$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/192eaff7-97f0-3a92-8759-3880ed2af9b3.roa File: 192eaff7-97f0-3a92-8759-3880ed2af9b3.roa (raw, json) Hash identifier: DsYo0Vm1puQBlaFMxG18XdutIO2XbXLyo70EEeHR4aU= Subject key identifier: FD:BD:32:0F:A2:18:D9:EB:E2:DF:85:5B:DB:07:22:38:D7:AC:C1:2B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B8EAD06B8462815325AA8CA80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/192eaff7-97f0-3a92-8759-3880ed2af9b3.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 7342 IP address blocks: 2620:74:5b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ad:06:b8:46:28:15:32:5a:a8:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=af83d320-4e6e-4847-a293-e4330b979d18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:77:6f:07:31:6c:2a:74:7b:af:e4:fb:c8:d3: fd:53:3e:b8:4a:3e:ed:f5:50:dc:37:4c:f0:a2:8e: 44:52:e4:72:b3:c1:60:7f:9f:7b:29:92:a7:4e:af: a7:e1:d2:0d:64:d4:3c:d5:19:de:37:c7:ad:f3:ad: 26:fd:eb:b4:8a:22:df:7c:4e:40:f1:5f:7c:05:a1: bd:4d:23:3c:72:0a:9a:f8:41:8e:1c:28:76:74:80: 6e:71:50:07:73:32:d7:e0:10:e0:21:95:0a:f1:7a: e5:dc:c8:4b:a7:48:ee:35:90:9d:54:3c:f9:c6:9e: 16:b2:5c:8b:7e:53:0e:cf:68:52:46:70:b9:1b:d9: 3a:d5:dd:7d:6c:52:0a:a8:5f:d7:c4:06:66:de:41: bb:4a:95:cc:7c:a6:2f:cf:74:d7:9a:1c:31:c7:90: d2:14:f5:a0:87:68:05:8f:d0:e7:aa:b8:39:9f:54: 50:ca:e0:e3:82:f1:c6:94:38:bf:4f:41:54:45:fd: a5:ef:51:2c:9c:e9:61:60:f7:9a:be:4d:cf:84:f5: 92:62:eb:b6:47:d8:64:e0:0e:50:5b:61:fc:5a:f3: 2a:ec:45:d4:e8:9c:6d:d8:57:52:84:10:4e:c3:1b: 2b:c2:ed:53:c7:7e:4c:69:ba:48:08:cd:b3:74:37: 4e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:BD:32:0F:A2:18:D9:EB:E2:DF:85:5B:DB:07:22:38:D7:AC:C1:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/192eaff7-97f0-3a92-8759-3880ed2af9b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:5b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:02:6f:10:80:c4:92:a7:8d:1a:40:0b:53:64:50:09:1b:c7: d5:69:29:3b:61:29:98:04:50:82:b8:d6:d9:70:34:b6:ce:f9: d4:39:09:a1:20:42:4c:24:d4:ab:a4:9a:35:5b:6a:2c:13:82: 1d:4f:a3:d9:d5:ef:95:73:dd:85:39:49:1b:2f:c9:73:a8:f5: d5:49:81:f3:52:c4:8c:31:85:64:5c:b7:0f:7d:7c:ed:f7:93: 29:26:af:9e:dc:6c:40:20:1c:04:36:07:85:26:d4:bf:16:05: bb:23:9e:4c:aa:7f:6b:bf:74:01:22:54:3a:b1:30:3e:d2:82: e5:52:c0:6d:51:96:e4:82:c8:56:c4:c1:a6:53:64:b0:25:17: 2c:e4:48:2a:21:17:0e:9c:25:a0:c8:82:d6:5d:2d:18:62:b1: d5:cb:82:8b:72:a2:e5:79:3a:c8:8e:c5:f2:ca:93:df:ab:8d: c0:eb:8b:3e:e5:ef:4e:04:bc:67:eb:93:79:65:b9:cd:fa:11: 3b:e1:96:10:f2:79:23:a1:d7:9c:cc:29:2f:48:18:c9:29:3f: 6d:b5:49:d9:80:44:5a:ae:c7:d8:ab:4b:c0:1e:bf:47:16:cd: 2c:69:09:7f:ac:55:84:79:f6:f0:6c:d5:dd:26:d2:77:57:38: e1:c0:a7:4b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuOrQa4RigVMlqoyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk YWY4M2QzMjAtNGU2ZS00ODQ3LWEyOTMtZTQzMzBiOTc5ZDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhndvBzFsKnR7r+T7yNP9Uz64Sj7t9VDcN0zw oo5EUuRys8Fgf597KZKnTq+n4dINZNQ81RneN8et860m/eu0iiLffE5A8V98BaG9 TSM8cgqa+EGOHCh2dIBucVAHczLX4BDgIZUK8Xrl3MhLp0juNZCdVDz5xp4WslyL flMOz2hSRnC5G9k61d19bFIKqF/XxAZm3kG7SpXMfKYvz3TXmhwxx5DSFPWgh2gF j9Dnqrg5n1RQyuDjgvHGlDi/T0FURf2l71EsnOlhYPeavk3PhPWSYuu2R9hk4A5Q W2H8WvMq7EXU6Jxt2FdShBBOwxsrwu1Tx35MabpICM2zdDdOtQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP29Mg+iGNnr4t+FW9sHIjjXrMErMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTkyZWFmZjctOTdmMC0z YTkyLTg3NTktMzg4MGVkMmFmOWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFkCbxCAxJKnjRpAC1NkUAkbx9VpKTthKZgEUIK41tlwNLbO+dQ5 CaEgQkwk1KukmjVbaiwTgh1Po9nV75Vz3YU5SRsvyXOo9dVJgfNSxIwxhWRctw99 fO33kykmr57cbEAgHAQ2B4Um1L8WBbsjnkyqf2u/dAEiVDqxMD7SguVSwG1RluSC yFbEwaZTZLAlFyzkSCohFw6cJaDIgtZdLRhisdXLgotyouV5OsiOxfLKk9+rjcDr iz7l704EvGfrk3lluc36ETvhlhDyeSOh15zMKS9IGMkpP221SdmARFqux9irS8Ae v0cWzSxpCX+sVYR59vBs1d0m0ndXOOHAp0s= -----END CERTIFICATE-----Generated at Tue Oct 21 06:27:02 2025 by rpki-client