$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1574411d-e55a-3934-b497-be0cc23427c9.roa File: 1574411d-e55a-3934-b497-be0cc23427c9.roa (raw, json) Hash identifier: f1nMkCHPZl5Se+w8p5mhIr/RmT7mDqCm3Wnn1KAH0Es= Subject key identifier: BC:A9:BD:A1:EA:EA:B7:A8:B3:01:58:0A:62:E5:C5:49:83:BA:42:82 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6201D6681B8FD1EC8D099540 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1574411d-e55a-3934-b497-be0cc23427c9.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 396596 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:d6:68:1b:8f:d1:ec:8d:09:95:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=1e1d6908-d8d9-498a-83cf-bd7000093021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a7:f0:18:6c:0e:4e:db:47:bf:f5:10:87:71: d9:ae:11:bf:16:25:63:0e:8f:9b:a3:c6:83:f6:90: 50:96:d2:50:d2:81:6d:60:45:e5:c5:98:25:a2:11: 49:09:21:fa:e3:9e:64:09:65:68:f4:ab:5a:b3:2a: 6a:6c:1c:fe:28:11:41:e7:4f:41:ce:08:41:de:f8: 26:6c:83:83:f8:23:b5:d8:82:73:e2:f1:99:b1:12: 62:42:35:9b:70:ae:b2:61:d9:93:82:aa:3e:c4:5f: 52:bc:af:68:74:e3:ab:4b:27:8c:61:49:a6:dc:86: 77:bd:b6:47:5d:05:82:13:a2:30:af:65:10:79:85: 75:a8:97:4b:7a:e3:1f:cb:b0:9f:7e:c9:22:a6:bb: 02:50:6d:90:e6:15:69:db:34:e7:3b:f7:89:5e:88: d3:04:bc:3c:5e:40:c0:a6:7a:25:06:71:b4:51:11: 6f:e0:ff:0b:c3:be:fc:76:df:18:46:a9:da:34:1f: 03:49:3f:38:d5:b4:c3:a7:b7:83:8e:53:31:71:72: 3e:91:d9:94:25:a9:bc:f4:f4:ef:6b:d3:7f:65:11: 2e:59:d0:62:ed:bb:91:b6:35:91:7c:69:a8:65:1d: a6:3a:ae:48:a7:e6:92:1e:fe:8f:33:0c:e6:07:f8: fa:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:A9:BD:A1:EA:EA:B7:A8:B3:01:58:0A:62:E5:C5:49:83:BA:42:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1574411d-e55a-3934-b497-be0cc23427c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:7c:15:35:ff:b6:37:38:78:d1:aa:e8:51:6b:63:20:79:fe: 8a:6a:f1:c6:65:8d:d1:2a:a9:73:f5:0d:f4:66:87:0f:e8:9d: fa:52:6a:06:c8:3e:8e:22:18:be:24:a1:90:dd:8d:92:4f:8a: 78:35:8c:81:bd:e0:41:a1:64:f1:84:e1:9f:49:31:0f:95:5c: 7a:fd:06:78:37:80:da:7a:50:79:09:ba:1a:14:ef:2b:91:95: 3b:17:3c:72:e0:58:8c:59:a7:5d:ac:20:1e:ae:01:66:35:b9: cb:db:96:4b:09:52:a6:53:b6:81:61:9e:6c:30:3e:8f:6f:73: 4e:7c:5b:48:86:5b:00:43:38:af:3e:19:9e:cd:76:b1:1a:43: c4:16:ee:df:93:2c:19:d8:c6:ce:f9:70:a4:fe:ac:ea:e0:53: 1c:63:fd:de:48:12:79:fa:dc:e9:17:c0:9f:3d:00:fc:40:8b: 84:84:03:1a:6f:0c:df:7e:87:2c:28:21:55:b3:2c:a1:59:46: 13:c4:e8:f0:b9:02:17:79:a8:6b:a0:11:1c:3b:a2:b2:5c:1e: 2b:99:9a:72:9f:16:8e:d4:ae:48:7b:b2:de:ff:4c:63:4d:d9: b8:b4:01:77:42:35:98:8c:20:33:10:6a:01:42:20:d7:f5:ef: 32:f6:d8:99 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAdZoG4/R7I0JlUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk MWUxZDY5MDgtZDhkOS00OThhLTgzY2YtYmQ3MDAwMDkzMDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6fwGGwOTttHv/UQh3HZrhG/FiVjDo+bo8aD 9pBQltJQ0oFtYEXlxZglohFJCSH6455kCWVo9KtasypqbBz+KBFB509BzghB3vgm bIOD+CO12IJz4vGZsRJiQjWbcK6yYdmTgqo+xF9SvK9odOOrSyeMYUmm3IZ3vbZH XQWCE6Iwr2UQeYV1qJdLeuMfy7CffskiprsCUG2Q5hVp2zTnO/eJXojTBLw8XkDA pnolBnG0URFv4P8Lw778dt8YRqnaNB8DST841bTDp7eDjlMxcXI+kdmUJam89PTv a9N/ZREuWdBi7buRtjWRfGmoZR2mOq5Ip+aSHv6PMwzmB/j6QQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLypvaHq6reoswFYCmLlxUmDukKCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTU3NDQxMWQtZTU1YS0z OTM0LWI0OTctYmUwY2MyMzQyN2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGN8FTX/tjc4eNGq6FFrYyB5/opq8cZljdEqqXP1DfRmhw/onfpS agbIPo4iGL4koZDdjZJPing1jIG94EGhZPGE4Z9JMQ+VXHr9Bng3gNp6UHkJuhoU 7yuRlTsXPHLgWIxZp12sIB6uAWY1ucvblksJUqZTtoFhnmwwPo9vc058W0iGWwBD OK8+GZ7NdrEaQ8QW7t+TLBnYxs75cKT+rOrgUxxj/d5IEnn63OkXwJ89APxAi4SE AxpvDN9+hywoIVWzLKFZRhPE6PC5Ahd5qGugERw7orJcHiuZmnKfFo7Urkh7st7/ TGNN2bi0AXdCNZiMIDMQagFCINf17zL22Jk= -----END CERTIFICATE-----Generated at Mon Oct 20 10:31:59 2025 by rpki-client