$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bf4a247f-b30a-3aa9-b411-4e45b0b294cf.roa File: bf4a247f-b30a-3aa9-b411-4e45b0b294cf.roa (raw, json) Hash identifier: hJD6iyP96Bcbc/LXeu1qNEndMNhbkhOl9wnFqS0uvfg= Subject key identifier: 7A:92:52:40:DA:9B:96:B0:D3:76:C6:3A:81:F0:5B:73:95:9C:3C:88 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B48E1BA5FE2C4866FD74A7380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bf4a247f-b30a-3aa9-b411-4e45b0b294cf.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 396580 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:ba:5f:e2:c4:86:6f:d7:4a:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=1897aaf6-fa20-4dfa-b634-452dcd3bd2d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ff:b0:bc:ba:76:9b:25:bc:5d:51:6a:f0:ad: 42:17:4e:70:df:3f:ac:34:87:21:7e:ce:22:e6:36: 39:cf:80:5c:dc:1a:9e:c8:18:6f:a4:ca:0c:07:b2: 08:b7:9d:b0:a4:4a:b7:69:88:c5:6a:5b:55:40:de: 73:31:08:34:f7:71:e3:a9:30:20:25:9d:1f:c0:b8: 74:1a:9c:c4:55:3c:63:0b:2e:41:ec:7d:e1:08:f8: 98:d6:3a:94:f2:19:3a:07:f9:17:71:e8:0e:6a:ff: ea:4a:ed:b6:b0:c3:29:eb:18:08:64:53:f1:cf:ae: c8:b0:95:ad:d0:45:cf:e2:d9:13:18:38:2e:93:d7: 62:75:95:99:e3:a3:1a:e6:27:49:74:6f:01:39:d9: 3b:11:a2:4e:b0:30:ee:03:5a:0b:74:c1:50:1b:20: 95:77:91:65:8a:bb:d5:b6:8a:b1:f8:f8:22:af:77: 1b:ae:38:ec:e1:ef:15:96:37:2b:e5:18:43:f8:f0: d0:13:43:9c:b5:bc:32:75:83:61:2e:d5:0a:f9:1e: cf:d2:0a:2e:ab:f2:5c:74:81:56:ed:34:e2:b3:ba: 16:57:2a:ab:22:f2:ec:6c:3f:27:7a:c0:79:6d:4e: 1d:98:8a:ef:c9:4c:dd:7d:71:9e:b9:85:c4:de:19: 27:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:92:52:40:DA:9B:96:B0:D3:76:C6:3A:81:F0:5B:73:95:9C:3C:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bf4a247f-b30a-3aa9-b411-4e45b0b294cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:27:5e:45:fe:5c:5b:03:9c:97:c1:96:fe:d4:46:28:3a:a4: 59:41:7e:8a:d2:1e:97:bc:1d:84:e6:41:35:a1:22:a3:c4:ae: 93:c7:d4:11:6a:ff:41:51:fe:b3:10:a4:cf:30:bf:14:84:d7: b5:2a:7b:a1:d0:7f:44:56:85:c3:de:44:b3:eb:2c:dd:2a:c2: 5e:5a:f5:cc:df:7a:8a:87:f4:d6:71:75:1f:ad:4e:08:1a:8a: 9a:8f:c3:45:61:2e:ab:bf:14:14:ad:9f:29:c6:5f:77:b8:ee: 1b:77:32:01:ad:82:8e:39:85:9d:08:3b:fc:49:4d:c7:45:dd: 07:84:14:ac:fa:f6:3d:41:f9:c6:a3:45:09:ae:60:ec:19:d5: c6:bd:6e:3b:95:38:4d:07:60:2e:2d:fa:b8:b3:43:43:f5:26: 3a:19:25:48:ca:94:e0:86:15:a5:69:75:ce:89:92:ce:1d:c5: 02:ce:46:f2:b3:b8:c8:69:01:b2:26:75:61:8b:2c:59:af:3f: cc:0f:44:00:7c:f6:b5:62:eb:3e:34:aa:87:98:84:7c:30:a8: 8f:36:fb:ba:89:96:56:69:ce:5c:a6:dc:5c:fe:52:11:4f:df: a4:b8:74:c2:b9:fa:e6:c7:37:a7:7f:1e:25:4d:6c:82:6a:c4: 5c:f4:2e:02 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4bpf4sSGb9dKc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MTg5N2FhZjYtZmEyMC00ZGZhLWI2MzQtNDUyZGNkM2JkMmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwP+wvLp2myW8XVFq8K1CF05w3z+sNIchfs4i 5jY5z4Bc3BqeyBhvpMoMB7IIt52wpEq3aYjFaltVQN5zMQg093HjqTAgJZ0fwLh0 GpzEVTxjCy5B7H3hCPiY1jqU8hk6B/kXcegOav/qSu22sMMp6xgIZFPxz67IsJWt 0EXP4tkTGDguk9didZWZ46Ma5idJdG8BOdk7EaJOsDDuA1oLdMFQGyCVd5FlirvV toqx+Pgir3cbrjjs4e8Vljcr5RhD+PDQE0OctbwydYNhLtUK+R7P0gouq/JcdIFW 7TTis7oWVyqrIvLsbD8nesB5bU4dmIrvyUzdfXGeuYXE3hknYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHqSUkDam5aw03bGOoHwW3OVnDyIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmY0YTI0N2YtYjMwYS0z YWE5LWI0MTEtNGU0NWIwYjI5NGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGQnXkX+XFsDnJfBlv7URig6pFlBforSHpe8HYTmQTWhIqPErpPH 1BFq/0FR/rMQpM8wvxSE17Uqe6HQf0RWhcPeRLPrLN0qwl5a9czfeoqH9NZxdR+t TggaipqPw0VhLqu/FBStnynGX3e47ht3MgGtgo45hZ0IO/xJTcdF3QeEFKz69j1B +cajRQmuYOwZ1ca9bjuVOE0HYC4t+rizQ0P1JjoZJUjKlOCGFaVpdc6Jks4dxQLO RvKzuMhpAbImdWGLLFmvP8wPRAB89rVi6z40qoeYhHwwqI82+7qJllZpzlym3Fz+ UhFP36S4dMK5+ubHN6d/HiVNbIJqxFz0LgI= -----END CERTIFICATE-----Generated at Mon Oct 20 15:57:59 2025 by rpki-client