$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc175305-bc1d-38b1-94a0-b06f6f4becb9.roa File: cc175305-bc1d-38b1-94a0-b06f6f4becb9.roa (raw, json) Hash identifier: aLfAF0HUiGgMPvuWOoyzQCJL2k45XzxGyywwwNmmOyM= Subject key identifier: B9:7D:46:60:E0:6E:9E:55:DA:65:79:18:69:4E:86:45:DE:FE:38:FB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B92DCD84E0C66980563A037C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc175305-bc1d-38b1-94a0-b06f6f4becb9.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 0 IP address blocks: 2620:74:22::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:d8:4e:0c:66:98:05:63:a0:37:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=6a9796d5-c891-4b89-9c41-3719e6c13478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8c:f5:02:6b:fd:57:10:7a:6d:d8:79:61:14: 3c:52:f8:35:60:11:04:39:56:87:ab:5b:2a:c8:b6: 3b:12:38:85:97:50:df:58:58:7c:f8:03:90:bc:a9: 1d:a1:9e:53:5e:84:76:b4:91:fa:e9:f1:e9:03:0b: e6:f0:d0:01:85:32:cb:52:41:0f:f1:8b:b2:aa:6a: 2d:d9:45:dc:60:77:ba:51:be:8e:35:69:5a:ff:92: 21:9c:69:e0:e7:f2:da:4a:a1:73:46:17:a6:ef:f2: 55:ae:0b:ad:e4:3d:72:70:b6:de:96:47:24:ed:61: a1:1f:d2:17:ed:64:2a:c3:b2:f9:3e:13:f1:3c:cd: 9b:50:cc:20:93:1c:51:97:94:01:05:a7:91:e6:d0: c3:e6:fc:d4:02:79:ba:f9:d7:61:0f:61:f1:cc:73: ae:56:12:98:a8:bf:e0:df:0c:76:9f:ff:6f:0a:0a: 50:ec:27:a7:78:c8:9d:81:b5:cf:ec:8d:c7:9b:81: 1f:ce:94:12:5c:b4:60:a6:2e:c7:32:9b:e8:35:dd: 9e:6a:ff:6c:43:a1:26:72:28:66:7b:50:9d:34:44: 0f:ec:6c:cd:ec:5b:03:87:25:25:a4:11:32:65:b0: f3:80:b3:0b:cd:80:20:52:ca:85:9b:37:14:20:16: 44:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:7D:46:60:E0:6E:9E:55:DA:65:79:18:69:4E:86:45:DE:FE:38:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc175305-bc1d-38b1-94a0-b06f6f4becb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:22::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:67:1c:48:59:f5:e0:a4:36:cc:6d:24:07:81:32:79:ce:3e: ad:61:14:e1:51:51:59:ef:d3:a5:d3:78:7b:02:ed:70:e7:18: 08:e9:9c:d3:85:b1:60:5d:ec:0a:dd:d9:83:2d:9c:cf:0d:d4: 68:0b:13:2b:1a:d7:49:4c:0c:5d:57:b9:e0:6c:b5:84:b1:46: 0b:d2:ab:1a:6c:bf:28:34:b5:f1:ce:c7:22:15:cc:db:d7:64: ab:c5:d2:9a:77:6e:58:d2:68:3c:b8:07:dd:97:77:ef:8f:48: b8:60:6f:1f:aa:ab:85:97:e4:fa:2f:4d:f8:c7:ae:21:a1:ca: 53:65:22:bd:ac:17:c7:09:1c:81:2c:56:45:a1:53:40:1c:f1: c8:e0:b2:45:12:6c:e7:3f:2a:31:c5:0e:53:40:4d:80:d5:d3: c4:35:60:e3:08:57:64:49:ef:d1:b9:2e:56:e7:44:58:63:3d: 0b:8b:1b:8a:00:b7:7a:67:7d:12:db:e7:2e:e2:13:6b:73:bd: e6:e0:2e:17:1a:c2:62:ea:fa:cb:20:20:08:39:25:10:23:45: 27:da:0c:8e:a9:66:5f:33:a5:24:d3:33:ec:7a:f2:51:45:6d: 47:6d:eb:c4:d2:aa:51:67:24:e7:fc:1d:c8:c0:79:73:6f:b9: 3b:4f:1c:d6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuS3NhODGaYBWOgN8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk NmE5Nzk2ZDUtYzg5MS00Yjg5LTljNDEtMzcxOWU2YzEzNDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Yz1Amv9VxB6bdh5YRQ8Uvg1YBEEOVaHq1sq yLY7EjiFl1DfWFh8+AOQvKkdoZ5TXoR2tJH66fHpAwvm8NABhTLLUkEP8Yuyqmot 2UXcYHe6Ub6ONWla/5IhnGng5/LaSqFzRhem7/JVrgut5D1ycLbelkck7WGhH9IX 7WQqw7L5PhPxPM2bUMwgkxxRl5QBBaeR5tDD5vzUAnm6+ddhD2HxzHOuVhKYqL/g 3wx2n/9vCgpQ7CeneMidgbXP7I3Hm4EfzpQSXLRgpi7HMpvoNd2eav9sQ6Emcihm e1CdNEQP7GzN7FsDhyUlpBEyZbDzgLMLzYAgUsqFmzcUIBZERQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLl9RmDgbp5V2mV5GGlOhkXe/jj7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2MxNzUzMDUtYmMxZC0z OGIxLTk0YTAtYjA2ZjZmNGJlY2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJiAAdAAi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGpnHEhZ9eCkNsxtJAeBMnnOPq1hFOFRUVnv06XTeHsC7XDnGAjp nNOFsWBd7Ard2YMtnM8N1GgLEysa10lMDF1XueBstYSxRgvSqxpsvyg0tfHOxyIV zNvXZKvF0pp3bljSaDy4B92Xd++PSLhgbx+qq4WX5PovTfjHriGhylNlIr2sF8cJ HIEsVkWhU0Ac8cjgskUSbOc/KjHFDlNATYDV08Q1YOMIV2RJ79G5LlbnRFhjPQuL G4oAt3pnfRLb5y7iE2tzvebgLhcawmLq+ssgIAg5JRAjRSfaDI6pZl8zpSTTM+x6 8lFFbUdt68TSqlFnJOf8HcjAeXNvuTtPHNY= -----END CERTIFICATE-----Generated at Mon Oct 20 02:24:33 2025 by rpki-client