$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f7293217-fcbd-3ef4-94e1-1991138c5b07.roa File: f7293217-fcbd-3ef4-94e1-1991138c5b07.roa (raw, json) Hash identifier: bQ+EpEvXhfnmqL8hcbVel6ywoTit/Q7ggnx5LrBdakY= Subject key identifier: 36:80:7C:68:9F:09:23:72:B6:06:37:5B:B3:95:FC:58:72:1E:11:9D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B48E1AB39B0FBFF765F1F4380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f7293217-fcbd-3ef4-94e1-1991138c5b07.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 396614 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:ab:39:b0:fb:ff:76:5f:1f:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=29768657-f3c2-4212-a172-367c829aa634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b9:15:45:49:51:02:fb:82:47:77:0e:f7:94: 4a:aa:99:54:92:40:a1:cc:8f:cd:e2:e9:d6:32:cb: ac:1f:0e:43:51:6e:79:79:4b:8f:5e:0e:6e:7c:21: 1e:59:f1:33:9c:6f:89:e9:f7:b6:35:2b:6b:44:c0: dc:58:ea:02:6b:ae:e4:d8:3b:33:9e:0e:02:89:e0: fc:f3:d2:5d:13:53:bd:64:6f:ad:58:51:ab:13:1e: 57:a9:81:71:eb:34:c7:1c:06:24:97:59:89:0f:e1: 08:b7:f2:e5:64:e8:1a:11:c6:a9:1b:4c:9d:99:9e: 36:51:e0:fb:ae:4a:11:5c:a3:06:73:23:0e:1c:32: 1a:9e:06:21:50:27:cb:1f:82:1d:d7:31:ff:c8:91: 20:f6:5c:77:32:c0:56:64:3f:80:04:84:3d:06:0d: d0:1b:3d:e0:7e:40:a0:d1:07:09:f8:b0:5d:ef:45: 99:f7:57:d4:5c:9f:c8:a9:ae:33:ee:3d:7a:cd:0c: 50:20:68:7f:52:0c:1e:2c:56:40:fd:d4:53:24:26: 62:79:96:93:99:05:9e:fa:39:0f:b3:3a:a2:62:09: 24:b7:87:bd:30:af:bf:91:9b:8a:9f:d6:88:0a:57: d7:18:10:fe:a4:07:d5:3e:0b:4e:4e:af:2c:27:2e: 76:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:80:7C:68:9F:09:23:72:B6:06:37:5B:B3:95:FC:58:72:1E:11:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f7293217-fcbd-3ef4-94e1-1991138c5b07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:eb:c2:e9:d0:a3:f3:49:e1:33:81:15:eb:f7:17:d7:f3:6b: 54:7c:0a:1f:ee:a9:cf:9a:1e:f3:04:63:6b:09:7f:85:09:22: 2d:a5:8b:45:8b:a9:82:5a:89:24:6a:71:db:8b:53:34:28:1e: 77:30:80:47:34:cb:cb:29:04:77:19:42:86:1d:02:34:a5:08: 46:fa:36:a5:62:db:36:f7:5e:33:88:7d:f4:74:4d:e5:f6:1a: 44:79:37:7c:61:9f:c8:5c:91:b8:36:88:29:6b:ec:22:6a:64: f5:ef:dd:b5:56:9a:b6:b9:cf:6d:7f:cc:36:22:5a:41:0b:ae: e3:a7:56:d9:74:e1:3e:0b:dc:eb:a8:fc:7d:2d:d9:f6:76:75: 8e:91:35:d6:4f:ce:d1:92:c0:5f:cf:aa:95:86:1e:ab:bb:02: 2a:37:ee:e6:bb:70:a6:64:99:99:bf:61:b5:f1:99:5a:17:d4: 01:40:40:ad:38:c7:11:a2:3d:e5:10:34:a7:b2:7c:6c:80:04: 84:5f:01:8f:85:8b:16:4a:17:2e:d9:0f:73:c6:89:37:2e:e9: ba:2d:3e:9a:7f:11:31:27:3a:1b:a1:7a:0c:bf:1d:9f:f0:5e: 62:d8:d3:6a:c4:37:e9:8c:31:79:20:86:2d:77:34:91:bb:7a: da:69:65:ec -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4as5sPv/dl8fQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk Mjk3Njg2NTctZjNjMi00MjEyLWExNzItMzY3YzgyOWFhNjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbkVRUlRAvuCR3cO95RKqplUkkChzI/N4unW MsusHw5DUW55eUuPXg5ufCEeWfEznG+J6fe2NStrRMDcWOoCa67k2Dszng4CieD8 89JdE1O9ZG+tWFGrEx5XqYFx6zTHHAYkl1mJD+EIt/LlZOgaEcapG0ydmZ42UeD7 rkoRXKMGcyMOHDIangYhUCfLH4Id1zH/yJEg9lx3MsBWZD+ABIQ9Bg3QGz3gfkCg 0QcJ+LBd70WZ91fUXJ/Iqa4z7j16zQxQIGh/UgweLFZA/dRTJCZieZaTmQWe+jkP szqiYgkkt4e9MK+/kZuKn9aIClfXGBD+pAfVPgtOTq8sJy52NwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDaAfGifCSNytgY3W7OV/FhyHhGdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjcyOTMyMTctZmNiZC0z ZWY0LTk0ZTEtMTk5MTEzOGM1YjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD/rwunQo/NJ4TOBFev3F9fza1R8Ch/uqc+aHvMEY2sJf4UJIi2l i0WLqYJaiSRqcduLUzQoHncwgEc0y8spBHcZQoYdAjSlCEb6NqVi2zb3XjOIffR0 TeX2GkR5N3xhn8hckbg2iClr7CJqZPXv3bVWmra5z21/zDYiWkELruOnVtl04T4L 3Ouo/H0t2fZ2dY6RNdZPztGSwF/PqpWGHqu7Aio37ua7cKZkmZm/YbXxmVoX1AFA QK04xxGiPeUQNKeyfGyABIRfAY+FixZKFy7ZD3PGiTcu6botPpp/ETEnOhuhegy/ HZ/wXmLY02rEN+mMMXkghi13NJG7etppZew= -----END CERTIFICATE-----Generated at Mon Oct 20 10:23:29 2025 by rpki-client