$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/60baee0e-fb4d-307b-abb9-6fdbfcea7484.roa File: 60baee0e-fb4d-307b-abb9-6fdbfcea7484.roa (raw, json) Hash identifier: xDI682m0nXBiU34mOoc2QnoQfkEhhjJmJX9Er4YcJuc= Subject key identifier: 01:C8:AA:B9:65:61:E8:48:F9:F1:CB:0F:23:D8:86:B1:21:EF:41:48 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6202357F2C17A9A7320B3A80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/60baee0e-fb4d-307b-abb9-6fdbfcea7484.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 396578 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:35:7f:2c:17:a9:a7:32:0b:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=bfe70e90-020c-40e4-8f5c-e217582e8895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:6e:79:65:19:7c:a9:df:a0:73:21:73:47:fb: 8c:84:f7:e8:47:c0:0a:44:9b:a3:24:b5:f0:53:d8: f2:e0:26:ee:11:fa:9d:98:2a:68:b8:78:3f:31:bf: e3:cc:3d:7e:b8:2d:26:f0:cb:b8:f6:fa:36:eb:b9: f9:73:ec:18:50:96:d2:40:1a:bf:0b:21:d3:04:f9: ac:cf:91:30:5b:cb:46:74:99:a1:a0:92:cf:b6:16: 22:bb:3c:6f:f1:d7:c8:8d:4e:79:50:6a:81:0b:63: 1e:53:e2:e6:31:4b:31:d7:42:3a:4b:9c:23:69:2e: 07:a6:db:ff:0d:c8:00:b9:01:c4:25:b5:07:70:65: 3e:44:be:69:53:95:70:23:a6:c9:93:76:a0:36:54: 54:68:6c:98:3c:15:0e:17:3a:36:d9:25:17:ba:f7: ef:f4:3e:d1:87:bf:85:8d:d8:50:38:76:76:75:68: 82:b7:7f:3b:ee:d1:10:46:9e:20:3f:9b:b0:c7:9f: ee:46:6e:25:fd:57:ba:66:ec:21:03:3a:b8:7f:70: 7a:b4:75:c4:c7:9e:79:30:42:da:44:00:f6:7a:fd: 92:85:ac:97:cf:51:e0:e4:86:c0:ce:62:ac:8a:19: 35:97:00:a1:ff:85:15:aa:46:0c:2c:41:f0:05:8b: d8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:C8:AA:B9:65:61:E8:48:F9:F1:CB:0F:23:D8:86:B1:21:EF:41:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/60baee0e-fb4d-307b-abb9-6fdbfcea7484.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:54:48:22:91:57:0f:30:d1:a6:66:6a:c4:65:d2:5c:db:a2: 1f:45:e7:86:e7:e2:fa:34:b0:ff:80:26:80:4b:17:c1:d5:d3: 25:21:51:43:0f:ef:0b:26:da:56:4b:d4:9e:98:8f:96:5e:76: 19:a9:b6:49:36:d4:c2:38:f5:ab:05:49:46:f2:82:08:1f:8d: 67:80:73:01:bd:5a:5f:6f:85:1a:c1:c5:62:41:83:20:0b:79: 81:cc:70:f5:96:12:68:03:b9:62:aa:41:eb:47:94:ae:ff:67: d6:fb:b9:a8:bc:f0:60:10:5f:95:90:8d:a6:9f:54:f8:2a:c9: 58:24:32:b2:d1:54:bd:40:84:f8:1e:d0:65:71:e5:cd:1e:5e: b0:2f:4c:51:a5:6a:01:81:57:77:e3:57:18:9c:0b:e9:b4:3d: f5:45:7c:69:d2:43:e1:25:4e:a5:52:6e:6e:e6:12:92:eb:3a: a3:82:18:61:5c:ec:7c:1b:3b:12:7d:cc:1c:80:66:3a:08:42: 8d:6e:51:78:75:03:c3:39:5f:37:7b:c5:af:11:74:b6:9c:5b: 48:f2:7b:44:72:15:72:68:a3:8a:4e:57:15:32:2e:79:7d:57: f2:86:83:62:48:1d:45:62:63:81:79:66:e1:54:74:2d:3f:48: a8:a2:8c:fe -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAjV/LBeppzILOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk YmZlNzBlOTAtMDIwYy00MGU0LThmNWMtZTIxNzU4MmU4ODk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg255ZRl8qd+gcyFzR/uMhPfoR8AKRJujJLXw U9jy4CbuEfqdmCpouHg/Mb/jzD1+uC0m8Mu49vo267n5c+wYUJbSQBq/CyHTBPms z5EwW8tGdJmhoJLPthYiuzxv8dfIjU55UGqBC2MeU+LmMUsx10I6S5wjaS4Hptv/ DcgAuQHEJbUHcGU+RL5pU5VwI6bJk3agNlRUaGyYPBUOFzo22SUXuvfv9D7Rh7+F jdhQOHZ2dWiCt3877tEQRp4gP5uwx5/uRm4l/Ve6ZuwhAzq4f3B6tHXEx555MELa RAD2ev2ShayXz1Hg5IbAzmKsihk1lwCh/4UVqkYMLEHwBYvYJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAHIqrllYehI+fHLDyPYhrEh70FIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjBiYWVlMGUtZmI0ZC0z MDdiLWFiYjktNmZkYmZjZWE3NDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAENUSCKRVw8w0aZmasRl0lzboh9F54bn4vo0sP+AJoBLF8HV0yUh UUMP7wsm2lZL1J6Yj5Zedhmptkk21MI49asFSUbygggfjWeAcwG9Wl9vhRrBxWJB gyALeYHMcPWWEmgDuWKqQetHlK7/Z9b7uai88GAQX5WQjaafVPgqyVgkMrLRVL1A hPge0GVx5c0eXrAvTFGlagGBV3fjVxicC+m0PfVFfGnSQ+ElTqVSbm7mEpLrOqOC GGFc7HwbOxJ9zByAZjoIQo1uUXh1A8M5Xzd7xa8RdLacW0jye0RyFXJoo4pOVxUy Lnl9V/KGg2JIHUViY4F5ZuFUdC0/SKiijP4= -----END CERTIFICATE-----Generated at Mon Oct 20 17:54:17 2025 by rpki-client