$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ec5c20f-0035-3bb0-8576-0ccea95bc991.roa File: 1ec5c20f-0035-3bb0-8576-0ccea95bc991.roa (raw, json) Hash identifier: qF9d4/+De4d+kj6cKQOpcnMZG4LQn2xhlFx+kmIf1RM= Subject key identifier: 41:1D:7D:32:3B:21:7F:4C:DB:F0:B6:D5:8C:CD:78:78:08:0F:E1:4C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B48E2112841F14B053CD52800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ec5c20f-0035-3bb0-8576-0ccea95bc991.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397207 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:11:28:41:f1:4b:05:3c:d5:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=c9965771-c684-4358-8da1-5d61937b4858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:20:d8:b9:8d:f1:83:3c:8e:a2:ea:d1:a5:c6: 83:8b:2a:31:96:d3:39:b2:f4:21:f3:92:10:ad:8b: f4:12:8c:d5:b6:59:29:01:ae:13:00:87:4f:73:26: 3f:e9:da:f8:9d:c2:e7:9f:aa:6e:82:35:c1:0f:1f: db:70:58:a5:72:57:28:10:3d:a6:fc:67:35:0d:71: 2e:bf:4e:19:7d:f1:11:75:4c:32:13:25:3b:db:fe: 17:c3:47:30:b8:d2:0a:79:8f:40:ee:3f:61:45:03: 95:6d:f9:16:99:b4:2b:bc:a4:a4:e0:e1:67:bf:ad: e4:2e:5f:ba:af:09:d7:4b:09:fc:87:0e:75:c7:7e: 45:33:5f:d6:13:5d:44:c7:b8:ab:d7:51:d5:b7:c3: be:47:e7:4d:e1:4d:1b:ba:0e:fe:e4:f8:c6:f9:c6: b1:b0:2b:2f:87:19:4f:d6:35:5a:1c:74:9a:d0:af: 0a:17:af:1e:d2:2e:68:7f:b2:fd:ad:12:4c:ae:d2: 1d:b6:6a:6d:23:de:b7:ec:5e:24:44:b2:19:79:58: f4:5a:a4:0b:90:57:1f:10:98:95:f9:0e:b6:80:53: 7a:a1:16:0e:26:c5:95:be:9f:bf:5a:19:88:a8:65: ae:6a:2c:8d:d3:d2:e1:a9:cc:bf:f4:51:0d:ae:5a: d7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:1D:7D:32:3B:21:7F:4C:DB:F0:B6:D5:8C:CD:78:78:08:0F:E1:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ec5c20f-0035-3bb0-8576-0ccea95bc991.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:77:a0:19:0a:93:f1:ff:e7:e8:f8:d6:6f:98:a4:03:b4:28: fa:37:3a:3a:54:e2:22:9e:48:27:c1:14:05:94:d0:85:c6:19: 50:0c:dc:89:c5:24:b1:b6:bb:cb:22:df:ce:6a:d4:07:74:5b: ab:bb:6d:87:10:12:d4:ba:3d:fe:38:c9:ab:5b:0f:44:4e:9b: df:6e:78:ae:f3:6b:c8:a6:bd:0a:0b:3c:c1:91:1c:3a:05:fc: 1f:70:e3:f3:3f:7e:57:4e:8e:6a:e4:fc:07:b2:d5:d2:c8:cd: 88:32:f4:74:04:68:02:17:59:38:5e:bd:9a:59:4d:0a:e6:69: 63:fa:22:b5:d4:1b:35:0c:c7:ee:b7:6a:50:ba:9a:01:58:80: 78:13:7a:ad:d7:e3:8d:4b:d0:79:b1:ea:c2:f8:f2:74:78:fa: 56:fb:7d:df:08:aa:9e:ec:74:89:6e:5f:1c:05:88:a2:bc:6c: 59:43:5d:09:c9:69:22:58:50:a8:82:99:ac:20:b2:06:62:b5: 2e:83:4b:d2:ca:52:e8:95:99:12:bf:03:af:3a:d7:35:b3:92: 9d:f9:91:18:75:08:71:96:13:27:fa:74:c0:b0:82:8c:d5:62: b4:99:33:eb:3d:8b:bf:92:de:77:69:eb:82:4a:44:1c:51:13: c2:4d:82:5a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4hEoQfFLBTzVKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk Yzk5NjU3NzEtYzY4NC00MzU4LThkYTEtNWQ2MTkzN2I0ODU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCDYuY3xgzyOourRpcaDiyoxltM5svQh85IQ rYv0EozVtlkpAa4TAIdPcyY/6dr4ncLnn6pugjXBDx/bcFilclcoED2m/Gc1DXEu v04ZffERdUwyEyU72/4Xw0cwuNIKeY9A7j9hRQOVbfkWmbQrvKSk4OFnv63kLl+6 rwnXSwn8hw51x35FM1/WE11Ex7ir11HVt8O+R+dN4U0bug7+5PjG+caxsCsvhxlP 1jVaHHSa0K8KF68e0i5of7L9rRJMrtIdtmptI9637F4kRLIZeVj0WqQLkFcfEJiV +Q62gFN6oRYOJsWVvp+/WhmIqGWuaiyN09Lhqcy/9FENrlrX+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEEdfTI7IX9M2/C21YzNeHgID+FMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWVjNWMyMGYtMDAzNS0z YmIwLTg1NzYtMGNjZWE5NWJjOTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABl3oBkKk/H/5+j41m+YpAO0KPo3OjpU4iKeSCfBFAWU0IXGGVAM 3InFJLG2u8si385q1Ad0W6u7bYcQEtS6Pf44yatbD0ROm99ueK7za8imvQoLPMGR HDoF/B9w4/M/fldOjmrk/Aey1dLIzYgy9HQEaAIXWThevZpZTQrmaWP6IrXUGzUM x+63alC6mgFYgHgTeq3X441L0Hmx6sL48nR4+lb7fd8Iqp7sdIluXxwFiKK8bFlD XQnJaSJYUKiCmawgsgZitS6DS9LKUuiVmRK/A6861zWzkp35kRh1CHGWEyf6dMCw gozVYrSZM+s9i7+S3ndp64JKRBxRE8JNglo= -----END CERTIFICATE-----Generated at Mon Oct 20 10:23:24 2025 by rpki-client