$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c38e1ea5-bbba-3013-b514-f9b172b0021f.roa File: c38e1ea5-bbba-3013-b514-f9b172b0021f.roa (raw, json) Hash identifier: OOQtBkzKjVilzg8hkjs33AGLSqX+Zti9gtJp+sIUSBk= Subject key identifier: 19:1A:49:1F:51:80:0B:40:2C:CF:CC:87:01:40:07:7B:08:ED:72:AE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B48E1A8A5F1BD5892EF24F0C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c38e1ea5-bbba-3013-b514-f9b172b0021f.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 396584 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:a8:a5:f1:bd:58:92:ef:24:f0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=fb1b062a-613e-422e-b59c-5024717ab592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e6:9b:a3:83:6f:60:c4:dc:9d:47:5a:83:3c: 17:37:de:b2:4a:31:5c:69:23:7c:9b:8d:e8:db:a0: 63:e7:34:f3:1c:e7:4e:12:90:f1:3e:66:76:5a:d7: 6e:0c:9a:85:66:36:eb:82:04:ce:d8:9b:38:63:8f: bc:92:b3:88:3f:f4:e0:04:74:ba:07:70:24:70:24: d5:89:77:3a:e6:31:2f:7f:b7:2e:cf:28:dd:9d:c8: e9:26:c2:0a:f6:eb:55:4c:9e:83:26:2d:21:88:57: e9:e5:8d:8f:2b:71:b0:86:18:9d:e8:44:7e:25:26: b8:65:13:2d:59:4d:54:bf:02:5e:2a:19:72:83:69: 6b:37:46:46:0c:eb:9d:21:f1:b4:80:5e:b5:d8:67: c2:83:28:45:88:c6:d2:f5:c9:e6:ff:46:d0:1f:bd: ca:66:75:a1:a1:da:3d:32:8e:b8:54:47:77:4f:44: 95:20:14:28:e2:a3:82:d9:e4:eb:8e:85:52:69:21: cb:ec:06:fe:fd:de:6f:77:76:83:33:bc:c2:a3:e0: 1e:28:44:d9:b7:6e:27:e2:dc:fd:de:59:1c:29:8f: 32:ca:ef:fb:b5:ca:46:70:45:fa:73:fd:60:92:ad: 8d:b4:fa:00:13:17:19:cb:f8:1e:07:ca:83:98:4d: 23:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:1A:49:1F:51:80:0B:40:2C:CF:CC:87:01:40:07:7B:08:ED:72:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c38e1ea5-bbba-3013-b514-f9b172b0021f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:fe:89:92:d8:b0:89:6a:14:f4:7a:73:cf:96:33:9e:e9:23: 0d:03:98:2d:5b:f6:35:f7:b5:ba:76:f3:e6:3a:92:62:51:d8: 09:a8:cb:35:79:37:2f:31:79:65:f9:75:0d:61:2e:81:e8:af: 57:54:d6:04:91:60:fc:21:7c:ba:61:8b:d0:32:b6:02:17:5c: b8:a2:1b:fb:ac:39:62:8a:9a:78:2a:e9:f7:e3:7c:0e:c4:5d: ea:bb:96:7d:52:65:78:76:64:21:41:14:3b:a4:ea:38:ae:6b: c5:c8:98:a9:30:a8:e2:79:60:89:ca:86:12:26:cd:88:ff:8b: f9:66:74:a4:73:f1:1b:03:ed:6e:89:97:f4:4f:a8:57:3c:f8: 06:89:b9:3b:08:bf:95:af:8a:61:9d:81:e5:dd:a8:0c:9c:5f: cb:3a:df:89:b9:00:c6:ea:bf:62:90:05:8e:38:bf:01:ea:b5: b6:25:85:53:6b:0a:1f:f9:bb:90:ea:11:00:ed:98:7f:99:6e: 57:02:67:4b:13:f3:99:5a:b1:50:bb:45:da:ff:bf:42:96:92: 97:fe:80:72:50:8c:1f:7d:18:6a:10:05:d0:dc:99:f2:a0:cb: 68:cb:00:8f:17:7b:2d:a3:e1:ad:0b:c4:66:23:72:2e:c9:9c: b4:98:23:6b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4ail8b1Yku8k8MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZmIxYjA2MmEtNjEzZS00MjJlLWI1OWMtNTAyNDcxN2FiNTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+abo4NvYMTcnUdagzwXN96ySjFcaSN8m43o 26Bj5zTzHOdOEpDxPmZ2WtduDJqFZjbrggTO2Js4Y4+8krOIP/TgBHS6B3AkcCTV iXc65jEvf7cuzyjdncjpJsIK9utVTJ6DJi0hiFfp5Y2PK3Gwhhid6ER+JSa4ZRMt WU1UvwJeKhlyg2lrN0ZGDOudIfG0gF612GfCgyhFiMbS9cnm/0bQH73KZnWhodo9 Mo64VEd3T0SVIBQo4qOC2eTrjoVSaSHL7Ab+/d5vd3aDM7zCo+AeKETZt24n4tz9 3lkcKY8yyu/7tcpGcEX6c/1gkq2NtPoAExcZy/geB8qDmE0jOwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBkaSR9RgAtALM/MhwFAB3sI7XKuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzM4ZTFlYTUtYmJiYS0z MDEzLWI1MTQtZjliMTcyYjAwMjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHb+iZLYsIlqFPR6c8+WM57pIw0DmC1b9jX3tbp28+Y6kmJR2Amo yzV5Ny8xeWX5dQ1hLoHor1dU1gSRYPwhfLphi9AytgIXXLiiG/usOWKKmngq6ffj fA7EXeq7ln1SZXh2ZCFBFDuk6jiua8XImKkwqOJ5YInKhhImzYj/i/lmdKRz8RsD 7W6Jl/RPqFc8+AaJuTsIv5WvimGdgeXdqAycX8s634m5AMbqv2KQBY44vwHqtbYl hVNrCh/5u5DqEQDtmH+ZblcCZ0sT85lasVC7Rdr/v0KWkpf+gHJQjB99GGoQBdDc mfKgy2jLAI8Xey2j4a0LxGYjci7JnLSYI2s= -----END CERTIFICATE-----Generated at Mon Oct 20 15:54:55 2025 by rpki-client