$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1d8eb669-b877-3b3c-815e-6154c615604f.roa File: 1d8eb669-b877-3b3c-815e-6154c615604f.roa (raw, json) Hash identifier: c1WRc7Cl44cUJPfL0jaJOgWzUHqhirgVVPxqp/HCc4M= Subject key identifier: 6E:14:38:3F:B3:41:B2:E9:B2:C4:4C:DE:92:F1:40:49:A5:BD:69:C8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B62021E551CE75EA2AA2AF540 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1d8eb669-b877-3b3c-815e-6154c615604f.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 36628 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:1e:55:1c:e7:5e:a2:aa:2a:f5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=f564f876-9a84-4bce-bf9d-6abde763c4ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:68:5b:09:24:93:72:68:0c:1d:31:7e:98:ea: e1:47:0f:00:c5:aa:ee:f0:0f:ca:90:a5:e0:87:d3: 1b:37:61:9f:1d:e4:a3:e2:dc:5d:14:45:23:19:93: c5:58:4a:90:b8:84:0d:7f:b3:23:3c:63:c1:eb:d9: 52:ff:10:c5:dd:f4:06:1f:a1:60:61:67:4f:16:d9: 5a:34:75:d6:e3:9b:8c:f0:2f:94:3d:2e:0e:8c:67: 21:32:8b:86:10:b4:17:b2:74:ca:0e:3a:e7:47:89: 51:ae:ad:b6:8e:cf:59:11:fe:f1:e3:55:40:f5:91: 68:dd:1c:05:73:48:60:3b:54:f5:52:22:25:98:4d: 58:e9:56:84:1a:0d:77:61:b9:19:7c:02:12:2c:f8: 4c:dd:e7:e3:aa:a1:b0:29:b2:f3:13:dd:f9:df:1e: 68:c5:91:f6:df:3d:77:4a:0f:02:0c:9c:d8:5f:a0: 7f:09:fd:7a:1a:42:29:b0:65:bd:0e:ef:46:b6:c2: 25:28:6b:2a:18:8d:6b:35:d8:ad:2a:74:4d:0f:13: be:01:63:21:b4:4c:46:f4:3e:6e:92:21:c3:33:e7: 46:7e:61:ce:a4:61:b9:1b:f2:b2:d3:03:9e:a9:b2: f9:d3:09:6d:80:57:dd:30:98:59:6b:32:f8:01:49: d6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:14:38:3F:B3:41:B2:E9:B2:C4:4C:DE:92:F1:40:49:A5:BD:69:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1d8eb669-b877-3b3c-815e-6154c615604f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:5c:a9:19:7e:a5:3a:7d:c4:f6:e6:3e:28:7e:6d:ee:ae:4d: a1:de:6c:3e:f4:fc:d8:af:19:87:f2:cf:10:99:59:d0:45:35: f9:60:21:ad:30:0c:af:ac:e9:d8:1c:c0:1c:71:9c:28:29:c7: 50:b9:51:c0:b5:d8:41:ea:1a:ec:81:97:ee:b7:57:58:43:8c: 83:f1:f7:ba:58:04:ee:2b:ec:32:25:db:3c:8e:3a:94:aa:1c: 57:8b:38:45:6a:0b:9b:d4:b8:90:99:da:d5:6c:ed:0c:7c:8c: e0:71:ae:fd:a6:a8:c1:5c:71:52:ee:a2:83:0b:50:7a:0e:18: e7:44:e8:09:08:d2:b9:93:66:64:d3:0f:8f:ea:6a:3d:4e:ad: ea:f7:6e:0a:9c:4d:9a:89:59:83:d8:03:28:d8:b7:28:14:a1: db:33:2d:73:0a:b0:0a:81:d2:ad:13:ff:7a:ec:44:fc:fb:99: c7:24:94:ad:81:25:90:b2:a1:d7:16:8b:9c:61:b6:80:35:49: 98:76:bf:1a:00:9a:34:38:52:03:65:4d:c6:20:64:3a:3b:cd: 6d:81:75:67:94:e3:37:ea:83:c1:81:77:08:f2:99:a3:27:a4: e4:36:ad:57:19:df:08:63:4b:b1:17:e0:9e:c9:83:8c:5b:2e: bd:b1:a9:59 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAh5VHOdeoqoq9UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZjU2NGY4NzYtOWE4NC00YmNlLWJmOWQtNmFiZGU3NjNjNGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGhbCSSTcmgMHTF+mOrhRw8Axaru8A/KkKXg h9MbN2GfHeSj4txdFEUjGZPFWEqQuIQNf7MjPGPB69lS/xDF3fQGH6FgYWdPFtla NHXW45uM8C+UPS4OjGchMouGELQXsnTKDjrnR4lRrq22js9ZEf7x41VA9ZFo3RwF c0hgO1T1UiIlmE1Y6VaEGg13YbkZfAISLPhM3efjqqGwKbLzE9353x5oxZH23z13 Sg8CDJzYX6B/Cf16GkIpsGW9Du9GtsIlKGsqGI1rNditKnRNDxO+AWMhtExG9D5u kiHDM+dGfmHOpGG5G/Ky0wOeqbL50wltgFfdMJhZazL4AUnW/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG4UOD+zQbLpssRM3pLxQEmlvWnIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWQ4ZWI2NjktYjg3Ny0z YjNjLTgxNWUtNjE1NGM2MTU2MDRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACtcqRl+pTp9xPbmPih+be6uTaHebD70/NivGYfyzxCZWdBFNflg Ia0wDK+s6dgcwBxxnCgpx1C5UcC12EHqGuyBl+63V1hDjIPx97pYBO4r7DIl2zyO OpSqHFeLOEVqC5vUuJCZ2tVs7Qx8jOBxrv2mqMFccVLuooMLUHoOGOdE6AkI0rmT ZmTTD4/qaj1Orer3bgqcTZqJWYPYAyjYtygUodszLXMKsAqB0q0T/3rsRPz7mcck lK2BJZCyodcWi5xhtoA1SZh2vxoAmjQ4UgNlTcYgZDo7zW2BdWeU4zfqg8GBdwjy maMnpOQ2rVcZ3whjS7EX4J7Jg4xbLr2xqVk= -----END CERTIFICATE-----Generated at Mon Oct 20 10:27:56 2025 by rpki-client