$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e554928-7feb-3557-86a2-4b827d5925ae.roa File: 2e554928-7feb-3557-86a2-4b827d5925ae.roa (raw, json) Hash identifier: So4MWy2iFNnWK8q2ktb+eMV2zDQ6+IiEk7ySlUB/iPk= Subject key identifier: 5E:07:A7:95:E8:CE:AE:FF:80:76:6A:AE:4A:14:1A:28:10:03:CC:0D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B48E1A7E464A9AAA3FB474480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e554928-7feb-3557-86a2-4b827d5925ae.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 396608 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:a7:e4:64:a9:aa:a3:fb:47:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=c8463635-0a1e-420d-8ab6-8aecec2faa5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0d:95:0f:8b:97:a2:16:e3:95:d1:d7:34:aa: 1d:b0:f5:b0:c0:25:5a:08:33:73:6d:93:9a:32:95: c9:20:d8:18:9b:09:c1:60:27:8a:de:8b:79:e6:a5: ef:b9:34:c2:41:7a:3c:ef:10:9d:d5:5d:b3:c4:cc: 8e:31:81:8b:51:97:b3:ed:a2:e6:a3:83:dd:e4:9f: 44:06:d7:75:46:4f:f0:f0:52:cd:2b:25:c1:55:af: 05:a9:f8:04:15:97:a7:34:24:92:12:29:20:6e:20: fe:b9:90:25:06:53:68:04:b1:b8:15:2e:00:7f:10: be:e4:a0:0d:4f:3c:60:17:20:9b:71:ff:75:49:36: 03:93:29:ec:b3:45:14:06:bb:81:b5:bd:bc:4e:6d: 9b:fc:76:46:e2:b4:29:c8:c7:81:2f:3e:00:b9:58: 94:43:c9:ee:27:f8:8e:d7:cf:05:b0:63:cf:dc:59: 5b:f8:1c:38:c1:f1:9a:3b:43:43:73:78:7a:7f:ef: af:0e:29:2b:51:13:87:71:b0:e8:09:40:45:5a:fd: cd:13:57:0a:68:c3:6a:aa:61:e0:38:6f:e0:39:c2: a2:7e:9b:33:23:04:4a:f3:ea:b4:73:30:92:19:18: 96:39:13:d7:f5:e9:72:7e:05:08:14:64:90:d6:03: a2:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:07:A7:95:E8:CE:AE:FF:80:76:6A:AE:4A:14:1A:28:10:03:CC:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e554928-7feb-3557-86a2-4b827d5925ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:2c:ae:42:08:c4:3c:3a:dd:b4:59:1c:47:0f:d1:d7:2c:a9: f3:b2:29:5f:d9:91:36:a9:0c:ff:59:6a:0c:ea:70:7a:1c:7c: 08:f4:e3:d9:09:66:3d:76:51:dc:67:b1:c9:b1:ed:bd:d9:dd: 11:b7:c4:51:93:28:1d:fa:b7:70:cf:42:02:64:ce:57:4e:15: d4:58:5c:b8:1b:6a:af:be:3a:cf:59:4b:4d:58:25:e9:61:a9: cc:f0:d7:b8:4e:42:4b:4d:78:c6:90:7c:46:0f:e0:f5:ab:6d: ac:7e:a7:f0:97:22:98:00:27:86:80:6c:94:e5:b0:b4:30:41: f8:fb:a9:0d:88:07:f3:5b:14:8d:1a:08:38:4a:9b:99:75:82: d7:67:57:d0:33:a6:e9:6e:2c:24:68:57:53:23:4a:82:c3:40: 6a:77:21:c0:f0:70:d9:e5:37:42:b6:44:aa:ba:be:2c:98:f4: d7:e3:45:c5:86:04:0a:d8:f3:9e:fa:63:51:03:3a:71:eb:ce: ac:1d:98:aa:07:8b:07:44:1d:0b:19:1f:49:f0:ba:db:5d:c9: 89:d3:35:39:e6:f3:1f:6e:0b:67:9b:4a:fe:ab:da:b0:f7:b4: 83:af:dd:c6:ea:f4:1f:68:7b:aa:a9:6b:f9:2b:76:a8:b9:95: 78:be:67:41 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4afkZKmqo/tHRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk Yzg0NjM2MzUtMGExZS00MjBkLThhYjYtOGFlY2VjMmZhYTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzg2VD4uXohbjldHXNKodsPWwwCVaCDNzbZOa MpXJINgYmwnBYCeK3ot55qXvuTTCQXo87xCd1V2zxMyOMYGLUZez7aLmo4Pd5J9E Btd1Rk/w8FLNKyXBVa8FqfgEFZenNCSSEikgbiD+uZAlBlNoBLG4FS4AfxC+5KAN TzxgFyCbcf91STYDkynss0UUBruBtb28Tm2b/HZG4rQpyMeBLz4AuViUQ8nuJ/iO 188FsGPP3Flb+Bw4wfGaO0NDc3h6f++vDikrUROHcbDoCUBFWv3NE1cKaMNqqmHg OG/gOcKifpszIwRK8+q0czCSGRiWORPX9elyfgUIFGSQ1gOiQQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF4Hp5Xozq7/gHZqrkoUGigQA8wNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmU1NTQ5MjgtN2ZlYi0z NTU3LTg2YTItNGI4MjdkNTkyNWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH4srkIIxDw63bRZHEcP0dcsqfOyKV/ZkTapDP9ZagzqcHocfAj0 49kJZj12Udxnscmx7b3Z3RG3xFGTKB36t3DPQgJkzldOFdRYXLgbaq++Os9ZS01Y Jelhqczw17hOQktNeMaQfEYP4PWrbax+p/CXIpgAJ4aAbJTlsLQwQfj7qQ2IB/Nb FI0aCDhKm5l1gtdnV9AzpuluLCRoV1MjSoLDQGp3IcDwcNnlN0K2RKq6viyY9Nfj RcWGBArY8576Y1EDOnHrzqwdmKoHiwdEHQsZH0nwuttdyYnTNTnm8x9uC2ebSv6r 2rD3tIOv3cbq9B9oe6qpa/krdqi5lXi+Z0E= -----END CERTIFICATE-----Generated at Mon Oct 20 08:12:10 2025 by rpki-client