$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/25320c62-7dd7-391a-a4ee-859cec9e5768.roa File: 25320c62-7dd7-391a-a4ee-859cec9e5768.roa (raw, json) Hash identifier: jiHr4nQgsPoPeIFdwgzqe/2SWRNFHQda+nweCIaRY+E= Subject key identifier: B2:D4:A7:35:35:DA:A1:A8:19:03:97:BA:FF:20:BE:E9:23:82:4C:76 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6201D730AC3141B751F8EF40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/25320c62-7dd7-391a-a4ee-859cec9e5768.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 396552 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:d7:30:ac:31:41:b7:51:f8:ef:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=6826b9b7-0864-480f-859a-152134d51136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:09:fb:5b:38:09:02:60:69:cf:c7:cd:dc:f8: d9:61:f1:d2:01:b6:78:a3:f3:67:98:17:e4:b3:2a: 7d:66:92:44:e3:69:31:d3:24:c7:a8:3a:d6:86:24: 57:a7:d1:cd:ed:e2:26:f1:46:46:65:0f:8a:77:09: b9:5c:97:13:e0:a2:0d:1a:0b:e0:dc:4d:88:56:8c: ea:9c:df:24:65:c5:05:92:46:a8:2d:06:3a:24:00: 33:0c:7e:fd:d8:ce:49:e7:19:77:ff:fc:b6:f6:41: 2d:23:99:6b:0b:a1:92:49:fa:a8:d6:77:08:a1:11: f7:c7:d0:6f:80:32:b0:7b:de:7f:28:79:c7:69:99: f0:e6:19:9c:28:9c:11:6f:74:24:7b:0b:0c:83:ea: 39:65:2f:f8:66:83:67:d1:00:41:99:61:e0:4c:70: 66:b1:6e:f4:96:97:7d:be:29:dd:0a:56:4b:2a:62: cb:17:03:1b:05:eb:83:f9:76:18:0a:45:3f:32:5c: 04:5d:12:40:96:db:12:9c:e0:34:83:9c:09:dd:c3: be:03:7b:e0:f4:c9:fc:04:17:53:04:d7:b7:21:1d: 4a:ca:b9:45:13:2a:76:57:79:26:18:3b:73:64:1a: 4a:eb:7c:03:9e:fb:2d:ac:ee:8f:c7:a4:87:42:16: 8c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D4:A7:35:35:DA:A1:A8:19:03:97:BA:FF:20:BE:E9:23:82:4C:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/25320c62-7dd7-391a-a4ee-859cec9e5768.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:0e:82:09:e7:a3:85:9b:36:da:9e:f2:91:5c:79:10:9c:fe: 47:a5:73:ca:79:76:08:9f:08:f0:4e:5f:4a:e6:ac:71:e8:d1: 12:e2:57:4f:b9:38:cd:f2:c1:6f:ca:a5:cf:73:4b:03:4b:93: bb:b8:fb:88:a7:52:96:51:d5:1d:10:10:63:6f:14:f6:79:57: 34:e2:48:67:50:4d:1d:a9:70:ef:b2:cd:30:ef:c3:1c:4c:79: f3:b5:cb:64:ac:b4:b2:f8:f7:83:06:26:d6:a6:2f:b9:a8:30: bd:fe:aa:83:bc:61:e2:dc:5a:1a:c1:23:09:fd:44:5c:b3:94: 1d:8e:3a:2c:e8:c0:16:28:15:7d:4f:bc:fa:b7:85:f0:8d:3a: 87:df:06:2f:ea:4e:30:bd:2e:fc:38:d4:2a:cd:71:9e:74:11: 81:92:b8:cf:05:b4:cd:dd:91:79:4c:e2:e8:fe:83:58:ea:a3: f3:41:75:58:33:02:01:0d:03:02:14:41:b4:c9:4b:63:3e:f9: 8e:3a:5e:21:30:64:90:29:22:72:03:42:b8:9e:76:35:31:b7: d7:65:3c:8f:46:bd:bb:7f:a2:66:9d:2f:da:dd:f8:9b:86:d1: 20:6c:94:76:a9:1d:3c:90:d6:76:d8:a0:4c:9b:21:3d:53:8b: 28:27:35:ad -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAdcwrDFBt1H470AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NjgyNmI5YjctMDg2NC00ODBmLTg1OWEtMTUyMTM0ZDUxMTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7gn7WzgJAmBpz8fN3PjZYfHSAbZ4o/NnmBfk syp9ZpJE42kx0yTHqDrWhiRXp9HN7eIm8UZGZQ+Kdwm5XJcT4KINGgvg3E2IVozq nN8kZcUFkkaoLQY6JAAzDH792M5J5xl3//y29kEtI5lrC6GSSfqo1ncIoRH3x9Bv gDKwe95/KHnHaZnw5hmcKJwRb3QkewsMg+o5ZS/4ZoNn0QBBmWHgTHBmsW70lpd9 vindClZLKmLLFwMbBeuD+XYYCkU/MlwEXRJAltsSnOA0g5wJ3cO+A3vg9Mn8BBdT BNe3IR1KyrlFEyp2V3kmGDtzZBpK63wDnvstrO6Px6SHQhaMwwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLLUpzU12qGoGQOXuv8gvukjgkx2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjUzMjBjNjItN2RkNy0z OTFhLWE0ZWUtODU5Y2VjOWU1NzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJAOggnno4WbNtqe8pFceRCc/kelc8p5dgifCPBOX0rmrHHo0RLi V0+5OM3ywW/Kpc9zSwNLk7u4+4inUpZR1R0QEGNvFPZ5VzTiSGdQTR2pcO+yzTDv wxxMefO1y2SstLL494MGJtamL7moML3+qoO8YeLcWhrBIwn9RFyzlB2OOizowBYo FX1PvPq3hfCNOoffBi/qTjC9Lvw41CrNcZ50EYGSuM8FtM3dkXlM4uj+g1jqo/NB dVgzAgENAwIUQbTJS2M++Y46XiEwZJApInIDQriedjUxt9dlPI9Gvbt/omadL9rd +JuG0SBslHapHTyQ1nbYoEybIT1TiygnNa0= -----END CERTIFICATE-----Generated at Mon Oct 20 08:12:05 2025 by rpki-client