$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3042086e-a87d-399b-9e30-fb80daa4afd6.roa File: 3042086e-a87d-399b-9e30-fb80daa4afd6.roa (raw, json) Hash identifier: o7Ew9hc08X+S3fmY9S7Qy0pemZYeNIyV9ICetJEZRaA= Subject key identifier: 97:A1:29:14:F3:2B:3A:69:92:5B:B4:41:B4:EC:CA:A8:DF:DD:6A:2F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B48E1BB239213B2CD16820740 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3042086e-a87d-399b-9e30-fb80daa4afd6.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 20172 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:bb:23:92:13:b2:cd:16:82:07:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=4e726f5a-d0cb-4e27-a1e3-39f2a07b1b0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:21:7d:74:58:6d:44:58:5c:ce:07:90:25:49: e7:73:60:53:38:95:c2:0a:17:5b:a6:27:4c:6d:88: 56:9f:9d:59:71:0c:01:8a:ed:ad:18:36:5e:90:2f: 22:de:71:29:4d:d5:43:81:d9:c3:dd:71:e8:1d:3f: c5:15:20:2e:ab:88:4d:42:4c:84:3c:82:2a:a4:cf: 73:b8:6b:1d:05:a7:5d:34:af:d6:66:78:65:41:26: 6f:f6:ce:a5:43:51:bc:ee:04:08:4b:e2:9c:b6:62: 86:5a:58:ce:f8:03:ea:0d:6e:9f:da:58:0a:79:d2: f1:bf:de:0c:ae:d7:e7:b9:52:7e:5c:cd:e2:21:7e: 96:38:50:b5:85:27:9e:7f:b0:ba:30:43:f8:2a:50: 79:d9:f9:59:60:df:c9:c0:dd:d0:fe:c9:98:d9:a5: 20:53:29:df:f2:46:1e:41:07:d5:f6:43:fe:52:92: f2:15:8a:43:83:94:fe:9f:f5:78:9a:00:76:ca:4e: 9d:ad:f7:d0:64:69:84:d4:d0:d7:0c:b0:2a:1b:df: 31:ad:fd:bb:1b:42:85:6a:4e:6e:48:03:ba:fd:53: f1:38:92:ef:f1:3d:57:51:9f:fb:a7:d7:24:22:61: 3d:ad:d0:81:c1:91:03:65:fa:b5:ca:82:de:e9:49: 15:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A1:29:14:F3:2B:3A:69:92:5B:B4:41:B4:EC:CA:A8:DF:DD:6A:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3042086e-a87d-399b-9e30-fb80daa4afd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:50:7c:bb:a0:41:0b:3d:e0:60:3f:dd:6b:6a:bd:5c:4c:bb: 4d:0a:9d:2b:dc:dd:48:55:a8:52:11:ff:5e:34:2e:ee:be:bf: 38:76:dd:8f:c5:49:49:96:5c:36:41:6f:5d:65:3d:95:21:a4: 80:b2:f4:2c:1b:17:4d:ea:f9:12:0e:2c:c5:74:0c:fc:cf:f3: 8b:e2:c5:d2:6e:04:60:82:a6:2c:f5:4a:fb:45:7e:35:60:a9: d1:85:b0:0b:94:a8:b4:9a:34:1c:dd:e4:52:e8:5e:68:81:49: 1a:42:ec:cd:5c:4b:69:f0:55:ae:b2:17:a6:38:91:9e:2f:aa: 47:6c:43:dc:72:0f:b9:48:d4:07:d5:7c:28:96:b2:31:70:fd: ba:f7:f1:cb:9d:a9:cd:1f:d0:a1:9a:10:98:7b:fc:e8:a9:27: fb:23:5f:81:0a:e8:58:35:5c:25:d0:64:89:ae:ca:67:6c:04: f3:5b:4d:2e:8a:08:74:1a:ad:60:55:b5:dd:00:d2:f5:fb:3b: 3f:d0:95:06:de:0f:e8:b8:9d:01:56:e8:be:e6:57:37:8a:2b: da:e3:9c:79:01:a6:46:d9:f6:92:b3:22:70:11:bf:ca:8d:3b: b9:6a:39:e5:00:54:e5:6b:44:5c:2b:e1:ae:73:ae:60:8e:35: a2:f7:fb:c2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4bsjkhOyzRaCB0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk NGU3MjZmNWEtZDBjYi00ZTI3LWExZTMtMzlmMmEwN2IxYjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviF9dFhtRFhczgeQJUnnc2BTOJXCChdbpidM bYhWn51ZcQwBiu2tGDZekC8i3nEpTdVDgdnD3XHoHT/FFSAuq4hNQkyEPIIqpM9z uGsdBaddNK/WZnhlQSZv9s6lQ1G87gQIS+KctmKGWljO+APqDW6f2lgKedLxv94M rtfnuVJ+XM3iIX6WOFC1hSeef7C6MEP4KlB52flZYN/JwN3Q/smY2aUgUynf8kYe QQfV9kP+UpLyFYpDg5T+n/V4mgB2yk6drffQZGmE1NDXDLAqG98xrf27G0KFak5u SAO6/VPxOJLv8T1XUZ/7p9ckImE9rdCBwZEDZfq1yoLe6UkV8wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJehKRTzKzppklu0QbTsyqjf3WovMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzA0MjA4NmUtYTg3ZC0z OTliLTllMzAtZmI4MGRhYTRhZmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAABQfLugQQs94GA/3WtqvVxMu00KnSvc3UhVqFIR/140Lu6+vzh2 3Y/FSUmWXDZBb11lPZUhpICy9CwbF03q+RIOLMV0DPzP84vixdJuBGCCpiz1SvtF fjVgqdGFsAuUqLSaNBzd5FLoXmiBSRpC7M1cS2nwVa6yF6Y4kZ4vqkdsQ9xyD7lI 1AfVfCiWsjFw/br38cudqc0f0KGaEJh7/OipJ/sjX4EK6Fg1XCXQZImuymdsBPNb TS6KCHQarWBVtd0A0vX7Oz/QlQbeD+i4nQFW6L7mVzeKK9rjnHkBpkbZ9pKzInAR v8qNO7lqOeUAVOVrRFwr4a5zrmCONaL3+8I= -----END CERTIFICATE-----Generated at Mon Oct 20 10:31:58 2025 by rpki-client