$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7e47da65-cf46-3cbf-a7c0-38513994c928.roa File: 7e47da65-cf46-3cbf-a7c0-38513994c928.roa (raw, json) Hash identifier: uzv04rZewlbu5GDdYIbTNVgIbGKGatcD29iIJjhQLZ8= Subject key identifier: E1:67:6B:F4:47:0B:61:2C:4F:21:62:C0:FC:51:6B:38:D0:1A:B1:06 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B48E2128C687FF5DA07DB1580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7e47da65-cf46-3cbf-a7c0-38513994c928.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 396561 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:12:8c:68:7f:f5:da:07:db:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=e1ce6a6b-a238-4503-bf5a-692d53b17558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:14:98:9e:fb:d0:4a:58:44:5b:56:be:e9:1f: 57:14:cd:f3:41:97:7a:40:35:7d:98:cc:ea:ef:ea: b5:43:dd:75:d1:2b:5b:e4:75:b8:a3:0e:71:7b:47: 55:e1:30:35:36:c4:19:c4:16:55:e8:01:3d:33:10: dd:01:f5:79:ec:7c:a8:97:08:4c:f7:de:0a:ff:e7: c9:b3:be:68:27:1b:06:22:bc:0e:c1:87:42:18:43: 63:05:00:eb:64:02:5d:76:36:f3:8b:4f:12:be:3d: a7:cd:e5:8f:f9:4f:40:69:30:42:d7:6c:ae:18:ad: 7e:fa:f8:17:99:da:0f:d8:50:8c:23:6c:e4:f1:bc: a3:c2:3e:97:d1:e0:ac:c1:34:fd:3c:b0:31:3c:2b: 65:a0:2e:46:60:a4:4d:88:b8:06:9b:d0:66:ed:e1: 57:12:9d:d3:6e:39:a5:15:80:0b:21:ea:fa:b1:c7: 51:1c:a6:77:76:4c:a6:77:5a:3c:53:c9:c1:2a:89: 2b:a6:cd:32:be:9b:6d:ff:1b:fd:94:82:fd:4d:f2: a5:e2:cc:1b:ca:41:51:25:43:28:01:4c:9e:61:16: cf:c8:92:9b:77:b6:f0:95:88:c0:f6:1b:e9:75:ab: 4f:d0:3e:26:8b:d6:8e:09:f5:98:d8:6c:57:c6:cc: 20:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:67:6B:F4:47:0B:61:2C:4F:21:62:C0:FC:51:6B:38:D0:1A:B1:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7e47da65-cf46-3cbf-a7c0-38513994c928.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:e6:10:2a:06:6e:62:0a:88:cb:ed:ac:48:a2:9b:db:aa:04: 2e:53:d0:85:ca:d7:28:4b:a7:fa:22:2f:5b:2e:13:d9:23:45: 59:48:b2:72:67:e0:56:11:be:0c:d7:eb:3f:08:42:73:a9:d5: 7f:a3:7d:35:aa:5d:44:a6:88:87:ca:55:05:9a:88:2d:a9:d1: 16:b7:dd:c1:50:07:cf:9f:12:08:17:55:e6:fd:ab:5d:9c:0d: 10:5f:cd:9e:96:6e:37:26:71:6c:03:24:9d:8e:c8:25:09:67: 78:e9:a1:01:62:d8:8d:ef:25:30:06:4d:51:d2:da:22:ed:6c: eb:00:ba:76:2b:0c:25:40:9f:6a:8b:c6:77:f8:a3:1e:47:6d: 27:83:bf:71:99:cb:ce:ca:a5:b2:61:61:3b:a1:f1:dc:2b:36: 81:06:0c:80:39:e7:91:e4:ce:4e:3c:18:66:c7:38:20:a0:f5: 7b:8e:f3:cf:0a:51:f7:77:9b:ec:b8:e6:bc:61:a3:8a:c7:54: d2:26:56:a0:c7:f9:4e:cb:65:a6:ab:65:7e:21:c4:16:2b:83: 37:7e:cb:02:99:f2:68:e2:69:47:11:1c:ee:64:5b:76:67:85: 10:ce:68:f6:6e:06:f9:14:88:b4:89:ef:c0:ea:3b:94:4d:bb: 3b:a9:86:38 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4hKMaH/12gfbFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZTFjZTZhNmItYTIzOC00NTAzLWJmNWEtNjkyZDUzYjE3NTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhSYnvvQSlhEW1a+6R9XFM3zQZd6QDV9mMzq 7+q1Q9110Stb5HW4ow5xe0dV4TA1NsQZxBZV6AE9MxDdAfV57HyolwhM994K/+fJ s75oJxsGIrwOwYdCGENjBQDrZAJddjbzi08Svj2nzeWP+U9AaTBC12yuGK1++vgX mdoP2FCMI2zk8byjwj6X0eCswTT9PLAxPCtloC5GYKRNiLgGm9Bm7eFXEp3Tbjml FYALIer6scdRHKZ3dkymd1o8U8nBKokrps0yvptt/xv9lIL9TfKl4swbykFRJUMo AUyeYRbPyJKbd7bwlYjA9hvpdatP0D4mi9aOCfWY2GxXxswg1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOFna/RHC2EsTyFiwPxRazjQGrEGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvN2U0N2RhNjUtY2Y0Ni0z Y2JmLWE3YzAtMzg1MTM5OTRjOTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABXmECoGbmIKiMvtrEiim9uqBC5T0IXK1yhLp/oiL1suE9kjRVlI snJn4FYRvgzX6z8IQnOp1X+jfTWqXUSmiIfKVQWaiC2p0Ra33cFQB8+fEggXVeb9 q12cDRBfzZ6WbjcmcWwDJJ2OyCUJZ3jpoQFi2I3vJTAGTVHS2iLtbOsAunYrDCVA n2qLxnf4ox5HbSeDv3GZy87KpbJhYTuh8dwrNoEGDIA555Hkzk48GGbHOCCg9XuO 888KUfd3m+y45rxho4rHVNImVqDH+U7LZaarZX4hxBYrgzd+ywKZ8mjiaUcRHO5k W3ZnhRDOaPZuBvkUiLSJ78DqO5RNuzuphjg= -----END CERTIFICATE-----Generated at Mon Oct 20 08:14:29 2025 by rpki-client