$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1d0a675-e2d2-3664-b1b5-8bd50b5d45bc.roa File: d1d0a675-e2d2-3664-b1b5-8bd50b5d45bc.roa (raw, json) Hash identifier: /4AS+g6JwL65HLqahDcm6OGQq1MkUnRaF9BKdojxm6Y= Subject key identifier: 7A:37:E9:17:79:17:6C:37:8E:8F:36:AB:1B:BE:7B:9B:BD:23:EC:72 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B620229D42DA760D10BC1D600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1d0a675-e2d2-3664-b1b5-8bd50b5d45bc.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 396599 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:29:d4:2d:a7:60:d1:0b:c1:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=83cafaea-e41a-43dc-8174-e3a75f79c67b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:dd:bf:e9:c0:7a:bc:b1:7f:d5:5e:1b:36:9d: cd:18:23:1d:29:ca:cd:58:e3:d0:a1:0d:0b:a9:30: cd:4b:1d:7d:6a:63:6f:c4:0c:ae:a9:73:26:7b:e0: d4:25:35:bb:e7:90:75:cd:45:67:2e:90:cd:3c:67: 96:32:3c:e9:f9:e3:cf:45:7e:7f:2a:9b:37:f5:b2: 2b:b0:cb:c4:75:71:cf:86:a1:fc:e0:c9:f5:da:b2: f9:01:cb:4a:94:f5:bf:18:d5:af:e9:2f:e7:4e:92: fc:9c:48:af:5b:f1:b3:ab:ea:f4:89:16:9a:a3:73: be:58:7d:7f:dd:c7:bc:da:76:01:18:06:3f:11:15: 60:a9:50:f6:b0:d1:5e:c5:57:db:cc:21:56:ce:9b: 99:91:38:6d:44:7f:57:8f:46:97:c4:d1:0a:55:cd: 1e:d8:bf:b5:72:1f:94:d5:15:f0:52:b9:f1:42:07: ff:e3:6b:19:79:bd:fb:bd:47:fe:b3:64:91:58:5e: 67:52:90:90:5a:d1:5b:90:74:78:05:ae:58:73:53: bb:19:d9:07:e2:71:81:c3:12:89:55:33:e6:b6:09: 9a:f2:78:6a:90:19:81:ad:63:29:a9:59:a1:85:36: 95:c0:de:d7:ca:e9:2b:2e:6e:a5:cd:77:e0:22:27: 0a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:37:E9:17:79:17:6C:37:8E:8F:36:AB:1B:BE:7B:9B:BD:23:EC:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1d0a675-e2d2-3664-b1b5-8bd50b5d45bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:09:c8:4a:b0:0d:1a:a6:be:52:61:d8:c3:fa:2e:e1:82:b4: 82:05:fd:72:9b:37:3c:cd:c1:51:be:d2:90:69:c2:b7:5e:33: 62:6b:4c:e6:9d:19:02:49:d8:36:53:f5:b4:30:82:d7:c8:d0: e3:ea:54:2f:60:b0:36:7e:41:30:2a:ed:51:d4:b2:b2:c0:d5: a1:63:e3:6c:b3:16:ee:9a:50:46:54:e0:79:c0:5e:32:34:50: d4:a2:d0:89:30:1f:98:ae:b3:ba:b1:7e:2a:ab:58:e1:3e:81: 7a:8f:1d:92:70:12:c1:0f:64:17:91:8a:8a:8a:ef:9e:5e:42: fb:f1:69:da:9c:3d:40:cf:f5:7f:7e:2e:e3:b5:40:cb:c7:9f: 7d:ea:0e:67:6f:84:eb:72:90:91:67:86:84:57:12:32:3e:36: c0:94:ee:71:88:28:1c:4b:16:36:d3:d2:a6:80:08:0a:ca:12: 52:5f:f9:64:b7:b3:6a:76:ee:c9:c0:4f:e4:28:30:a9:3b:9b: 7d:16:1c:2a:a0:66:60:a3:a9:c1:fa:99:ad:a1:92:0d:31:7d: dc:21:b0:ca:29:e1:37:b5:e9:5c:1d:e4:64:8e:3b:27:3b:03: 27:ec:3e:2a:e9:2a:c7:27:49:cc:03:33:fa:d3:a3:5f:60:e2: 80:74:37:f3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAinULadg0QvB1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ODNjYWZhZWEtZTQxYS00M2RjLTgxNzQtZTNhNzVmNzljNjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwd2/6cB6vLF/1V4bNp3NGCMdKcrNWOPQoQ0L qTDNSx19amNvxAyuqXMme+DUJTW755B1zUVnLpDNPGeWMjzp+ePPRX5/Kps39bIr sMvEdXHPhqH84Mn12rL5ActKlPW/GNWv6S/nTpL8nEivW/Gzq+r0iRaao3O+WH1/ 3ce82nYBGAY/ERVgqVD2sNFexVfbzCFWzpuZkThtRH9Xj0aXxNEKVc0e2L+1ch+U 1RXwUrnxQgf/42sZeb37vUf+s2SRWF5nUpCQWtFbkHR4Ba5Yc1O7GdkH4nGBwxKJ VTPmtgma8nhqkBmBrWMpqVmhhTaVwN7XyukrLm6lzXfgIicKSQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHo36Rd5F2w3jo82qxu+e5u9I+xyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDFkMGE2NzUtZTJkMi0z NjY0LWIxYjUtOGJkNTBiNWQ0NWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG8JyEqwDRqmvlJh2MP6LuGCtIIF/XKbNzzNwVG+0pBpwrdeM2Jr TOadGQJJ2DZT9bQwgtfI0OPqVC9gsDZ+QTAq7VHUsrLA1aFj42yzFu6aUEZU4HnA XjI0UNSi0IkwH5ius7qxfiqrWOE+gXqPHZJwEsEPZBeRioqK755eQvvxadqcPUDP 9X9+LuO1QMvHn33qDmdvhOtykJFnhoRXEjI+NsCU7nGIKBxLFjbT0qaACArKElJf +WS3s2p27snAT+QoMKk7m30WHCqgZmCjqcH6ma2hkg0xfdwhsMop4Te16Vwd5GSO Oyc7AyfsPirpKscnScwDM/rTo19g4oB0N/M= -----END CERTIFICATE-----Generated at Mon Oct 20 08:16:05 2025 by rpki-client