$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28e5bcba-df81-3e05-af86-6daead68d7c5.roa File: 28e5bcba-df81-3e05-af86-6daead68d7c5.roa (raw, json) Hash identifier: 7h01VqhAqFIGPfi7DqnEZri2qOQmSZneHOD+2Ku/ey0= Subject key identifier: FF:E1:65:DB:A1:A2:3B:81:65:73:18:A2:47:47:F3:21:1B:AF:73:F5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B48E2143B6677BCF5B2A43000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28e5bcba-df81-3e05-af86-6daead68d7c5.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 36621 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:14:3b:66:77:bc:f5:b2:a4:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=632b386c-58f9-41c0-9a75-f4721ae07ef9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d4:8d:d1:aa:f8:89:c3:25:4d:52:79:6e:4e: 07:c7:d1:16:83:fc:dd:d8:fd:85:5e:c3:ad:23:c5: f2:54:e3:75:ac:46:9e:bb:58:4f:8e:a3:34:18:de: 6f:9d:2a:29:c6:2f:d8:07:40:7e:b7:ea:8f:ea:e3: 7f:0a:1a:02:9e:cf:62:36:c6:be:ed:f4:91:72:f7: 6a:cd:bf:72:38:a3:86:d0:00:41:27:e2:bd:8f:e1: 23:08:b1:15:27:9a:15:7b:fd:ce:f1:75:02:7f:e5: 7d:3e:64:91:12:fb:e0:47:99:a7:92:77:9e:ff:3b: de:cb:d6:14:58:a2:28:00:9d:29:62:d8:93:4f:16: 58:c1:3f:96:b2:8e:69:5d:bf:dc:e0:18:e9:2a:52: 2c:34:47:1e:21:15:7d:70:0f:d8:e5:75:fe:d2:e5: 6a:2e:07:de:63:8f:4b:1f:a1:d4:f9:42:9d:e8:60: ff:82:ab:00:fe:ff:5b:a3:ed:b3:cf:d6:a3:94:9a: 37:8a:ab:38:58:b8:fe:30:28:ee:1e:32:90:f8:36: 35:fa:80:ac:eb:12:47:5b:83:d5:b4:87:3c:1a:9c: 90:aa:26:18:24:c9:36:3e:8d:31:cd:2c:5c:0b:7a: a1:36:29:d0:7b:9a:72:37:aa:e1:c4:76:71:ab:8c: d7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:E1:65:DB:A1:A2:3B:81:65:73:18:A2:47:47:F3:21:1B:AF:73:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28e5bcba-df81-3e05-af86-6daead68d7c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:ca:2f:83:09:11:b8:3d:d5:62:0b:67:3c:60:d6:72:41:34: 3a:35:bc:35:58:3c:a6:b4:e3:e7:c4:c2:d0:e5:fb:4d:08:d3: 50:86:fb:d5:a5:8f:08:a6:05:37:a3:57:75:df:a1:37:8e:82: ad:b5:ce:e9:24:78:44:8e:fa:59:fd:e9:99:09:57:8d:e4:aa: af:63:89:0f:1f:3d:62:dd:ec:b9:06:09:fa:bb:35:ab:3a:79: 3a:db:a7:08:42:70:df:d4:00:a4:50:27:6c:db:34:44:fa:04: 51:7a:77:b5:f3:0b:3e:63:a6:23:5e:28:29:fb:31:b1:57:ea: 74:31:6f:c1:a0:5f:4b:8c:96:86:9d:f5:7e:b7:fe:e2:fd:85: f4:c8:7f:54:b6:77:eb:07:78:4e:40:b6:1d:66:93:05:c7:59: 1d:cd:d2:d8:5a:b6:09:2b:1c:ae:80:cc:cc:39:99:ab:6b:e8: d1:7c:f1:87:eb:67:dc:9e:85:e3:41:a0:f3:98:55:6c:94:c0: b7:e5:06:48:3a:23:73:62:e5:fd:80:7b:ee:8d:bd:9a:31:bd: 19:54:c1:39:3f:fd:ec:f1:82:3e:7f:8e:09:13:9f:8f:6b:77: 45:bf:51:d0:ee:4c:af:06:f4:3e:5c:f5:b8:4e:ce:5a:03:90: 8c:57:79:44 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4hQ7Zne89bKkMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk NjMyYjM4NmMtNThmOS00MWMwLTlhNzUtZjQ3MjFhZTA3ZWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dSN0ar4icMlTVJ5bk4Hx9EWg/zd2P2FXsOt I8XyVON1rEaeu1hPjqM0GN5vnSopxi/YB0B+t+qP6uN/ChoCns9iNsa+7fSRcvdq zb9yOKOG0ABBJ+K9j+EjCLEVJ5oVe/3O8XUCf+V9PmSREvvgR5mnknee/zvey9YU WKIoAJ0pYtiTTxZYwT+Wso5pXb/c4BjpKlIsNEceIRV9cA/Y5XX+0uVqLgfeY49L H6HU+UKd6GD/gqsA/v9bo+2zz9ajlJo3iqs4WLj+MCjuHjKQ+DY1+oCs6xJHW4PV tIc8GpyQqiYYJMk2Po0xzSxcC3qhNinQe5pyN6rhxHZxq4zXaQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP/hZduhojuBZXMYokdH8yEbr3P1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjhlNWJjYmEtZGY4MS0z ZTA1LWFmODYtNmRhZWFkNjhkN2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI/KL4MJEbg91WILZzxg1nJBNDo1vDVYPKa04+fEwtDl+00I01CG +9WljwimBTejV3XfoTeOgq21zukkeESO+ln96ZkJV43kqq9jiQ8fPWLd7LkGCfq7 Nas6eTrbpwhCcN/UAKRQJ2zbNET6BFF6d7XzCz5jpiNeKCn7MbFX6nQxb8GgX0uM load9X63/uL9hfTIf1S2d+sHeE5Ath1mkwXHWR3N0thatgkrHK6AzMw5matr6NF8 8YfrZ9yeheNBoPOYVWyUwLflBkg6I3Ni5f2Ae+6NvZoxvRlUwTk//ezxgj5/jgkT n49rd0W/UdDuTK8G9D5c9bhOzloDkIxXeUQ= -----END CERTIFICATE-----Generated at Mon Oct 20 08:17:12 2025 by rpki-client