$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5c62b97-bfea-3f1c-889a-6053db0efd70.roa File: a5c62b97-bfea-3f1c-889a-6053db0efd70.roa (raw, json) Hash identifier: iQ86cEIamhdTHzqS5wT6Aheu5vT4rDPj9nfS2INgTWk= Subject key identifier: CF:00:A0:30:6F:AA:EE:E9:FC:66:42:66:ED:BF:AF:13:56:B3:B7:23 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B62022EB30234A768F4355480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5c62b97-bfea-3f1c-889a-6053db0efd70.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 36622 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:2e:b3:02:34:a7:68:f4:35:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=cc11f657-e453-4e7f-a6b1-9e7607f5e6e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7b:1e:71:df:52:15:e8:3b:90:cd:82:00:b7: b4:09:4c:e2:79:09:2e:f0:c4:f9:d6:fb:1f:35:c6: 0e:b3:fe:58:c6:f1:cf:49:fb:84:9b:ec:fb:47:d6: 42:b4:43:85:25:69:06:0f:4c:64:89:38:9b:ae:c9: e4:b5:81:41:c9:90:20:63:34:d9:f4:b9:60:18:5b: 76:a0:81:27:9c:88:99:7d:8c:6c:a7:47:ba:5f:41: 8d:3e:4f:a0:ff:24:61:f3:35:8a:3e:63:95:b4:c4: 25:c9:49:a6:0c:dc:fa:03:da:60:e3:ba:7e:9a:7a: e6:88:2c:fe:2d:f5:93:42:2f:54:cd:4d:2f:3f:a8: 13:23:bf:16:37:20:c9:af:41:93:89:ff:d8:ab:b3: 8e:5f:65:88:cd:6f:33:a9:78:3c:02:88:61:f8:82: 7b:f6:5b:4c:b1:4d:fa:45:2a:24:9f:c5:8c:87:42: c3:e4:70:12:45:86:c9:66:d3:dd:e2:b0:7f:45:a1: c5:02:ec:e7:b4:75:8b:b4:6c:98:88:45:93:e7:e3: 49:82:04:e0:2d:ed:73:13:b6:b2:58:07:74:89:2e: 41:d4:a9:9a:cb:60:b1:bd:98:1d:1c:eb:12:df:3a: 8b:55:89:3e:04:09:23:7b:51:05:7e:0a:03:b6:22: c3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:00:A0:30:6F:AA:EE:E9:FC:66:42:66:ED:BF:AF:13:56:B3:B7:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5c62b97-bfea-3f1c-889a-6053db0efd70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:37:05:cf:f7:db:e8:f4:c3:6f:be:ed:db:ae:87:fa:12:d2: 3a:df:9e:ef:f9:ec:e8:8a:c1:ad:7b:e0:1c:0b:1b:99:36:e8: f0:c6:0c:0a:ef:57:53:11:56:79:20:92:78:e1:cb:f8:ab:b5: f4:8b:d3:50:db:6a:40:47:70:7d:39:2a:84:11:d1:3a:77:ab: 82:0e:a3:ed:ee:53:94:56:a2:34:e1:da:25:2e:fd:82:79:b3: c2:4a:01:75:d2:7d:92:5c:61:2e:27:d6:5e:97:d2:48:69:82: 96:69:1c:98:f4:85:de:f5:ea:1f:0f:aa:2c:3b:e6:31:4e:2c: ff:15:69:e9:3d:d5:7e:a8:56:3a:b3:c2:e5:9e:3b:43:30:09: 1c:2c:28:5d:f1:a4:1f:61:19:41:2f:fa:aa:cc:d9:1a:1d:3f: 01:c4:c5:1a:84:58:03:8d:7b:b0:9d:9f:52:68:a1:b3:56:03: f7:09:9b:7e:12:e1:10:6f:95:86:17:2b:5a:65:65:b0:de:06: 67:10:bd:b6:8f:24:7e:7b:da:8f:24:18:d7:a3:75:b2:a0:93: 54:79:e0:66:5b:63:10:e9:32:87:d0:19:d9:65:31:20:dd:81: c0:3e:e6:42:0a:be:b1:4b:a8:7f:07:b7:e3:44:1b:e7:bd:67: e5:b7:c3:73 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAi6zAjSnaPQ1VIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk Y2MxMWY2NTctZTQ1My00ZTdmLWE2YjEtOWU3NjA3ZjVlNmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3secd9SFeg7kM2CALe0CUzieQku8MT51vsf NcYOs/5YxvHPSfuEm+z7R9ZCtEOFJWkGD0xkiTibrsnktYFByZAgYzTZ9LlgGFt2 oIEnnIiZfYxsp0e6X0GNPk+g/yRh8zWKPmOVtMQlyUmmDNz6A9pg47p+mnrmiCz+ LfWTQi9UzU0vP6gTI78WNyDJr0GTif/Yq7OOX2WIzW8zqXg8Aohh+IJ79ltMsU36 RSokn8WMh0LD5HASRYbJZtPd4rB/RaHFAuzntHWLtGyYiEWT5+NJggTgLe1zE7ay WAd0iS5B1Kmay2CxvZgdHOsS3zqLVYk+BAkje1EFfgoDtiLDzQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM8AoDBvqu7p/GZCZu2/rxNWs7cjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTVjNjJiOTctYmZlYS0z ZjFjLTg4OWEtNjA1M2RiMGVmZDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADg3Bc/32+j0w2++7duuh/oS0jrfnu/57OiKwa174BwLG5k26PDG DArvV1MRVnkgknjhy/irtfSL01DbakBHcH05KoQR0Tp3q4IOo+3uU5RWojTh2iUu /YJ5s8JKAXXSfZJcYS4n1l6X0khpgpZpHJj0hd716h8Pqiw75jFOLP8Vaek91X6o VjqzwuWeO0MwCRwsKF3xpB9hGUEv+qrM2RodPwHExRqEWAONe7Cdn1JoobNWA/cJ m34S4RBvlYYXK1plZbDeBmcQvbaPJH572o8kGNejdbKgk1R54GZbYxDpMofQGdll MSDdgcA+5kIKvrFLqH8Ht+NEG+e9Z+W3w3M= -----END CERTIFICATE-----Generated at Mon Oct 20 08:14:41 2025 by rpki-client