$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95df0e6e-cf13-3296-986c-c34958860346.roa File: 95df0e6e-cf13-3296-986c-c34958860346.roa (raw, json) Hash identifier: L6l7Pa25VSkIBCE/7I22F37sMntdsCk4yxy/AlOFjPk= Subject key identifier: 21:81:C0:7C:2E:06:2E:86:B2:C7:B5:F3:C2:F1:B3:20:A1:8A:72:8F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6201FEC8E99EEEBC28141B00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95df0e6e-cf13-3296-986c-c34958860346.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 396583 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:fe:c8:e9:9e:ee:bc:28:14:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=0e7dc614-987c-4165-b338-58c1c5d46265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:99:cc:21:51:32:07:b0:23:07:6a:c8:cb:f3: c0:fe:5a:73:b4:ee:77:96:2a:7a:a4:b1:e0:a8:bd: 71:ab:b7:53:64:79:ce:b1:97:b2:7c:fb:61:22:7e: 66:6f:89:28:6b:8f:8a:31:aa:64:78:1f:2d:25:9d: 04:07:04:94:f8:6b:75:cd:c0:7f:90:51:30:61:4b: 95:3c:de:0d:39:eb:bb:ba:c1:b5:86:74:6d:eb:a1: 74:55:da:3f:f5:7b:c9:e3:5b:35:81:f6:60:e3:01: d1:2a:d8:5b:31:a6:72:34:2a:72:b7:fa:8b:9f:00: b0:24:c0:49:a7:61:e2:a5:a7:f7:21:67:fd:ef:2b: 83:33:b2:ba:cf:a2:43:e1:25:30:f6:42:34:26:15: 49:f8:ac:fb:b6:d7:b0:45:89:8c:42:63:d7:43:0a: 3e:32:23:3e:37:6b:eb:32:7e:11:ac:52:56:43:e4: d1:f6:79:97:a0:fa:42:b2:b7:13:4f:39:0e:75:50: e9:f9:64:bf:74:ea:8b:00:e0:1b:e8:4e:ef:76:f9: 34:23:19:63:99:62:58:cd:59:f5:5f:02:be:39:11: a9:0e:74:6a:dd:c9:0f:ac:e0:6b:47:ba:66:e3:8f: eb:f4:12:35:e0:4b:d3:8e:f1:d5:2f:61:b4:29:59: 4b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:81:C0:7C:2E:06:2E:86:B2:C7:B5:F3:C2:F1:B3:20:A1:8A:72:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95df0e6e-cf13-3296-986c-c34958860346.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:f3:32:b9:b2:bf:65:e0:5b:be:fd:0e:b9:c7:0d:48:4f:e7: a9:85:71:03:03:5a:3f:c2:8f:81:3e:41:b1:84:d6:6a:2b:54: 13:67:d5:f9:4c:41:01:a2:e8:45:70:6a:d4:a3:4b:9f:6c:77: 36:da:7a:11:09:9c:9e:e5:ef:c4:91:cb:a3:10:40:3f:8f:7b: f2:5f:45:a2:df:e2:54:05:56:bc:65:ab:f4:a6:75:20:26:12: fb:8e:56:37:29:10:f4:06:48:dd:37:ac:74:d4:fc:e9:c8:ed: d1:9f:57:84:eb:cd:27:ac:f0:96:8f:c0:4a:84:1a:b5:cd:0a: 50:45:c3:51:0b:b6:c7:4e:0c:97:39:0a:66:ed:77:f2:44:4e: 4c:c6:11:03:73:19:d3:42:7c:ce:da:aa:d9:06:ef:5d:f0:8c: 38:36:0a:84:9a:84:2b:e1:e6:ac:3e:61:4e:43:a4:d3:b8:e8: 57:5b:a8:4f:e0:a8:14:34:79:c1:21:e1:b1:f8:e8:8a:22:51: 05:68:12:89:9b:9b:fd:b9:fd:cd:a6:08:f1:a6:55:c2:14:d7: 67:f2:98:01:92:db:09:d3:01:9a:1e:be:88:4e:0f:b5:55:51: 12:5b:83:6c:fd:32:64:9d:30:71:89:ac:aa:36:fd:7e:b4:68: aa:95:49:4d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAf7I6Z7uvCgUGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk MGU3ZGM2MTQtOTg3Yy00MTY1LWIzMzgtNThjMWM1ZDQ2MjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZnMIVEyB7AjB2rIy/PA/lpztO53lip6pLHg qL1xq7dTZHnOsZeyfPthIn5mb4koa4+KMapkeB8tJZ0EBwSU+Gt1zcB/kFEwYUuV PN4NOeu7usG1hnRt66F0Vdo/9XvJ41s1gfZg4wHRKthbMaZyNCpyt/qLnwCwJMBJ p2Hipaf3IWf97yuDM7K6z6JD4SUw9kI0JhVJ+Kz7ttewRYmMQmPXQwo+MiM+N2vr Mn4RrFJWQ+TR9nmXoPpCsrcTTzkOdVDp+WS/dOqLAOAb6E7vdvk0IxljmWJYzVn1 XwK+ORGpDnRq3ckPrOBrR7pm44/r9BI14EvTjvHVL2G0KVlLrwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCGBwHwuBi6Gsse188LxsyChinKPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTVkZjBlNmUtY2YxMy0z Mjk2LTk4NmMtYzM0OTU4ODYwMzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACbzMrmyv2XgW779DrnHDUhP56mFcQMDWj/Cj4E+QbGE1morVBNn 1flMQQGi6EVwatSjS59sdzbaehEJnJ7l78SRy6MQQD+Pe/JfRaLf4lQFVrxlq/Sm dSAmEvuOVjcpEPQGSN03rHTU/OnI7dGfV4TrzSes8JaPwEqEGrXNClBFw1ELtsdO DJc5Cmbtd/JETkzGEQNzGdNCfM7aqtkG713wjDg2CoSahCvh5qw+YU5DpNO46Fdb qE/gqBQ0ecEh4bH46IoiUQVoEombm/25/c2mCPGmVcIU12fymAGS2wnTAZoevohO D7VVURJbg2z9MmSdMHGJrKo2/X60aKqVSU0= -----END CERTIFICATE-----Generated at Mon Oct 20 08:14:15 2025 by rpki-client