$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2fd9995d-d24f-36f9-901e-64486071bed4.roa File: 2fd9995d-d24f-36f9-901e-64486071bed4.roa (raw, json) Hash identifier: H2Wnj00j2s+5ioxM64/y8EIP+kvonDDyPK+zeqiUhk8= Subject key identifier: 80:B6:7D:81:3E:CC:D1:AA:57:A1:6B:FE:02:D2:60:27:3E:1B:7B:10 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B48E20FE26E8ADD248BE8EFF8 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2fd9995d-d24f-36f9-901e-64486071bed4.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 396543 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:0f:e2:6e:8a:dd:24:8b:e8:ef:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=4f0aec4d-e498-4ac9-9fde-29e9403ff8e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:aa:cb:52:6e:c0:54:12:87:f6:9a:17:f0:da: 7f:33:a2:fc:17:34:3c:8c:be:27:cb:1c:e7:45:0c: a8:a7:8c:fc:3e:5f:7d:85:bb:49:99:23:a7:2b:f8: 4b:f9:91:59:53:a1:65:9b:37:dc:0d:70:45:f0:3c: c9:b9:23:ae:d6:92:c7:50:35:f4:53:42:91:38:a4: 43:35:4e:2b:ea:47:f3:b2:48:56:81:e7:ee:a6:d2: e8:d5:3e:a5:f9:cb:16:02:51:bc:b8:a9:1b:2e:f4: c1:b9:f5:ba:bc:39:87:e4:69:82:57:c8:db:19:da: a3:3a:a1:e9:cc:96:cb:1c:5a:a1:29:7c:dc:29:f6: c5:98:a1:66:8c:ae:f9:b4:9e:c1:77:95:94:19:62: b2:ab:1d:d5:8b:87:9e:dc:33:d5:a7:d7:93:4c:2e: eb:37:ed:61:88:c5:fc:27:0b:9c:46:23:2a:16:10: 34:a1:df:42:a3:0f:df:1a:22:7f:bb:07:de:b0:d5: 8e:72:32:04:b5:c0:c8:14:b1:a2:a0:da:b6:25:3b: 5a:7e:e4:e3:dd:5b:07:c2:52:c2:3b:73:65:3e:20: 00:f6:11:7a:66:30:c0:00:c0:64:2f:4f:49:d3:57: fe:76:a0:1d:51:48:23:60:fb:a9:ad:fa:b0:9f:d9: bb:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:B6:7D:81:3E:CC:D1:AA:57:A1:6B:FE:02:D2:60:27:3E:1B:7B:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2fd9995d-d24f-36f9-901e-64486071bed4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:9e:90:29:fd:d0:e4:ba:00:96:61:74:66:ce:83:c0:08:42: 3a:a9:39:cb:f9:6d:4c:f0:18:2a:4f:00:8d:f7:3f:71:d3:fc: 7e:af:36:e9:02:79:fe:8b:96:c0:de:7f:27:a1:8e:50:b6:55: 36:59:04:34:b5:93:84:b2:4b:d1:28:a5:a1:e5:15:27:33:fc: 58:69:9a:31:b3:af:30:a2:0e:cf:25:b7:05:49:a8:03:b1:e7: ff:9a:0a:97:8d:10:8b:3d:83:c8:cf:44:a2:74:10:5c:32:2e: 0a:d5:69:9b:ef:c9:a8:f0:c9:8b:29:c7:d9:15:96:ee:b0:05: 96:89:e5:a7:eb:6b:d6:ce:2f:11:6e:9f:c4:c4:e6:0e:7d:f3: 03:a2:94:71:46:03:0a:e9:d8:2f:71:4f:70:cb:4c:3e:ca:5d: a0:de:f9:10:47:23:f3:f5:06:cd:8a:cb:c2:1c:a8:ea:01:01: 49:fe:51:f2:79:9f:f1:99:66:90:74:7d:53:9d:98:cd:67:94: 65:ab:07:6e:75:cd:2b:d9:c0:63:9e:3d:97:29:7c:ad:c8:5b: cc:3c:44:b7:6e:e2:59:9b:f6:ac:96:29:c6:61:d3:48:93:dd: 83:53:4b:6e:05:ca:89:64:56:a4:4e:92:52:29:e4:cc:4c:bd: 56:4d:b0:ee -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4g/ibordJIvo7/gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk NGYwYWVjNGQtZTQ5OC00YWM5LTlmZGUtMjllOTQwM2ZmOGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwarLUm7AVBKH9poX8Np/M6L8FzQ8jL4nyxzn RQyop4z8Pl99hbtJmSOnK/hL+ZFZU6FlmzfcDXBF8DzJuSOu1pLHUDX0U0KROKRD NU4r6kfzskhWgefuptLo1T6l+csWAlG8uKkbLvTBufW6vDmH5GmCV8jbGdqjOqHp zJbLHFqhKXzcKfbFmKFmjK75tJ7Bd5WUGWKyqx3Vi4ee3DPVp9eTTC7rN+1hiMX8 JwucRiMqFhA0od9Cow/fGiJ/uwfesNWOcjIEtcDIFLGioNq2JTtafuTj3VsHwlLC O3NlPiAA9hF6ZjDAAMBkL09J01f+dqAdUUgjYPuprfqwn9m7jwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIC2fYE+zNGqV6Fr/gLSYCc+G3sQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmZkOTk5NWQtZDI0Zi0z NmY5LTkwMWUtNjQ0ODYwNzFiZWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGqekCn90OS6AJZhdGbOg8AIQjqpOcv5bUzwGCpPAI33P3HT/H6v NukCef6LlsDefyehjlC2VTZZBDS1k4SyS9EopaHlFScz/FhpmjGzrzCiDs8ltwVJ qAOx5/+aCpeNEIs9g8jPRKJ0EFwyLgrVaZvvyajwyYspx9kVlu6wBZaJ5afra9bO LxFun8TE5g598wOilHFGAwrp2C9xT3DLTD7KXaDe+RBHI/P1Bs2Ky8IcqOoBAUn+ UfJ5n/GZZpB0fVOdmM1nlGWrB251zSvZwGOePZcpfK3IW8w8RLdu4lmb9qyWKcZh 00iT3YNTS24FyolkVqROklIp5MxMvVZNsO4= -----END CERTIFICATE-----Generated at Mon Oct 20 10:23:22 2025 by rpki-client