$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9775dbda-d557-3a44-8e9a-3c92d84cea70.roa File: 9775dbda-d557-3a44-8e9a-3c92d84cea70.roa (raw, json) Hash identifier: vhtiaiGzX3NJSnTbET92698i1K/+E4X9Xj7TlxtjdoQ= Subject key identifier: 89:9C:F9:2C:B1:15:BD:BC:63:02:B5:33:5B:28:BE:50:DA:42:8F:7F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6202224451BE9FB55B6F5950 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9775dbda-d557-3a44-8e9a-3c92d84cea70.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 396589 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:22:44:51:be:9f:b5:5b:6f:59:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=71baef1f-f43d-47d7-b14c-e1bb69d8fa59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1a:51:12:61:a8:1a:cb:ef:8b:cb:92:e7:91: 3c:02:4e:82:5e:4f:08:60:73:ec:63:fb:0b:46:36: 5b:34:51:10:18:7a:3d:82:35:f9:71:57:df:f0:58: 60:51:4e:b5:b6:21:3f:e0:55:d6:20:e6:fa:19:c1: 13:2c:53:38:77:a2:89:82:5e:ea:04:94:18:c6:31: c9:05:2e:63:a1:5e:d6:d4:81:bf:88:a5:86:a1:11: 39:3e:3d:27:94:9a:e3:68:5a:6f:61:d3:0e:ea:05: 08:98:46:ae:cd:ac:c6:19:57:20:ad:04:e8:56:7f: ca:e5:46:9a:5a:a4:7c:23:58:49:99:b7:2f:6d:71: 19:14:86:2e:8a:0c:65:18:a8:3a:ec:5f:fc:ee:0b: eb:8b:8a:31:a2:cf:78:e3:40:33:03:57:cb:69:80: b8:99:85:50:ca:c5:3b:b1:db:f7:18:0d:e4:88:13: ac:3c:b1:6d:5a:a9:49:3e:a2:ba:8c:06:fb:45:a9: 94:94:69:55:e4:68:a7:ea:cf:5e:af:e0:9e:fa:16: a3:ec:4c:d0:6e:50:27:eb:93:44:67:72:e0:0b:24: 3f:e5:15:b6:4f:9e:6f:f0:2b:1a:62:1d:22:36:c4: 32:dd:f9:3b:22:77:f6:6a:3f:a6:b7:58:ff:64:d6: c0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:9C:F9:2C:B1:15:BD:BC:63:02:B5:33:5B:28:BE:50:DA:42:8F:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9775dbda-d557-3a44-8e9a-3c92d84cea70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:2b:5f:2b:83:01:5d:cc:57:aa:dd:09:45:2c:c2:d8:05:4c: 4e:67:c6:9d:8b:dc:7e:a0:0c:79:5c:4e:cf:b6:ab:2d:e2:0b: c0:d9:14:cc:a6:7f:4d:28:45:94:5f:f2:57:bb:45:56:d4:08: ce:4d:a1:e7:37:97:37:24:ed:69:2f:50:15:19:53:ae:17:2b: 6b:a6:4d:d8:34:09:3a:1e:8f:62:00:46:2c:ab:be:fe:d0:43: 37:96:95:00:13:c1:6c:fa:22:e8:bc:e7:cd:af:f0:6f:d4:31: ec:28:06:70:90:5b:37:c3:bc:15:d7:68:c0:61:e2:b9:5c:2d: b5:3d:77:e0:2c:11:23:7a:d6:29:9b:95:d9:43:11:c9:1a:93: 6c:2f:1f:cf:33:1e:9e:4b:b3:c5:07:f5:fb:b4:ff:70:8c:99: fb:d3:2e:73:20:b2:76:33:78:91:1d:bd:b1:c9:7f:96:99:34: a3:92:41:55:b1:3c:3a:0c:91:a4:c0:82:e5:0e:d0:4b:d0:75: 50:5f:fd:ed:43:6d:91:6c:f7:b6:b6:cb:45:ec:a1:d4:57:75: 19:c3:2a:1a:d7:7a:72:bf:37:0e:51:dc:4b:2a:eb:8f:6f:d9: 12:3d:a4:af:ec:5b:f2:3f:02:06:d4:6b:1a:83:cf:66:0f:1c: 24:e3:42:09 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAiJEUb6ftVtvWVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NzFiYWVmMWYtZjQzZC00N2Q3LWIxNGMtZTFiYjY5ZDhmYTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshpREmGoGsvvi8uS55E8Ak6CXk8IYHPsY/sL RjZbNFEQGHo9gjX5cVff8FhgUU61tiE/4FXWIOb6GcETLFM4d6KJgl7qBJQYxjHJ BS5joV7W1IG/iKWGoRE5Pj0nlJrjaFpvYdMO6gUImEauzazGGVcgrQToVn/K5Uaa WqR8I1hJmbcvbXEZFIYuigxlGKg67F/87gvri4oxos9440AzA1fLaYC4mYVQysU7 sdv3GA3kiBOsPLFtWqlJPqK6jAb7RamUlGlV5Gin6s9er+Ce+haj7EzQblAn65NE Z3LgCyQ/5RW2T55v8CsaYh0iNsQy3fk7Inf2aj+mt1j/ZNbANQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFImc+SyxFb28YwK1M1sovlDaQo9/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTc3NWRiZGEtZDU1Ny0z YTQ0LThlOWEtM2M5MmQ4NGNlYTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGkrXyuDAV3MV6rdCUUswtgFTE5nxp2L3H6gDHlcTs+2qy3iC8DZ FMymf00oRZRf8le7RVbUCM5Noec3lzck7WkvUBUZU64XK2umTdg0CToej2IARiyr vv7QQzeWlQATwWz6Iui8582v8G/UMewoBnCQWzfDvBXXaMBh4rlcLbU9d+AsESN6 1imbldlDEckak2wvH88zHp5Ls8UH9fu0/3CMmfvTLnMgsnYzeJEdvbHJf5aZNKOS QVWxPDoMkaTAguUO0EvQdVBf/e1DbZFs97a2y0XsodRXdRnDKhrXenK/Nw5R3Esq 649v2RI9pK/sW/I/AgbUaxqDz2YPHCTjQgk= -----END CERTIFICATE-----Generated at Mon Oct 20 08:12:45 2025 by rpki-client