$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f94a1c1b-f1ed-3e83-81d4-197093e51048.roa File: f94a1c1b-f1ed-3e83-81d4-197093e51048.roa (raw, json) Hash identifier: 9tiHavewgdT+ek247CMUrzYWb4Kq3dfCUiwjlj5w72E= Subject key identifier: 00:0C:99:E4:3B:74:BD:D9:96:E5:54:02:79:72:2C:82:FF:A1:A9:E3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6202051742595950BC85FB00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f94a1c1b-f1ed-3e83-81d4-197093e51048.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 396549 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:05:17:42:59:59:50:bc:85:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=4cf5fe91-c1a9-47f7-a3f2-1915d77e5930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0c:c9:0c:42:69:88:59:24:44:8f:4f:c3:55: 4b:89:0f:98:e7:24:66:59:d0:59:dc:aa:e4:57:db: c8:c8:59:f1:9f:9d:40:8d:31:cd:8b:52:82:22:f8: 15:38:88:53:0e:f0:46:48:af:a0:7c:0e:57:6c:3b: 4f:af:b3:4d:1a:e5:e8:14:94:90:4b:97:f6:be:63: 77:eb:61:48:2a:ff:c4:04:95:e7:70:08:35:79:fa: a0:73:f4:ff:c3:64:a6:50:45:00:d5:1b:94:3b:42: df:68:2d:8c:c4:ce:65:bb:27:6b:70:e9:c7:bf:62: 58:2a:7a:5f:c8:dc:63:26:80:1f:98:6e:c9:27:7a: 24:16:a0:18:07:81:1a:c9:99:51:1f:92:48:79:24: 22:fc:5d:55:58:e5:d6:82:3f:8d:e8:cb:b8:4d:0c: bd:ea:c5:1f:c3:a8:e6:cf:d1:98:c2:3b:0b:5c:32: b3:ae:fc:c0:d3:8c:36:5b:6f:24:8a:b4:49:0a:67: 6d:75:8f:e9:e9:57:f4:4a:eb:67:78:e2:55:42:01: ff:1f:16:8d:0a:08:53:8e:e5:bc:11:f0:32:fa:29: 23:4d:3f:32:10:1e:f2:97:45:96:7e:53:15:8c:bd: 58:5c:1d:d4:6c:30:9f:7a:61:b4:ac:76:e1:14:27: cf:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:0C:99:E4:3B:74:BD:D9:96:E5:54:02:79:72:2C:82:FF:A1:A9:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f94a1c1b-f1ed-3e83-81d4-197093e51048.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:fb:29:01:52:11:ac:80:8e:9a:86:32:31:c8:b6:4d:aa:e4: 53:de:2e:01:0b:0c:e9:d2:51:a8:e7:27:a6:f2:ec:6b:f4:ca: 88:3b:12:c4:25:d4:09:2f:f3:5c:3f:f5:b2:9f:d0:63:e4:1c: 9d:22:97:13:23:b4:af:61:0c:40:ba:31:76:04:f9:d5:74:6f: 9b:ea:2a:e9:24:8d:ca:4f:3b:23:7d:ff:00:6b:07:ce:82:19: d5:bc:91:fe:22:6f:ca:4c:53:fe:2c:55:2c:21:f9:de:37:93: 04:09:68:ed:c2:8d:20:9a:c0:cd:84:19:2b:18:d5:80:03:18: c7:47:fb:28:da:a9:fd:a6:92:9c:2a:db:52:3d:7c:a7:f9:9b: 98:83:4f:0f:32:51:ba:b0:ad:52:c7:7f:43:e4:8c:e6:03:7c: 32:79:ac:cd:0f:71:57:54:3e:18:8e:02:02:95:f1:a8:b1:9f: ea:d0:82:8f:59:69:2e:db:5f:f3:5d:6b:6b:cd:6c:e0:d7:74: 63:5a:11:f1:34:5a:0b:a6:0f:fa:82:f6:ec:17:3d:6f:06:7d: 43:39:4a:a4:89:10:41:a9:4a:28:01:2f:3f:67:6a:8c:c5:f9: 2a:02:a4:df:08:91:3d:e3:66:6c:e7:24:78:01:86:df:91:cb: 2f:96:e6:c1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAgUXQllZULyF+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NGNmNWZlOTEtYzFhOS00N2Y3LWEzZjItMTkxNWQ3N2U1OTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAzJDEJpiFkkRI9Pw1VLiQ+Y5yRmWdBZ3Krk V9vIyFnxn51AjTHNi1KCIvgVOIhTDvBGSK+gfA5XbDtPr7NNGuXoFJSQS5f2vmN3 62FIKv/EBJXncAg1efqgc/T/w2SmUEUA1RuUO0LfaC2MxM5luydrcOnHv2JYKnpf yNxjJoAfmG7JJ3okFqAYB4EayZlRH5JIeSQi/F1VWOXWgj+N6Mu4TQy96sUfw6jm z9GYwjsLXDKzrvzA04w2W28kirRJCmdtdY/p6Vf0SutneOJVQgH/HxaNCghTjuW8 EfAy+ikjTT8yEB7yl0WWflMVjL1YXB3UbDCfemG0rHbhFCfPtQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAAMmeQ7dL3ZluVUAnlyLIL/oanjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjk0YTFjMWItZjFlZC0z ZTgzLTgxZDQtMTk3MDkzZTUxMDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB37KQFSEayAjpqGMjHItk2q5FPeLgELDOnSUajnJ6by7Gv0yog7 EsQl1Akv81w/9bKf0GPkHJ0ilxMjtK9hDEC6MXYE+dV0b5vqKukkjcpPOyN9/wBr B86CGdW8kf4ib8pMU/4sVSwh+d43kwQJaO3CjSCawM2EGSsY1YADGMdH+yjaqf2m kpwq21I9fKf5m5iDTw8yUbqwrVLHf0PkjOYDfDJ5rM0PcVdUPhiOAgKV8aixn+rQ go9ZaS7bX/Nda2vNbODXdGNaEfE0WgumD/qC9uwXPW8GfUM5SqSJEEGpSigBLz9n aozF+SoCpN8IkT3jZmznJHgBht+Ryy+W5sE= -----END CERTIFICATE-----Generated at Tue Oct 21 02:06:24 2025 by rpki-client