$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/943e7fc0-5d17-3b35-96bd-71bdee45251c.roa File: 943e7fc0-5d17-3b35-96bd-71bdee45251c.roa (raw, json) Hash identifier: +QBkgh2Fvvn8MFsCZg4q3WQ1PkZs5CK2clU5Z1ty908= Subject key identifier: 24:7E:B5:F9:9D:04:30:47:F5:89:A9:6B:9F:5D:70:72:29:5B:D9:99 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B48E1BA8D68001130A02573C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/943e7fc0-5d17-3b35-96bd-71bdee45251c.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397199 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:ba:8d:68:00:11:30:a0:25:73:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=98bf93cf-bc84-462f-b38c-38150c023339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:47:97:3f:2c:0a:3b:0e:ba:9e:88:6b:a8:c6: 07:30:b7:d7:6d:c6:5f:dc:7a:7d:2f:55:34:d0:3b: bd:d7:be:ec:1e:6d:31:84:c9:30:5f:44:9e:64:8c: 76:85:27:84:56:cb:7d:f5:0a:f0:c0:c5:b5:ac:2e: 6d:56:aa:57:6f:a6:cc:d1:b3:a9:98:85:3c:31:9b: df:3b:f4:b9:1a:7d:ce:bd:9a:ff:35:b8:ae:13:3f: e4:0b:77:15:83:d7:6c:3f:c5:8c:cb:d7:3a:9b:01: d9:76:91:1f:cf:ed:a1:b0:48:99:8f:86:dd:45:26: 8f:ba:d7:28:58:69:c2:42:e2:4a:6d:d4:40:84:3a: b8:3f:78:2c:1b:55:44:71:7c:fc:4b:ea:27:98:28: 37:31:65:04:97:74:c2:1b:c7:fa:7b:63:ea:c0:58: 3a:d9:aa:1e:06:73:42:b7:7b:e6:1a:49:45:c8:0b: 92:7f:67:08:e4:13:47:c7:1c:fe:0e:dc:2f:e7:54: d0:09:1c:4c:fe:49:0c:56:2e:7e:77:57:60:95:95: cc:cb:5a:07:0c:8f:9c:96:b0:12:a3:ec:41:1c:3c: cc:06:ec:fb:80:49:ca:51:4e:b7:24:1b:93:56:0a: c2:24:21:4a:32:46:78:27:75:ec:c8:ac:32:65:8e: d8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:7E:B5:F9:9D:04:30:47:F5:89:A9:6B:9F:5D:70:72:29:5B:D9:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/943e7fc0-5d17-3b35-96bd-71bdee45251c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:2f:a7:8b:3f:87:27:d8:8f:c0:78:39:2a:f1:74:4c:f4:cd: 9b:11:2a:07:67:3b:17:16:88:02:0f:b7:81:ac:88:8d:dd:c0: a2:5a:82:c0:03:a5:b0:b5:44:3b:d6:99:85:0b:c1:e5:25:71: 72:a1:62:0e:0e:ba:5d:cd:15:f1:77:3d:6a:3a:90:93:d6:18: cf:f3:59:92:cd:7e:84:79:63:5e:4d:08:60:3c:06:c0:08:7e: af:91:2c:70:44:f7:82:e3:48:21:b8:7c:6e:5b:0f:c5:23:1e: 26:32:40:02:b0:73:85:d3:38:6f:64:67:fc:31:8d:f3:bc:38: 08:3f:6f:e3:6c:dc:f0:aa:63:f7:bf:7f:a6:fd:1e:e1:15:25: de:c4:3b:7d:41:ad:6b:7f:68:76:99:52:f7:ff:98:a0:24:68: dd:8e:50:e8:6b:27:b0:1b:07:39:e4:c2:21:97:98:2f:81:a9: ff:45:6d:04:91:9a:48:64:a6:6e:ba:78:52:0d:b8:25:97:37: 2a:9a:41:f4:38:66:dd:81:2a:d0:93:4b:14:bc:e4:93:08:17: 3e:fb:dd:3e:2b:22:e4:9f:91:25:2c:4c:0e:c3:7b:1d:a3:9c: ed:60:60:07:af:38:62:89:e9:d7:05:20:1b:4f:d4:fd:82:99: f9:5d:92:d3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4bqNaAARMKAlc8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk OThiZjkzY2YtYmM4NC00NjJmLWIzOGMtMzgxNTBjMDIzMzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUeXPywKOw66nohrqMYHMLfXbcZf3Hp9L1U0 0Du9177sHm0xhMkwX0SeZIx2hSeEVst99QrwwMW1rC5tVqpXb6bM0bOpmIU8MZvf O/S5Gn3OvZr/NbiuEz/kC3cVg9dsP8WMy9c6mwHZdpEfz+2hsEiZj4bdRSaPutco WGnCQuJKbdRAhDq4P3gsG1VEcXz8S+onmCg3MWUEl3TCG8f6e2PqwFg62aoeBnNC t3vmGklFyAuSf2cI5BNHxxz+Dtwv51TQCRxM/kkMVi5+d1dglZXMy1oHDI+clrAS o+xBHDzMBuz7gEnKUU63JBuTVgrCJCFKMkZ4J3XsyKwyZY7YUwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCR+tfmdBDBH9Ympa59dcHIpW9mZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTQzZTdmYzAtNWQxNy0z YjM1LTk2YmQtNzFiZGVlNDUyNTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABEvp4s/hyfYj8B4OSrxdEz0zZsRKgdnOxcWiAIPt4GsiI3dwKJa gsADpbC1RDvWmYULweUlcXKhYg4Oul3NFfF3PWo6kJPWGM/zWZLNfoR5Y15NCGA8 BsAIfq+RLHBE94LjSCG4fG5bD8UjHiYyQAKwc4XTOG9kZ/wxjfO8OAg/b+Ns3PCq Y/e/f6b9HuEVJd7EO31BrWt/aHaZUvf/mKAkaN2OUOhrJ7AbBznkwiGXmC+Bqf9F bQSRmkhkpm66eFINuCWXNyqaQfQ4Zt2BKtCTSxS85JMIFz773T4rIuSfkSUsTA7D ex2jnO1gYAevOGKJ6dcFIBtP1P2CmfldktM= -----END CERTIFICATE-----Generated at Mon Oct 20 15:49:34 2025 by rpki-client