$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dcb70587-6e70-3563-b710-bd788e442858.roa File: dcb70587-6e70-3563-b710-bd788e442858.roa (raw, json) Hash identifier: BZoj3YrZTMzOWWdhmNUM+dtRu8OCl2+d9eciO2s6hLk= Subject key identifier: 42:51:48:AB:B5:96:04:9E:86:A5:06:E8:16:57:C2:ED:4B:89:3C:C6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B48E1A9A06340300BD7F3C7C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dcb70587-6e70-3563-b710-bd788e442858.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 36623 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:a9:a0:63:40:30:0b:d7:f3:c7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=f827af17-8ad1-48e1-aba0-f846b67fe14c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:db:38:86:4a:16:3f:1f:28:83:cb:d0:7f:d4: 36:5b:0a:f9:17:77:62:2a:56:fa:be:d3:bc:e6:ca: fd:10:22:93:ff:62:3b:db:8a:04:b9:19:ff:61:00: 99:35:0e:02:52:49:10:e9:7d:63:42:93:fd:ef:48: 25:e1:6b:16:87:a0:4c:12:64:8e:4e:c9:42:74:93: 8a:ff:71:ef:62:21:b3:67:51:53:ce:f3:47:75:4c: c9:b6:65:02:b1:8a:37:d3:45:6a:02:3e:1b:14:46: 5b:7f:e4:40:2f:c9:a9:bf:ee:41:5c:d4:ad:67:57: 56:cb:38:1c:91:f7:8a:47:0f:29:9e:3b:b2:cd:ec: 71:de:30:d0:56:86:60:7c:74:5b:71:b5:24:cd:50: 18:fa:9d:29:14:fc:96:f3:aa:7f:a9:f1:05:16:4e: 54:9b:02:6d:2a:58:d6:ce:29:8c:81:a2:f6:26:eb: aa:89:9f:3b:22:a2:ab:21:ec:32:dd:51:47:99:fc: 36:c1:e1:67:9f:b1:43:76:1e:8c:b5:be:4d:b5:c1: 10:9b:95:3b:ea:a3:95:4c:9d:96:de:fd:09:ef:28: 9a:80:14:f0:95:00:02:44:64:99:26:21:cd:61:0e: bf:48:7e:fb:91:fd:05:cc:20:38:00:35:6b:39:1c: 53:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:51:48:AB:B5:96:04:9E:86:A5:06:E8:16:57:C2:ED:4B:89:3C:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dcb70587-6e70-3563-b710-bd788e442858.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:90:75:8b:e2:87:10:21:94:e3:2a:d3:3a:49:bc:e5:ce:dd: 36:c1:6a:0d:9a:a0:bc:61:f7:00:c4:95:95:63:29:6d:0f:06: 1c:9d:da:25:be:65:2f:98:80:0f:77:06:2a:35:25:e0:e9:4e: ff:ec:f3:87:bb:f6:c4:7c:43:e7:b0:0b:ff:1b:6f:24:44:1c: 28:9c:e7:82:28:d0:4f:14:dd:f4:51:a8:5a:96:a3:ac:6f:2a: 91:62:aa:28:a4:b7:17:7a:11:6e:a4:63:63:eb:30:2b:ea:e6: d0:31:06:6b:04:59:fd:aa:f6:6e:7d:35:f8:08:24:a4:1c:c4: a2:2b:d2:39:bd:68:e8:58:b0:86:1e:ca:4a:d4:b5:67:c3:2b: 74:01:ba:b7:76:e9:04:43:03:00:9e:2b:21:cb:fb:1d:5b:22: fc:22:de:7c:f6:b8:62:ef:cc:27:46:ee:e3:61:fb:a9:d3:c3: 32:7f:5a:d0:39:c1:18:e1:cd:e3:71:f6:21:6d:f8:e1:6e:2e: 3d:c9:bb:1d:6f:86:c1:5d:2c:f8:a7:f5:1c:4f:0c:09:70:8a: 95:99:37:f1:f4:bb:d2:78:2d:93:17:6c:30:e1:45:86:98:95: e2:40:ad:34:70:0e:72:1f:2f:80:6c:e5:d9:e0:d3:56:43:73: e6:8c:c8:9e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4amgY0AwC9fzx8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZjgyN2FmMTctOGFkMS00OGUxLWFiYTAtZjg0NmI2N2ZlMTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9s4hkoWPx8og8vQf9Q2Wwr5F3diKlb6vtO8 5sr9ECKT/2I724oEuRn/YQCZNQ4CUkkQ6X1jQpP970gl4WsWh6BMEmSOTslCdJOK /3HvYiGzZ1FTzvNHdUzJtmUCsYo300VqAj4bFEZbf+RAL8mpv+5BXNStZ1dWyzgc kfeKRw8pnjuyzexx3jDQVoZgfHRbcbUkzVAY+p0pFPyW86p/qfEFFk5UmwJtKljW zimMgaL2JuuqiZ87IqKrIewy3VFHmfw2weFnn7FDdh6Mtb5NtcEQm5U76qOVTJ2W 3v0J7yiagBTwlQACRGSZJiHNYQ6/SH77kf0FzCA4ADVrORxT8QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEJRSKu1lgSehqUG6BZXwu1LiTzGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGNiNzA1ODctNmU3MC0z NTYzLWI3MTAtYmQ3ODhlNDQyODU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE6QdYvihxAhlOMq0zpJvOXO3TbBag2aoLxh9wDElZVjKW0PBhyd 2iW+ZS+YgA93Bio1JeDpTv/s84e79sR8Q+ewC/8bbyREHCic54Io0E8U3fRRqFqW o6xvKpFiqiiktxd6EW6kY2PrMCvq5tAxBmsEWf2q9m59NfgIJKQcxKIr0jm9aOhY sIYeykrUtWfDK3QBurd26QRDAwCeKyHL+x1bIvwi3nz2uGLvzCdG7uNh+6nTwzJ/ WtA5wRjhzeNx9iFt+OFuLj3Jux1vhsFdLPin9RxPDAlwipWZN/H0u9J4LZMXbDDh RYaYleJArTRwDnIfL4Bs5dng01ZDc+aMyJ4= -----END CERTIFICATE-----Generated at Mon Oct 20 17:53:51 2025 by rpki-client