$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/42f3f8f5-cd4a-340c-af89-9f213a6f9231.roa File: 42f3f8f5-cd4a-340c-af89-9f213a6f9231.roa (raw, json) Hash identifier: KiXrQPLJ7aZsmXbkm+0dbGXsN6zZ35wVNdESkp199qw= Subject key identifier: 3C:D8:AC:C5:24:9B:5C:5A:D8:B5:CB:D1:6F:5F:0B:35:E7:88:36:A1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6202349A5F35A6A0511F83D0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/42f3f8f5-cd4a-340c-af89-9f213a6f9231.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 396582 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:34:9a:5f:35:a6:a0:51:1f:83:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=56929650-d607-4841-9f84-f3d0faed4192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a0:f1:78:09:6a:34:f1:ea:8b:0e:2d:40:9d: b5:19:05:c4:46:03:e0:ec:4e:87:e9:66:c1:c7:98: 17:e4:c0:0a:c6:f2:8d:a8:4c:fa:6a:fe:3a:9d:b7: 8d:d9:4a:02:a7:eb:d1:d2:99:5f:84:4a:b4:57:01: 63:0c:d5:1d:ee:8a:c2:b1:eb:32:02:ca:84:75:5a: 4f:6c:21:3d:24:59:0c:9e:c9:e1:90:4f:d8:14:fa: 2b:05:0a:11:53:06:e5:82:a5:93:2d:52:19:e5:8c: 72:47:ff:c9:7d:bb:e5:42:3b:b8:a9:71:72:4c:d0: 7b:e5:98:0a:8f:b9:40:22:ef:a9:78:bb:02:d6:89: a8:3c:cc:70:4b:d6:c2:e6:7e:ee:23:01:1d:eb:99: 07:3d:41:ed:bf:bb:20:18:ae:4d:9a:55:88:fa:62: 9f:fe:bf:4b:5f:bb:40:31:7e:9c:11:1c:e8:88:1c: a4:94:27:5b:54:f0:68:b7:b9:c5:c6:47:a7:bc:14: 14:78:e9:68:47:40:7b:42:82:ed:c7:92:5c:e5:f1: 75:3b:eb:7e:c3:38:fc:b7:da:93:88:fd:6b:9a:ed: 71:ae:e4:27:b9:5b:24:b2:69:57:b1:f2:81:41:5d: 68:22:f6:3f:db:11:36:27:c1:2a:1b:e6:33:fe:cf: 7b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D8:AC:C5:24:9B:5C:5A:D8:B5:CB:D1:6F:5F:0B:35:E7:88:36:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/42f3f8f5-cd4a-340c-af89-9f213a6f9231.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:f2:8a:dc:5c:5d:2f:ae:b4:6d:de:34:71:69:46:5f:65:d6: 01:04:59:a2:a9:35:18:99:8e:fd:97:63:ec:e0:e5:2d:78:6f: d5:4e:f5:62:38:e0:4e:6d:35:6a:7e:1b:79:9c:8f:81:bb:ba: 5c:34:c4:86:56:f4:fe:66:97:e7:8d:e1:5e:18:07:9e:28:df: 52:89:77:7a:a9:ea:0b:07:73:08:c4:d8:89:1c:0c:d0:a2:45: 6a:03:4d:4d:9b:fa:ee:71:d1:16:58:0c:dd:1e:c8:0c:fd:88: 11:9f:3a:1d:e0:9c:31:6c:4a:b2:28:e3:c6:7a:21:f7:40:3a: b6:93:be:04:b9:6b:a4:ba:aa:d5:af:c3:9f:25:63:ae:65:cf: 27:35:a2:30:ef:7f:fb:93:47:4d:38:d5:d0:b0:e3:56:ed:b1: 7e:7c:74:a4:eb:78:b8:1e:f0:4c:55:88:29:0b:76:52:4b:0b: 42:4c:8e:49:35:03:9e:e3:60:96:03:88:dd:8d:0e:10:3f:eb: b3:bb:f8:7a:f5:1f:23:a8:25:0e:48:ba:2f:6c:3d:ed:72:26: 3d:0b:3a:3b:93:b1:9a:22:67:82:c5:e1:51:02:26:2a:f7:5c: 83:22:1c:37:9f:fe:2a:68:32:5b:92:46:be:1b:e5:c6:d6:8c: e1:c8:db:75 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAjSaXzWmoFEfg9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NTY5Mjk2NTAtZDYwNy00ODQxLTlmODQtZjNkMGZhZWQ0MTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqDxeAlqNPHqiw4tQJ21GQXERgPg7E6H6WbB x5gX5MAKxvKNqEz6av46nbeN2UoCp+vR0plfhEq0VwFjDNUd7orCsesyAsqEdVpP bCE9JFkMnsnhkE/YFPorBQoRUwblgqWTLVIZ5YxyR//JfbvlQju4qXFyTNB75ZgK j7lAIu+peLsC1omoPMxwS9bC5n7uIwEd65kHPUHtv7sgGK5NmlWI+mKf/r9LX7tA MX6cERzoiByklCdbVPBot7nFxkenvBQUeOloR0B7QoLtx5Jc5fF1O+t+wzj8t9qT iP1rmu1xruQnuVsksmlXsfKBQV1oIvY/2xE2J8EqG+Yz/s97BwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDzYrMUkm1xa2LXL0W9fCzXniDahMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDJmM2Y4ZjUtY2Q0YS0z NDBjLWFmODktOWYyMTNhNmY5MjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHbyitxcXS+utG3eNHFpRl9l1gEEWaKpNRiZjv2XY+zg5S14b9VO 9WI44E5tNWp+G3mcj4G7ulw0xIZW9P5ml+eN4V4YB54o31KJd3qp6gsHcwjE2Ikc DNCiRWoDTU2b+u5x0RZYDN0eyAz9iBGfOh3gnDFsSrIo48Z6IfdAOraTvgS5a6S6 qtWvw58lY65lzyc1ojDvf/uTR0041dCw41btsX58dKTreLge8ExViCkLdlJLC0JM jkk1A57jYJYDiN2NDhA/67O7+Hr1HyOoJQ5Iui9sPe1yJj0LOjuTsZoiZ4LF4VEC Jir3XIMiHDef/ipoMluSRr4b5cbWjOHI23U= -----END CERTIFICATE-----Generated at Mon Oct 20 10:23:35 2025 by rpki-client