$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/72e592f2-1e84-318b-a25f-77e6ae4f5a00.roa File: 72e592f2-1e84-318b-a25f-77e6ae4f5a00.roa (raw, json) Hash identifier: cF+aC4wA0lEZSUY4LMKmtcwgSHiU93q/UUQvZjCnNmE= Subject key identifier: C8:5C:51:8A:A8:C9:08:85:B0:EE:7E:15:C0:74:F4:58:47:B7:86:11 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B48E20FA904F6C17E19C43780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/72e592f2-1e84-318b-a25f-77e6ae4f5a00.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 396605 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:0f:a9:04:f6:c1:7e:19:c4:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=a9ecdb48-48f2-4054-bd30-806a93fe0510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ac:ef:fd:f0:86:e6:80:3b:12:93:0d:fd:b6: ba:b5:95:b4:6c:ca:11:c8:4e:75:44:ee:a9:90:69: 32:89:20:24:23:20:ee:d6:ea:74:75:ad:17:5f:8b: dc:22:ac:80:25:63:d7:0d:d0:20:48:86:4d:2c:ce: bc:99:a3:39:dd:82:b7:14:df:2f:54:9e:89:a4:04: c5:23:70:e2:33:8a:3c:12:67:59:ba:a1:72:b9:58: d2:3b:a4:9c:8d:2c:71:b1:73:bf:39:47:8b:83:a8: 51:e6:5e:d1:a7:d0:66:52:01:1f:29:6a:91:2b:53: bd:d9:91:5e:5d:34:4a:cd:38:d8:c9:a4:45:0a:22: 95:3c:7d:84:4a:e6:d9:e1:4f:e5:71:7e:86:33:a6: af:fb:ad:b8:8c:11:d4:68:73:81:de:09:18:2d:8b: 90:b8:81:2b:02:1d:e3:65:15:22:d5:aa:4e:2d:5c: ce:68:05:c8:6b:d7:17:d5:34:3f:98:c4:39:ec:e7: fe:05:71:86:d1:4a:03:0b:66:da:aa:0e:f7:3f:84: 55:7b:c5:1e:10:8c:7f:74:28:e3:d3:0c:5b:dd:d9: 4d:67:04:fa:e8:9d:75:3b:c8:12:57:2a:4b:f9:64: 65:7d:7a:9a:8e:c5:4a:d1:8f:5b:fb:7c:3b:e0:ed: c0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:5C:51:8A:A8:C9:08:85:B0:EE:7E:15:C0:74:F4:58:47:B7:86:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/72e592f2-1e84-318b-a25f-77e6ae4f5a00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:ce:7f:1b:a5:e6:58:d0:28:07:78:4c:f0:81:28:f4:cc:be: 16:e2:cc:1d:1b:39:3c:5a:e2:4a:ef:eb:7d:42:1c:e9:f3:7a: d9:f8:79:52:b4:ee:1a:f9:47:5b:40:ff:4e:2d:41:7e:c6:b3: ad:b2:f7:40:9e:43:81:56:9f:32:f8:cf:92:56:e7:1f:7f:27: e5:6a:e1:83:9a:b6:38:48:f0:86:0f:90:e5:cb:e0:fc:40:b1: 54:e7:77:d5:94:9f:36:e3:88:39:95:02:05:83:fc:76:59:a9: 3a:ad:33:87:59:b9:5e:a6:64:e9:15:36:bb:74:f4:91:11:fb: 32:ae:90:c2:ec:bc:9b:1c:1f:cd:8d:ee:c1:05:79:f0:c0:5e: 51:12:79:7c:f5:a4:f9:8d:03:e2:aa:7d:97:36:c3:d5:e0:8f: de:b6:d3:34:7b:e5:2d:8e:f8:07:63:14:8f:ee:71:00:94:6d: 42:9a:16:dc:b8:e3:82:77:4f:12:0c:95:33:05:83:7b:1a:ad: 01:e6:7f:d7:19:f8:7a:86:d2:be:15:c2:82:f6:c8:a2:31:93: 13:0f:71:e2:58:06:13:19:69:c6:f9:02:55:97:9c:2c:eb:70: 15:27:60:3d:83:1f:d8:2c:97:57:49:f9:0d:4e:2a:7b:b7:77: b1:8a:a5:3b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4g+pBPbBfhnEN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk YTllY2RiNDgtNDhmMi00MDU0LWJkMzAtODA2YTkzZmUwNTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6zv/fCG5oA7EpMN/ba6tZW0bMoRyE51RO6p kGkyiSAkIyDu1up0da0XX4vcIqyAJWPXDdAgSIZNLM68maM53YK3FN8vVJ6JpATF I3DiM4o8EmdZuqFyuVjSO6ScjSxxsXO/OUeLg6hR5l7Rp9BmUgEfKWqRK1O92ZFe XTRKzTjYyaRFCiKVPH2ESubZ4U/lcX6GM6av+624jBHUaHOB3gkYLYuQuIErAh3j ZRUi1apOLVzOaAXIa9cX1TQ/mMQ57Of+BXGG0UoDC2baqg73P4RVe8UeEIx/dCjj 0wxb3dlNZwT66J11O8gSVypL+WRlfXqajsVK0Y9b+3w74O3AdwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMhcUYqoyQiFsO5+FcB09FhHt4YRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzJlNTkyZjItMWU4NC0z MThiLWEyNWYtNzdlNmFlNGY1YTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFrOfxul5ljQKAd4TPCBKPTMvhbizB0bOTxa4krv631CHOnzetn4 eVK07hr5R1tA/04tQX7Gs62y90CeQ4FWnzL4z5JW5x9/J+Vq4YOatjhI8IYPkOXL 4PxAsVTnd9WUnzbjiDmVAgWD/HZZqTqtM4dZuV6mZOkVNrt09JER+zKukMLsvJsc H82N7sEFefDAXlESeXz1pPmNA+KqfZc2w9Xgj9620zR75S2O+AdjFI/ucQCUbUKa Fty444J3TxIMlTMFg3sarQHmf9cZ+HqG0r4VwoL2yKIxkxMPceJYBhMZacb5AlWX nCzrcBUnYD2DH9gsl1dJ+Q1OKnu3d7GKpTs= -----END CERTIFICATE-----Generated at Mon Oct 20 10:24:09 2025 by rpki-client