$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9262816c-b22e-3439-94bd-b4f768850eb3.roa File: 9262816c-b22e-3439-94bd-b4f768850eb3.roa (raw, json) Hash identifier: nLRaoL42hJM5jdYfH104xLZrj54+eF1CqAyZcDJcRlc= Subject key identifier: B6:AC:4D:2F:E5:95:D2:E4:AB:09:F3:BC:CD:89:93:36:48:9A:5A:AD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6201E6565B08A07744ACD380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9262816c-b22e-3439-94bd-b4f768850eb3.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 396605 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:e6:56:5b:08:a0:77:44:ac:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=f60e7d71-e0b8-4bf3-9d0a-d329a09a010f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:3b:47:36:bc:ad:43:f6:cf:22:ae:61:17:25: 8a:d3:ca:72:f6:81:d6:51:5c:90:cd:aa:db:81:d7: 66:2b:ad:09:69:5f:8a:7c:17:68:3b:7e:b9:1c:2a: 46:81:fc:c6:06:61:d7:a0:e6:37:bb:47:6b:47:0a: c9:b3:91:16:23:33:34:d7:30:21:07:24:a1:24:c1: 89:bb:50:79:4e:d8:d5:81:7a:22:c5:6d:ad:d3:cd: 2b:11:da:af:a9:cc:df:c6:a0:67:63:85:91:86:21: b4:de:06:b1:ea:22:7c:3c:d7:e5:e2:91:8a:86:19: 13:de:97:7a:0b:c2:dd:90:21:81:29:ae:60:ad:51: 33:cf:ee:b2:dc:79:1f:9c:5c:7e:78:87:d4:5f:bb: 84:c7:92:71:6c:c6:8d:05:93:06:b9:01:20:49:9c: f6:d1:1c:2a:4c:60:c6:3c:a6:cb:b8:bd:06:ff:13: ca:cb:1c:74:e2:51:0e:5b:f9:ee:57:f2:60:3a:9b: 19:58:ea:fe:9a:a1:5b:31:20:8a:95:94:24:ff:bb: 77:21:dd:76:ef:e4:dd:72:a6:dc:41:a5:a6:91:66: 61:ed:1c:b4:d9:d1:04:b2:02:b8:09:c6:bd:a4:d7: 32:34:44:8e:8f:9b:76:1d:2e:76:bf:3d:16:e1:38: c6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:AC:4D:2F:E5:95:D2:E4:AB:09:F3:BC:CD:89:93:36:48:9A:5A:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9262816c-b22e-3439-94bd-b4f768850eb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:16:f0:67:95:50:5a:00:c9:51:a6:7b:d2:9b:cc:c5:b5:6e: cf:9a:b7:8f:87:b9:0b:4c:e0:66:4a:47:c8:09:06:4e:52:3c: aa:51:85:0c:e7:26:0b:19:08:9e:aa:50:f2:01:15:a4:c6:ab: 1a:c5:08:8f:38:b2:91:19:55:45:12:3b:a1:58:e0:7c:81:ec: a3:06:2e:99:fd:55:78:bf:c2:73:0e:28:2f:7b:84:00:8e:bd: 45:89:20:fa:72:c3:4b:0e:d9:9a:2c:7b:33:68:d0:8a:15:31: 96:49:2b:47:a1:ab:ee:a5:6a:11:fb:ec:ae:c5:d1:d8:78:28: 85:24:73:f5:c8:5f:f5:9a:08:06:ae:6c:b0:87:1b:8a:ca:67: 17:ea:6a:1b:c9:cb:6c:43:5e:25:eb:f3:98:ed:5b:92:0d:4b: ed:37:eb:48:19:cd:2a:d1:b3:d1:cb:ad:47:d3:55:5c:7f:dd: 57:bc:bf:8f:c0:eb:33:54:97:98:df:58:1e:8c:98:d4:7a:75: 69:c3:6a:5d:03:9f:64:5e:ad:a6:88:4b:64:cc:2f:49:22:0d: cf:a0:1b:fa:c0:11:a8:49:cd:80:23:74:ed:16:f7:66:51:5e: 7e:93:35:39:da:19:a6:58:e7:07:79:bf:b7:5c:1f:da:9f:80: 0f:59:aa:d2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAeZWWwigd0Ss04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZjYwZTdkNzEtZTBiOC00YmYzLTlkMGEtZDMyOWEwOWEwMTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7TtHNrytQ/bPIq5hFyWK08py9oHWUVyQzarb gddmK60JaV+KfBdoO365HCpGgfzGBmHXoOY3u0drRwrJs5EWIzM01zAhByShJMGJ u1B5TtjVgXoixW2t080rEdqvqczfxqBnY4WRhiG03gax6iJ8PNfl4pGKhhkT3pd6 C8LdkCGBKa5grVEzz+6y3HkfnFx+eIfUX7uEx5JxbMaNBZMGuQEgSZz20RwqTGDG PKbLuL0G/xPKyxx04lEOW/nuV/JgOpsZWOr+mqFbMSCKlZQk/7t3Id127+Tdcqbc QaWmkWZh7Ry02dEEsgK4Cca9pNcyNESOj5t2HS52vz0W4TjGGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLasTS/lldLkqwnzvM2JkzZImlqtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTI2MjgxNmMtYjIyZS0z NDM5LTk0YmQtYjRmNzY4ODUwZWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABUW8GeVUFoAyVGme9KbzMW1bs+at4+HuQtM4GZKR8gJBk5SPKpR hQznJgsZCJ6qUPIBFaTGqxrFCI84spEZVUUSO6FY4HyB7KMGLpn9VXi/wnMOKC97 hACOvUWJIPpyw0sO2ZosezNo0IoVMZZJK0ehq+6lahH77K7F0dh4KIUkc/XIX/Wa CAaubLCHG4rKZxfqahvJy2xDXiXr85jtW5INS+0360gZzSrRs9HLrUfTVVx/3Ve8 v4/A6zNUl5jfWB6MmNR6dWnDal0Dn2ReraaIS2TML0kiDc+gG/rAEahJzYAjdO0W 92ZRXn6TNTnaGaZY5wd5v7dcH9qfgA9ZqtI= -----END CERTIFICATE-----Generated at Mon Oct 20 10:28:50 2025 by rpki-client