$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40e9ed5c-e53f-3624-b04c-23db14cb5e3a.roa File: 40e9ed5c-e53f-3624-b04c-23db14cb5e3a.roa (raw, json) Hash identifier: Vw/0F8Qf3i5wekpaOqjFgeUwaBOs1E0iw6bs7iCey7g= Subject key identifier: 76:94:D6:E9:A0:AA:EA:1F:F7:D5:36:60:49:89:18:51:8B:A8:CA:EF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B48E213DF390B30E1314F3A20 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40e9ed5c-e53f-3624-b04c-23db14cb5e3a.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 396606 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:13:df:39:0b:30:e1:31:4f:3a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=da0985a8-4f4a-4a70-aac8-b4509dc3005b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6c:41:12:bc:c8:49:f8:03:72:72:c6:bd:6a: 2e:2f:c6:86:e7:5e:9d:cf:d5:cc:bd:05:d2:22:76: 3a:5e:37:86:a8:c0:74:f4:6e:fa:22:d6:bc:8f:4c: d4:46:4d:ab:c5:ba:7d:ca:3d:8b:cc:67:54:b8:87: 27:1b:fd:ad:43:07:a5:3e:73:01:ba:65:13:e4:db: b5:f8:d1:ff:b1:08:99:31:40:bc:72:f1:49:a7:29: 59:38:07:54:54:5c:6b:63:54:2e:20:2e:eb:da:9c: cc:45:60:4f:f6:43:fe:2e:af:52:86:db:fb:56:c9: 64:d0:86:84:75:f8:9f:be:55:90:19:44:ca:8e:11: c0:1c:27:2b:52:c2:19:8f:cd:2a:da:8a:a7:10:86: ad:70:48:37:8d:6e:74:81:de:fc:ce:00:b9:6b:05: 8d:d9:57:67:2a:00:06:c7:39:66:6a:48:33:e0:a2: 5e:79:7c:65:4f:d0:d8:f8:41:fa:7e:13:9e:af:04: d6:ca:a9:b8:c4:a3:2d:ce:33:61:02:9b:d3:ea:ec: 01:7a:ca:2c:8b:f6:de:29:82:3a:0e:b8:61:b3:55: 8f:8a:02:dc:24:2e:84:63:bb:3d:cc:e5:95:f1:d1: ea:db:ed:be:85:a5:16:1b:d6:82:f7:d5:32:97:d1: bf:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:94:D6:E9:A0:AA:EA:1F:F7:D5:36:60:49:89:18:51:8B:A8:CA:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40e9ed5c-e53f-3624-b04c-23db14cb5e3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:60:59:4b:b6:27:4a:75:e8:e6:f8:cf:b7:a7:39:f7:4c:9a: bd:54:d8:40:f6:62:3b:96:2a:a2:d2:f5:f0:31:0c:9e:2f:6a: 1b:e5:d0:28:d6:b6:7f:52:a7:f1:3a:a2:81:94:62:a6:e6:90: 68:44:bd:1e:a5:b8:e6:81:10:03:95:ba:11:b7:31:53:55:ee: ca:05:f9:54:d0:97:fd:ee:9e:21:fc:10:1d:83:cb:9a:b1:a5: 5a:28:b5:d5:c9:e4:e8:30:15:e9:2b:89:dc:d3:ce:94:a5:de: 75:8f:e8:7f:b4:46:7d:24:17:20:54:bc:13:d5:2b:a1:ab:05: 34:af:8e:58:c2:94:31:a3:df:c0:da:6c:9a:b7:36:1b:e7:90: a4:b5:f0:fc:c2:c0:8b:b8:c4:17:13:1a:89:94:a5:8b:ed:42: 4f:02:ea:07:bc:b0:15:71:d7:fe:c3:71:ac:61:51:e8:a8:c2: bb:7b:f4:a8:ff:2d:00:06:2a:f7:cd:19:19:ef:34:5c:66:25: a0:2d:8e:42:17:0d:f8:6c:e8:93:9b:0c:48:db:09:a8:d3:61: 15:a9:a4:fc:53:20:55:16:5c:61:c6:7b:f2:fd:92:48:bb:d2: b6:a8:2f:54:59:b6:1c:ac:a9:e0:6a:02:6a:67:85:1b:ab:db: ae:9a:77:b8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4hPfOQsw4TFPOiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZGEwOTg1YTgtNGY0YS00YTcwLWFhYzgtYjQ1MDlkYzMwMDViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWxBErzISfgDcnLGvWouL8aG516dz9XMvQXS InY6XjeGqMB09G76Ita8j0zURk2rxbp9yj2LzGdUuIcnG/2tQwelPnMBumUT5Nu1 +NH/sQiZMUC8cvFJpylZOAdUVFxrY1QuIC7r2pzMRWBP9kP+Lq9Shtv7Vslk0IaE dfifvlWQGUTKjhHAHCcrUsIZj80q2oqnEIatcEg3jW50gd78zgC5awWN2VdnKgAG xzlmakgz4KJeeXxlT9DY+EH6fhOerwTWyqm4xKMtzjNhApvT6uwBesosi/beKYI6 Drhhs1WPigLcJC6EY7s9zOWV8dHq2+2+haUWG9aC99Uyl9G/FQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHaU1umgquof99U2YEmJGFGLqMrvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDBlOWVkNWMtZTUzZi0z NjI0LWIwNGMtMjNkYjE0Y2I1ZTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAApgWUu2J0p16Ob4z7enOfdMmr1U2ED2YjuWKqLS9fAxDJ4vahvl 0CjWtn9Sp/E6ooGUYqbmkGhEvR6luOaBEAOVuhG3MVNV7soF+VTQl/3uniH8EB2D y5qxpVootdXJ5OgwFekridzTzpSl3nWP6H+0Rn0kFyBUvBPVK6GrBTSvjljClDGj 38DabJq3NhvnkKS18PzCwIu4xBcTGomUpYvtQk8C6ge8sBVx1/7DcaxhUeiowrt7 9Kj/LQAGKvfNGRnvNFxmJaAtjkIXDfhs6JObDEjbCajTYRWppPxTIFUWXGHGe/L9 kki70raoL1RZthysqeBqAmpnhRur266ad7g= -----END CERTIFICATE-----Generated at Mon Oct 20 08:17:19 2025 by rpki-client