$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9ec387ab-2513-39d5-a179-3603f4d786d1.roa File: 9ec387ab-2513-39d5-a179-3603f4d786d1.roa (raw, json) Hash identifier: WapSCQwZ+3ma+Cmormbs9+0r4sQ0J0y3Z9hn67ChnD4= Subject key identifier: D8:EB:1C:19:60:F6:13:C4:C4:83:7C:1D:6C:E3:D9:5D:FE:08:D8:A7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B78574879691C2EF11068C500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9ec387ab-2513-39d5-a179-3603f4d786d1.roa Signing time: Fri 10 Oct 2025 01:00:30 +0000 ROA not before: Fri 10 Oct 2025 01:00:30 +0000 ROA not after: Thu 08 Jan 2026 02:00:30 +0000 asID: 0 IP address blocks: 2620:74:c8::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:78:57:48:79:69:1c:2e:f1:10:68:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 10 01:00:30 2025 GMT Not After : Jan 8 02:00:30 2026 GMT Subject: CN=cb3d7da0-5aad-4ba5-ba58-f2388f8e857f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b4:fb:03:cd:bd:ec:c5:72:95:4b:dc:08:c0: c1:e7:75:4a:bf:71:ad:2d:fe:49:a8:29:c4:1d:5a: fa:17:be:87:6f:03:16:2a:3c:09:c8:4a:d0:25:67: 17:b7:17:46:b2:8a:5c:89:12:7b:ca:33:f3:46:29: 1c:8a:f9:5e:0f:e0:96:4c:3b:2c:7c:d1:2a:e0:2a: e5:29:a3:46:e3:96:03:d3:61:5b:21:1e:a4:c5:93: d9:89:9a:65:f4:62:5f:ab:6d:9e:a0:70:95:70:32: 78:cc:df:b4:cd:d3:8f:a1:ac:95:67:86:16:e9:c4: 44:9f:0a:7b:3b:fd:bc:46:6b:1c:3f:67:0f:78:df: db:96:0e:59:8a:68:01:bc:0c:e8:e0:17:9e:d4:1c: e5:f6:4e:3a:f3:9a:27:49:91:4d:99:92:6a:54:fd: 8a:7d:19:ac:24:21:b3:b1:2a:4b:00:8d:fb:8a:48: 95:48:51:26:5f:62:c2:9d:05:ea:ed:7a:d2:74:dd: 23:3a:92:2b:a8:bf:de:90:08:43:fc:dd:6c:32:a4: a6:e8:8a:ae:eb:b7:5a:5c:12:07:45:2c:0e:81:fc: 80:f3:f7:12:a4:f5:8c:d7:18:37:d7:1f:99:25:13: e9:49:0a:6e:5f:c4:ab:d9:b9:40:cd:e8:98:76:9e: 84:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:EB:1C:19:60:F6:13:C4:C4:83:7C:1D:6C:E3:D9:5D:FE:08:D8:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9ec387ab-2513-39d5-a179-3603f4d786d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:c8::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:bb:54:bf:88:a1:0a:96:ef:c6:66:97:09:1e:91:cf:48:47: b8:d3:e1:bc:6d:0f:6c:2c:db:62:2b:d9:7d:57:fd:8b:23:50: 95:65:88:be:ac:4e:7d:b8:26:f8:01:a6:5f:9e:fc:d9:ef:2a: 6d:2a:53:7a:d9:1e:f6:dd:72:ae:b2:a4:5c:19:9d:8d:0a:44: e2:1d:98:40:48:30:c9:3d:e8:b4:0c:6e:75:4b:da:9b:1c:f7: 7d:3b:5b:b6:af:cb:5a:70:6c:31:02:19:43:bc:a4:a4:ce:85: c3:93:8c:40:0d:9c:d0:64:95:7d:9d:37:8b:cb:43:f8:77:d0: 78:c4:05:2e:23:1b:48:47:69:bd:ad:ba:36:bd:3c:9e:f2:69: f6:4b:c9:56:ca:b5:70:3b:ef:54:31:ef:60:86:16:76:4e:72: 29:30:3a:81:0a:13:7b:5a:bc:9e:7a:a0:3d:2f:6b:03:a4:9d: eb:b1:27:c3:a7:d9:fa:02:42:6e:27:02:06:44:df:56:b9:5a: 63:1f:d8:2c:eb:39:3c:df:58:15:c7:d8:92:d5:b2:60:2c:06: d8:78:24:00:bb:a9:46:b2:ee:4d:e6:6b:f5:c7:28:0c:e3:82: 45:ed:58:2c:fd:a6:1f:c0:a8:dd:6c:aa:de:57:ca:29:43:bb: 64:04:9a:e7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt4V0h5aRwu8RBoxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMDAxMDAzMFoXDTI2MDEwODAyMDAzMFowLzEtMCsGA1UEAxMk Y2IzZDdkYTAtNWFhZC00YmE1LWJhNTgtZjIzODhmOGU4NTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLT7A8297MVylUvcCMDB53VKv3GtLf5JqCnE HVr6F76HbwMWKjwJyErQJWcXtxdGsopciRJ7yjPzRikcivleD+CWTDssfNEq4Crl KaNG45YD02FbIR6kxZPZiZpl9GJfq22eoHCVcDJ4zN+0zdOPoayVZ4YW6cREnwp7 O/28RmscP2cPeN/blg5ZimgBvAzo4Bee1Bzl9k4685onSZFNmZJqVP2KfRmsJCGz sSpLAI37ikiVSFEmX2LCnQXq7XrSdN0jOpIrqL/ekAhD/N1sMqSm6Iqu67daXBIH RSwOgfyA8/cSpPWM1xg31x+ZJRPpSQpuX8Sr2blAzeiYdp6EtwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNjrHBlg9hPExIN8HWzj2V3+CNinMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWVjMzg3YWItMjUxMy0z OWQ1LWExNzktMzYwM2Y0ZDc4NmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJiAAdADI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIW7VL+IoQqW78Zmlwkekc9IR7jT4bxtD2ws22Ir2X1X/YsjUJVl iL6sTn24JvgBpl+e/NnvKm0qU3rZHvbdcq6ypFwZnY0KROIdmEBIMMk96LQMbnVL 2psc9307W7avy1pwbDECGUO8pKTOhcOTjEANnNBklX2dN4vLQ/h30HjEBS4jG0hH ab2tuja9PJ7yafZLyVbKtXA771Qx72CGFnZOcikwOoEKE3tavJ56oD0vawOkneux J8On2foCQm4nAgZE31a5WmMf2CzrOTzfWBXH2JLVsmAsBth4JAC7qUay7k3ma/XH KAzjgkXtWCz9ph/AqN1sqt5XyilDu2QEmuc= -----END CERTIFICATE-----Generated at Sun Oct 19 23:51:52 2025 by rpki-client