$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/22fd056a-60cd-3479-a146-fe307ce6a142.roa File: 22fd056a-60cd-3479-a146-fe307ce6a142.roa (raw, json) Hash identifier: CNcX1CJqN6ZOsusX67fQ7LcYzRMSV4aXTzxkqxAPFZo= Subject key identifier: E5:2E:A6:C1:A5:8F:44:AA:2F:46:A8:F2:2C:02:23:30:DF:E7:AD:D1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B355701E629D8056015F223E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/22fd056a-60cd-3479-a146-fe307ce6a142.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 396608 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:57:01:e6:29:d8:05:60:15:f2:23:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=02e84842-f064-45fb-a3ef-4f124be4ab99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:7d:60:36:be:f6:45:44:0f:62:74:16:b8:c6: 9b:98:9f:56:9f:85:7d:a6:ac:81:98:01:fd:a7:80: 8f:44:fb:56:95:87:e3:52:07:ab:e2:50:9b:bc:52: 42:bf:af:f0:e2:0b:6c:a4:5c:99:ed:3e:a5:8b:52: 98:8e:44:66:a8:71:bb:49:85:a4:a8:5c:7e:34:64: 4f:dc:e0:85:7b:be:69:fc:e4:51:31:bb:ee:ce:95: 04:2c:64:2a:c6:54:f1:4c:47:e7:66:bf:78:bf:14: d5:9c:75:79:7c:a8:9f:a8:0f:8e:cd:b5:db:a5:d5: 52:60:6f:0e:31:56:c3:08:74:fd:ba:40:52:87:e9: bd:71:1b:87:a2:81:5c:69:b7:ef:2e:f2:c5:28:98: e9:c8:14:24:ec:09:ce:e5:05:71:d6:2d:5a:47:38: 1f:ae:fa:b9:18:bb:54:6f:f7:62:a6:d6:fa:97:89: 42:86:bc:82:ee:0a:d9:c3:e7:73:d2:da:c2:e3:51: b7:07:99:07:d2:f8:28:67:0e:9b:b8:98:82:31:43: 9c:32:ae:c5:27:51:94:c7:9c:81:b5:38:6b:c2:d8: 12:da:de:c2:2e:3d:57:d3:8a:ee:79:49:a7:15:3d: c9:dc:75:73:7d:4e:01:c5:75:0f:87:cf:6c:53:7d: 73:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:2E:A6:C1:A5:8F:44:AA:2F:46:A8:F2:2C:02:23:30:DF:E7:AD:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/22fd056a-60cd-3479-a146-fe307ce6a142.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:21:ef:c3:31:5c:c4:7f:5c:d4:0d:7d:23:36:7c:bb:ff:8a: 44:e1:6d:9f:79:e3:f2:c9:11:61:26:bc:cd:9e:4a:49:36:02: 58:e2:36:13:9e:86:a7:86:b1:27:cb:8a:89:17:1f:25:9f:4f: 78:15:1f:eb:73:ba:70:85:65:07:bb:45:c4:26:82:cb:8f:7e: 13:98:a9:24:07:82:3a:43:0c:46:64:54:02:48:02:17:fb:ff: 55:93:0f:b4:e4:43:0f:e5:4d:bf:b1:f9:6c:64:f7:b6:44:1b: a3:9c:dc:5b:3f:b9:09:87:3d:13:3e:22:9a:8f:6b:a3:78:89: 24:36:f4:a9:c7:92:47:82:c0:1a:b2:af:f2:93:a6:7d:e0:5f: 25:23:20:2a:dc:2a:de:2c:43:45:cc:50:21:35:27:0b:0d:13: e6:83:40:4f:b0:75:5e:97:92:d2:52:ce:92:c2:7f:7a:f0:15: 6d:fa:c7:e9:c8:1f:18:4c:91:60:3c:52:79:95:c5:39:68:27: 04:fc:27:42:f9:66:3e:a2:30:ac:dc:7a:33:38:fb:2f:8d:7c: 9d:50:e7:c0:89:e9:f8:8a:97:21:9c:81:d0:6a:e0:1d:03:19: 72:52:8b:5c:da:49:ab:f9:3e:b9:c9:61:8b:46:c0:44:a0:b6: a3:4f:dc:1a -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEs1VwHmKdgFYBXyI+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk MDJlODQ4NDItZjA2NC00NWZiLWEzZWYtNGYxMjRiZTRhYjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgn1gNr72RUQPYnQWuMabmJ9Wn4V9pqyBmAH9 p4CPRPtWlYfjUger4lCbvFJCv6/w4gtspFyZ7T6li1KYjkRmqHG7SYWkqFx+NGRP 3OCFe75p/ORRMbvuzpUELGQqxlTxTEfnZr94vxTVnHV5fKifqA+OzbXbpdVSYG8O MVbDCHT9ukBSh+m9cRuHooFcabfvLvLFKJjpyBQk7AnO5QVx1i1aRzgfrvq5GLtU b/diptb6l4lChryC7grZw+dz0trC41G3B5kH0vgoZw6buJiCMUOcMq7FJ1GUx5yB tThrwtgS2t7CLj1X04rueUmnFT3J3HVzfU4BxXUPh89sU31zkwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOUupsGlj0SqL0ao8iwCIzDf563RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjJmZDA1NmEtNjBjZC0z NDc5LWExNDYtZmUzMDdjZTZhMTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCDIe/DMVzEf1zUDX0jNny7/4pE4W2feePyyRFh JrzNnkpJNgJY4jYTnoanhrEny4qJFx8ln094FR/rc7pwhWUHu0XEJoLLj34TmKkk B4I6QwxGZFQCSAIX+/9Vkw+05EMP5U2/sflsZPe2RBujnNxbP7kJhz0TPiKaj2uj eIkkNvSpx5JHgsAasq/yk6Z94F8lIyAq3CreLENFzFAhNScLDRPmg0BPsHVel5LS Us6Swn968BVt+sfpyB8YTJFgPFJ5lcU5aCcE/CdC+WY+ojCs3HozOPsvjXydUOfA ien4ipchnIHQauAdAxlyUotc2kmr+T65yWGLRsBEoLajT9wa -----END CERTIFICATE-----Generated at Mon Oct 20 15:52:38 2025 by rpki-client