTJfhG+q+A= -----END CERTIFICATE-----Generated at Wed Nov 5 13:00:50 2025 by rpki-client