$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/460c15a7-53df-3ad1-b4ec-1c1309288cd8.roa File: 460c15a7-53df-3ad1-b4ec-1c1309288cd8.roa (raw, json) Hash identifier: UZFgiVE9RJFlfjrqovWcDZ/Wab6HPae6ezem8p/tzCg= Subject key identifier: BF:B2:B0:ED:84:4F:E3:0C:77:03:81:25:B0:FC:20:A1:CD:2B:25:00 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B3556FCB9CF6E34BCC2EFBE40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/460c15a7-53df-3ad1-b4ec-1c1309288cd8.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 36629 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:fc:b9:cf:6e:34:bc:c2:ef:be:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=02e7ba07-fd54-4b29-94cf-e50235400cd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:73:d5:dc:61:9d:97:82:be:a1:51:7e:10:bb: 6e:aa:63:47:1d:76:6e:7e:ea:44:01:05:53:12:a1: 48:54:6f:c5:8a:66:2d:1d:1a:c9:72:49:93:5d:8a: 84:bc:e2:f7:ab:2d:03:fc:44:a9:5e:c9:7c:8a:91: 53:e2:54:57:73:97:f5:81:dd:c6:7d:75:b5:d0:93: b1:99:9e:02:71:c1:e2:de:d4:89:7e:67:b1:6b:c0: a3:86:6c:a1:a5:0a:3a:8d:4d:07:61:77:cf:1a:7c: d3:4f:76:43:5e:b8:e7:5e:19:72:c8:78:5a:ee:98: 18:c6:e0:60:bb:7f:06:d5:cd:1f:c5:24:51:48:96: b5:7f:84:07:73:1b:cf:2f:a9:01:83:eb:b0:5b:58: 2d:21:66:d7:f3:b3:01:e2:b6:10:04:a3:b0:e9:02: b2:16:e2:f7:dd:5c:e0:8e:4d:7e:7f:7b:91:af:b1: 30:d9:aa:92:62:bc:33:24:19:da:45:f3:8e:cf:86: e2:44:a6:9e:2e:93:fe:2b:1b:b8:63:98:45:2a:2c: c4:1f:49:47:81:06:02:fc:cf:ed:18:b2:90:18:83: 69:5c:c4:12:39:2b:9a:1c:f8:4e:63:e9:e1:fc:93: cd:ab:63:d6:2b:3b:b2:f0:ff:25:c7:d4:08:cf:35: e1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B2:B0:ED:84:4F:E3:0C:77:03:81:25:B0:FC:20:A1:CD:2B:25:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/460c15a7-53df-3ad1-b4ec-1c1309288cd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:68:58:bd:45:be:ed:1a:9c:c5:48:26:46:10:0b:87:ae:f4: f0:81:f9:09:8f:94:df:77:f5:14:76:44:1a:f7:a2:21:5d:d5: ad:0f:fa:bc:3d:c1:2e:38:fd:d2:ed:f8:12:83:17:d3:20:7e: b3:47:86:58:b7:47:84:67:ff:2d:03:97:c2:c8:2e:a3:9a:3b: 5b:6b:b8:6e:d1:81:fb:ff:cc:56:b0:76:73:92:41:1b:27:44: 4b:32:82:c1:6d:16:1f:67:46:2a:01:27:c0:47:c9:15:0c:f0: 41:0c:b1:5f:85:ca:71:e6:f5:98:3d:ca:37:8f:c9:5e:16:50: 97:1a:d2:f0:7d:08:00:8e:81:eb:ec:4b:78:f1:11:62:5e:37: c4:52:be:8b:65:8a:25:5e:61:f0:c4:8c:bc:4e:7f:cc:2b:16: 88:c7:64:cb:bc:52:12:bb:a8:3f:18:fa:be:75:be:1c:2a:7d: 9b:5a:57:f4:80:aa:8b:09:03:8f:5b:17:57:1c:cf:9d:45:3e: 76:b5:7b:58:58:ff:90:4b:34:cb:be:2c:0f:4a:77:01:a7:05: 21:60:83:de:77:da:96:44:69:d5:52:94:85:20:fb:11:78:3f: 1e:60:76:e6:ec:de:1c:db:a9:43:e1:56:d9:93:64:64:3d:ce: 3c:86:aa:6c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEs1Vvy5z240vMLvvkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk MDJlN2JhMDctZmQ1NC00YjI5LTk0Y2YtZTUwMjM1NDAwY2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHPV3GGdl4K+oVF+ELtuqmNHHXZufupEAQVT EqFIVG/FimYtHRrJckmTXYqEvOL3qy0D/ESpXsl8ipFT4lRXc5f1gd3GfXW10JOx mZ4CccHi3tSJfmexa8CjhmyhpQo6jU0HYXfPGnzTT3ZDXrjnXhlyyHha7pgYxuBg u38G1c0fxSRRSJa1f4QHcxvPL6kBg+uwW1gtIWbX87MB4rYQBKOw6QKyFuL33Vzg jk1+f3uRr7Ew2aqSYrwzJBnaRfOOz4biRKaeLpP+Kxu4Y5hFKizEH0lHgQYC/M/t GLKQGINpXMQSOSuaHPhOY+nh/JPNq2PWKzuy8P8lx9QIzzXhZwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFL+ysO2ET+MMdwOBJbD8IKHNKyUAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDYwYzE1YTctNTNkZi0z YWQxLWI0ZWMtMWMxMzA5Mjg4Y2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA/aFi9Rb7tGpzFSCZGEAuHrvTwgfkJj5Tfd/UU dkQa96IhXdWtD/q8PcEuOP3S7fgSgxfTIH6zR4ZYt0eEZ/8tA5fCyC6jmjtba7hu 0YH7/8xWsHZzkkEbJ0RLMoLBbRYfZ0YqASfAR8kVDPBBDLFfhcpx5vWYPco3j8le FlCXGtLwfQgAjoHr7Et48RFiXjfEUr6LZYolXmHwxIy8Tn/MKxaIx2TLvFISu6g/ GPq+db4cKn2bWlf0gKqLCQOPWxdXHM+dRT52tXtYWP+QSzTLviwPSncBpwUhYIPe d9qWRGnVUpSFIPsReD8eYHbm7N4c26lD4VbZk2RkPc48hqps -----END CERTIFICATE-----Generated at Mon Oct 20 18:23:26 2025 by rpki-client