$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a48a29ff-07dc-3673-ad14-f1dccea4d1cc.roa File: a48a29ff-07dc-3673-ad14-f1dccea4d1cc.roa (raw, json) Hash identifier: IEkBB3sf/T9fg03aLiMQv0Wup34fhwjSz0N/k1bfvbQ= Subject key identifier: 3F:2C:9F:23:00:46:A1:0B:78:A7:A8:09:C5:9C:8C:17:A5:F4:39:99 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B620227280F52537B36BFFA00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a48a29ff-07dc-3673-ad14-f1dccea4d1cc.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 396563 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:27:28:0f:52:53:7b:36:bf:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=746374b7-0b2d-4340-a80a-32f824189281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:1d:0b:1e:a3:73:90:c7:b4:f6:9d:62:be:5b: 6d:a6:f9:21:b9:96:32:ed:d2:b3:8d:de:cc:ae:8d: cf:6e:86:25:a3:e5:68:9a:99:d5:a8:10:61:ce:2f: 83:36:c5:af:e4:ae:70:98:70:b1:c4:b9:60:e0:e1: 1d:d6:3c:db:1c:d9:01:d6:35:85:39:c3:e3:f1:ce: e4:ac:a1:dd:2d:66:52:cc:ca:de:86:f8:2b:26:cf: 64:08:74:f9:7e:03:c1:a8:9a:c1:7c:e1:54:db:03: 1c:1f:78:f0:81:a3:03:70:d0:38:f3:4c:4b:ac:07: 99:ad:4e:9a:b8:ec:8a:cb:e6:c6:52:66:eb:f5:d8: 85:03:4d:7d:7e:f4:51:2f:7a:48:72:14:73:72:c4: 44:6c:62:f0:82:ec:d3:24:96:fa:49:06:f8:e5:1f: b9:25:31:f0:77:92:be:1e:be:c2:c4:df:57:ce:60: 3b:fb:3d:b3:83:e7:c2:7c:22:1a:86:ab:96:0c:f5: b7:77:75:88:51:36:88:75:d5:18:02:a9:44:22:5b: 06:74:6f:58:2a:74:ef:c0:08:40:63:3a:97:ab:43: 17:b9:ff:43:84:76:02:20:e2:56:04:a8:fa:ae:63: f7:17:ba:80:06:f8:3a:d5:30:c2:7a:9e:34:0f:6c: 5a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:2C:9F:23:00:46:A1:0B:78:A7:A8:09:C5:9C:8C:17:A5:F4:39:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a48a29ff-07dc-3673-ad14-f1dccea4d1cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:2a:54:6a:a4:78:58:4d:94:fc:d6:05:ed:65:5e:40:ea:0e: 1e:49:99:33:9f:bf:63:93:51:ca:25:7b:cd:3d:b6:81:3f:e1: ac:fb:09:3c:8c:be:bb:7e:88:64:93:5b:e1:e2:cc:46:6b:12: ef:dd:36:d8:b4:5c:5a:42:07:41:e0:13:26:98:c9:54:1b:c7: e4:f8:6e:98:8b:55:73:1e:6a:6e:34:bc:88:21:91:ce:0f:e4: 3f:04:9c:48:df:d5:41:1d:56:d2:a3:78:e6:4e:d7:65:52:c6: 55:13:17:db:8a:c7:e1:e4:1e:bd:60:bc:42:c1:7b:b7:07:93: bb:65:67:38:e7:09:0c:0e:2e:8e:40:80:9a:2b:38:a9:5b:20: 0a:11:c3:dd:6d:0b:f4:bf:0f:3d:0a:6e:d1:ba:d6:52:56:de: c2:d4:95:9d:39:e3:49:df:0a:c7:4b:02:e3:9e:5b:f7:1c:b7: fd:be:46:6b:d2:1d:85:ab:85:74:bb:5b:df:91:17:dd:2d:8b: 24:6a:93:83:52:14:76:bc:98:fa:c3:44:64:26:c0:16:93:35: 29:4d:0b:f0:80:24:5b:76:9b:42:41:e5:af:72:bb:a8:8b:0a: 3b:07:fd:6a:bb:71:8b:41:bf:6e:c8:6b:3a:80:45:30:27:8a: b9:36:23:ec -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAicoD1JTeza/+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NzQ2Mzc0YjctMGIyZC00MzQwLWE4MGEtMzJmODI0MTg5MjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkR0LHqNzkMe09p1ivlttpvkhuZYy7dKzjd7M ro3PboYlo+VompnVqBBhzi+DNsWv5K5wmHCxxLlg4OEd1jzbHNkB1jWFOcPj8c7k rKHdLWZSzMrehvgrJs9kCHT5fgPBqJrBfOFU2wMcH3jwgaMDcNA480xLrAeZrU6a uOyKy+bGUmbr9diFA019fvRRL3pIchRzcsREbGLwguzTJJb6SQb45R+5JTHwd5K+ Hr7CxN9XzmA7+z2zg+fCfCIahquWDPW3d3WIUTaIddUYAqlEIlsGdG9YKnTvwAhA YzqXq0MXuf9DhHYCIOJWBKj6rmP3F7qABvg61TDCep40D2xapwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD8snyMARqELeKeoCcWcjBel9DmZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTQ4YTI5ZmYtMDdkYy0z NjczLWFkMTQtZjFkY2NlYTRkMWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC4qVGqkeFhNlPzWBe1lXkDqDh5JmTOfv2OTUcole809toE/4az7 CTyMvrt+iGSTW+HizEZrEu/dNti0XFpCB0HgEyaYyVQbx+T4bpiLVXMeam40vIgh kc4P5D8EnEjf1UEdVtKjeOZO12VSxlUTF9uKx+HkHr1gvELBe7cHk7tlZzjnCQwO Lo5AgJorOKlbIAoRw91tC/S/Dz0KbtG61lJW3sLUlZ0540nfCsdLAuOeW/cct/2+ RmvSHYWrhXS7W9+RF90tiyRqk4NSFHa8mPrDRGQmwBaTNSlNC/CAJFt2m0JB5a9y u6iLCjsH/Wq7cYtBv27IazqARTAnirk2I+w= -----END CERTIFICATE-----Generated at Mon Oct 20 08:11:54 2025 by rpki-client