$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/33c16753-9fad-30c2-845c-db1a7dc64694.roa File: 33c16753-9fad-30c2-845c-db1a7dc64694.roa (raw, json) Hash identifier: ngn3SEz13eJQEbFi+nn67zd+QeeLsg9aSFq6zD+JuTE= Subject key identifier: CA:5A:55:9A:E1:19:85:D6:98:8E:8D:28:02:C7:08:AB:BB:21:74:32 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B62022E2698268B1C54D6BFA0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/33c16753-9fad-30c2-845c-db1a7dc64694.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 396579 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:2e:26:98:26:8b:1c:54:d6:bf:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=66cb5b14-1721-47a6-8304-8da51b147a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:03:25:05:73:7f:0b:e7:d0:f7:cc:b7:00:2a: 3d:1d:8f:12:40:fe:0b:57:0c:08:73:39:d4:8b:0b: 28:f7:9b:2f:17:27:b9:61:1f:aa:0e:79:39:6c:73: d3:cd:82:99:0c:90:05:9b:62:53:07:06:a1:bd:f3: d6:fc:f0:89:a6:c5:f3:cd:59:6b:10:62:96:17:d6: 6f:16:c9:34:82:05:e0:0a:bc:be:d2:a6:4b:08:60: 77:06:6d:96:bb:69:1a:92:71:20:ee:bb:05:8f:d9: 37:c7:a5:5d:72:ab:61:c3:9a:a0:ec:89:05:7b:d4: 75:b4:b5:50:4e:51:7b:68:c3:f3:99:2f:dd:72:80: f2:8d:12:97:4c:c7:9f:a6:92:54:e3:9f:92:43:ae: c9:6e:e3:80:11:96:ee:ca:78:19:a0:f4:8b:f4:cc: eb:e1:a3:aa:5c:30:f1:b4:67:ac:fa:77:43:ed:83: 71:a1:a6:9e:f4:75:5a:54:65:8e:c2:7c:c7:6f:e0: ab:b7:8d:b5:a8:2d:cf:e2:51:b7:e1:34:bd:cf:b0: fb:6f:f4:c8:62:d2:5f:39:fe:38:22:15:5e:7f:75: 01:74:db:cc:7e:0a:72:9c:d8:da:35:2f:9c:6e:87: ab:94:70:fe:db:8b:c2:69:89:e4:94:31:4f:eb:44: bd:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:5A:55:9A:E1:19:85:D6:98:8E:8D:28:02:C7:08:AB:BB:21:74:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/33c16753-9fad-30c2-845c-db1a7dc64694.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:0d:f0:d9:ba:d9:9a:09:ab:f8:80:6d:63:20:0b:88:7e:65: cb:fc:fd:15:5f:94:0e:13:0d:84:d3:42:66:67:cc:49:e4:56: 39:58:fe:7d:f6:70:7d:63:1e:61:a2:59:dd:6a:f5:51:0c:f2: 58:1a:6d:36:3c:64:2e:fc:27:35:3d:ce:3c:e6:53:8e:88:6b: f2:16:9e:d3:31:de:86:5f:ca:83:2e:de:93:d6:6e:c5:55:0c: 43:6d:9d:f0:51:76:cb:c2:88:41:d8:8a:e0:ff:df:3f:9b:82: 31:6d:de:7b:9c:64:0c:02:95:5c:6e:94:eb:1d:b0:dd:3b:a3: 5a:2d:7a:a9:62:bd:b4:00:96:e2:37:d8:2b:ca:00:d6:d1:b0: 79:46:21:7e:11:a1:a3:a5:e9:fb:4d:fb:41:a7:da:a8:fb:2c: 80:5d:53:35:1b:72:b5:ef:b9:bf:5b:31:ea:bf:e2:b6:28:c9: 0f:94:79:62:41:05:4b:4c:d4:58:ec:f8:43:b2:ea:0e:9e:0a: b6:6e:d5:3a:e7:75:36:09:b8:2e:b9:d2:10:2c:d3:37:3d:3d: e0:04:69:5e:92:6c:b0:2f:fc:78:08:ef:27:96:39:6f:87:e5: 3f:6e:cd:2b:e9:8f:e6:19:2f:8a:4b:34:b3:66:6c:d3:00:e0: 80:86:d7:d1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAi4mmCaLHFTWv6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NjZjYjViMTQtMTcyMS00N2E2LTgzMDQtOGRhNTFiMTQ3YTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAMlBXN/C+fQ98y3ACo9HY8SQP4LVwwIcznU iwso95svFye5YR+qDnk5bHPTzYKZDJAFm2JTBwahvfPW/PCJpsXzzVlrEGKWF9Zv Fsk0ggXgCry+0qZLCGB3Bm2Wu2kaknEg7rsFj9k3x6Vdcqthw5qg7IkFe9R1tLVQ TlF7aMPzmS/dcoDyjRKXTMefppJU45+SQ67JbuOAEZbuyngZoPSL9Mzr4aOqXDDx tGes+ndD7YNxoaae9HVaVGWOwnzHb+Crt421qC3P4lG34TS9z7D7b/TIYtJfOf44 IhVef3UBdNvMfgpynNjaNS+cboerlHD+24vCaYnklDFP60S99QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMpaVZrhGYXWmI6NKALHCKu7IXQyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzNjMTY3NTMtOWZhZC0z MGMyLTg0NWMtZGIxYTdkYzY0Njk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG4N8Nm62ZoJq/iAbWMgC4h+Zcv8/RVflA4TDYTTQmZnzEnkVjlY /n32cH1jHmGiWd1q9VEM8lgabTY8ZC78JzU9zjzmU46Ia/IWntMx3oZfyoMu3pPW bsVVDENtnfBRdsvCiEHYiuD/3z+bgjFt3nucZAwClVxulOsdsN07o1oteqlivbQA luI32CvKANbRsHlGIX4RoaOl6ftN+0Gn2qj7LIBdUzUbcrXvub9bMeq/4rYoyQ+U eWJBBUtM1Fjs+EOy6g6eCrZu1TrndTYJuC650hAs0zc9PeAEaV6SbLAv/HgI7yeW OW+H5T9uzSvpj+YZL4pLNLNmbNMA4ICG19E= -----END CERTIFICATE-----Generated at Mon Oct 20 08:16:40 2025 by rpki-client