$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/978d80ba-d0dd-33c0-96c4-9e60fa61ec3c.roa File: 978d80ba-d0dd-33c0-96c4-9e60fa61ec3c.roa (raw, json) Hash identifier: rWx/DiTS0a5q8Efm2uIqiz2EUUFEuBi0mzAE2l7mtE0= Subject key identifier: F6:84:21:5D:F1:8D:B4:BE:F9:37:9D:44:34:1D:7E:39:ED:06:54:ED Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B48E21089F5E5A47496837440 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/978d80ba-d0dd-33c0-96c4-9e60fa61ec3c.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 396579 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:10:89:f5:e5:a4:74:96:83:74:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=8a80aefb-d29f-4aab-b5ec-bc8b7602a026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:84:72:85:e4:44:d7:4b:ef:40:94:21:78:af: f7:7a:93:fc:cb:bd:93:18:58:98:27:d1:a9:1e:ba: 46:d3:86:6b:a6:65:d5:2e:4d:91:dd:07:d4:f8:28: 9b:1f:73:d4:23:c0:8c:84:3a:de:ea:b3:90:f8:f0: 66:c5:8c:be:d9:7a:f6:0e:85:0a:57:91:5a:af:59: fb:40:f2:b7:ef:7f:fe:67:6e:76:8f:e3:46:53:a0: 7d:b0:ee:0c:3d:f8:ba:70:d2:e9:06:87:2e:d4:8f: 26:82:5e:ee:62:51:54:ef:15:74:0b:84:ff:4f:0c: 8e:5b:84:3f:68:7c:a5:9f:01:1c:e0:90:f1:34:23: 6b:cb:1f:09:64:3a:8e:e1:74:6a:60:dd:c1:99:d1: 06:e0:82:a5:c6:7c:5b:07:8b:4f:8a:3b:41:b9:35: aa:20:e6:2c:74:5e:25:d3:63:e1:b8:aa:58:a6:21: bc:89:4e:cc:51:77:d0:35:24:6a:5e:e3:33:01:42: be:16:8a:a4:eb:04:dc:3c:8d:7a:27:68:c4:bb:f2: b4:c2:1e:c1:c8:41:fe:e5:da:22:02:86:57:d7:6b: 64:41:35:a3:4d:70:e8:b6:b5:a0:1d:93:4f:f6:b0: a8:d5:40:7c:6a:51:bf:f6:d6:33:c1:46:cb:c8:1c: b0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:84:21:5D:F1:8D:B4:BE:F9:37:9D:44:34:1D:7E:39:ED:06:54:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/978d80ba-d0dd-33c0-96c4-9e60fa61ec3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:95:c2:e1:5b:35:c6:0a:7f:71:40:a9:0c:bf:1e:12:57:be: 25:ec:9f:84:4d:1b:a4:a2:dd:20:07:93:70:a0:01:ed:83:e5: eb:30:62:72:09:9d:8d:08:57:09:b2:0c:8d:af:59:60:c1:c2: 6c:e5:1d:8d:d9:3b:b1:61:95:05:d3:c6:ff:54:9f:31:0f:05: b9:b9:d2:11:45:20:a9:90:26:e8:16:15:eb:c9:f3:f8:51:f1: 58:2f:4a:ba:d7:c0:3b:97:d4:81:05:be:dc:26:27:58:b9:32: 68:c8:f0:d9:54:55:78:22:79:ef:90:77:d1:ff:37:59:23:26: 5e:54:54:23:d1:81:d0:4c:88:09:dc:5a:e6:cd:d1:59:d5:8e: 5a:d9:68:9e:cf:91:33:a5:9a:92:84:6d:8c:bf:ab:02:40:29: 35:08:77:88:d4:f0:77:82:c4:d8:b4:45:18:d0:2b:75:d8:7a: 6b:7b:3a:a5:06:a6:6a:70:39:df:a5:f7:2c:c0:91:4e:4e:80: f3:0a:88:8c:0c:2c:29:1b:89:d3:fe:19:20:36:7a:82:e4:18: dd:26:ee:c7:6d:11:39:17:9d:57:b2:45:df:b4:23:8d:6c:a5: d0:71:90:0a:84:b5:28:22:7c:ec:43:83:13:15:79:e2:79:e0: f2:ae:0d:4f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4hCJ9eWkdJaDdEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk OGE4MGFlZmItZDI5Zi00YWFiLWI1ZWMtYmM4Yjc2MDJhMDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoRyheRE10vvQJQheK/3epP8y72TGFiYJ9Gp HrpG04ZrpmXVLk2R3QfU+CibH3PUI8CMhDre6rOQ+PBmxYy+2Xr2DoUKV5Far1n7 QPK373/+Z252j+NGU6B9sO4MPfi6cNLpBocu1I8mgl7uYlFU7xV0C4T/TwyOW4Q/ aHylnwEc4JDxNCNryx8JZDqO4XRqYN3BmdEG4IKlxnxbB4tPijtBuTWqIOYsdF4l 02PhuKpYpiG8iU7MUXfQNSRqXuMzAUK+Foqk6wTcPI16J2jEu/K0wh7ByEH+5doi AoZX12tkQTWjTXDotrWgHZNP9rCo1UB8alG/9tYzwUbLyBywKQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPaEIV3xjbS++TedRDQdfjntBlTtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTc4ZDgwYmEtZDBkZC0z M2MwLTk2YzQtOWU2MGZhNjFlYzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGOVwuFbNcYKf3FAqQy/HhJXviXsn4RNG6Si3SAHk3CgAe2D5esw YnIJnY0IVwmyDI2vWWDBwmzlHY3ZO7FhlQXTxv9UnzEPBbm50hFFIKmQJugWFevJ 8/hR8VgvSrrXwDuX1IEFvtwmJ1i5MmjI8NlUVXgiee+Qd9H/N1kjJl5UVCPRgdBM iAncWubN0VnVjlrZaJ7PkTOlmpKEbYy/qwJAKTUId4jU8HeCxNi0RRjQK3XYemt7 OqUGpmpwOd+l9yzAkU5OgPMKiIwMLCkbidP+GSA2eoLkGN0m7sdtETkXnVeyRd+0 I41spdBxkAqEtSgifOxDgxMVeeJ54PKuDU8= -----END CERTIFICATE-----Generated at Mon Oct 20 08:15:13 2025 by rpki-client