$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/91e53e67-4812-3a7d-9f1a-f638ed9ed13c.roa File: 91e53e67-4812-3a7d-9f1a-f638ed9ed13c.roa (raw, json) Hash identifier: Q5PPstpoMAdr9Ru0SyvSBnZvGXJFgiwQ7p3wyv5K10Y= Subject key identifier: 6E:AD:6D:21:99:34:9B:E1:71:F6:B8:35:61:91:C2:9E:5E:C9:6D:2F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B48E213CD5CAFACAC8BF32880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/91e53e67-4812-3a7d-9f1a-f638ed9ed13c.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 20362 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:13:cd:5c:af:ac:ac:8b:f3:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=2f43dabd-53e1-4ce9-afba-4190424536f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:98:1a:3a:f3:ad:88:c1:cc:7b:ba:92:14:3a: 89:25:f8:62:2b:f4:6c:d9:59:ab:1b:3d:cd:f4:4d: f2:3d:ce:89:da:62:ca:ce:5e:68:05:e9:c5:11:6e: bf:ac:57:ff:fa:c1:df:db:20:74:1e:24:fc:7d:e8: c1:38:80:41:ba:7b:5b:45:7c:ad:8b:aa:37:57:a7: 04:0f:c0:cc:0f:32:2c:e2:b1:1d:b9:f8:d0:c2:a1: 5d:78:90:c1:9e:74:b8:c2:25:4f:8e:9a:01:d5:b0: da:2f:07:cf:21:93:1a:bd:6b:aa:0f:e3:3e:82:0c: af:f6:ba:49:97:ea:a3:b3:28:ce:3a:61:af:a1:49: bf:1a:70:af:3a:61:6d:ce:4b:c5:44:ec:9b:03:e9: d6:99:dc:a8:32:32:4c:80:16:7f:76:76:82:b7:c2: 33:16:e0:75:9c:d5:ff:82:5a:08:10:5f:cb:db:29: cc:61:71:a7:68:6b:43:db:56:ce:55:bb:a7:32:64: 4b:c8:f0:65:ec:51:f1:36:23:81:b3:5e:b4:39:9f: 42:62:15:97:ef:77:b8:ca:44:b4:e5:ed:33:3d:da: ab:47:a8:89:4a:1a:44:01:1f:58:b5:6e:e3:23:44: cf:b0:9c:22:2f:b4:68:3e:a7:f7:b9:23:c1:58:52: 62:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:AD:6D:21:99:34:9B:E1:71:F6:B8:35:61:91:C2:9E:5E:C9:6D:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/91e53e67-4812-3a7d-9f1a-f638ed9ed13c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:5d:9b:9e:56:ac:b6:f1:b0:63:50:1c:1f:c5:04:53:30:8a: 80:de:32:82:15:5d:c4:ff:7d:0c:cd:51:de:df:7a:60:ae:30: bd:84:a0:cc:30:20:25:bd:b9:5c:87:89:4e:5d:f3:8f:73:58: 48:f3:3b:b7:0a:6e:c4:4b:65:a0:5d:ee:85:13:63:21:48:19: 2d:4e:ce:43:02:c9:46:6f:31:b0:7c:c5:b1:f7:fc:0f:6d:f6: 94:90:58:14:df:b1:b1:4f:1e:53:9e:34:4d:17:2e:c0:8a:0e: 2a:73:f9:2c:07:af:92:0d:76:4e:da:39:a1:e1:64:7f:a1:13: 40:b6:52:0b:b4:8a:d2:83:c8:ed:22:f2:1d:e3:f9:d3:86:6d: 29:fc:a4:e8:5d:07:52:51:89:e2:f8:06:89:0f:32:0c:d7:32: 5c:ed:4c:f8:b2:ab:7c:5e:7c:fb:85:10:a5:2f:be:41:f2:90: 90:91:ea:b4:d1:42:bb:90:2e:8c:64:ec:a5:3f:0b:68:30:d2: 7b:79:65:75:89:34:c6:1a:8d:32:e1:0c:94:29:a5:4b:28:5f: 3c:ee:d3:da:42:04:22:7d:b4:7f:e8:d5:0d:ea:7d:23:85:ca: 74:90:fe:97:6c:c3:ec:fa:bf:c5:cb:da:ee:da:ca:a9:27:9f: 95:84:98:de -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4hPNXK+srIvzKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MmY0M2RhYmQtNTNlMS00Y2U5LWFmYmEtNDE5MDQyNDUzNmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZgaOvOtiMHMe7qSFDqJJfhiK/Rs2VmrGz3N 9E3yPc6J2mLKzl5oBenFEW6/rFf/+sHf2yB0HiT8fejBOIBBuntbRXyti6o3V6cE D8DMDzIs4rEdufjQwqFdeJDBnnS4wiVPjpoB1bDaLwfPIZMavWuqD+M+ggyv9rpJ l+qjsyjOOmGvoUm/GnCvOmFtzkvFROybA+nWmdyoMjJMgBZ/dnaCt8IzFuB1nNX/ gloIEF/L2ynMYXGnaGtD21bOVbunMmRLyPBl7FHxNiOBs160OZ9CYhWX73e4ykS0 5e0zPdqrR6iJShpEAR9YtW7jI0TPsJwiL7RoPqf3uSPBWFJilQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG6tbSGZNJvhcfa4NWGRwp5eyW0vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTFlNTNlNjctNDgxMi0z YTdkLTlmMWEtZjYzOGVkOWVkMTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFldm55WrLbxsGNQHB/FBFMwioDeMoIVXcT/fQzNUd7femCuML2E oMwwICW9uVyHiU5d849zWEjzO7cKbsRLZaBd7oUTYyFIGS1OzkMCyUZvMbB8xbH3 /A9t9pSQWBTfsbFPHlOeNE0XLsCKDipz+SwHr5INdk7aOaHhZH+hE0C2Ugu0itKD yO0i8h3j+dOGbSn8pOhdB1JRieL4BokPMgzXMlztTPiyq3xefPuFEKUvvkHykJCR 6rTRQruQLoxk7KU/C2gw0nt5ZXWJNMYajTLhDJQppUsoXzzu09pCBCJ9tH/o1Q3q fSOFynSQ/pdsw+z6v8XL2u7ayqknn5WEmN4= -----END CERTIFICATE-----Generated at Mon Oct 20 08:15:48 2025 by rpki-client