$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e5deceed-f0e2-3522-9119-669b797859a6.roa File: e5deceed-f0e2-3522-9119-669b797859a6.roa (raw, json) Hash identifier: BjjuxjnxfSaOPpSg4JYpUjY3i6BK+9LiUgPi/DhmugE= Subject key identifier: D9:F9:C5:02:14:E4:65:31:08:78:55:8A:98:30:C5:C5:F2:A8:A0:1F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B48E211D5BD987C325AA1FC00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e5deceed-f0e2-3522-9119-669b797859a6.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 396594 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:11:d5:bd:98:7c:32:5a:a1:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=a31624e6-9d3f-49c5-8b15-055f1e5c1006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:81:1e:19:c9:a1:31:9d:19:30:1f:7b:d0:b7: 4e:d0:6d:0c:ca:47:94:4b:aa:bb:22:c2:02:a1:d0: 3a:49:1c:80:c6:93:27:8c:07:f8:0f:2f:a2:a0:90: f1:aa:89:d8:4b:e8:61:59:d7:a7:f7:08:78:46:55: 0b:63:1c:f8:82:f3:24:f5:27:ad:43:77:87:35:94: a5:71:8d:c5:f6:2c:dc:db:f8:4e:62:fa:76:af:c3: bf:e7:b3:2f:c6:ba:b0:cb:88:ae:5f:cf:95:45:ae: f3:82:0b:c4:06:3e:2d:ee:91:56:84:52:ee:5b:d8: f0:64:55:eb:5c:74:aa:01:4f:de:bc:ce:6a:e8:ae: 67:d7:dc:d1:30:0c:1f:93:df:e9:95:6d:97:4f:a4: d6:64:d1:6e:27:13:0b:09:4c:bf:fd:26:b1:ae:61: 22:49:6c:0c:89:81:00:f3:6b:2e:76:08:fb:57:8d: 35:19:5f:88:f8:d7:b9:d5:8a:c0:1f:2c:55:43:a9: e8:2f:6d:34:e4:45:52:ca:35:ab:ba:a1:82:f6:2e: 3a:4f:62:05:d4:23:80:1f:42:90:ad:ce:3d:a4:c6: 1c:57:e6:c5:53:94:93:d5:64:b2:ec:49:eb:23:b3: af:ad:63:65:36:df:be:46:96:e2:56:44:e7:8b:0e: 7c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F9:C5:02:14:E4:65:31:08:78:55:8A:98:30:C5:C5:F2:A8:A0:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e5deceed-f0e2-3522-9119-669b797859a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:88:51:29:80:dc:c0:db:d2:83:ce:c1:83:22:d0:7e:8c:62: 0d:f2:bc:c4:5d:ad:a8:0c:e7:6a:40:e0:2c:41:20:99:e9:f5: 1c:4b:13:d2:6a:e9:d6:1d:20:af:2a:ef:93:56:ad:17:2d:9c: ee:cc:d4:a3:e0:a3:96:d7:85:14:9c:df:8b:42:fb:51:62:b2: c3:34:f2:84:b4:5c:b9:20:3d:b0:72:76:73:ef:c2:a6:44:fc: aa:08:e6:68:da:af:49:63:56:0f:54:9f:f2:83:28:1c:68:48: c5:da:39:1a:f7:17:d4:29:fc:5a:6f:83:0d:57:b1:38:53:23: 10:7e:f1:ab:44:e3:f2:5d:a8:0d:a1:ae:b8:d7:5e:44:d2:62: 71:30:74:28:4f:c0:a8:c9:4d:7c:57:5a:14:ac:45:eb:ed:44: 0f:be:38:c2:68:88:2b:d2:81:9e:3d:e3:6d:22:03:75:a8:b5: b3:11:bc:ec:c1:d0:b5:b0:72:29:e5:a2:29:64:d4:24:71:06: 1d:fb:63:a8:fd:84:ed:32:f5:3d:4a:60:eb:66:ff:28:6b:52: f3:4d:d8:56:9c:ee:12:81:31:be:76:4a:52:a5:fa:2c:f3:05: 71:3b:88:ee:8b:5f:49:70:a3:78:3d:21:e4:80:98:12:7a:07: 3e:a7:93:ec -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4hHVvZh8Mlqh/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk YTMxNjI0ZTYtOWQzZi00OWM1LThiMTUtMDU1ZjFlNWMxMDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4EeGcmhMZ0ZMB970LdO0G0MykeUS6q7IsIC odA6SRyAxpMnjAf4Dy+ioJDxqonYS+hhWden9wh4RlULYxz4gvMk9SetQ3eHNZSl cY3F9izc2/hOYvp2r8O/57Mvxrqwy4iuX8+VRa7zggvEBj4t7pFWhFLuW9jwZFXr XHSqAU/evM5q6K5n19zRMAwfk9/plW2XT6TWZNFuJxMLCUy//SaxrmEiSWwMiYEA 82sudgj7V401GV+I+Ne51YrAHyxVQ6noL2005EVSyjWruqGC9i46T2IF1COAH0KQ rc49pMYcV+bFU5ST1WSy7EnrI7OvrWNlNt++RpbiVkTniw58CwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNn5xQIU5GUxCHhVipgwxcXyqKAfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTVkZWNlZWQtZjBlMi0z NTIyLTkxMTktNjY5Yjc5Nzg1OWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEWIUSmA3MDb0oPOwYMi0H6MYg3yvMRdragM52pA4CxBIJnp9RxL E9Jq6dYdIK8q75NWrRctnO7M1KPgo5bXhRSc34tC+1FissM08oS0XLkgPbBydnPv wqZE/KoI5mjar0ljVg9Un/KDKBxoSMXaORr3F9Qp/Fpvgw1XsThTIxB+8atE4/Jd qA2hrrjXXkTSYnEwdChPwKjJTXxXWhSsRevtRA++OMJoiCvSgZ49420iA3WotbMR vOzB0LWwcinloilk1CRxBh37Y6j9hO0y9T1KYOtm/yhrUvNN2Fac7hKBMb52SlKl +izzBXE7iO6LX0lwo3g9IeSAmBJ6Bz6nk+w= -----END CERTIFICATE-----Generated at Mon Oct 20 08:11:48 2025 by rpki-client