$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/5dcc2090-7a9e-38f2-8569-8bc593c08a1c.roa File: 5dcc2090-7a9e-38f2-8569-8bc593c08a1c.roa (raw, json) Hash identifier: B6W0PNQ7ohef9Ii1MXi+l1Ys3Sn1XhwjVsrWmUug1b4= Subject key identifier: 96:73:0F:87:BA:14:49:47:AF:7A:23:1C:50:22:54:9F:E4:91:71:F1 Certificate issuer: /CN=74b24643-d6d5-4d2a-b885-83160dec7103 Certificate serial: 010D0C9F4328584AF7EBE5343E2E109191E64698 Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/5dcc2090-7a9e-38f2-8569-8bc593c08a1c.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 1288 IP address blocks: 2620:171:75::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:e5:34:3e:2e:10:91:91:e6:46:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103 Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=37756c60-533b-4f1e-81cf-cc5e8153834f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ee:34:f9:33:d5:80:05:7d:6c:70:f5:07:de: d3:ef:5a:78:5d:23:59:30:95:dd:97:52:c4:40:f7: 7b:7a:f4:25:13:e3:5f:9f:89:dc:8f:89:61:ad:e1: a0:f7:d3:20:ae:a6:c0:38:b3:e1:0f:bd:a0:88:c5: 97:19:ea:fc:d6:cd:29:00:38:33:cd:86:32:bf:38: da:30:05:41:5c:ad:ea:92:d8:ff:12:c2:c1:31:3b: 9c:a6:a5:aa:49:24:d8:43:d5:c6:68:d9:09:d1:13: af:72:3c:be:81:b2:fc:3c:c7:f1:04:b0:c6:e9:a3: cc:31:32:47:31:5d:97:5d:53:45:77:a5:7a:32:8e: 5b:47:74:64:fa:df:fd:e7:94:4a:c4:f4:f6:70:57: 38:a3:33:da:72:70:b5:bc:c0:8c:94:94:8c:8f:73: 2c:92:37:5e:f4:b2:0e:69:76:6b:a2:00:ad:bd:0c: 72:bd:1b:4c:84:55:f2:13:22:90:d6:1a:5e:bb:48: b1:57:73:9d:b3:2a:a4:c0:67:2d:c7:68:bb:c6:9e: 04:82:fd:da:84:20:d7:0f:2b:58:ab:ac:3c:1e:6d: 75:dd:23:b2:b9:80:fa:ea:ef:48:8a:cc:83:c0:fd: 87:de:16:9d:75:f6:38:40:a8:24:ec:4c:0f:54:20: eb:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:73:0F:87:BA:14:49:47:AF:7A:23:1C:50:22:54:9F:E4:91:71:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/5dcc2090-7a9e-38f2-8569-8bc593c08a1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl X509v3 Authority Key Identifier: keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer sbgp-ipAddrBlock: critical IPv6: 2620:171:75::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:4e:56:80:4c:19:ec:6f:88:73:c0:c4:16:01:8f:28:a5:56: bf:a2:5e:33:39:bc:2a:6d:65:1d:ae:75:2f:5d:d3:79:f4:27: 00:74:8b:ca:80:fd:8f:c1:0a:1e:8e:a7:d1:92:bf:8a:fb:ba: 6c:38:17:a2:43:ff:d7:a5:20:e0:18:81:0c:f5:85:08:a0:39: 3f:94:52:3a:7c:4c:27:ff:b2:e7:c6:47:35:7f:72:92:f9:29: 6c:51:cf:de:80:fe:aa:7a:4f:f3:23:73:8a:ae:62:ae:10:ee: 03:1f:f3:db:59:b9:43:86:7f:03:c9:83:8e:48:a0:02:2e:7e: 72:83:5a:d4:80:88:45:b5:41:e6:20:f8:19:a9:0f:01:a6:2e: 5d:87:ec:d7:5e:08:02:14:c8:2a:a9:34:9b:46:c8:c5:ab:1f: d4:8b:7b:b3:f6:ef:40:45:86:58:69:47:8e:05:ed:8d:1f:8f: 87:74:72:be:42:92:9f:bb:b2:ee:55:c2:cb:c2:ae:23:21:3d: 40:d2:cb:a6:cc:e2:f9:16:91:73:e2:a8:0b:2d:cb:6b:96:08: 2f:29:a4:ce:d5:8f:e4:ea:16:8e:f6:1e:e0:37:df:77:95:e2: 44:fd:ce:2a:1f:ff:3a:e5:3d:e4:db:cf:ed:0e:5c:74:32:3f: 67:e5:24:b9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr36+U0Pi4QkZHmRpgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRiMjQ2NDMtZDZkNS00ZDJhLWI4ODUtODMxNjBkZWM3 MTAzMB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk Mzc3NTZjNjAtNTMzYi00ZjFlLTgxY2YtY2M1ZTgxNTM4MzRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+40+TPVgAV9bHD1B97T71p4XSNZMJXdl1LE QPd7evQlE+Nfn4ncj4lhreGg99MgrqbAOLPhD72giMWXGer81s0pADgzzYYyvzja MAVBXK3qktj/EsLBMTucpqWqSSTYQ9XGaNkJ0ROvcjy+gbL8PMfxBLDG6aPMMTJH MV2XXVNFd6V6Mo5bR3Rk+t/955RKxPT2cFc4ozPacnC1vMCMlJSMj3Mskjde9LIO aXZrogCtvQxyvRtMhFXyEyKQ1hpeu0ixV3OdsyqkwGctx2i7xp4Egv3ahCDXDytY q6w8Hm113SOyuYD66u9IisyDwP2H3haddfY4QKgk7EwPVCDr8wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJZzD4e6FElHr3ojHFAiVJ/kkXHxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIy NDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2MGRlYzcxMDMvNWRjYzIwOTAtN2E5ZS0z OGYyLTg1NjktOGJjNTkzYzA4YTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRiMjQ2NDMtZDZkNS00ZDJhLWI4 ODUtODMxNjBkZWM3MTAzLzc0YjI0NjQzLWQ2ZDUtNGQyYS1iODg1LTgzMTYwZGVj NzEwMy5jcmwwHwYDVR0jBBgwFoAUMkgsJnRbWQDk0HgSfvSqropOVxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIyNDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2 MGRlYzcxMDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABcQB1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEZOVoBMGexviHPAxBYBjyilVr+iXjM5vCptZR2udS9d03n0JwB0 i8qA/Y/BCh6Op9GSv4r7umw4F6JD/9elIOAYgQz1hQigOT+UUjp8TCf/sufGRzV/ cpL5KWxRz96A/qp6T/Mjc4quYq4Q7gMf89tZuUOGfwPJg45IoAIufnKDWtSAiEW1 QeYg+BmpDwGmLl2H7NdeCAIUyCqpNJtGyMWrH9SLe7P270BFhlhpR44F7Y0fj4d0 cr5Ckp+7su5VwsvCriMhPUDSy6bM4vkWkXPiqAsty2uWCC8ppM7Vj+TqFo72HuA3 33eV4kT9ziof/zrlPeTbz+0OXHQyP2flJLk= -----END CERTIFICATE-----Generated at Mon Oct 20 18:39:05 2025 by rpki-client