$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f9281cdb-a45e-3361-bfad-c157259d847a.roa File: f9281cdb-a45e-3361-bfad-c157259d847a.roa (raw, json) Hash identifier: qXeYDZT3KB1QSq7acl0bAByqCEORBPNIeoFIdrNIC90= Subject key identifier: D8:24:45:41:DA:86:F0:0A:E0:A3:8B:D4:4A:5D:1F:6A:6E:4E:59:27 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B48E211EF384D4F4A8A470100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f9281cdb-a45e-3361-bfad-c157259d847a.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 396611 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:11:ef:38:4d:4f:4a:8a:47:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=123eb711-cabf-4ed0-bcbb-b0c932478a1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7d:d9:8d:26:e2:7d:6b:cb:34:ad:71:d7:e3: a0:0a:1d:0c:e8:bb:27:2a:9b:7f:78:21:ab:bf:9e: 75:92:51:59:b0:a3:b9:95:fa:5e:01:9a:c7:df:01: ba:58:de:8c:e5:7c:cd:d6:56:c5:3a:ba:f8:fa:a8: d5:f9:e5:b4:cc:5b:de:09:ad:3c:b8:a6:34:38:dd: 55:ea:1a:bf:b7:93:34:b1:2c:45:73:53:08:99:3b: fb:59:ff:a2:4d:36:26:21:ec:62:8c:0c:67:6e:99: 33:0e:74:21:c1:58:9f:93:88:b5:2d:7d:18:04:72: 47:4a:be:22:86:bd:bc:d8:61:14:e5:11:bb:83:09: 7b:02:91:b8:57:dd:1a:e8:86:9c:5a:4e:40:8e:ae: fa:74:84:1c:33:de:18:3e:0b:67:09:38:77:cd:29: 12:14:1e:ba:ea:e8:09:80:ff:2f:d5:00:6d:b9:23: f1:ea:cf:c8:d2:60:89:db:92:28:24:ed:c2:5c:97: 73:0c:34:b3:57:d0:7f:02:ea:41:7e:dd:97:57:06: a6:79:9a:79:2c:a3:5c:64:58:e6:4d:18:44:4a:cb: 82:8f:62:9a:99:d4:67:3c:5c:62:dc:2c:5e:ac:73: 4b:7b:28:be:c9:40:a9:a3:b5:86:ee:b5:77:95:b9: 3f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:24:45:41:DA:86:F0:0A:E0:A3:8B:D4:4A:5D:1F:6A:6E:4E:59:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f9281cdb-a45e-3361-bfad-c157259d847a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:86:29:ca:41:37:a2:f6:94:df:9e:3b:cb:1c:f2:d1:00:dd: ec:5f:2f:b1:ee:b0:02:21:4d:90:3b:75:33:6a:1f:0b:5b:62: 20:f5:0a:75:af:5e:e0:68:69:64:a7:1b:29:23:82:ae:9c:76: c2:e8:d9:54:bd:df:47:96:f5:26:a2:32:77:6c:fb:60:41:75: 12:4d:0f:b5:44:59:50:34:06:8a:07:39:b4:04:ee:06:61:2a: cc:e3:71:e9:8b:8e:0a:72:8a:c2:78:d5:4b:33:73:c8:ab:c9: 33:f3:5e:93:49:13:4c:94:a5:08:6e:5b:6d:1a:72:e7:0b:7c: 5a:8d:5a:a0:41:56:0a:3c:c9:cb:a7:a0:5b:bf:90:52:57:68: 1a:6d:5b:d7:fc:60:5e:25:aa:7b:ae:b6:de:32:ed:e5:0a:da: 38:d8:83:1b:9b:1e:b2:ee:d8:68:33:78:33:0d:af:a1:81:14: da:d3:f0:e7:b2:b9:16:d6:df:c9:b2:37:4f:60:51:49:b9:cb: 8d:54:0e:a9:d6:4a:fa:f5:30:5a:2a:06:1a:c8:51:34:e6:c9: db:ef:ab:cc:93:13:bd:5f:63:1d:70:96:fc:ce:0e:73:34:eb: 1f:97:55:ca:0b:d6:81:39:70:39:24:33:2f:7f:6f:86:5a:50: 66:d8:5f:8f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4hHvOE1PSopHAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MTIzZWI3MTEtY2FiZi00ZWQwLWJjYmItYjBjOTMyNDc4YTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlX3ZjSbifWvLNK1x1+OgCh0M6LsnKpt/eCGr v551klFZsKO5lfpeAZrH3wG6WN6M5XzN1lbFOrr4+qjV+eW0zFveCa08uKY0ON1V 6hq/t5M0sSxFc1MImTv7Wf+iTTYmIexijAxnbpkzDnQhwVifk4i1LX0YBHJHSr4i hr282GEU5RG7gwl7ApG4V90a6IacWk5Ajq76dIQcM94YPgtnCTh3zSkSFB666ugJ gP8v1QBtuSPx6s/I0mCJ25IoJO3CXJdzDDSzV9B/AupBft2XVwameZp5LKNcZFjm TRhESsuCj2KamdRnPFxi3CxerHNLeyi+yUCpo7WG7rV3lbk/jQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNgkRUHahvAK4KOL1EpdH2puTlknMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjkyODFjZGItYTQ1ZS0z MzYxLWJmYWQtYzE1NzI1OWQ4NDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACeGKcpBN6L2lN+eO8sc8tEA3exfL7HusAIhTZA7dTNqHwtbYiD1 CnWvXuBoaWSnGykjgq6cdsLo2VS930eW9SaiMnds+2BBdRJND7VEWVA0BooHObQE 7gZhKszjcemLjgpyisJ41Uszc8iryTPzXpNJE0yUpQhuW20acucLfFqNWqBBVgo8 ycunoFu/kFJXaBptW9f8YF4lqnuutt4y7eUK2jjYgxubHrLu2GgzeDMNr6GBFNrT 8OeyuRbW38myN09gUUm5y41UDqnWSvr1MFoqBhrIUTTmydvvq8yTE71fYx1wlvzO DnM06x+XVcoL1oE5cDkkMy9/b4ZaUGbYX48= -----END CERTIFICATE-----Generated at Mon Oct 20 08:16:50 2025 by rpki-client