$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd086f0e-671f-39ba-b6cf-e3369acc32c1.roa File: cd086f0e-671f-39ba-b6cf-e3369acc32c1.roa (raw, json) Hash identifier: jHVHhRhX4+Bx44ZX1Q7aPyu8XnD0OTida2kazJhr7GQ= Subject key identifier: 8F:28:FA:AE:F2:E9:1E:0E:C1:65:50:70:EF:0D:86:E8:BC:9B:BC:C3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6201F49D31D211845823FB80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd086f0e-671f-39ba-b6cf-e3369acc32c1.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 19836 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:f4:9d:31:d2:11:84:58:23:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=26c2de31-a256-4018-84bd-bcef48e745d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f1:17:12:7d:00:d5:87:01:96:87:fc:2b:a5: 1a:bf:1e:54:fc:19:96:03:0c:c3:3c:ee:f8:4c:f4: 43:77:2a:8a:57:6f:26:c3:8d:e3:8d:75:e3:31:11: 19:1f:a8:52:69:68:c1:1b:b8:46:81:90:6c:e7:03: 18:3e:1e:8c:c8:8f:e6:43:07:24:eb:a1:09:dd:fd: be:46:2c:26:87:12:05:14:8a:a9:ea:19:2d:3f:d5: cf:9f:c1:41:5e:11:f2:ff:db:aa:2a:43:ec:ca:c4: 8a:78:f7:9c:46:72:7c:36:2d:af:31:26:b2:7f:c5: ff:7f:41:50:6e:3a:95:a5:6c:e2:d8:b5:7f:63:07: 50:14:d5:dd:fc:64:ee:f1:71:43:e9:a8:ee:ab:c1: 01:d4:5f:62:a0:42:ee:a3:10:10:02:de:2f:05:5e: 19:29:a9:48:c8:e7:7e:8f:45:60:9d:4f:f1:8f:08: c4:14:42:52:87:9a:62:2f:41:b9:0a:80:63:1a:46: 6f:19:cd:1f:36:c8:38:54:9b:6d:d8:ef:77:18:63: 97:34:f2:7f:0f:7c:95:df:96:ad:fb:13:ce:4d:b5: 5b:5a:b3:f3:82:37:93:74:9a:ce:bf:63:b8:a8:44: a5:a9:69:09:8e:92:c7:a8:dd:90:c0:f2:4b:43:42: ec:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:28:FA:AE:F2:E9:1E:0E:C1:65:50:70:EF:0D:86:E8:BC:9B:BC:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd086f0e-671f-39ba-b6cf-e3369acc32c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:45:91:1a:06:88:70:2f:3c:7c:fe:2b:b4:04:a7:52:d4:42: 21:a9:61:64:8a:33:84:0b:1a:5e:46:6f:44:0b:b9:9e:18:a7: e9:cf:05:c1:20:d3:58:fc:84:43:d1:fe:41:cd:c6:f9:d5:2d: db:f4:eb:99:09:94:6f:43:9e:ff:38:4b:72:5f:7d:d6:7c:41: 80:22:e8:dc:fe:8e:e1:3a:9c:ef:51:9b:89:20:95:fc:6d:2e: 82:38:c5:54:df:30:43:90:25:e3:c4:99:f9:0c:52:e6:56:af: 4c:47:1a:c0:a7:f6:cd:14:0d:e0:3f:a9:3c:e7:08:dd:a3:31: fc:dc:5b:df:47:4a:a9:9b:a8:2c:5c:3b:a4:8a:77:d3:9f:a7: 79:9e:74:82:40:9f:b1:1b:09:cf:99:79:d3:0e:8a:81:f0:09: 5e:23:79:f4:e1:a4:55:52:6c:6c:6e:fc:b1:d0:d8:ac:d5:ac: b0:6f:02:1c:0f:f7:8d:f9:6c:ff:df:b4:0e:23:63:b3:df:3c: 13:1d:0f:d2:fc:12:1a:93:72:85:a4:3b:92:36:be:e5:7d:f5: 61:4a:e5:0c:b8:67:28:c7:ea:f3:8b:00:0c:3c:ba:3f:c4:23: 64:b4:aa:bf:ea:16:6b:5a:9d:55:77:d5:3e:73:d1:d2:48:51: 92:29:dc:e7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAfSdMdIRhFgj+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk MjZjMmRlMzEtYTI1Ni00MDE4LTg0YmQtYmNlZjQ4ZTc0NWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/EXEn0A1YcBlof8K6Uavx5U/BmWAwzDPO74 TPRDdyqKV28mw43jjXXjMREZH6hSaWjBG7hGgZBs5wMYPh6MyI/mQwck66EJ3f2+ RiwmhxIFFIqp6hktP9XPn8FBXhHy/9uqKkPsysSKePecRnJ8Ni2vMSayf8X/f0FQ bjqVpWzi2LV/YwdQFNXd/GTu8XFD6ajuq8EB1F9ioELuoxAQAt4vBV4ZKalIyOd+ j0VgnU/xjwjEFEJSh5piL0G5CoBjGkZvGc0fNsg4VJtt2O93GGOXNPJ/D3yV35at +xPOTbVbWrPzgjeTdJrOv2O4qESlqWkJjpLHqN2QwPJLQ0LsKwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI8o+q7y6R4OwWVQcO8Nhui8m7zDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2QwODZmMGUtNjcxZi0z OWJhLWI2Y2YtZTMzNjlhY2MzMmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFZFkRoGiHAvPHz+K7QEp1LUQiGpYWSKM4QLGl5Gb0QLuZ4Yp+nP BcEg01j8hEPR/kHNxvnVLdv065kJlG9Dnv84S3JffdZ8QYAi6Nz+juE6nO9Rm4kg lfxtLoI4xVTfMEOQJePEmfkMUuZWr0xHGsCn9s0UDeA/qTznCN2jMfzcW99HSqmb qCxcO6SKd9Ofp3medIJAn7EbCc+ZedMOioHwCV4jefThpFVSbGxu/LHQ2KzVrLBv AhwP9435bP/ftA4jY7PfPBMdD9L8EhqTcoWkO5I2vuV99WFK5Qy4ZyjH6vOLAAw8 uj/EI2S0qr/qFmtanVV31T5z0dJIUZIp3Oc= -----END CERTIFICATE-----Generated at Mon Oct 20 15:57:28 2025 by rpki-client