$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b27f22c2-ec72-3d9e-a627-a7e2537ac73d.roa File: b27f22c2-ec72-3d9e-a627-a7e2537ac73d.roa (raw, json) Hash identifier: U1jk4WkP43s+dtCCMK4HF9VmDRkfNQLOmMpLZl9dJUg= Subject key identifier: EA:3F:91:27:A7:3C:47:B0:7A:5F:AB:07:90:18:18:0A:9D:99:94:99 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B48E20F98B62C70F0613E8250 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b27f22c2-ec72-3d9e-a627-a7e2537ac73d.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 396587 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:0f:98:b6:2c:70:f0:61:3e:82:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=f2732d98-2b08-4149-a02b-3c6d52ce44ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:45:ea:59:2b:52:30:8b:6e:82:63:2d:61:42: 2a:1b:d1:93:bf:ed:74:d4:0c:ff:8b:0d:8c:20:6d: 55:a8:dc:a4:bb:d6:7f:a9:90:4c:e9:da:41:fd:a7: 67:1d:6b:c4:ab:cc:5b:d9:89:a8:3a:87:7a:23:3a: 6b:1e:1f:53:b8:92:52:66:39:2c:c0:6f:1b:b0:fe: 09:1b:b7:e6:9c:e4:03:20:db:1c:ed:04:13:0b:ea: ed:f1:6c:cc:75:43:a7:14:b1:94:85:ff:2e:01:59: d5:16:b1:99:f3:42:48:30:44:2d:58:d1:3e:27:dd: 0e:d2:78:26:e3:67:a5:0a:ce:cf:60:eb:73:73:dd: b5:67:9d:62:82:70:cc:9f:7b:99:dd:0d:9b:5d:32: 9d:f4:7c:fb:db:60:2d:3f:f6:c6:3d:18:21:12:93: 1c:de:b1:4d:5a:a1:28:de:70:56:8b:83:17:0e:1e: 8c:ed:68:1d:14:74:f7:27:4e:4b:11:7f:db:79:22: 1d:22:c6:02:61:ae:e1:e9:9d:91:c2:7b:d9:54:44: 53:26:d4:7d:47:37:00:6e:01:9b:f0:ab:37:79:6b: 1d:96:bd:17:be:f9:38:dc:e6:78:66:c8:0b:52:04: b9:28:a8:50:5a:76:a3:21:cb:3c:df:dd:e6:4f:23: ad:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:3F:91:27:A7:3C:47:B0:7A:5F:AB:07:90:18:18:0A:9D:99:94:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b27f22c2-ec72-3d9e-a627-a7e2537ac73d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:66:bb:55:86:9d:a6:e8:8b:10:af:24:17:42:3c:b8:0f:96: 31:b9:c0:96:d5:00:a2:f0:42:29:e5:dc:16:6b:3f:b0:38:93: c9:bb:a9:a0:03:54:0d:8d:68:96:72:10:65:9e:ed:49:56:71: c9:01:a7:85:92:db:16:d2:eb:cb:e0:3d:82:7b:7c:94:05:7e: 46:e0:64:55:5f:d9:c2:b0:9c:92:b8:0c:a6:b0:5f:33:ca:a8: 1d:19:68:20:1f:2d:8a:67:f4:7b:5b:4e:0b:7b:74:ef:9e:e6: 3d:e2:8e:40:d5:74:69:19:f7:32:07:25:2d:d4:85:e5:a9:5a: 3f:78:c8:12:1a:de:06:2a:d9:a9:0b:54:90:b2:a5:08:5e:27: ed:ec:03:f7:9d:5f:8d:9c:64:08:54:1c:5a:d2:53:76:82:79: b8:84:ea:74:e3:d0:c4:18:39:50:f0:5f:7a:3b:c8:64:af:e3: 79:f4:f2:57:b6:40:08:59:d9:92:26:c2:2b:48:d3:d7:c4:7c: 41:7d:4a:17:4e:9d:86:23:c1:f3:6d:4b:18:98:1b:2a:95:c8: 37:00:d9:9b:46:a5:13:72:3e:cb:24:cf:5c:45:c9:37:53:6c: 44:3b:20:54:aa:b4:9c:68:b6:ea:2d:fc:7b:6a:9a:75:74:39: 1c:69:a6:8a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4g+Ytixw8GE+glAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZjI3MzJkOTgtMmIwOC00MTQ5LWEwMmItM2M2ZDUyY2U0NGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUXqWStSMItugmMtYUIqG9GTv+101Az/iw2M IG1VqNyku9Z/qZBM6dpB/adnHWvEq8xb2YmoOod6IzprHh9TuJJSZjkswG8bsP4J G7fmnOQDINsc7QQTC+rt8WzMdUOnFLGUhf8uAVnVFrGZ80JIMEQtWNE+J90O0ngm 42elCs7PYOtzc921Z51ignDMn3uZ3Q2bXTKd9Hz722AtP/bGPRghEpMc3rFNWqEo 3nBWi4MXDh6M7WgdFHT3J05LEX/beSIdIsYCYa7h6Z2RwnvZVERTJtR9RzcAbgGb 8Ks3eWsdlr0Xvvk43OZ4ZsgLUgS5KKhQWnajIcs8393mTyOt9QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOo/kSenPEewel+rB5AYGAqdmZSZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjI3ZjIyYzItZWM3Mi0z ZDllLWE2MjctYTdlMjUzN2FjNzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEtmu1WGnaboixCvJBdCPLgPljG5wJbVAKLwQinl3BZrP7A4k8m7 qaADVA2NaJZyEGWe7UlWcckBp4WS2xbS68vgPYJ7fJQFfkbgZFVf2cKwnJK4DKaw XzPKqB0ZaCAfLYpn9HtbTgt7dO+e5j3ijkDVdGkZ9zIHJS3UheWpWj94yBIa3gYq 2akLVJCypQheJ+3sA/edX42cZAhUHFrSU3aCebiE6nTj0MQYOVDwX3o7yGSv43n0 8le2QAhZ2ZImwitI09fEfEF9ShdOnYYjwfNtSxiYGyqVyDcA2ZtGpRNyPsskz1xF yTdTbEQ7IFSqtJxotuot/HtqmnV0ORxppoo= -----END CERTIFICATE-----Generated at Mon Oct 20 08:15:59 2025 by rpki-client