$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3455a75f-4479-3cd0-98ce-9c8d9c90a5ca.roa File: 3455a75f-4479-3cd0-98ce-9c8d9c90a5ca.roa (raw, json) Hash identifier: Y98u3j/jvG7itxvHrr3B4IIj261CUGT/V5XuWV15hqw= Subject key identifier: E5:83:BA:F7:C6:A8:97:19:67:3E:7F:CD:91:ED:E2:4C:FB:C4:04:84 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B48E1A877E4E6B6BA79907F00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3455a75f-4479-3cd0-98ce-9c8d9c90a5ca.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 396545 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:a8:77:e4:e6:b6:ba:79:90:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=dfe8f672-ca15-4691-b8f8-2e6b677db20f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e7:50:36:ce:7f:2d:64:7d:c7:3f:7c:33:0d: 9f:05:31:d3:a6:46:30:96:a0:f8:5d:a8:52:c0:dc: c4:4e:18:77:bd:b8:52:eb:e5:e5:a4:b8:bf:04:72: 5f:4e:20:63:ab:2a:a7:a1:33:27:9d:4c:21:55:36: 13:f2:80:63:d0:cc:79:e5:d7:e1:1c:41:2c:56:cb: bc:f2:af:0c:be:ce:56:2d:71:cb:fa:ee:4e:b9:f5: 47:42:d1:fc:0f:6c:e4:20:df:f0:33:83:10:c2:13: 98:fc:cf:7a:66:84:e7:e6:b4:7f:97:f4:2c:7e:d7: 32:e7:d3:0f:be:f2:77:0a:91:f1:96:8a:d8:c8:d0: c4:17:f3:26:68:d3:fe:ff:c7:2f:6c:50:82:47:5f: d1:70:80:e6:97:2e:24:1e:f3:5c:67:52:8f:68:90: 5d:e0:bb:6c:73:29:31:ae:78:83:ea:06:c4:d5:09: 31:2e:49:32:44:90:2e:32:05:ef:db:f5:82:b6:a4: 3a:9b:b4:24:57:44:ff:67:c9:c8:c7:c9:d8:a9:ed: dd:3f:f1:2c:d0:4d:ea:2b:1e:24:8a:9f:57:7c:39: b3:14:40:76:30:8f:ed:0c:ea:46:48:e9:74:47:75: eb:7b:7a:96:58:4f:b0:8a:9d:f1:18:65:79:19:5b: 2a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:83:BA:F7:C6:A8:97:19:67:3E:7F:CD:91:ED:E2:4C:FB:C4:04:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3455a75f-4479-3cd0-98ce-9c8d9c90a5ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:1d:05:6d:c1:1e:9c:bc:18:24:ab:d1:7e:65:ea:27:99:c3: 29:57:2f:02:9c:e4:c1:8a:3b:77:7e:ff:6c:aa:a2:52:30:a0: 96:9f:ac:75:8c:02:fb:7f:62:11:5c:82:5c:ae:41:50:02:6f: cd:72:06:74:ff:b8:04:d6:dd:0c:5a:e8:9a:5d:87:1e:f3:83: ca:24:d4:6e:da:8b:06:59:78:e8:ec:f0:6c:06:cd:f7:a9:13: 55:59:72:9e:e0:2a:77:31:df:91:0f:04:62:47:a4:02:74:37: 45:75:6b:03:bd:c0:c8:f3:33:09:5d:a6:3b:b1:dc:0b:eb:e1: 6b:41:74:f4:da:f7:81:f5:6e:19:9b:cc:64:9e:b2:76:9f:07: d9:fb:5f:36:20:4b:75:c0:c0:6f:6a:c0:44:b2:82:f5:17:fe: 26:ba:02:2d:32:85:4f:f7:ae:cf:61:ec:75:44:d9:2b:1f:b0: a3:91:fc:42:c0:8d:8a:b3:d1:17:62:2a:5c:7c:4a:35:d6:56: 85:94:5b:06:29:94:68:b7:c7:aa:d0:1a:35:e8:a0:bb:75:c9: d6:4e:d0:35:17:56:03:13:f0:c6:fe:75:d0:7c:35:7e:af:f2: 30:09:58:13:81:76:b4:6f:2c:0d:e9:27:5f:01:57:d4:f7:a4: 60:e4:4c:88 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4ah35Oa2unmQfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZGZlOGY2NzItY2ExNS00NjkxLWI4ZjgtMmU2YjY3N2RiMjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+dQNs5/LWR9xz98Mw2fBTHTpkYwlqD4XahS wNzEThh3vbhS6+XlpLi/BHJfTiBjqyqnoTMnnUwhVTYT8oBj0Mx55dfhHEEsVsu8 8q8Mvs5WLXHL+u5OufVHQtH8D2zkIN/wM4MQwhOY/M96ZoTn5rR/l/Qsftcy59MP vvJ3CpHxlorYyNDEF/MmaNP+/8cvbFCCR1/RcIDmly4kHvNcZ1KPaJBd4Ltscykx rniD6gbE1QkxLkkyRJAuMgXv2/WCtqQ6m7QkV0T/Z8nIx8nYqe3dP/Es0E3qKx4k ip9XfDmzFEB2MI/tDOpGSOl0R3Xre3qWWE+wip3xGGV5GVsqhwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOWDuvfGqJcZZz5/zZHt4kz7xASEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzQ1NWE3NWYtNDQ3OS0z Y2QwLTk4Y2UtOWM4ZDljOTBhNWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHwdBW3BHpy8GCSr0X5l6ieZwylXLwKc5MGKO3d+/2yqolIwoJaf rHWMAvt/YhFcglyuQVACb81yBnT/uATW3Qxa6Jpdhx7zg8ok1G7aiwZZeOjs8GwG zfepE1VZcp7gKncx35EPBGJHpAJ0N0V1awO9wMjzMwldpjux3Avr4WtBdPTa94H1 bhmbzGSesnafB9n7XzYgS3XAwG9qwESygvUX/ia6Ai0yhU/3rs9h7HVE2SsfsKOR /ELAjYqz0RdiKlx8SjXWVoWUWwYplGi3x6rQGjXooLt1ydZO0DUXVgMT8Mb+ddB8 NX6v8jAJWBOBdrRvLA3pJ18BV9T3pGDkTIg= -----END CERTIFICATE-----Generated at Mon Oct 20 10:25:31 2025 by rpki-client