$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4457d2ee-2dac-3c85-bae0-c5cf9ee9ca76.roa File: 4457d2ee-2dac-3c85-bae0-c5cf9ee9ca76.roa (raw, json) Hash identifier: f+pas7sjWdCY/HNXYxaaOy6d8MnmZuC7itbNSHJ8uz8= Subject key identifier: D0:1C:18:A4:07:3F:DD:16:BB:28:28:7A:8F:B4:AA:F8:CE:D0:80:74 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B35570382B4BC9F557DF2D600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4457d2ee-2dac-3c85-bae0-c5cf9ee9ca76.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 396580 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:57:03:82:b4:bc:9f:55:7d:f2:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=c17492d5-4c63-4001-996c-7738b2070ec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9f:3a:fc:49:0e:4d:77:41:b0:4f:a5:20:2d: 58:d2:e6:ba:00:90:b0:2e:33:c6:58:a5:09:4a:a5: 6c:89:9b:4d:5b:71:44:f7:3a:fd:fb:c3:ed:6d:3d: 50:83:d5:fc:0f:dc:aa:29:97:60:dc:7e:6a:e6:08: 4a:9b:5b:44:ac:e4:0f:af:53:9a:61:d6:2c:20:e8: b1:8b:68:0e:2e:63:60:4e:79:c9:e1:9e:87:be:ac: 6c:d0:8a:6a:4f:38:fc:1b:2c:72:f0:bb:f4:12:d0: 89:af:b1:ec:99:7a:fe:df:67:65:d1:6d:81:e2:f4: e7:7c:b5:50:2b:1a:cf:a9:da:13:ff:11:bf:31:96: 6d:28:52:b7:54:ef:75:df:4a:04:3f:91:2d:82:04: cc:d6:8b:aa:c2:2d:5e:40:49:41:8e:62:97:c4:b4: 3a:e6:44:8a:3f:aa:24:19:a0:86:d2:dc:75:df:8e: 1d:2a:c9:9c:c0:8f:75:0e:46:4d:ec:79:e7:ef:43: 37:ef:41:49:9f:c3:34:98:7f:d4:1e:aa:20:ca:c8: bc:82:22:88:ed:fe:08:3d:ed:dc:29:9e:53:26:fe: 10:9e:c1:6f:18:13:4f:4a:c1:e6:29:d0:ab:95:9a: 4a:53:26:d6:69:cd:2b:05:87:a9:bf:8d:cc:2b:62: 40:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:1C:18:A4:07:3F:DD:16:BB:28:28:7A:8F:B4:AA:F8:CE:D0:80:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4457d2ee-2dac-3c85-bae0-c5cf9ee9ca76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:11:8a:45:1b:3b:aa:46:3b:52:af:4b:ac:7c:0e:b5:29:4e: 72:bd:ba:bb:e2:4c:e9:fb:bf:35:53:ff:9f:f4:30:d9:4a:98: 1f:93:c7:4b:5a:3f:ac:d8:36:5a:85:c3:da:34:07:12:95:f4: 95:f1:d5:6a:9f:e6:e4:c1:aa:c4:7d:4b:ae:91:02:e2:6d:40: 6a:ae:3e:af:5c:e3:f5:f5:78:e4:3e:9d:5d:a6:05:a2:b2:43: 91:e3:e5:3a:c7:f8:5b:2b:b1:da:94:96:0d:a7:2d:e8:dc:2f: 1c:46:5f:8c:37:2d:7a:57:e4:e2:1c:b3:60:77:5d:49:a3:e8: b4:89:3f:73:d9:79:79:0e:17:e6:cc:8e:83:6b:bd:02:a3:99: 3a:62:63:a2:8e:f7:bb:87:de:3e:ff:88:5b:85:3f:5a:59:1d: 3f:8b:f6:cb:61:d2:f1:8d:8e:24:b0:40:f1:1c:4f:fa:a6:23: a3:49:54:03:af:0a:a2:bf:51:51:23:cb:f7:7f:60:9b:91:6c: 15:f4:25:81:03:a5:ba:be:e8:12:20:fa:8e:7b:68:2e:be:31: 4a:80:bd:62:c4:1c:92:6b:45:70:c0:28:59:ed:4a:96:61:a5: 7e:73:a2:50:b0:ac:a9:85:c3:0f:d0:d1:3d:64:22:53:26:ea: b9:7e:3d:44 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEs1VwOCtLyfVX3y1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk YzE3NDkyZDUtNGM2My00MDAxLTk5NmMtNzczOGIyMDcwZWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjp86/EkOTXdBsE+lIC1Y0ua6AJCwLjPGWKUJ SqVsiZtNW3FE9zr9+8PtbT1Qg9X8D9yqKZdg3H5q5ghKm1tErOQPr1OaYdYsIOix i2gOLmNgTnnJ4Z6Hvqxs0IpqTzj8Gyxy8Lv0EtCJr7HsmXr+32dl0W2B4vTnfLVQ KxrPqdoT/xG/MZZtKFK3VO9130oEP5EtggTM1ouqwi1eQElBjmKXxLQ65kSKP6ok GaCG0tx1344dKsmcwI91DkZN7Hnn70M370FJn8M0mH/UHqogysi8giKI7f4IPe3c KZ5TJv4QnsFvGBNPSsHmKdCrlZpKUybWac0rBYepv43MK2JACQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNAcGKQHP90Wuygoeo+0qvjO0IB0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDQ1N2QyZWUtMmRhYy0z Yzg1LWJhZTAtYzVjZjllZTljYTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBsEYpFGzuqRjtSr0usfA61KU5yvbq74kzp+781 U/+f9DDZSpgfk8dLWj+s2DZahcPaNAcSlfSV8dVqn+bkwarEfUuukQLibUBqrj6v XOP19XjkPp1dpgWiskOR4+U6x/hbK7HalJYNpy3o3C8cRl+MNy16V+TiHLNgd11J o+i0iT9z2Xl5DhfmzI6Da70Co5k6YmOijve7h94+/4hbhT9aWR0/i/bLYdLxjY4k sEDxHE/6piOjSVQDrwqiv1FRI8v3f2CbkWwV9CWBA6W6vugSIPqOe2guvjFKgL1i xBySa0VwwChZ7UqWYaV+c6JQsKyphcMP0NE9ZCJTJuq5fj1E -----END CERTIFICATE-----Generated at Mon Oct 20 08:16:36 2025 by rpki-client