$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c1cdff99-9c19-353c-afbc-d652d487ef5f.roa File: c1cdff99-9c19-353c-afbc-d652d487ef5f.roa (raw, json) Hash identifier: YMZOiD80sN5f0Vomhs/EgC4AVbgc1qjqnGe91cRkoec= Subject key identifier: 0A:66:97:45:D8:7E:80:EC:1B:E3:72:07:32:01:7B:55:4A:75:0F:DD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B48E1A95F5DC3FE14CF17A180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c1cdff99-9c19-353c-afbc-d652d487ef5f.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 396827 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:a9:5f:5d:c3:fe:14:cf:17:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=0d4ada88-7a4e-4969-afbc-8614627d9964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d2:b0:3d:fc:13:58:96:75:0d:13:92:75:97: da:1d:67:f0:14:8d:46:44:89:5e:53:c0:63:fa:df: 92:00:8e:52:34:ca:ea:4a:fd:ed:1b:cd:c5:49:1c: ac:a6:3a:b3:af:b0:24:37:d7:a5:b4:41:a6:25:c1: 23:04:c5:61:d8:ae:d7:f7:35:a5:cf:1b:70:f2:52: 86:b1:46:32:6b:ce:8d:87:38:b6:0f:17:53:17:d4: 0a:bc:2c:93:7c:b3:07:1a:20:e0:73:6a:a3:2b:25: a8:d1:17:fa:6e:d0:fe:5a:2f:c8:ac:50:13:7c:0c: 98:b4:c4:ad:7d:81:65:b6:c5:f4:2d:6a:4a:b5:bc: 8c:cc:da:51:90:c6:ed:76:00:58:80:51:fe:61:d7: d2:1d:8b:4e:04:9e:42:31:8f:19:8f:9e:a6:5f:bb: bc:91:bc:31:a2:da:e1:7b:98:da:22:24:ba:54:ae: 96:15:81:18:ef:10:9c:e0:7d:48:7b:90:bc:2c:c1: 90:df:09:ca:2c:e8:da:62:b3:57:25:de:98:85:fc: 42:6c:cb:ac:b0:80:60:9c:68:65:bf:69:95:45:49: 86:f1:9a:fb:71:5f:b3:04:04:03:20:bb:d9:0f:b6: bd:e5:07:e3:ab:08:9f:05:14:a3:bc:e9:63:b1:f1: 2f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:66:97:45:D8:7E:80:EC:1B:E3:72:07:32:01:7B:55:4A:75:0F:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c1cdff99-9c19-353c-afbc-d652d487ef5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:20:db:08:d6:0a:14:ab:93:4f:ac:bd:a8:9c:29:49:5f:f7: 4e:f7:7e:28:95:b5:27:fb:59:55:76:c2:00:42:69:36:7b:f7: 76:13:71:2a:c3:df:9e:61:24:03:9a:78:13:6c:00:08:24:d2: fe:1b:6c:ab:95:7e:07:54:b1:92:13:e1:2f:5d:7b:7b:2e:9c: c5:13:59:15:7e:0c:96:5d:f9:66:f6:8b:22:dd:03:3a:cf:3c: 6a:4f:b2:42:a6:4d:5a:ec:52:34:80:64:4e:d4:68:41:21:96: 66:97:3c:81:5a:af:ad:e8:c4:dd:5f:f7:d4:94:20:9e:42:c8: ab:04:23:b9:3f:b9:3b:0e:4a:dd:a0:b6:25:49:6a:af:81:5a: c0:db:ed:10:49:73:eb:c7:ba:c7:17:d1:2a:7c:7a:18:a9:41: 66:46:69:df:cc:e1:81:12:80:6d:77:20:2f:84:02:de:2e:5d: cc:82:22:1e:02:20:b8:2a:70:da:df:e9:6f:64:4b:3d:58:2a: f5:c3:97:8e:91:de:22:1c:bd:08:35:70:e5:a9:83:46:63:a9: 04:12:b5:17:d0:77:df:8f:d6:98:71:10:75:8a:14:28:45:49: cc:97:0f:6a:ed:36:3a:ce:97:8f:1c:7d:b5:77:d7:e8:a1:f0: 48:4a:15:f4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4alfXcP+FM8XoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MGQ0YWRhODgtN2E0ZS00OTY5LWFmYmMtODYxNDYyN2Q5OTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9KwPfwTWJZ1DROSdZfaHWfwFI1GRIleU8Bj +t+SAI5SNMrqSv3tG83FSRyspjqzr7AkN9eltEGmJcEjBMVh2K7X9zWlzxtw8lKG sUYya86Nhzi2DxdTF9QKvCyTfLMHGiDgc2qjKyWo0Rf6btD+Wi/IrFATfAyYtMSt fYFltsX0LWpKtbyMzNpRkMbtdgBYgFH+YdfSHYtOBJ5CMY8Zj56mX7u8kbwxotrh e5jaIiS6VK6WFYEY7xCc4H1Ie5C8LMGQ3wnKLOjaYrNXJd6YhfxCbMussIBgnGhl v2mVRUmG8Zr7cV+zBAQDILvZD7a95QfjqwifBRSjvOljsfEvowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFApml0XYfoDsG+NyBzIBe1VKdQ/dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzFjZGZmOTktOWMxOS0z NTNjLWFmYmMtZDY1MmQ0ODdlZjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABgg2wjWChSrk0+svaicKUlf9073fiiVtSf7WVV2wgBCaTZ793YT cSrD355hJAOaeBNsAAgk0v4bbKuVfgdUsZIT4S9de3sunMUTWRV+DJZd+Wb2iyLd AzrPPGpPskKmTVrsUjSAZE7UaEEhlmaXPIFar63oxN1f99SUIJ5CyKsEI7k/uTsO St2gtiVJaq+BWsDb7RBJc+vHuscX0Sp8ehipQWZGad/M4YESgG13IC+EAt4uXcyC Ih4CILgqcNrf6W9kSz1YKvXDl46R3iIcvQg1cOWpg0ZjqQQStRfQd9+P1phxEHWK FChFScyXD2rtNjrOl48cfbV31+ih8EhKFfQ= -----END CERTIFICATE-----Generated at Mon Oct 20 08:17:21 2025 by rpki-client