$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b6a982bb-d61e-34f3-bb81-71cc3e5ed574.roa File: b6a982bb-d61e-34f3-bb81-71cc3e5ed574.roa (raw, json) Hash identifier: XJ/Azce9Nuq+qDZTnZPprDMQF44ktUH+QZE7gvy/YWk= Subject key identifier: B6:45:58:DA:C1:AD:BF:CB:0C:D4:DF:BE:02:66:7B:CC:6A:D6:31:0F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B620235D3B581614B564C7DA0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b6a982bb-d61e-34f3-bb81-71cc3e5ed574.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 396585 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:35:d3:b5:81:61:4b:56:4c:7d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=0cff2ecd-73cb-4b49-98d0-efcb6a858f09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7a:4b:97:a9:ea:4d:32:14:d0:03:4c:a8:4c: 63:d5:57:2b:70:47:a1:78:70:fb:eb:be:f9:cb:2b: 27:52:5a:94:92:9b:59:64:17:d2:fe:fb:a2:72:85: 3b:44:52:ec:ff:fb:bd:06:93:71:50:f6:a9:8b:97: 70:78:9c:a6:af:87:4e:e0:dc:c6:a7:9c:91:3e:db: fb:1c:c4:f3:1f:50:0f:8d:8b:0e:f2:5f:e6:92:79: 47:8f:8d:4e:cf:a8:dc:8d:77:eb:66:f2:32:ec:92: 1c:f4:d0:1f:99:3c:5e:ab:48:d2:04:dc:23:e8:5c: cb:b5:19:4a:ec:47:80:e3:51:9b:a1:d8:d7:a3:94: 3b:8d:9e:88:a7:30:fc:4c:50:1a:16:45:64:8c:5b: 3f:44:5f:91:07:31:3f:98:63:5d:b7:00:32:01:5d: 14:bd:36:d7:3a:16:11:71:a3:73:3b:fc:9e:eb:94: 99:ab:71:38:e8:9a:5d:cd:85:32:4f:ff:7f:ee:2d: 2f:e4:4b:04:6c:a0:ee:d7:fc:bf:62:3f:c0:8f:db: a5:67:ca:5e:51:12:41:ac:80:85:d7:29:1f:8a:81: 88:3a:28:20:92:71:3c:1a:ee:b9:a6:e4:fe:00:e1: 21:17:e1:d0:d5:8c:d8:e1:3f:d7:f8:45:59:75:d7: a7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:45:58:DA:C1:AD:BF:CB:0C:D4:DF:BE:02:66:7B:CC:6A:D6:31:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b6a982bb-d61e-34f3-bb81-71cc3e5ed574.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:8d:d9:2f:10:cf:20:20:77:c9:aa:05:53:7a:36:ea:52:49: 31:86:f3:ca:3f:ff:16:d7:39:2d:72:5f:a0:e1:53:1c:f9:1b: b6:bc:f7:be:ea:2d:7d:4e:46:f9:52:2c:e7:05:47:b1:0d:29: 7c:f6:8b:e9:4b:66:64:5c:95:ec:a6:5b:bd:8a:70:9f:2e:53: 4f:46:80:13:cd:26:5f:4b:ca:9b:c4:23:ae:7b:70:9a:fc:b4: 02:10:be:3b:03:5c:8b:ee:5e:5c:54:47:6a:37:33:c5:e5:5c: 8d:35:2c:10:7e:b9:72:e8:bc:59:51:56:80:35:37:df:1a:de: e9:94:2c:df:ed:08:76:c7:e0:21:e1:58:ce:84:e2:64:de:d2: 6b:c7:3d:31:a7:26:07:20:60:ad:5a:dc:d0:5a:45:90:3b:00: 64:ab:be:29:1e:2a:92:d1:96:b8:a4:7e:49:b3:8f:53:d3:ff: fa:35:9b:93:45:a3:b2:09:dc:6b:31:c4:3d:ab:38:bc:a9:54: 33:b3:ca:8f:ab:37:67:f3:ad:52:bd:fe:81:92:ac:e4:56:69: b4:cb:fc:11:16:fe:2e:19:44:c5:e8:e0:8f:06:7f:ce:c1:48: e6:50:b4:03:06:af:90:49:b6:25:8f:d5:8f:92:49:57:2f:36: 0b:50:e3:1f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAjXTtYFhS1ZMfaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk MGNmZjJlY2QtNzNjYi00YjQ5LTk4ZDAtZWZjYjZhODU4ZjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HpLl6nqTTIU0ANMqExj1VcrcEeheHD76775 yysnUlqUkptZZBfS/vuicoU7RFLs//u9BpNxUPapi5dweJymr4dO4NzGp5yRPtv7 HMTzH1APjYsO8l/mknlHj41Oz6jcjXfrZvIy7JIc9NAfmTxeq0jSBNwj6FzLtRlK 7EeA41GbodjXo5Q7jZ6IpzD8TFAaFkVkjFs/RF+RBzE/mGNdtwAyAV0UvTbXOhYR caNzO/ye65SZq3E46JpdzYUyT/9/7i0v5EsEbKDu1/y/Yj/Aj9ulZ8peURJBrICF 1ykfioGIOiggknE8Gu65puT+AOEhF+HQ1YzY4T/X+EVZddenSwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLZFWNrBrb/LDNTfvgJme8xq1jEPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjZhOTgyYmItZDYxZS0z NGYzLWJiODEtNzFjYzNlNWVkNTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADGN2S8QzyAgd8mqBVN6NupSSTGG88o//xbXOS1yX6DhUxz5G7a8 977qLX1ORvlSLOcFR7ENKXz2i+lLZmRcleymW72KcJ8uU09GgBPNJl9LypvEI657 cJr8tAIQvjsDXIvuXlxUR2o3M8XlXI01LBB+uXLovFlRVoA1N98a3umULN/tCHbH 4CHhWM6E4mTe0mvHPTGnJgcgYK1a3NBaRZA7AGSrvikeKpLRlrikfkmzj1PT//o1 m5NFo7IJ3GsxxD2rOLypVDOzyo+rN2fzrVK9/oGSrORWabTL/BEW/i4ZRMXo4I8G f87BSOZQtAMGr5BJtiWP1Y+SSVcvNgtQ4x8= -----END CERTIFICATE-----Generated at Mon Oct 20 08:12:34 2025 by rpki-client