$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b0c80747-6ca4-38c8-bdba-492465c92714.roa File: b0c80747-6ca4-38c8-bdba-492465c92714.roa (raw, json) Hash identifier: D9jf9G5EVCocaIOMk6RozhIyScREr+80Ue0jqzfwsc4= Subject key identifier: 31:AB:FF:8B:66:58:2E:8A:CC:65:62:98:A4:C3:90:01:1F:5F:30:2C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6201CEA65FBCE629ECBA1080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b0c80747-6ca4-38c8-bdba-492465c92714.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 397198 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:ce:a6:5f:bc:e6:29:ec:ba:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=b4a01308-bf37-45c1-9cd3-17c42767d1b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a7:ff:8e:c3:4a:bd:e0:e6:1b:50:7e:30:c4: df:48:54:f4:29:f9:57:6f:e1:a8:93:15:24:62:ec: 26:8d:e3:14:27:ef:ea:75:88:5b:9b:47:54:17:f3: 20:38:8b:42:6b:a7:7a:cc:21:08:c5:62:28:b5:b5: 2f:c8:4c:76:7b:e9:2e:ad:14:d2:f5:dd:a8:29:4e: 50:69:56:e2:9e:91:a0:51:27:fd:c4:99:36:f2:47: 6b:1f:a7:92:2a:6b:9d:b1:1b:65:8e:61:a7:1a:83: d8:3a:72:0e:39:02:f3:77:66:5b:c4:e7:7c:a3:9a: 49:28:65:13:37:b4:b7:ba:45:23:5b:51:cd:6b:20: 6b:15:3f:b8:d2:17:21:57:5a:f2:12:e8:2e:60:61: 15:cb:06:d7:68:ba:13:3d:8b:37:a4:c7:87:62:c1: c7:5b:3a:c6:15:b8:36:ba:8f:fb:96:e9:ff:ef:1a: ef:36:1b:d2:e0:d4:a8:aa:44:a4:86:dc:6a:a1:1b: ec:27:14:0a:16:59:49:fb:66:65:b8:51:41:e3:f6: d8:e0:19:97:e7:99:48:e3:19:58:88:e2:3b:19:57: 75:f9:56:e9:cd:4d:5c:88:b9:fe:ad:d0:44:6d:05: 85:85:96:06:63:33:ee:49:6e:4c:1b:5f:dd:ee:9d: 45:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:AB:FF:8B:66:58:2E:8A:CC:65:62:98:A4:C3:90:01:1F:5F:30:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b0c80747-6ca4-38c8-bdba-492465c92714.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:1f:ee:86:45:d2:ca:39:17:67:07:fd:6d:a6:19:16:59:0e: 86:66:46:b9:71:50:07:65:1f:3d:65:22:41:a2:07:79:e7:4e: 17:0e:6c:7e:73:85:cf:fe:34:45:98:05:49:a7:09:06:f8:45: 33:f2:0b:8b:36:85:8f:11:69:b4:b2:7f:16:0c:ce:44:fc:be: 48:8f:1e:59:d1:cc:b8:0a:11:a5:14:da:23:d2:40:00:b5:da: d3:ea:56:d4:1b:34:70:f5:ea:d4:f3:1a:30:02:69:5f:a9:94: 8c:0c:29:43:e1:28:a9:72:b5:34:7f:cc:1b:d9:25:b2:1c:22: 4b:74:b1:31:a0:90:50:35:d3:be:e0:60:dc:da:eb:f8:e2:94: 40:96:71:a4:28:18:f5:eb:1c:30:64:94:d1:03:e4:df:14:cc: 1f:ec:f1:df:a4:4b:b3:32:26:12:d3:80:9b:97:56:cd:fd:d0: 4b:5d:83:5b:38:ad:40:22:5a:ca:ef:ff:a2:f8:2e:d5:43:26: 70:51:96:27:39:42:9d:fe:07:9e:76:31:c6:9a:4c:7d:77:67: de:44:02:6f:ee:11:95:1a:7b:35:7f:3f:53:56:3c:50:f5:34: d0:ef:7a:96:5b:f7:40:ce:73:ca:f1:44:fe:58:4e:5e:f2:ab: fd:5b:0b:03 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAc6mX7zmKey6EIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk YjRhMDEzMDgtYmYzNy00NWMxLTljZDMtMTdjNDI3NjdkMWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6f/jsNKveDmG1B+MMTfSFT0KflXb+GokxUk YuwmjeMUJ+/qdYhbm0dUF/MgOItCa6d6zCEIxWIotbUvyEx2e+kurRTS9d2oKU5Q aVbinpGgUSf9xJk28kdrH6eSKmudsRtljmGnGoPYOnIOOQLzd2ZbxOd8o5pJKGUT N7S3ukUjW1HNayBrFT+40hchV1ryEuguYGEVywbXaLoTPYs3pMeHYsHHWzrGFbg2 uo/7lun/7xrvNhvS4NSoqkSkhtxqoRvsJxQKFllJ+2ZluFFB4/bY4BmX55lI4xlY iOI7GVd1+VbpzU1ciLn+rdBEbQWFhZYGYzPuSW5MG1/d7p1FlQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDGr/4tmWC6KzGVimKTDkAEfXzAsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjBjODA3NDctNmNhNC0z OGM4LWJkYmEtNDkyNDY1YzkyNzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADof7oZF0so5F2cH/W2mGRZZDoZmRrlxUAdlHz1lIkGiB3nnThcO bH5zhc/+NEWYBUmnCQb4RTPyC4s2hY8RabSyfxYMzkT8vkiPHlnRzLgKEaUU2iPS QAC12tPqVtQbNHD16tTzGjACaV+plIwMKUPhKKlytTR/zBvZJbIcIkt0sTGgkFA1 077gYNza6/jilECWcaQoGPXrHDBklNED5N8UzB/s8d+kS7MyJhLTgJuXVs390Etd g1s4rUAiWsrv/6L4LtVDJnBRlic5Qp3+B552McaaTH13Z95EAm/uEZUaezV/P1NW PFD1NNDvepZb90DOc8rxRP5YTl7yq/1bCwM= -----END CERTIFICATE-----Generated at Mon Oct 20 10:28:36 2025 by rpki-client