$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/73734d8e-b7ff-33be-a22c-ab23ad815603.roa File: 73734d8e-b7ff-33be-a22c-ab23ad815603.roa (raw, json) Hash identifier: tTAgXKLwi0jRNTAJHr0GMnl+ZEGmuLFR6m3xJJ3CeOc= Subject key identifier: 46:E9:19:19:AB:28:AA:54:8E:EE:08:50:B2:8D:AA:79:16:65:E4:5B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B62022DE69E8545209FB8EB1C Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/73734d8e-b7ff-33be-a22c-ab23ad815603.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 397205 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:2d:e6:9e:85:45:20:9f:b8:eb:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=b9b1e90b-e094-4222-9dd3-5157c2ca4c93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:27:3a:4f:c6:31:31:91:14:c2:f7:05:b7:71: 86:39:e2:b3:6e:bb:a3:24:c2:17:a5:88:a8:2b:2f: 2b:a4:38:2e:d0:a6:e5:3c:e6:2e:64:81:34:44:b6: a6:92:fd:ab:5d:da:14:45:06:40:f2:dd:c7:c7:31: fe:e5:97:83:96:c9:c0:82:89:80:8f:1b:42:f4:55: 37:0d:b5:a3:f0:78:db:8d:78:99:f1:e7:ac:c9:2b: 0c:58:8e:51:31:36:b6:06:92:a7:f3:f5:0f:07:a0: a9:51:e4:31:8b:37:e5:88:e6:e4:2e:14:e7:c6:46: 88:24:1b:5c:60:c3:16:25:f5:c1:e5:64:ca:15:89: f6:0e:d6:06:b9:b1:98:0c:52:12:37:20:9a:41:06: 7b:c8:ea:8d:e2:33:0e:a5:86:f6:d7:84:21:5f:78: e7:49:d5:5c:a8:93:77:3d:66:20:55:79:96:5e:81: de:72:ab:f0:fc:a5:95:eb:6d:46:96:ad:03:bd:9a: 7d:09:d4:30:f5:a5:f6:2f:39:02:3f:00:67:41:99: 04:95:c3:7a:b0:86:34:4b:bc:0b:19:81:64:ce:f8: 28:b7:c1:da:e3:5f:8a:7b:f5:87:fb:0b:5c:04:76: 27:47:ec:aa:40:b8:a3:6e:cf:3b:f3:50:02:d3:01: f7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E9:19:19:AB:28:AA:54:8E:EE:08:50:B2:8D:AA:79:16:65:E4:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/73734d8e-b7ff-33be-a22c-ab23ad815603.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:9e:0d:28:39:95:79:4b:eb:28:48:1a:23:d6:f4:82:57:b0: c4:3a:28:1d:3f:9c:ad:83:3f:39:fb:c2:c1:13:99:ad:25:1f: e9:0b:2d:9e:bb:08:9a:73:92:3e:a6:36:35:11:22:31:b5:6e: f1:6a:06:b5:d6:67:b5:f7:ea:6a:8f:35:ab:61:8b:35:2f:d5: 13:d2:2a:75:18:01:c9:97:d5:d1:b0:f9:6c:4b:4f:b2:b2:5b: 75:dc:64:7c:7b:49:0a:1a:be:46:a6:89:e0:6b:53:64:7d:4f: 3b:4a:8a:2b:9d:4c:31:32:76:4f:db:c5:87:d2:d7:0a:d1:5f: 7a:d8:06:ab:a8:92:f1:d8:48:0b:c7:41:f5:1a:ce:a0:de:f3: e0:5d:86:40:02:ef:23:81:d7:84:b5:f9:31:a9:09:3b:67:9f: df:19:5c:cc:b7:6d:10:92:9c:0a:5d:6d:a7:40:ad:bc:35:67: 8b:90:8c:9c:9c:69:af:cf:6f:80:a8:3c:81:f5:c6:0c:1d:b5: 78:6a:3b:cd:25:cb:53:1d:e6:7a:8b:45:3f:b9:7b:4a:a1:89: a2:e4:f7:42:94:fe:b9:d9:3a:5d:ce:cf:5f:7a:8a:ab:65:06: a1:03:bc:6d:62:6b:41:63:46:e6:54:6f:e1:52:ac:fd:e1:c4: 42:82:36:d6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAi3mnoVFIJ+46xwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk YjliMWU5MGItZTA5NC00MjIyLTlkZDMtNTE1N2MyY2E0YzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyc6T8YxMZEUwvcFt3GGOeKzbrujJMIXpYio Ky8rpDgu0KblPOYuZIE0RLamkv2rXdoURQZA8t3HxzH+5ZeDlsnAgomAjxtC9FU3 DbWj8HjbjXiZ8eesySsMWI5RMTa2BpKn8/UPB6CpUeQxizfliObkLhTnxkaIJBtc YMMWJfXB5WTKFYn2DtYGubGYDFISNyCaQQZ7yOqN4jMOpYb214QhX3jnSdVcqJN3 PWYgVXmWXoHecqvw/KWV621Glq0DvZp9CdQw9aX2LzkCPwBnQZkElcN6sIY0S7wL GYFkzvgot8Ha41+Ke/WH+wtcBHYnR+yqQLijbs8781AC0wH3IwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEbpGRmrKKpUju4IULKNqnkWZeRbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzM3MzRkOGUtYjdmZi0z M2JlLWEyMmMtYWIyM2FkODE1NjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFqeDSg5lXlL6yhIGiPW9IJXsMQ6KB0/nK2DPzn7wsETma0lH+kL LZ67CJpzkj6mNjURIjG1bvFqBrXWZ7X36mqPNathizUv1RPSKnUYAcmX1dGw+WxL T7KyW3XcZHx7SQoavkamieBrU2R9TztKiiudTDEydk/bxYfS1wrRX3rYBquokvHY SAvHQfUazqDe8+BdhkAC7yOB14S1+TGpCTtnn98ZXMy3bRCSnApdbadArbw1Z4uQ jJycaa/Pb4CoPIH1xgwdtXhqO80ly1Md5nqLRT+5e0qhiaLk90KU/rnZOl3Oz196 iqtlBqEDvG1ia0FjRuZUb+FSrP3hxEKCNtY= -----END CERTIFICATE-----Generated at Mon Oct 20 15:55:12 2025 by rpki-client