$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5e919a49-2b83-3386-ae82-eb87291d5fe4.roa File: 5e919a49-2b83-3386-ae82-eb87291d5fe4.roa (raw, json) Hash identifier: 1hQhqiwARU42+w3u465sPHPQKpaB1tDdqBF9GKJWvpQ= Subject key identifier: 88:80:6B:D4:B3:3C:47:C1:54:76:33:30:AE:2C:CD:1A:34:04:18:26 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B62021E667D1831DD78B54280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5e919a49-2b83-3386-ae82-eb87291d5fe4.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 396615 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:1e:66:7d:18:31:dd:78:b5:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=d6f29690-5106-4d58-95c2-8a38fb18ae96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a2:d2:8b:8a:ac:48:ca:62:ed:90:4c:88:6c: 42:f1:5a:5a:cd:77:11:e3:05:b6:0f:ec:15:82:3d: 36:e7:ac:cc:28:6c:4b:eb:c9:27:62:4a:4c:68:93: 85:55:0d:b2:84:9c:e9:44:3d:d6:10:7f:08:bb:ea: 70:4e:c3:4a:06:76:8e:72:c1:b1:03:97:fc:37:3a: c8:49:89:fb:c2:30:e4:93:d7:7a:94:ea:f5:7e:6d: 78:d3:f5:d5:54:b5:f6:14:84:7c:dd:bf:98:54:68: 39:89:35:c8:82:61:3d:ab:71:f3:6e:a6:b3:4e:4a: d1:03:18:ad:be:15:eb:0f:fe:23:70:7d:25:a1:62: 1d:18:05:d2:0a:03:8a:79:35:f8:95:ec:bc:7f:65: b1:37:6e:45:5e:82:ac:8e:4e:61:f7:28:ee:2f:71: 28:d0:3c:38:51:25:a5:a9:8d:c2:d8:0f:90:29:02: 2e:de:31:16:40:23:b9:be:ac:30:7c:22:d4:38:e8: 7d:02:da:40:d5:f6:6e:34:17:24:1d:a5:fb:c3:f0: 70:ba:e8:ad:ba:1e:0e:e9:59:59:10:0b:21:db:2e: e4:cc:06:1d:c7:80:bd:60:2f:d0:b4:f1:25:1f:b7: 83:54:81:a0:85:1c:3b:77:83:96:33:72:d0:fe:6c: 12:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:80:6B:D4:B3:3C:47:C1:54:76:33:30:AE:2C:CD:1A:34:04:18:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5e919a49-2b83-3386-ae82-eb87291d5fe4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:ab:4e:a2:6e:14:60:76:a4:f7:4b:91:fb:ce:51:f6:05:43: df:25:d3:d8:cd:7f:0c:5b:f9:12:06:f1:fa:0f:ff:03:fa:78: 92:a8:67:c1:d7:e7:93:a0:1c:a5:9f:28:2d:d1:30:53:72:1b: a0:54:81:93:2b:63:c4:af:d0:54:34:5e:99:f9:af:79:e8:5a: 31:ef:64:f9:73:c6:ae:19:2c:5b:0b:31:3d:69:90:6a:e0:81: 39:04:98:b5:3f:37:22:9d:2b:ce:e1:c4:75:33:0d:71:61:75: ec:5c:de:73:d3:13:bc:a4:a8:95:29:f0:5f:2d:a6:5b:dc:4e: 5a:3c:50:98:5f:36:2c:1a:a8:aa:63:5c:c4:f8:48:b7:9f:9e: c7:02:9f:c1:50:1d:1b:d8:9e:55:c7:cf:f2:ef:97:32:6d:cf: bf:ff:cb:ff:57:ed:2c:3a:6f:3e:db:e3:11:64:96:02:c4:c6: 59:fd:8e:4e:65:9f:9b:f5:a3:c0:c2:90:dd:69:ce:db:53:94: 1e:26:24:27:cc:01:12:62:62:c6:2b:76:9f:8d:e9:1e:d0:1d: 4a:fa:ce:36:24:68:3f:5e:5b:4b:b5:dc:ad:cf:95:e9:a3:9e: d7:1e:12:b5:01:19:c3:4d:7c:79:e2:ae:44:6c:b2:49:a3:be: 2f:a0:73:c9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAh5mfRgx3Xi1QoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZDZmMjk2OTAtNTEwNi00ZDU4LTk1YzItOGEzOGZiMThhZTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaLSi4qsSMpi7ZBMiGxC8VpazXcR4wW2D+wV gj0256zMKGxL68knYkpMaJOFVQ2yhJzpRD3WEH8Iu+pwTsNKBnaOcsGxA5f8NzrI SYn7wjDkk9d6lOr1fm140/XVVLX2FIR83b+YVGg5iTXIgmE9q3HzbqazTkrRAxit vhXrD/4jcH0loWIdGAXSCgOKeTX4ley8f2WxN25FXoKsjk5h9yjuL3Eo0Dw4USWl qY3C2A+QKQIu3jEWQCO5vqwwfCLUOOh9AtpA1fZuNBckHaX7w/Bwuuituh4O6VlZ EAsh2y7kzAYdx4C9YC/QtPElH7eDVIGghRw7d4OWM3LQ/mwSiQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIiAa9SzPEfBVHYzMK4szRo0BBgmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWU5MTlhNDktMmI4My0z Mzg2LWFlODItZWI4NzI5MWQ1ZmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHCrTqJuFGB2pPdLkfvOUfYFQ98l09jNfwxb+RIG8foP/wP6eJKo Z8HX55OgHKWfKC3RMFNyG6BUgZMrY8Sv0FQ0Xpn5r3noWjHvZPlzxq4ZLFsLMT1p kGrggTkEmLU/NyKdK87hxHUzDXFhdexc3nPTE7ykqJUp8F8tplvcTlo8UJhfNiwa qKpjXMT4SLefnscCn8FQHRvYnlXHz/LvlzJtz7//y/9X7Sw6bz7b4xFklgLExln9 jk5ln5v1o8DCkN1pzttTlB4mJCfMARJiYsYrdp+N6R7QHUr6zjYkaD9eW0u13K3P lemjntceErUBGcNNfHnirkRsskmjvi+gc8k= -----END CERTIFICATE-----Generated at Mon Oct 20 10:28:57 2025 by rpki-client