$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3846d144-b851-340e-adb8-61519a15aa55.roa File: 3846d144-b851-340e-adb8-61519a15aa55.roa (raw, json) Hash identifier: enmec98uIM3GMBqWE50Cb23Fj6j5D9qevdDRRalrou4= Subject key identifier: F6:B0:CB:D8:06:48:99:21:64:42:7A:E6:FB:08:EE:92:33:58:D8:D6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6201CB475AAB8DF4F61A83A0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3846d144-b851-340e-adb8-61519a15aa55.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 396554 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:cb:47:5a:ab:8d:f4:f6:1a:83:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=e4485687-dabc-42f3-ae05-7e6395860a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:77:ef:da:a5:e6:03:b5:2a:ce:1b:3d:f5:dc: 1e:4c:7d:0d:d7:8e:56:7c:78:86:11:ac:47:29:f2: 25:9f:e0:96:d4:97:95:4e:d4:0a:6c:9e:85:91:74: 16:c4:e0:7c:15:48:1e:a2:ac:e7:59:99:81:3e:2f: 11:4b:71:6f:27:92:2e:3a:9a:1c:01:bb:fe:34:80: 0d:a1:ca:55:2e:d7:aa:58:11:6d:e2:36:81:15:81: e8:84:1d:63:7c:f5:df:76:7b:41:c0:47:0d:a0:b3: 13:86:ef:0e:fa:4f:de:a2:ef:96:e1:c6:87:ef:ab: ca:b5:8f:8d:7b:8a:e2:b2:8f:54:2f:76:11:e6:4d: 68:55:e9:1f:4b:50:b0:fc:de:26:24:76:1f:b0:7b: fc:c9:e8:af:66:26:6f:7c:0e:7d:0c:90:6b:bb:bb: 9e:ee:f6:43:2d:07:e5:6c:e9:b9:b9:57:fd:48:99: 17:8b:e7:1d:8c:55:9e:cd:fd:52:90:b3:6e:6c:ec: 10:65:77:a3:be:a0:9c:0b:f2:84:87:24:ae:59:cd: 37:b4:23:67:0e:a8:3e:d0:da:20:d6:c1:b1:5f:90: e2:cd:f9:a1:3e:39:bc:9e:38:96:41:ed:fe:1c:6a: 0d:8d:40:5f:c5:ba:55:85:26:a3:de:59:c2:b1:f1: a1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:B0:CB:D8:06:48:99:21:64:42:7A:E6:FB:08:EE:92:33:58:D8:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3846d144-b851-340e-adb8-61519a15aa55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:91:b0:8e:86:78:2f:c7:68:30:be:db:da:1e:56:61:0b:a0: 4c:e5:9c:7c:69:3c:e6:1d:4d:ce:e5:b7:32:0b:d7:7b:a7:90: a5:dc:e2:d0:d4:a8:69:4d:46:e7:f3:06:4e:b2:a8:74:36:99: a3:3a:0d:93:b4:9d:30:76:24:dc:16:82:55:f0:da:5a:7d:e6: 88:ea:c9:dd:ab:00:10:54:90:58:cc:95:c9:b6:eb:1a:5a:dd: 2f:ec:97:f6:c9:3b:6c:7f:4d:6c:3b:2d:ca:cc:27:53:55:cc: 7e:fb:55:7e:9c:1c:42:6c:31:83:d8:d3:66:8b:dc:0e:31:9f: c4:c3:64:3c:9b:c2:f2:85:41:54:9b:74:70:eb:e5:12:f0:3d: 53:dc:75:98:3c:7f:f6:11:80:f2:b1:66:ab:6a:a8:47:49:39: 54:0b:19:67:f8:b4:05:ae:d1:46:18:aa:94:7d:54:c5:d4:77: e1:c8:5b:80:10:1c:63:91:49:e0:02:d4:21:28:62:fe:8b:a8: 8b:3c:77:4b:59:1d:82:aa:12:97:7a:e3:cc:75:99:e1:41:5a: fd:bf:bc:16:ef:c5:ed:64:0b:16:01:73:c0:73:57:96:37:0a: 64:16:27:2a:2b:c4:a1:52:81:95:6e:8e:02:73:23:8f:34:ff: 83:67:39:ae -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiActHWquN9PYag6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZTQ0ODU2ODctZGFiYy00MmYzLWFlMDUtN2U2Mzk1ODYwYTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHfv2qXmA7Uqzhs99dweTH0N145WfHiGEaxH KfIln+CW1JeVTtQKbJ6FkXQWxOB8FUgeoqznWZmBPi8RS3FvJ5IuOpocAbv+NIAN ocpVLteqWBFt4jaBFYHohB1jfPXfdntBwEcNoLMThu8O+k/eou+W4caH76vKtY+N e4riso9UL3YR5k1oVekfS1Cw/N4mJHYfsHv8yeivZiZvfA59DJBru7ue7vZDLQfl bOm5uVf9SJkXi+cdjFWezf1SkLNubOwQZXejvqCcC/KEhySuWc03tCNnDqg+0Nog 1sGxX5DizfmhPjm8njiWQe3+HGoNjUBfxbpVhSaj3lnCsfGhUwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPawy9gGSJkhZEJ65vsI7pIzWNjWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzg0NmQxNDQtYjg1MS0z NDBlLWFkYjgtNjE1MTlhMTVhYTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIaRsI6GeC/HaDC+29oeVmELoEzlnHxpPOYdTc7ltzIL13unkKXc 4tDUqGlNRufzBk6yqHQ2maM6DZO0nTB2JNwWglXw2lp95ojqyd2rABBUkFjMlcm2 6xpa3S/sl/bJO2x/TWw7LcrMJ1NVzH77VX6cHEJsMYPY02aL3A4xn8TDZDybwvKF QVSbdHDr5RLwPVPcdZg8f/YRgPKxZqtqqEdJOVQLGWf4tAWu0UYYqpR9VMXUd+HI W4AQHGORSeAC1CEoYv6LqIs8d0tZHYKqEpd648x1meFBWv2/vBbvxe1kCxYBc8Bz V5Y3CmQWJyorxKFSgZVujgJzI480/4NnOa4= -----END CERTIFICATE-----Generated at Mon Oct 20 13:22:58 2025 by rpki-client