$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/72c8059a-ed24-3ab9-8714-d6c8f0bcca00.roa File: 72c8059a-ed24-3ab9-8714-d6c8f0bcca00.roa (raw, json) Hash identifier: gSQNrnLipbXkVP/rZtHeNIX6ySAlIerE+XwTjslr/iU= Subject key identifier: C8:DC:52:6F:53:91:32:E9:0D:EC:41:C4:F5:B9:30:37:79:BE:23:B7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B48E210CF5B8242A491C4D700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/72c8059a-ed24-3ab9-8714-d6c8f0bcca00.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 36620 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:10:cf:5b:82:42:a4:91:c4:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=cf2a4e8c-86e5-418a-8949-dbbd747364ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cc:28:87:dd:dc:2a:94:35:8e:88:b0:8f:7d: 2d:25:90:bf:a6:ea:92:2f:a5:06:de:60:ec:c6:ba: 29:53:de:20:77:cd:fb:a4:49:9f:ee:74:e2:bc:8a: 62:82:d2:3b:c1:89:66:11:f5:7f:1c:99:32:7b:d5: 5e:1f:03:f5:69:7c:75:ef:7c:a1:e3:5e:37:b9:21: 8f:97:e3:21:0b:d1:ae:b1:23:57:81:99:8f:4b:83: 2b:af:af:98:90:06:e9:09:7f:ed:4e:91:30:0c:30: 1d:67:cf:de:d6:a6:84:80:0f:05:f1:76:71:41:5e: e4:03:df:82:a6:d1:4e:bb:0b:b5:8d:d3:1f:73:13: fd:38:b7:a6:91:ed:9c:ec:09:3e:e6:94:00:16:6b: a2:22:48:c9:0f:17:91:fb:94:30:0b:18:1f:5f:c5: 1a:85:5a:01:66:c6:5d:1c:16:fe:88:3a:dc:42:d6: a7:97:25:8f:73:b1:1c:1f:1f:31:8a:32:69:8b:b2: 51:68:46:42:f9:99:9d:08:d1:ab:82:7c:34:d8:45: 7d:f9:01:d6:ed:76:21:3f:07:f5:42:a6:17:0a:84: 9c:13:a3:c3:8d:52:7a:29:87:fb:0f:ba:f9:9f:95: 4a:f2:e3:4f:5a:c3:26:cb:f2:ca:71:86:a5:a5:d5: 4f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:DC:52:6F:53:91:32:E9:0D:EC:41:C4:F5:B9:30:37:79:BE:23:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/72c8059a-ed24-3ab9-8714-d6c8f0bcca00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:99:65:b2:90:81:ba:2d:d1:e1:af:9f:b0:ab:2d:58:8b:8b: 5c:75:ae:67:16:81:58:0f:24:30:ad:53:4a:a5:46:c2:35:91: 70:58:08:25:41:8a:32:98:50:b0:5b:24:b0:b4:37:dd:97:8d: 09:64:e2:6d:c8:9e:f4:bc:1d:95:51:b2:13:11:2f:c0:e4:3b: 05:92:75:45:1c:e2:06:5f:43:00:b3:9d:b9:23:b4:e4:00:13: d4:ef:8b:19:5b:bd:b0:a1:dd:ce:d9:ac:49:41:be:11:55:e1: 29:ec:b1:1c:8e:ce:94:c9:c4:35:97:3f:1d:c4:47:f1:d2:7a: 43:ce:96:d5:2e:fd:9f:84:46:50:73:16:be:58:0f:04:5a:51: b7:3a:cf:45:e3:85:04:03:15:e3:85:34:54:88:4d:3a:79:23: 70:8a:f9:fd:08:85:de:61:d5:e3:11:ee:d3:5a:d8:49:6a:5f: 21:65:36:bf:6d:15:da:15:17:ca:50:ae:18:fe:45:ac:55:c8: 0b:9f:77:d3:49:7f:a6:84:f6:bc:20:3c:e2:32:56:ff:f9:6e: fb:ee:b2:71:2d:2c:14:d3:06:71:73:31:a1:da:df:ff:50:ce: 50:d1:1e:3e:aa:ed:06:de:ab:37:8c:fd:a6:92:8f:dc:18:cb: 64:8f:61:0d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4hDPW4JCpJHE1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk Y2YyYTRlOGMtODZlNS00MThhLTg5NDktZGJiZDc0NzM2NGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvswoh93cKpQ1joiwj30tJZC/puqSL6UG3mDs xropU94gd837pEmf7nTivIpigtI7wYlmEfV/HJkye9VeHwP1aXx173yh4143uSGP l+MhC9GusSNXgZmPS4Mrr6+YkAbpCX/tTpEwDDAdZ8/e1qaEgA8F8XZxQV7kA9+C ptFOuwu1jdMfcxP9OLemke2c7Ak+5pQAFmuiIkjJDxeR+5QwCxgfX8UahVoBZsZd HBb+iDrcQtanlyWPc7EcHx8xijJpi7JRaEZC+ZmdCNGrgnw02EV9+QHW7XYhPwf1 QqYXCoScE6PDjVJ6KYf7D7r5n5VK8uNPWsMmy/LKcYalpdVPswIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMjcUm9TkTLpDexBxPW5MDd5viO3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzJjODA1OWEtZWQyNC0z YWI5LTg3MTQtZDZjOGYwYmNjYTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACWZZbKQgbot0eGvn7CrLViLi1x1rmcWgVgPJDCtU0qlRsI1kXBY CCVBijKYULBbJLC0N92XjQlk4m3InvS8HZVRshMRL8DkOwWSdUUc4gZfQwCznbkj tOQAE9TvixlbvbCh3c7ZrElBvhFV4SnssRyOzpTJxDWXPx3ER/HSekPOltUu/Z+E RlBzFr5YDwRaUbc6z0XjhQQDFeOFNFSITTp5I3CK+f0Ihd5h1eMR7tNa2ElqXyFl Nr9tFdoVF8pQrhj+RaxVyAufd9NJf6aE9rwgPOIyVv/5bvvusnEtLBTTBnFzMaHa 3/9QzlDRHj6q7QbeqzeM/aaSj9wYy2SPYQ0= -----END CERTIFICATE-----Generated at Mon Oct 20 10:25:39 2025 by rpki-client