$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c5e8bb6d-ccb2-33cb-9600-d7d5ca5588d7.roa File: c5e8bb6d-ccb2-33cb-9600-d7d5ca5588d7.roa (raw, json) Hash identifier: Llrjk9CeZTljDFwbY3K0NuHRvzzr6aLcydMWYzBO25I= Subject key identifier: E4:CD:DE:E9:92:67:08:B6:41:05:90:14:37:3C:FF:B0:4F:BE:6C:AD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B48E2133C13119E8F8563B680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c5e8bb6d-ccb2-33cb-9600-d7d5ca5588d7.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 396589 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:13:3c:13:11:9e:8f:85:63:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=7d0db50e-bdde-4d8d-8d30-de49bc0de9f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:03:d7:58:7f:f5:e1:42:ca:00:2c:24:5f:85: 99:88:cd:c2:a4:ef:52:64:ef:b7:69:7e:ee:5b:4a: ff:92:4e:7b:ed:b2:58:4f:17:34:38:b3:10:a7:7d: 90:e1:3a:f0:cd:82:f2:3b:ff:68:66:47:8a:9b:8a: a0:be:3d:a7:f8:c6:39:2a:ad:7b:e5:55:f8:2d:fe: 57:80:3b:a3:ea:bf:8d:b6:5b:85:82:a0:87:cf:ef: 42:0d:ff:d2:6a:5b:7e:15:fb:1b:42:78:2d:0e:67: bb:7e:5d:93:e5:66:69:0d:b1:8e:c2:1b:69:55:8a: 59:e2:a9:52:92:38:b5:09:d4:4b:6d:bf:c4:25:94: 19:4d:76:97:65:eb:9c:4e:a4:29:bf:1e:17:30:af: 63:94:ef:c2:c8:fa:e3:b7:e1:04:34:7a:72:07:41: 1d:67:be:b2:d6:96:98:5b:5e:d6:ad:2e:fe:44:33: 53:0b:95:41:f3:ba:d7:0d:47:bc:38:e5:f3:34:21: 49:9c:93:c4:54:82:f9:a2:e1:ce:6c:2c:a0:5a:13: 40:09:0d:b0:aa:56:24:d5:0b:1f:f4:5c:99:45:3a: 50:73:01:1a:6f:ed:47:16:da:84:f9:37:f4:74:32: 34:f2:e5:78:a8:cc:02:5b:34:84:78:d3:6e:b5:f2: 79:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:CD:DE:E9:92:67:08:B6:41:05:90:14:37:3C:FF:B0:4F:BE:6C:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c5e8bb6d-ccb2-33cb-9600-d7d5ca5588d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:f5:fe:f6:1e:2b:8d:a3:61:f7:ed:eb:d4:68:27:13:08:c1: 31:d0:a5:be:ae:71:2f:70:ef:82:c5:4c:80:c7:6a:0b:5d:f9: 2e:f1:fa:b7:bd:b7:4d:bc:c5:e6:44:07:51:c5:7d:f9:29:55: 40:2c:3c:e2:d5:67:c9:f5:6f:b8:50:35:85:37:66:a0:9c:19: b6:e9:df:6f:67:b3:cc:a2:ca:b4:0c:23:4d:56:39:1c:41:ab: 57:84:f9:1e:9b:d2:aa:6f:78:24:7d:cb:4b:d6:c9:03:f8:a8: 41:2d:14:22:7a:8d:bd:3d:e1:fb:3c:c4:7c:16:fd:55:d9:5f: 11:13:51:00:b0:05:25:ac:18:94:ba:d0:6e:7b:16:99:99:7a: 57:e0:22:8f:ac:76:cb:e9:51:4b:3d:4f:b8:14:17:1c:40:d9: c8:14:55:a7:5d:e3:ab:9b:a5:24:c9:ec:53:5d:c3:99:41:16: 8b:c4:52:87:fb:cc:a6:cf:8c:13:a7:2e:5d:15:08:5e:4b:71: 4f:c1:c3:b4:7a:f5:a3:73:6d:26:0c:52:bc:ed:50:a4:fb:63: 24:d3:c9:54:7c:d2:8e:42:52:98:39:01:bd:93:47:99:58:a5: be:8e:7c:8a:a9:16:fb:34:76:1d:8f:e1:fa:cf:9f:b5:b8:69: f0:e3:c1:51 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4hM8ExGej4VjtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk N2QwZGI1MGUtYmRkZS00ZDhkLThkMzAtZGU0OWJjMGRlOWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQPXWH/14ULKACwkX4WZiM3CpO9SZO+3aX7u W0r/kk577bJYTxc0OLMQp32Q4TrwzYLyO/9oZkeKm4qgvj2n+MY5Kq175VX4Lf5X gDuj6r+NtluFgqCHz+9CDf/Salt+FfsbQngtDme7fl2T5WZpDbGOwhtpVYpZ4qlS kji1CdRLbb/EJZQZTXaXZeucTqQpvx4XMK9jlO/CyPrjt+EENHpyB0EdZ76y1paY W17WrS7+RDNTC5VB87rXDUe8OOXzNCFJnJPEVIL5ouHObCygWhNACQ2wqlYk1Qsf 9FyZRTpQcwEab+1HFtqE+Tf0dDI08uV4qMwCWzSEeNNutfJ5JQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOTN3umSZwi2QQWQFDc8/7BPvmytMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzVlOGJiNmQtY2NiMi0z M2NiLTk2MDAtZDdkNWNhNTU4OGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIr1/vYeK42jYfft69RoJxMIwTHQpb6ucS9w74LFTIDHagtd+S7x +re9t028xeZEB1HFffkpVUAsPOLVZ8n1b7hQNYU3ZqCcGbbp329ns8yiyrQMI01W ORxBq1eE+R6b0qpveCR9y0vWyQP4qEEtFCJ6jb094fs8xHwW/VXZXxETUQCwBSWs GJS60G57FpmZelfgIo+sdsvpUUs9T7gUFxxA2cgUVadd46ubpSTJ7FNdw5lBFovE Uof7zKbPjBOnLl0VCF5LcU/Bw7R69aNzbSYMUrztUKT7YyTTyVR80o5CUpg5Ab2T R5lYpb6OfIqpFvs0dh2P4frPn7W4afDjwVE= -----END CERTIFICATE-----Generated at Mon Oct 20 10:23:11 2025 by rpki-client