$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a7f57f6d-27e5-3df1-ae97-cbea1b61453b.roa File: a7f57f6d-27e5-3df1-ae97-cbea1b61453b.roa (raw, json) Hash identifier: MQf/KRSIpTfU7cKgVQd1sXwsAJjZRxaJtQghTo8llio= Subject key identifier: 02:3D:D7:6F:44:50:4F:C5:F3:B8:80:9A:3B:55:3A:BC:23:22:CE:47 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B48E210BE89F6868B108D2DA0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a7f57f6d-27e5-3df1-ae97-cbea1b61453b.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 21313 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:10:be:89:f6:86:8b:10:8d:2d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=bf18f496-dae8-4e71-ac52-21863f6d417c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c6:61:27:6e:5f:84:dd:87:12:26:27:11:62: d8:3c:3a:50:1a:47:f4:8c:a5:d2:d6:dd:7b:f9:99: 5c:da:54:2e:1a:8e:a6:54:87:8c:c3:8a:f6:75:1d: 1b:81:0a:90:3c:68:50:76:ed:4a:bd:61:81:5f:2a: 2a:3e:ab:90:37:c4:7b:0b:02:d7:89:d6:a1:e6:ca: da:9e:bb:13:b5:21:35:f7:73:f5:3e:68:d3:12:13: cc:54:e7:20:f6:d1:f4:d0:d8:12:da:9e:ee:9d:33: da:a2:34:8f:b6:4b:29:53:b9:b0:ba:be:42:f7:78: 53:6c:2d:90:ed:79:06:9d:cd:bf:35:a7:47:a4:9f: 15:6c:b1:08:86:31:23:e2:cb:fd:b9:eb:c8:67:96: a1:90:32:ec:34:88:05:50:72:ca:b2:3e:5e:27:d4: 4b:ad:27:a1:30:27:9d:73:b4:1d:93:53:a8:da:3d: 4c:1b:c6:c3:64:53:fd:cb:1d:dc:76:59:df:35:d0: 84:fa:a6:c3:92:6a:f0:c1:a8:98:6e:b5:29:4d:51: 9b:71:01:73:5f:17:15:9c:67:2e:81:2a:d6:12:4b: d7:a6:75:19:72:23:59:c0:2c:55:81:07:2a:fb:ef: ba:f5:91:98:86:fb:28:d1:65:01:5b:51:8d:45:c1: ac:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:3D:D7:6F:44:50:4F:C5:F3:B8:80:9A:3B:55:3A:BC:23:22:CE:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a7f57f6d-27e5-3df1-ae97-cbea1b61453b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:e2:c9:2f:d2:2e:93:06:92:f5:e2:80:11:35:c4:f7:e0:47: cd:7f:1a:99:18:47:eb:6a:91:b0:7f:e8:4b:d7:b0:f7:d8:e2: 34:c9:d2:05:a5:b5:59:0e:a3:64:cb:8c:40:39:2f:81:44:7f: c3:6f:19:cf:ed:bc:86:74:70:f9:41:0b:7c:bc:43:39:b7:f8: 5b:75:4c:8c:8a:15:99:9e:31:53:c4:c5:f3:3a:ac:bb:bd:f7: bb:73:90:f0:23:33:fa:68:2d:1e:8f:b8:54:2a:e6:0c:4d:94: 27:23:ff:b8:91:f9:2e:49:4c:16:6a:e9:a9:13:62:33:d1:d1: f8:2a:da:59:66:a3:8b:af:b7:6d:66:79:2b:f7:5a:01:09:d4: 48:3c:73:6d:8a:2f:1b:8f:34:89:af:92:cf:24:8c:25:fb:33: 4f:09:0d:4f:06:94:80:df:fe:14:b9:0b:91:b0:d7:19:17:1a: 58:d8:83:8e:69:41:e0:96:ce:25:cb:f8:b4:f8:59:96:69:46: 26:70:9f:76:31:e4:a7:09:b8:ba:e3:ed:2a:b9:5e:e1:b9:e1: 93:ee:6f:c6:19:98:16:f5:f9:10:f0:02:e1:c6:99:03:25:49: 2f:d0:86:bb:1b:f6:84:2b:dd:c0:4c:fd:77:bc:9b:7d:45:2c: fd:e6:cb:7a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4hC+ifaGixCNLaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk YmYxOGY0OTYtZGFlOC00ZTcxLWFjNTItMjE4NjNmNmQ0MTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcZhJ25fhN2HEiYnEWLYPDpQGkf0jKXS1t17 +Zlc2lQuGo6mVIeMw4r2dR0bgQqQPGhQdu1KvWGBXyoqPquQN8R7CwLXidah5sra nrsTtSE193P1PmjTEhPMVOcg9tH00NgS2p7unTPaojSPtkspU7mwur5C93hTbC2Q 7XkGnc2/NadHpJ8VbLEIhjEj4sv9uevIZ5ahkDLsNIgFUHLKsj5eJ9RLrSehMCed c7Qdk1Oo2j1MG8bDZFP9yx3cdlnfNdCE+qbDkmrwwaiYbrUpTVGbcQFzXxcVnGcu gSrWEkvXpnUZciNZwCxVgQcq+++69ZGYhvso0WUBW1GNRcGsywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAI9129EUE/F87iAmjtVOrwjIs5HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTdmNTdmNmQtMjdlNS0z ZGYxLWFlOTctY2JlYTFiNjE0NTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIPiyS/SLpMGkvXigBE1xPfgR81/GpkYR+tqkbB/6EvXsPfY4jTJ 0gWltVkOo2TLjEA5L4FEf8NvGc/tvIZ0cPlBC3y8Qzm3+Ft1TIyKFZmeMVPExfM6 rLu997tzkPAjM/poLR6PuFQq5gxNlCcj/7iR+S5JTBZq6akTYjPR0fgq2llmo4uv t21meSv3WgEJ1Eg8c22KLxuPNImvks8kjCX7M08JDU8GlIDf/hS5C5Gw1xkXGljY g45pQeCWziXL+LT4WZZpRiZwn3Yx5KcJuLrj7Sq5XuG54ZPub8YZmBb1+RDwAuHG mQMlSS/Qhrsb9oQr3cBM/Xe8m31FLP3my3o= -----END CERTIFICATE-----Generated at Mon Oct 20 08:15:24 2025 by rpki-client