$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fc5dd5f7-73b1-3b87-9b11-e86b4dd980cc.roa File: fc5dd5f7-73b1-3b87-9b11-e86b4dd980cc.roa (raw, json) Hash identifier: XDnS54Nk8m3AwBFqielr4KFX1EeGHiokF+sCMzN/DLc= Subject key identifier: 57:31:8D:E5:7B:37:AA:DF:CB:4D:8B:CF:73:EA:6D:08:FE:FA:A9:A7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B76F25DECCE58D59E56FE7A00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fc5dd5f7-73b1-3b87-9b11-e86b4dd980cc.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 7342 IP address blocks: 2620:74:73::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:5d:ec:ce:58:d5:9e:56:fe:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=4f74eae6-9789-4274-a75d-c9b010834b90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:08:8c:52:c4:02:f8:6e:64:ef:b6:58:ee:5f: 2b:11:8f:ec:52:af:fe:f3:17:9c:e0:8e:5b:fa:0e: 15:57:d3:c9:2f:08:6d:7b:b5:86:8b:ee:80:ba:d2: 4f:5c:fa:76:f5:89:35:0f:24:20:73:4d:f4:22:bd: 74:4a:7f:5a:2c:26:35:74:ba:6c:67:bd:f2:9c:f6: d5:03:c9:74:17:39:4c:85:68:23:ae:18:03:60:4f: f8:74:73:34:28:85:a4:50:6b:54:3d:75:69:63:5f: c4:38:77:3f:8f:96:f0:45:f9:c4:c5:ef:da:cf:c5: ad:9b:6d:ae:07:78:3d:a1:54:0f:56:57:cf:f1:1d: ef:f4:66:27:a9:82:a4:11:15:d8:02:b3:29:e8:37: 49:4d:2d:9c:e5:4e:f0:a6:e6:06:9a:8c:16:14:fa: 8f:18:7b:5a:4d:74:98:85:6a:bb:66:d1:98:70:37: 06:64:cd:7d:fd:f5:c1:7f:6d:87:de:0e:13:a9:f2: ba:62:94:e3:48:fe:fa:36:46:fd:0b:34:b1:d6:8c: ff:39:d4:b0:be:9f:47:ae:3c:55:5c:d8:0c:83:2c: 10:4d:09:c8:d3:56:69:03:fb:50:d6:e0:33:d5:25: 48:11:4b:78:3e:f9:fa:a9:7c:82:78:62:e5:72:c2: 42:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:31:8D:E5:7B:37:AA:DF:CB:4D:8B:CF:73:EA:6D:08:FE:FA:A9:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fc5dd5f7-73b1-3b87-9b11-e86b4dd980cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:73::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:db:16:30:31:69:65:08:c5:6c:79:2f:f2:1f:09:69:7e:f1: 2e:e8:62:e1:0e:2b:15:72:46:9a:42:f0:5c:5d:c1:99:b3:07: 00:45:f0:0c:f0:70:4e:15:36:bb:3f:c4:4e:94:fb:5e:3e:db: 98:ec:c6:dc:b1:fd:2b:41:07:f3:3b:d2:1e:44:5a:1b:27:53: 3e:f9:ea:48:c8:67:a5:b8:99:0f:50:0e:d9:e0:44:f9:d0:2a: f8:0a:3d:64:3d:b9:8d:fc:2b:2b:cb:48:a7:8c:e8:8a:e9:19: f4:ce:da:8e:02:dd:39:d7:e5:a6:ff:f9:2d:e4:8b:2e:c7:d2: 9c:37:7a:27:54:b8:be:8f:fa:7e:01:4c:56:a3:c1:eb:d3:c9: 43:da:45:d8:10:29:6a:3e:50:ed:94:7c:aa:29:53:02:10:72: b1:9e:e9:d6:5f:cb:42:58:69:b3:35:8a:4d:21:be:0e:57:27: 5c:85:2f:9b:60:4c:e9:91:1d:af:79:d7:bf:79:e2:e4:f8:ef: 2e:26:e9:f9:92:61:9c:aa:8a:9e:28:10:c7:1f:50:00:82:dc: 89:a3:48:7e:e3:dd:26:31:a8:9b:9f:12:b0:61:36:12:08:2e: ba:4f:54:4c:97:c3:34:14:ac:30:8d:0b:3f:77:73:aa:cf:a6: 04:77:41:64 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt28l3szljVnlb+egAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NGY3NGVhZTYtOTc4OS00Mjc0LWE3NWQtYzliMDEwODM0YjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQiMUsQC+G5k77ZY7l8rEY/sUq/+8xec4I5b +g4VV9PJLwhte7WGi+6AutJPXPp29Yk1DyQgc030Ir10Sn9aLCY1dLpsZ73ynPbV A8l0FzlMhWgjrhgDYE/4dHM0KIWkUGtUPXVpY1/EOHc/j5bwRfnExe/az8Wtm22u B3g9oVQPVlfP8R3v9GYnqYKkERXYArMp6DdJTS2c5U7wpuYGmowWFPqPGHtaTXSY hWq7ZtGYcDcGZM19/fXBf22H3g4TqfK6YpTjSP76Nkb9CzSx1oz/OdSwvp9HrjxV XNgMgywQTQnI01ZpA/tQ1uAz1SVIEUt4Pvn6qXyCeGLlcsJCNQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFcxjeV7N6rfy02Lz3PqbQj++qmnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmM1ZGQ1ZjctNzNiMS0z Yjg3LTliMTEtZTg2YjRkZDk4MGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABz MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHHbFjAxaWUIxWx5L/IfCWl+8S7oYuEOKxVyRppC8FxdwZmzBwBF 8AzwcE4VNrs/xE6U+14+25jsxtyx/StBB/M70h5EWhsnUz756kjIZ6W4mQ9QDtng RPnQKvgKPWQ9uY38KyvLSKeM6IrpGfTO2o4C3TnX5ab/+S3kiy7H0pw3eidUuL6P +n4BTFajwevTyUPaRdgQKWo+UO2UfKopUwIQcrGe6dZfy0JYabM1ik0hvg5XJ1yF L5tgTOmRHa9517954uT47y4m6fmSYZyqip4oEMcfUACC3ImjSH7j3SYxqJufErBh NhIILrpPVEyXwzQUrDCNCz93c6rPpgR3QWQ= -----END CERTIFICATE-----Generated at Mon Oct 20 08:15:04 2025 by rpki-client