$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/465ff9f1-7da3-3fc9-991e-1274d379e541.roa File: 465ff9f1-7da3-3fc9-991e-1274d379e541.roa (raw, json) Hash identifier: NkurhbWbtJPQkwwg5tA6Nosrqu0LSROUib8+omSdao8= Subject key identifier: 82:AF:98:25:F3:96:F6:2B:8A:0C:2A:CB:25:3E:A9:59:CB:5E:B7:71 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7C8766D96192B67971B58A68 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/465ff9f1-7da3-3fc9-991e-1274d379e541.roa Signing time: Sat 11 Oct 2025 13:00:38 +0000 ROA not before: Sat 11 Oct 2025 13:00:38 +0000 ROA not after: Fri 09 Jan 2026 14:00:38 +0000 asID: 0 IP address blocks: 2620:74:2d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7c:87:66:d9:61:92:b6:79:71:b5:8a:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 11 13:00:38 2025 GMT Not After : Jan 9 14:00:38 2026 GMT Subject: CN=bbbf6f86-96ac-4f2d-9760-afbd4c730b14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1c:a5:a9:f6:61:64:30:9f:d6:aa:11:81:7e: 3d:23:05:3c:22:cf:e4:6a:25:83:f3:57:51:d2:0d: 8f:4f:61:2e:8e:2e:a6:8b:3d:e0:27:f9:84:77:1f: 7e:95:80:42:60:39:a2:cb:18:30:75:61:10:17:c0: 61:7f:9a:05:63:4f:85:b9:c0:f8:13:a4:6e:15:9b: d5:21:1d:53:6e:21:5c:ec:45:90:88:38:0b:47:86: c7:e3:77:ae:3a:d3:87:84:99:db:ca:66:8c:e8:e0: 40:6a:89:66:a1:9f:87:a3:d2:69:0b:3f:12:b4:78: 94:b7:b4:c6:93:20:72:78:4d:6b:2b:d7:72:c5:d3: ef:b1:c8:42:9e:08:52:ac:53:19:f8:f4:ec:c4:9d: ee:8c:76:32:10:af:73:2a:87:4b:79:44:a8:b1:1f: 3d:7e:bd:16:4c:20:2d:af:5f:1c:dc:25:7a:97:56: 9d:7b:2c:9e:f1:6e:a4:c7:53:a4:99:70:1d:3f:01: c7:95:78:23:96:e6:36:21:1d:aa:c6:7f:66:07:47: fc:f1:d4:e2:b6:5d:04:6b:88:5d:b7:e9:f4:02:db: 54:41:6e:c9:34:cf:ff:85:84:5b:0c:ed:a4:27:f2: 6a:86:a6:86:42:0e:84:3c:5f:6f:e0:43:e8:fe:29: 6e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:AF:98:25:F3:96:F6:2B:8A:0C:2A:CB:25:3E:A9:59:CB:5E:B7:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/465ff9f1-7da3-3fc9-991e-1274d379e541.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:94:45:8d:5c:82:30:6d:b3:a6:85:f5:68:32:2e:26:5c:b1: 34:35:c8:19:86:08:e1:69:8a:02:5e:49:ee:a6:0c:76:38:08: 0e:b8:7e:87:dc:04:8b:fc:9f:d5:ba:7c:f2:01:2f:ce:4c:fb: 93:04:c5:b8:77:df:d9:b9:4f:0e:43:7f:9b:cd:dc:0c:18:95: 2d:1c:ee:26:af:51:4a:d0:52:3b:9a:11:8c:69:22:db:aa:06: b7:e7:b9:7e:04:45:b9:a1:1d:45:51:21:99:34:3c:22:b7:b0: e9:97:14:24:4d:aa:48:86:67:bc:dc:14:21:39:6e:f7:a7:61: 5f:59:68:02:cc:9c:78:e9:89:1c:c9:c5:d0:7a:18:3b:6c:de: 8b:5c:8d:bd:00:fa:87:b2:dd:c1:69:64:08:4e:44:e8:de:8c: 07:81:ae:12:d3:1a:f4:24:1c:22:7e:92:9a:bf:53:bb:6d:92: 4e:d1:c4:d9:5e:01:e1:66:d2:24:4d:db:76:15:10:de:21:31: 50:7c:78:d9:c5:d6:47:07:9b:9c:51:23:4b:92:be:02:a2:ce: 4b:ce:e7:72:a1:a5:67:ad:f6:d8:1b:80:41:f9:ad:5a:bb:27: cf:f9:cc:35:75:13:a8:d3:3d:07:c0:83:fc:5b:c6:2d:49:a6: fa:88:e3:35 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt8h2bZYZK2eXG1imgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMTEzMDAzOFoXDTI2MDEwOTE0MDAzOFowLzEtMCsGA1UEAxMk YmJiZjZmODYtOTZhYy00ZjJkLTk3NjAtYWZiZDRjNzMwYjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxylqfZhZDCf1qoRgX49IwU8Is/kaiWD81dR 0g2PT2Euji6miz3gJ/mEdx9+lYBCYDmiyxgwdWEQF8Bhf5oFY0+FucD4E6RuFZvV IR1TbiFc7EWQiDgLR4bH43euOtOHhJnbymaM6OBAaolmoZ+Ho9JpCz8StHiUt7TG kyByeE1rK9dyxdPvschCnghSrFMZ+PTsxJ3ujHYyEK9zKodLeUSosR89fr0WTCAt r18c3CV6l1adeyye8W6kx1OkmXAdPwHHlXgjluY2IR2qxn9mB0f88dTitl0Ea4hd t+n0AttUQW7JNM//hYRbDO2kJ/JqhqaGQg6EPF9v4EPo/iluqwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIKvmCXzlvYrigwqyyU+qVnLXrdxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDY1ZmY5ZjEtN2RhMy0z ZmM5LTk5MWUtMTI3NGQzNzllNTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAt MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHiURY1cgjBts6aF9WgyLiZcsTQ1yBmGCOFpigJeSe6mDHY4CA64 fofcBIv8n9W6fPIBL85M+5MExbh339m5Tw5Df5vN3AwYlS0c7iavUUrQUjuaEYxp ItuqBrfnuX4ERbmhHUVRIZk0PCK3sOmXFCRNqkiGZ7zcFCE5bvenYV9ZaALMnHjp iRzJxdB6GDts3otcjb0A+oey3cFpZAhOROjejAeBrhLTGvQkHCJ+kpq/U7ttkk7R xNleAeFm0iRN23YVEN4hMVB8eNnF1kcHm5xRI0uSvgKizkvO53KhpWet9tgbgEH5 rVq7J8/5zDV1E6jTPQfAg/xbxi1JpvqI4zU= -----END CERTIFICATE-----Generated at Mon Oct 20 02:20:03 2025 by rpki-client