$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/42fb9c1e-2c88-3fcb-9ad8-5a68aa192c55.roa File: 42fb9c1e-2c88-3fcb-9ad8-5a68aa192c55.roa (raw, json) Hash identifier: EeVb77oGQASaI0Iy04bBLlIzYmjPVVkSCmS2C9Yb4q0= Subject key identifier: C7:05:F7:9F:0F:BF:E5:4A:A3:09:9F:8C:07:AE:53:C5:AE:78:3B:31 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B48E1AB12A4B299704B8D02C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/42fb9c1e-2c88-3fcb-9ad8-5a68aa192c55.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397193 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:ab:12:a4:b2:99:70:4b:8d:02:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=f320dabf-f52b-4407-9d4c-47dece9185da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:98:f8:74:ef:06:8b:ac:0c:6d:ee:e3:56:7d: 11:99:4a:d3:b1:6a:26:58:0d:85:58:c6:8f:45:d5: 0d:fd:ab:8b:8c:97:11:f3:44:6d:0a:39:18:9a:38: 37:2e:08:a0:81:d3:37:d1:28:33:45:f1:e7:20:ae: 3b:32:0e:0b:73:35:06:c3:1e:32:26:09:4c:e8:6b: 19:4f:5c:2d:83:1a:8a:60:cb:bf:37:df:8f:07:7c: 12:53:1c:4c:87:bb:a4:09:b6:11:35:ad:16:55:e5: 85:d1:76:8e:1d:60:4b:b5:58:eb:95:6d:c5:51:dc: 12:90:09:1f:60:6f:66:99:71:15:ad:e3:e0:b6:22: 60:b2:ff:f5:55:05:28:2d:a2:bd:51:7d:4a:a1:f8: e7:35:b9:6d:9e:b6:d3:1f:40:d1:71:68:12:a5:c8: 4e:3d:e0:f2:76:4b:24:0d:c7:23:4a:50:8e:35:57: 15:78:c3:17:9f:1e:8e:0a:96:9b:5e:b3:23:7f:f4: 73:78:a4:95:a9:85:69:f6:2c:a2:af:1c:3a:02:7c: f4:84:3f:3f:98:73:7c:9f:29:3d:d0:1f:f4:c2:35: 8e:9e:8e:53:40:4a:a4:30:b7:3e:58:31:85:6c:eb: dc:c0:fb:97:26:3a:bf:4a:dc:7b:ad:f8:9b:fd:4a: b1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:05:F7:9F:0F:BF:E5:4A:A3:09:9F:8C:07:AE:53:C5:AE:78:3B:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/42fb9c1e-2c88-3fcb-9ad8-5a68aa192c55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:67:9e:b2:83:d8:62:97:12:68:f7:41:de:65:04:e8:ed:4f: 47:6e:6c:a0:37:3e:5f:92:de:fa:70:5a:e2:8a:5c:8a:e9:b6: d4:b4:73:30:9e:2d:af:b2:24:b1:e1:e5:9e:60:cb:50:6e:18: 95:77:e4:48:a9:b9:8c:74:95:f2:f5:34:88:28:fd:8c:40:74: 6d:fe:82:04:02:b2:18:40:dd:ef:43:45:b5:15:9e:fb:bc:d0: 16:b0:2b:33:b8:83:86:b9:44:74:24:83:f9:a7:b3:bb:42:b7: fe:5e:a2:03:2d:ab:c7:b4:af:63:d0:8b:fb:4b:1f:59:e4:05: eb:fa:44:78:bb:f1:68:b1:d2:e3:f0:0b:64:e6:d2:a8:17:9d: d6:92:78:e0:e0:e8:d8:bb:58:1d:ea:25:5e:d5:67:85:5e:54: 4f:5a:26:a0:d6:d3:16:c6:b9:d3:ef:91:d8:99:ea:71:47:af: 25:4f:d3:ff:52:49:4f:f0:83:49:bc:10:09:d6:d0:bc:3a:46: 78:f2:45:80:6e:ee:54:05:4f:97:1c:da:05:9c:b9:b6:2f:bb: c3:5b:88:79:4a:54:92:46:7e:3e:f6:f0:dd:09:4c:cd:60:c2: a7:7b:2c:bd:4b:90:e9:9a:b6:88:5f:62:9e:93:c1:12:0a:28: 4e:21:f1:07 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4asSpLKZcEuNAsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZjMyMGRhYmYtZjUyYi00NDA3LTlkNGMtNDdkZWNlOTE4NWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5j4dO8Gi6wMbe7jVn0RmUrTsWomWA2FWMaP RdUN/auLjJcR80RtCjkYmjg3LgiggdM30SgzRfHnIK47Mg4LczUGwx4yJglM6GsZ T1wtgxqKYMu/N9+PB3wSUxxMh7ukCbYRNa0WVeWF0XaOHWBLtVjrlW3FUdwSkAkf YG9mmXEVrePgtiJgsv/1VQUoLaK9UX1KofjnNbltnrbTH0DRcWgSpchOPeDydksk DccjSlCONVcVeMMXnx6OCpabXrMjf/RzeKSVqYVp9iyirxw6Anz0hD8/mHN8nyk9 0B/0wjWOno5TQEqkMLc+WDGFbOvcwPuXJjq/Stx7rfib/UqxPwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMcF958Pv+VKowmfjAeuU8WueDsxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDJmYjljMWUtMmM4OC0z ZmNiLTlhZDgtNWE2OGFhMTkyYzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHtnnrKD2GKXEmj3Qd5lBOjtT0dubKA3Pl+S3vpwWuKKXIrpttS0 czCeLa+yJLHh5Z5gy1BuGJV35EipuYx0lfL1NIgo/YxAdG3+ggQCshhA3e9DRbUV nvu80BawKzO4g4a5RHQkg/mns7tCt/5eogMtq8e0r2PQi/tLH1nkBev6RHi78Wix 0uPwC2Tm0qgXndaSeODg6Ni7WB3qJV7VZ4VeVE9aJqDW0xbGudPvkdiZ6nFHryVP 0/9SSU/wg0m8EAnW0Lw6RnjyRYBu7lQFT5cc2gWcubYvu8NbiHlKVJJGfj728N0J TM1gwqd7LL1LkOmatohfYp6TwRIKKE4h8Qc= -----END CERTIFICATE-----Generated at Mon Oct 20 08:14:08 2025 by rpki-client