$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e865b929-009b-32a1-9802-c10ae6b03389.roa File: e865b929-009b-32a1-9802-c10ae6b03389.roa (raw, json) Hash identifier: ZjuGzivMNhVfqrZJpHO56VedqkfdDtI08EWTcy4xH9M= Subject key identifier: CA:33:72:C8:57:31:B8:9F:1C:A4:9B:10:AF:0B:5F:37:17:D4:91:C5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B48E1B9A21EB29CC99F84EAE0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e865b929-009b-32a1-9802-c10ae6b03389.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 396564 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:b9:a2:1e:b2:9c:c9:9f:84:ea:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=07c706dd-58cf-41da-8a4e-0e2f21b40e12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:31:8d:3d:52:54:bc:ad:00:a6:80:11:6f:1e: a0:2e:6f:e0:c1:45:55:48:29:6b:31:6f:84:0b:a5: eb:5b:6b:a4:9e:e4:16:17:10:b2:c1:9a:57:05:2c: 3e:2d:4d:c0:91:d8:a5:7b:66:fb:38:c8:c3:c8:f5: 34:7f:19:91:39:62:e3:77:2d:5a:c8:68:45:62:c3: de:22:ec:ed:ad:47:6f:16:38:9b:ca:75:63:ce:af: 9b:ff:e9:95:12:df:3b:ee:f6:f7:08:f4:c8:97:5a: 3b:6c:92:ff:e0:38:9e:59:e5:cc:01:cf:18:59:61: 9c:b2:38:53:d0:f8:1f:7b:94:77:ee:ca:20:51:dc: d2:db:c8:38:31:18:e1:b9:f5:fc:49:68:62:ee:25: ad:69:d1:c6:42:3a:af:1f:4f:a7:43:ac:65:7d:f3: 3a:4a:96:41:4b:2f:a6:25:5f:b4:cb:c7:3f:ea:9d: 12:14:e9:76:25:36:15:2a:98:a6:ec:14:bb:e3:d6: ca:bf:7c:36:88:46:8a:91:19:e2:fb:98:35:23:50: a2:6b:be:a6:8d:c5:b3:0c:98:1d:15:1d:75:26:38: 11:49:11:26:85:df:1e:cb:26:70:8b:33:d5:ac:61: bc:7e:f0:1e:18:e8:dd:49:1d:c5:a5:76:f8:8e:a5: bf:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:33:72:C8:57:31:B8:9F:1C:A4:9B:10:AF:0B:5F:37:17:D4:91:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e865b929-009b-32a1-9802-c10ae6b03389.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:32:d8:c2:a7:c8:57:43:1a:04:92:9e:6a:c6:0f:95:09:9d: 80:7e:a3:fe:65:58:40:78:76:a8:03:f9:a6:9b:7b:79:8b:33: 9d:03:3e:37:55:5a:b8:6c:36:df:dd:3c:e4:65:d5:39:57:18: 2f:62:8f:f7:21:8a:df:5e:a9:0c:e9:02:ee:b3:79:3e:b9:11: ef:1b:11:4b:5c:73:e6:9c:52:44:b9:96:d4:ac:30:d0:24:9a: 86:2d:22:ea:f9:f5:59:85:40:72:fb:25:57:d3:78:b3:bb:0a: a4:dd:b7:ae:d8:64:68:a9:dd:cc:ad:a8:41:5c:db:ad:77:aa: ec:95:d9:31:5e:ba:4d:59:e8:09:51:0c:ee:4c:71:29:01:2c: 04:60:64:07:2a:c9:c6:31:ce:18:dd:cc:9d:8d:92:8b:87:a3: 75:99:ff:73:02:2f:43:88:cd:16:c7:96:aa:16:0e:d6:a2:0f: 72:16:c3:75:22:2d:6c:4f:e8:0b:3d:33:40:c9:7f:a8:ea:56: a0:f6:e5:13:2e:e3:5d:90:ad:ef:0b:a3:5b:56:f1:4c:cb:02: 99:95:ad:6b:24:88:b7:71:3d:ca:b7:75:5e:87:3c:d5:af:83: b0:8a:bb:ef:cf:b5:a8:dc:06:f6:c9:bc:58:83:4e:8d:7a:c7: ae:09:54:a7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4bmiHrKcyZ+E6uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MDdjNzA2ZGQtNThjZi00MWRhLThhNGUtMGUyZjIxYjQwZTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDGNPVJUvK0ApoARbx6gLm/gwUVVSClrMW+E C6XrW2uknuQWFxCywZpXBSw+LU3Akdile2b7OMjDyPU0fxmROWLjdy1ayGhFYsPe IuztrUdvFjibynVjzq+b/+mVEt877vb3CPTIl1o7bJL/4DieWeXMAc8YWWGcsjhT 0Pgfe5R37sogUdzS28g4MRjhufX8SWhi7iWtadHGQjqvH0+nQ6xlffM6SpZBSy+m JV+0y8c/6p0SFOl2JTYVKpim7BS749bKv3w2iEaKkRni+5g1I1Cia76mjcWzDJgd FR11JjgRSREmhd8eyyZwizPVrGG8fvAeGOjdSR3FpXb4jqW/UQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMozcshXMbifHKSbEK8LXzcX1JHFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTg2NWI5MjktMDA5Yi0z MmExLTk4MDItYzEwYWU2YjAzMzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIsy2MKnyFdDGgSSnmrGD5UJnYB+o/5lWEB4dqgD+aabe3mLM50D PjdVWrhsNt/dPORl1TlXGC9ij/chit9eqQzpAu6zeT65Ee8bEUtcc+acUkS5ltSs MNAkmoYtIur59VmFQHL7JVfTeLO7CqTdt67YZGip3cytqEFc2613quyV2TFeuk1Z 6AlRDO5McSkBLARgZAcqycYxzhjdzJ2NkouHo3WZ/3MCL0OIzRbHlqoWDtaiD3IW w3UiLWxP6As9M0DJf6jqVqD25RMu412Qre8Lo1tW8UzLApmVrWskiLdxPcq3dV6H PNWvg7CKu+/PtajcBvbJvFiDTo16x64JVKc= -----END CERTIFICATE-----Generated at Mon Oct 20 15:59:48 2025 by rpki-client