$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4c0dc7cc-fd5b-3d54-90f8-467ddc950091.roa File: 4c0dc7cc-fd5b-3d54-90f8-467ddc950091.roa (raw, json) Hash identifier: 2zLeaOyiYivFeDOph4jH1lRdF1V4gmIv5dCKum12S6U= Subject key identifier: 80:BF:18:70:99:C6:35:DE:DF:A1:C5:21:07:68:AF:B2:41:1D:1E:83 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B620217500DA2A7F94868AC00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4c0dc7cc-fd5b-3d54-90f8-467ddc950091.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 396584 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:17:50:0d:a2:a7:f9:48:68:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=bd10c122-ffd8-44a2-b6d5-cdabb93e4f7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:9b:56:e1:33:f6:8f:ec:d4:10:90:6a:4c:12: 10:3b:76:db:3a:53:db:39:24:fd:30:4c:41:41:ac: bf:df:eb:14:ea:3e:4b:c7:ef:61:38:04:57:2e:fb: 3b:38:81:1f:b0:aa:2e:02:96:36:bc:b2:57:cd:48: 85:47:59:91:2c:cb:94:4b:eb:95:e6:8c:dd:fa:be: b9:74:9e:54:7c:ff:ec:eb:64:51:80:6e:f5:6b:1e: 4d:32:1b:2f:ed:82:45:91:d4:71:9a:d9:7e:fc:9d: d2:21:17:f9:49:73:e0:df:f8:28:bc:ea:17:fb:28: 79:e4:94:65:bd:37:89:bc:a5:eb:73:57:1c:a7:b0: ce:0e:00:2d:e5:ec:f7:98:f3:b2:4d:17:d7:e3:cb: 1e:06:c6:46:5f:f2:1f:4c:ed:f8:4d:d7:11:f7:58: 7b:4c:e9:df:a3:04:63:34:0b:0c:ea:29:fa:d6:f6: a8:1f:63:b4:7b:47:2f:d3:93:6e:88:78:9f:e0:49: e4:95:bd:50:f6:0a:6b:1b:51:2e:c4:4c:08:05:fa: 73:64:b8:e2:53:97:30:5e:69:89:d2:ff:c3:42:d7: 14:94:77:86:17:25:6d:cc:84:9c:61:69:5c:8f:5c: 50:d3:c0:e1:c5:4b:ab:49:dc:aa:ae:aa:4c:c2:da: de:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:BF:18:70:99:C6:35:DE:DF:A1:C5:21:07:68:AF:B2:41:1D:1E:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4c0dc7cc-fd5b-3d54-90f8-467ddc950091.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:ca:0e:75:4d:8a:80:b4:26:3f:2d:9a:4a:f3:7e:5a:ca:30: 87:f9:cd:ff:33:e9:1b:3c:72:d6:08:1a:4e:93:3b:f9:1a:4d: ee:75:5b:10:f1:03:c1:5a:68:7e:a4:04:55:87:4d:9a:04:ac: a7:5d:a4:29:c1:e4:f4:29:16:ea:d0:cd:a5:05:09:0c:6c:2c: 42:95:18:f6:3c:09:06:fa:28:59:cc:2d:cf:6e:6e:65:69:0c: 9e:91:02:c0:0c:0e:56:ac:1d:e7:0b:b6:1c:4c:76:e9:88:16: a4:0b:3d:7c:fe:80:19:6d:36:54:fc:94:e0:e3:1e:ce:c1:c2: 06:38:02:92:7b:aa:84:da:2a:68:79:72:54:de:d4:bf:1c:83: e9:8c:fb:57:15:5c:56:2b:75:ac:b1:25:a8:82:e1:81:16:45: d9:21:3d:24:87:66:1e:70:26:71:0c:a0:ef:01:b9:db:3f:cd: 64:94:11:ad:ec:d9:85:87:32:47:82:38:3c:24:7f:af:7e:cf: 7e:b6:55:73:17:03:06:65:2e:23:62:ba:1e:aa:a2:72:03:36: 2e:bc:d7:cd:0a:14:1a:4f:b8:15:71:55:0d:7c:29:a3:b7:f0: d1:ac:0f:f3:88:20:3f:91:2a:12:e0:a5:61:e7:76:0c:05:a2: d4:ab:82:1c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAhdQDaKn+UhorAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk YmQxMGMxMjItZmZkOC00NGEyLWI2ZDUtY2RhYmI5M2U0ZjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJtW4TP2j+zUEJBqTBIQO3bbOlPbOST9MExB Qay/3+sU6j5Lx+9hOARXLvs7OIEfsKouApY2vLJXzUiFR1mRLMuUS+uV5ozd+r65 dJ5UfP/s62RRgG71ax5NMhsv7YJFkdRxmtl+/J3SIRf5SXPg3/govOoX+yh55JRl vTeJvKXrc1ccp7DODgAt5ez3mPOyTRfX48seBsZGX/IfTO34TdcR91h7TOnfowRj NAsM6in61vaoH2O0e0cv05NuiHif4Enklb1Q9gprG1EuxEwIBfpzZLjiU5cwXmmJ 0v/DQtcUlHeGFyVtzIScYWlcj1xQ08DhxUurSdyqrqpMwtreCwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIC/GHCZxjXe36HFIQdor7JBHR6DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGMwZGM3Y2MtZmQ1Yi0z ZDU0LTkwZjgtNDY3ZGRjOTUwMDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHzKDnVNioC0Jj8tmkrzflrKMIf5zf8z6Rs8ctYIGk6TO/kaTe51 WxDxA8FaaH6kBFWHTZoErKddpCnB5PQpFurQzaUFCQxsLEKVGPY8CQb6KFnMLc9u bmVpDJ6RAsAMDlasHecLthxMdumIFqQLPXz+gBltNlT8lODjHs7BwgY4ApJ7qoTa Kmh5clTe1L8cg+mM+1cVXFYrdayxJaiC4YEWRdkhPSSHZh5wJnEMoO8Buds/zWSU Ea3s2YWHMkeCODwkf69+z362VXMXAwZlLiNiuh6qonIDNi68180KFBpPuBVxVQ18 KaO38NGsD/OIID+RKhLgpWHndgwFotSrghw= -----END CERTIFICATE-----Generated at Mon Oct 20 08:14:23 2025 by rpki-client