$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c4047d85-600a-3289-80c6-1d4529037de0.roa File: c4047d85-600a-3289-80c6-1d4529037de0.roa (raw, json) Hash identifier: Wr/BBXKCRoMWhIWUg/oqLE5malvjyVbUPkoluzZMG/o= Subject key identifier: C2:9A:02:15:A9:BD:54:A4:FA:12:74:4E:B2:1C:B5:8F:B7:28:42:7E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B76F25F56E98D60CF87E06440 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c4047d85-600a-3289-80c6-1d4529037de0.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 7342 IP address blocks: 2620:74:6c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:5f:56:e9:8d:60:cf:87:e0:64:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=48bcf9f5-ef97-41ec-9e19-7aff3025740f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:43:70:74:88:b4:29:07:82:cb:4b:83:be:3b: 70:78:9b:a3:08:79:37:de:37:7f:8f:cd:1a:60:04: 6c:73:00:f7:92:fe:10:45:30:0d:b5:9c:2d:ef:89: 8f:82:dd:5e:2b:2a:7c:78:58:ce:9c:2a:8b:82:fd: 83:ee:5e:18:d4:a9:e7:cc:af:3a:9e:19:59:f9:42: 9e:b5:a3:ef:f0:0f:0f:bb:8c:66:30:5b:f3:2a:51: 0f:a0:73:8a:da:c2:a8:55:b5:17:34:2f:87:e0:f8: cc:29:92:3e:94:f4:09:b0:3b:45:aa:2f:58:01:64: 7b:c3:6c:9d:43:1a:7a:ed:b0:b2:ec:1e:93:62:e8: 95:39:42:a6:2f:f5:ae:bd:8b:70:fa:38:74:c9:2d: ec:f7:42:11:bb:f5:7b:54:73:ec:7d:a7:ee:5a:eb: 19:5f:2d:d1:9f:b0:9d:61:6c:2e:dd:e8:a6:bc:ce: 41:7b:df:bd:99:7c:a7:df:ae:fa:69:58:48:d2:4c: 14:2e:04:f2:51:cb:03:b1:b9:31:5b:15:66:4e:ad: 40:a4:70:4a:fa:8f:8c:1c:69:10:19:e3:89:6f:3b: 29:81:ee:ef:59:5d:b1:eb:54:6e:09:11:84:dc:70: 6d:68:06:29:50:79:e1:96:71:f4:9b:6c:c5:bf:f9: 05:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:9A:02:15:A9:BD:54:A4:FA:12:74:4E:B2:1C:B5:8F:B7:28:42:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c4047d85-600a-3289-80c6-1d4529037de0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:6c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:a1:20:0f:90:05:bf:a3:ed:6d:dd:2e:2d:c8:e6:08:fc:f0: cd:d0:04:16:1e:01:e1:a7:84:11:fd:fd:57:8f:fe:b0:24:c9: 07:28:f4:9f:17:1f:2e:57:30:cb:7f:17:b7:62:a7:43:db:48: eb:2d:0b:61:4f:e3:80:e5:a9:62:6e:73:75:42:dc:2f:b4:46: df:a0:15:0a:6a:90:41:6a:4c:d2:cf:9c:c5:a9:e6:33:b0:44: a5:5b:c1:fe:1d:f0:42:36:0d:ce:5e:4a:3f:01:05:19:cf:ab: 54:3c:12:97:72:37:5a:5f:5b:d1:64:45:12:36:dd:85:26:fd: 23:88:f4:bc:50:27:8d:50:22:4e:52:15:5e:de:0c:c2:55:4d: 35:6c:10:d0:d0:26:7d:35:31:cb:80:4c:e7:1f:b5:11:cb:86: 66:bb:7a:bc:fa:a5:c3:4b:92:c1:72:fb:d0:f7:47:19:48:80: 70:05:28:0c:eb:c3:0d:99:fb:32:27:0e:1d:cd:e3:39:0b:ad: 5a:fb:9b:cf:ca:59:bc:40:4d:17:21:bd:00:21:78:17:c0:80: d0:c9:fd:95:06:00:ea:c5:63:cc:e8:f8:a2:e4:a2:7a:40:04: 2d:12:5e:fc:ec:5d:a5:a5:b8:a7:8f:68:84:97:e8:47:02:86: 94:50:54:f9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt28l9W6Y1gz4fgZEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NDhiY2Y5ZjUtZWY5Ny00MWVjLTllMTktN2FmZjMwMjU3NDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkNwdIi0KQeCy0uDvjtweJujCHk33jd/j80a YARscwD3kv4QRTANtZwt74mPgt1eKyp8eFjOnCqLgv2D7l4Y1KnnzK86nhlZ+UKe taPv8A8Pu4xmMFvzKlEPoHOK2sKoVbUXNC+H4PjMKZI+lPQJsDtFqi9YAWR7w2yd Qxp67bCy7B6TYuiVOUKmL/WuvYtw+jh0yS3s90IRu/V7VHPsfafuWusZXy3Rn7Cd YWwu3eimvM5Be9+9mXyn3676aVhI0kwULgTyUcsDsbkxWxVmTq1ApHBK+o+MHGkQ GeOJbzspge7vWV2x61RuCRGE3HBtaAYpUHnhlnH0m2zFv/kFEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMKaAhWpvVSk+hJ0TrIctY+3KEJ+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzQwNDdkODUtNjAwYS0z Mjg5LTgwYzYtMWQ0NTI5MDM3ZGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABChIA+QBb+j7W3dLi3I5gj88M3QBBYeAeGnhBH9/VeP/rAkyQco 9J8XHy5XMMt/F7dip0PbSOstC2FP44DlqWJuc3VC3C+0Rt+gFQpqkEFqTNLPnMWp 5jOwRKVbwf4d8EI2Dc5eSj8BBRnPq1Q8EpdyN1pfW9FkRRI23YUm/SOI9LxQJ41Q Ik5SFV7eDMJVTTVsENDQJn01McuATOcftRHLhma7erz6pcNLksFy+9D3RxlIgHAF KAzrww2Z+zInDh3N4zkLrVr7m8/KWbxATRchvQAheBfAgNDJ/ZUGAOrFY8zo+KLk onpABC0SXvzsXaWluKePaISX6EcChpRQVPk= -----END CERTIFICATE-----Generated at Mon Oct 20 15:49:07 2025 by rpki-client