$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d65ba629-e4f1-3a82-a24d-d57efbc1e007.roa File: d65ba629-e4f1-3a82-a24d-d57efbc1e007.roa (raw, json) Hash identifier: muIQiF5SN2BAj/665hh4+tIgk/aTWBa3V2IkWg9yUDQ= Subject key identifier: D5:1D:9C:E1:79:FC:7C:14:76:8A:3B:6A:F8:CC:5B:61:F3:AE:9C:A4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B62022611F84C8DC3E9AF8500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d65ba629-e4f1-3a82-a24d-d57efbc1e007.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 396597 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:26:11:f8:4c:8d:c3:e9:af:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=78382bfb-145e-4a2e-975c-aeac94ee6278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b4:f6:82:cf:64:14:44:37:7b:32:d6:41:62: d8:e1:80:d6:13:f1:a6:80:fa:5c:78:d4:fa:3c:f9: a3:6d:07:37:14:82:1a:1e:04:3f:49:6a:be:30:3e: 9b:25:3e:ac:f5:5d:1f:18:e5:62:d5:2e:26:d7:de: 0d:d3:8d:67:eb:48:32:d0:c8:d2:08:e8:64:ba:14: eb:26:2d:88:d2:68:26:b2:b7:c4:d1:50:28:68:18: ea:4b:ad:4d:ad:e3:95:d6:7d:4f:74:5e:6d:d7:e2: d9:1d:ca:7a:a3:df:97:fa:40:b4:75:05:ec:de:cd: d6:66:f4:e1:db:f6:29:46:e4:b3:10:73:bc:48:7e: 16:4a:e5:3a:e1:1d:43:ce:d6:6e:a5:f2:ce:86:ac: 67:71:9d:8d:3e:04:da:13:6f:06:36:5d:ce:af:07: a8:d3:37:7b:6d:0e:f0:d1:40:9e:df:7f:c2:76:e1: fa:4a:93:12:a7:7a:50:55:06:38:cb:8d:d3:e9:f5: 07:84:c5:b4:bf:17:7e:2b:2f:6a:e8:e9:7d:80:53: 97:2f:76:b1:5e:11:c8:07:7d:30:ab:33:f3:4d:2c: d3:f6:9d:70:25:e1:1e:9a:a7:27:fa:77:73:b7:11: d2:47:d3:87:e2:60:05:36:85:bf:8b:55:73:8d:ba: 7c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:1D:9C:E1:79:FC:7C:14:76:8A:3B:6A:F8:CC:5B:61:F3:AE:9C:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d65ba629-e4f1-3a82-a24d-d57efbc1e007.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:b4:05:30:7b:4f:1f:d3:a3:aa:79:4d:33:f1:b0:fb:54:72: 1a:f9:ef:1a:5b:79:82:12:f6:f4:75:11:a7:ba:ea:35:f1:86: 01:d1:5e:ef:c5:bc:5a:f9:4f:3f:fa:39:52:fa:09:3c:00:b1: f3:2f:71:28:2f:62:a0:45:97:6d:e7:59:75:94:f8:55:49:3c: 2f:ae:14:35:68:f8:cd:4c:6f:6f:48:25:bf:74:8b:22:bf:ab: a2:29:0b:08:6a:79:ea:21:ab:67:84:56:62:06:61:32:49:85: ea:e8:a0:ab:db:b6:ff:fa:6c:41:a7:1f:33:bd:5f:52:88:7e: 32:4b:c5:f5:45:b5:49:83:6c:b8:26:8f:0b:79:57:fc:aa:1a: 5f:45:d2:8c:b4:7a:69:e8:bf:07:55:75:3a:d5:13:71:05:b4: 28:64:ad:8d:15:d1:50:27:98:6c:45:24:d8:e3:7b:df:49:e2: 16:7f:a1:e4:d0:76:26:29:01:a5:56:e4:90:38:05:5c:cc:3a: 4b:00:4f:99:76:97:5f:94:55:3f:25:14:28:03:8b:08:39:76: 38:ce:43:0e:32:52:a8:b8:5f:8c:e3:b5:84:9a:c9:d4:69:1e: dc:7f:8f:06:4b:be:42:2a:0b:da:f0:91:18:97:ca:e7:c5:b5: 89:f0:43:c7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAiYR+EyNw+mvhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NzgzODJiZmItMTQ1ZS00YTJlLTk3NWMtYWVhYzk0ZWU2Mjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7T2gs9kFEQ3ezLWQWLY4YDWE/GmgPpceNT6 PPmjbQc3FIIaHgQ/SWq+MD6bJT6s9V0fGOVi1S4m194N041n60gy0MjSCOhkuhTr Ji2I0mgmsrfE0VAoaBjqS61NreOV1n1PdF5t1+LZHcp6o9+X+kC0dQXs3s3WZvTh 2/YpRuSzEHO8SH4WSuU64R1DztZupfLOhqxncZ2NPgTaE28GNl3Orweo0zd7bQ7w 0UCe33/CduH6SpMSp3pQVQY4y43T6fUHhMW0vxd+Ky9q6Ol9gFOXL3axXhHIB30w qzPzTSzT9p1wJeEemqcn+ndztxHSR9OH4mAFNoW/i1Vzjbp8/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNUdnOF5/HwUdoo7avjMW2HzrpykMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDY1YmE2MjktZTRmMS0z YTgyLWEyNGQtZDU3ZWZiYzFlMDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFu0BTB7Tx/To6p5TTPxsPtUchr57xpbeYIS9vR1Eae66jXxhgHR Xu/FvFr5Tz/6OVL6CTwAsfMvcSgvYqBFl23nWXWU+FVJPC+uFDVo+M1Mb29IJb90 iyK/q6IpCwhqeeohq2eEVmIGYTJJherooKvbtv/6bEGnHzO9X1KIfjJLxfVFtUmD bLgmjwt5V/yqGl9F0oy0emnovwdVdTrVE3EFtChkrY0V0VAnmGxFJNjje99J4hZ/ oeTQdiYpAaVW5JA4BVzMOksAT5l2l1+UVT8lFCgDiwg5djjOQw4yUqi4X4zjtYSa ydRpHtx/jwZLvkIqC9rwkRiXyufFtYnwQ8c= -----END CERTIFICATE-----Generated at Mon Oct 20 08:17:08 2025 by rpki-client