$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c13a0817-11f7-3d3f-bdaa-1537d28085cd.roa File: c13a0817-11f7-3d3f-bdaa-1537d28085cd.roa (raw, json) Hash identifier: /Nvu3o/91R7OGPBwRKVDfcb5ZrUGnTZyhfxQgRCLJwI= Subject key identifier: 27:68:AE:4B:46:3C:48:37:7C:EE:15:07:DC:17:89:B4:7E:7A:42:35 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B48E1BA102B4D473E73275780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c13a0817-11f7-3d3f-bdaa-1537d28085cd.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397212 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:ba:10:2b:4d:47:3e:73:27:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=b198023c-9bdc-4afe-b705-6ff8abaa0956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:bb:37:ec:5e:d2:b0:9b:2f:a1:d9:4d:92:ef: c8:58:de:e3:00:44:ba:89:db:85:44:58:a2:dc:d9: 59:57:4b:d9:f8:9c:d6:24:99:5f:a1:fd:8d:91:78: 5a:a0:10:1f:58:34:16:75:a4:9c:96:01:a8:22:6a: 2a:48:98:71:88:96:1b:ed:60:10:bd:3c:af:70:54: ed:30:c5:3b:fb:4e:e0:99:40:8e:74:a3:19:d2:a7: 6e:24:9e:1d:11:f0:fb:6a:22:e7:12:05:af:c8:10: cc:54:53:10:2d:c2:0e:da:b7:d2:85:f9:8d:a0:4b: b7:8f:ab:06:4a:44:31:4c:32:d5:4d:84:15:7b:94: 95:32:54:d4:6a:c9:e5:45:18:73:a7:54:eb:76:26: 1e:14:8e:92:1c:27:d3:60:a0:68:bb:db:ec:b2:9f: 6d:48:93:22:a2:73:87:1b:ad:2b:38:8c:9c:44:c2: b8:99:b9:bb:62:71:a0:c7:8e:6a:4c:d6:9a:26:b8: ef:8c:8d:d4:67:29:47:00:62:0d:08:f0:36:c9:4a: 50:28:ee:01:b7:62:56:24:d1:a0:8c:c0:7b:52:b6: 3b:71:ca:be:b3:3e:9f:ba:24:ca:f4:1f:f7:e4:a3: e9:71:d2:78:e0:61:ff:1c:cd:f8:5d:c8:30:76:fb: 8d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:68:AE:4B:46:3C:48:37:7C:EE:15:07:DC:17:89:B4:7E:7A:42:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c13a0817-11f7-3d3f-bdaa-1537d28085cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:53:7e:9a:b8:ca:1e:98:6b:c4:e2:c9:8e:cc:45:69:bb:d8: 0a:72:53:94:7a:06:f2:32:92:93:7d:05:c6:e2:b7:fb:5c:b7: e2:09:b2:15:83:78:c9:69:72:c2:b1:3a:49:12:62:3f:de:8a: f7:14:29:66:7c:b0:f2:7d:7f:13:6f:f2:bb:8f:d5:d0:54:86: 0c:10:04:41:70:6e:8e:12:a6:57:fc:56:7d:ca:75:5c:a2:2f: ae:55:a2:db:f7:90:c0:4c:52:db:86:ff:21:38:90:98:d3:c9: 8b:28:20:fb:1c:01:25:a1:21:02:a8:8b:60:67:8f:3c:cc:2a: 17:ed:10:00:42:5b:83:00:95:96:a4:19:c6:c6:85:46:fc:20: 41:9b:d5:ab:74:8b:af:52:69:45:2d:9e:3b:ed:42:68:0d:0e: 8d:6e:89:e1:ee:b0:89:1b:52:02:bf:e1:87:75:ef:49:d9:32: 54:dc:52:16:56:d3:39:b4:7a:37:c6:42:74:2e:af:a1:2a:d2: 13:77:90:eb:87:38:47:a6:19:e2:e6:9e:b9:64:39:b0:21:fe: d1:3d:5d:a7:95:72:ea:9c:73:74:3e:ee:5d:af:34:a3:e5:16: 27:6a:ec:eb:12:b8:7a:23:99:6b:84:b2:88:2d:f9:05:6b:82: 80:64:d0:c0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4boQK01HPnMnV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk YjE5ODAyM2MtOWJkYy00YWZlLWI3MDUtNmZmOGFiYWEwOTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbs37F7SsJsvodlNku/IWN7jAES6iduFRFii 3NlZV0vZ+JzWJJlfof2NkXhaoBAfWDQWdaSclgGoImoqSJhxiJYb7WAQvTyvcFTt MMU7+07gmUCOdKMZ0qduJJ4dEfD7aiLnEgWvyBDMVFMQLcIO2rfShfmNoEu3j6sG SkQxTDLVTYQVe5SVMlTUasnlRRhzp1TrdiYeFI6SHCfTYKBou9vssp9tSJMionOH G60rOIycRMK4mbm7YnGgx45qTNaaJrjvjI3UZylHAGINCPA2yUpQKO4Bt2JWJNGg jMB7UrY7ccq+sz6fuiTK9B/35KPpcdJ44GH/HM34XcgwdvuNuQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCdorktGPEg3fO4VB9wXibR+ekI1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzEzYTA4MTctMTFmNy0z ZDNmLWJkYWEtMTUzN2QyODA4NWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIpTfpq4yh6Ya8TiyY7MRWm72ApyU5R6BvIykpN9Bcbit/tct+IJ shWDeMlpcsKxOkkSYj/eivcUKWZ8sPJ9fxNv8ruP1dBUhgwQBEFwbo4Splf8Vn3K dVyiL65Votv3kMBMUtuG/yE4kJjTyYsoIPscASWhIQKoi2BnjzzMKhftEABCW4MA lZakGcbGhUb8IEGb1at0i69SaUUtnjvtQmgNDo1uieHusIkbUgK/4Yd170nZMlTc UhZW0zm0ejfGQnQur6Eq0hN3kOuHOEemGeLmnrlkObAh/tE9XaeVcuqcc3Q+7l2v NKPlFidq7OsSuHojmWuEsogt+QVrgoBk0MA= -----END CERTIFICATE-----Generated at Mon Oct 20 15:49:33 2025 by rpki-client