$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d27ea25c-da0f-3367-96d9-a827e55dc75d.roa File: d27ea25c-da0f-3367-96d9-a827e55dc75d.roa (raw, json) Hash identifier: q58viEQLCeaD3o32n6mcRFkI1Efulgc8gr+rp7Q6wd0= Subject key identifier: E0:57:24:3D:85:E9:56:E5:87:AB:5E:9A:4E:64:27:7B:01:91:C4:DF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B48E2147337E6DD285A0D8A80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d27ea25c-da0f-3367-96d9-a827e55dc75d.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 396571 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:14:73:37:e6:dd:28:5a:0d:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=4790cd3b-537e-4785-960a-3297728b5095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:90:be:2b:9a:d2:06:0b:ec:86:28:01:8f:95: ee:dd:99:55:28:31:be:6f:9f:bb:d6:01:31:fd:50: e2:d8:08:7c:c4:61:78:d8:1c:e4:e6:aa:57:e6:b7: 4a:4c:5f:c5:0d:30:bd:c1:78:9f:b9:5d:72:a0:ce: 17:bd:3c:c1:dc:f5:93:6f:7f:79:eb:68:01:28:7d: 3e:91:5c:f0:78:a9:62:25:37:7c:53:c0:77:3a:7f: c9:f5:10:fc:02:d5:9b:83:f6:d4:e9:51:c0:59:86: 87:e6:0c:6c:ae:3b:8d:03:90:f7:d6:a0:df:14:12: 0b:89:35:cd:bc:05:65:4d:4d:54:ce:b3:f4:4a:03: ac:af:ce:68:1e:7f:a3:29:d1:f3:9a:7c:f7:0d:6b: 77:ac:8d:07:7a:d4:d6:ed:42:c9:1a:fc:47:65:0d: 31:6d:e5:ec:8d:88:14:13:b2:2e:5c:5c:4d:65:f3: 67:9a:0e:ff:2f:2a:46:bf:fc:c0:f5:de:98:93:50: 35:19:26:21:75:c3:54:00:e2:f5:48:83:29:0a:f7: ab:ec:c0:e0:c4:18:8b:87:88:fa:31:37:e4:ce:48: 3b:c2:73:ad:a8:c5:9c:4e:99:02:68:38:e3:98:f2: 75:93:c4:98:f1:e6:ee:96:a8:30:22:bc:a5:27:0d: 4a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:57:24:3D:85:E9:56:E5:87:AB:5E:9A:4E:64:27:7B:01:91:C4:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d27ea25c-da0f-3367-96d9-a827e55dc75d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:a5:3d:47:86:62:d8:6f:00:d5:fa:f8:e1:52:f1:85:44:c2: 69:ae:20:8c:50:52:e7:c0:57:fc:75:e5:c2:0f:c1:71:1c:2e: 50:8c:7f:26:78:25:24:db:05:bf:9b:d7:ea:1d:04:91:0d:62: f5:54:2c:f9:2a:de:8c:c2:34:86:bb:e7:bf:b8:fe:d2:34:3f: c0:91:c0:cd:9e:f6:12:5c:6a:9b:b3:23:5b:2c:3f:79:72:b2: ba:14:b1:a4:0c:af:86:41:df:d3:fa:9f:af:19:da:46:26:e9: 30:78:da:52:fd:26:ed:70:63:70:1b:4f:f8:83:8e:c4:6d:64: f5:b7:33:fa:62:88:7d:e3:b4:3e:57:b1:6e:50:f7:fc:9d:6b: 12:34:44:e0:39:6a:74:8a:e9:4b:4b:33:49:ff:02:1d:0b:01: 1c:12:ff:ec:4f:9f:99:76:53:ae:69:ac:dc:89:a4:67:6c:f2: 83:e7:89:c4:91:d8:00:8a:17:f5:66:20:c7:51:45:16:27:41: 74:2a:99:83:84:08:9d:d0:19:26:00:b3:44:06:d8:6a:af:b8: 76:9f:c1:0e:a2:c2:18:76:ab:9e:8b:09:19:10:db:63:91:bb: 39:3c:92:b5:97:eb:a1:24:9a:c2:fb:0e:26:c9:25:f0:1f:74: 92:13:28:6b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4hRzN+bdKFoNioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk NDc5MGNkM2ItNTM3ZS00Nzg1LTk2MGEtMzI5NzcyOGI1MDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JC+K5rSBgvshigBj5Xu3ZlVKDG+b5+71gEx /VDi2Ah8xGF42Bzk5qpX5rdKTF/FDTC9wXifuV1yoM4XvTzB3PWTb39562gBKH0+ kVzweKliJTd8U8B3On/J9RD8AtWbg/bU6VHAWYaH5gxsrjuNA5D31qDfFBILiTXN vAVlTU1UzrP0SgOsr85oHn+jKdHzmnz3DWt3rI0HetTW7ULJGvxHZQ0xbeXsjYgU E7IuXFxNZfNnmg7/LypGv/zA9d6Yk1A1GSYhdcNUAOL1SIMpCver7MDgxBiLh4j6 MTfkzkg7wnOtqMWcTpkCaDjjmPJ1k8SY8ebulqgwIrylJw1KFwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOBXJD2F6Vblh6temk5kJ3sBkcTfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDI3ZWEyNWMtZGEwZi0z MzY3LTk2ZDktYTgyN2U1NWRjNzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG+lPUeGYthvANX6+OFS8YVEwmmuIIxQUufAV/x15cIPwXEcLlCM fyZ4JSTbBb+b1+odBJENYvVULPkq3ozCNIa757+4/tI0P8CRwM2e9hJcapuzI1ss P3lysroUsaQMr4ZB39P6n68Z2kYm6TB42lL9Ju1wY3AbT/iDjsRtZPW3M/piiH3j tD5XsW5Q9/ydaxI0ROA5anSK6UtLM0n/Ah0LARwS/+xPn5l2U65prNyJpGds8oPn icSR2ACKF/VmIMdRRRYnQXQqmYOECJ3QGSYAs0QG2GqvuHafwQ6iwhh2q56LCRkQ 22ORuzk8krWX66EkmsL7DibJJfAfdJITKGs= -----END CERTIFICATE-----Generated at Mon Oct 20 08:07:10 2025 by rpki-client