$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fffe64cd-8bd0-3bee-8d1a-a408a66c2895.roa File: fffe64cd-8bd0-3bee-8d1a-a408a66c2895.roa (raw, json) Hash identifier: CE6gz+EaNfnKxgxU41aWEyAi4Cu9eITQ2FveHwINCWU= Subject key identifier: 7B:C0:78:11:8B:57:40:2F:57:21:A6:07:F0:57:F5:FD:58:6D:60:2C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B620229E58EEE5F373EDE2D00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fffe64cd-8bd0-3bee-8d1a-a408a66c2895.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 36623 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:29:e5:8e:ee:5f:37:3e:de:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=68a40cc9-777a-4a16-b5a5-1c8669ab8e3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a4:ec:58:d0:b2:3e:d8:4f:b4:13:bc:dc:fe: d1:3c:3e:42:c0:7a:47:92:f4:d0:2c:62:56:9d:bc: 72:72:a4:8b:a5:77:16:83:48:ce:ca:66:5b:58:28: 7e:76:79:ef:ca:e2:77:d6:fa:df:49:85:a9:57:ca: 4c:c2:25:6a:3b:ef:04:2b:9c:07:67:27:af:2f:df: d6:71:2a:47:82:93:29:db:1c:97:3c:a2:dd:02:91: 1b:ea:60:a0:de:8f:c5:d8:bd:61:a6:7d:80:de:cf: 72:11:25:4e:ec:54:08:b2:66:8d:8d:ba:50:35:34: 64:e3:12:06:2e:15:cc:37:3c:f5:bd:c6:28:c5:2c: 3e:7d:0a:bf:0d:8c:fd:df:f1:35:39:37:dc:5b:1b: f0:f0:07:89:4c:da:4f:d1:27:b1:be:93:46:b0:fa: e3:f0:32:18:30:1e:4c:ab:0e:29:ea:16:57:6a:5e: 60:74:54:bd:e9:10:96:9c:23:5e:78:73:7b:27:57: cb:36:2d:01:96:fe:d6:eb:42:f7:5e:f8:6d:7b:35: bf:02:74:dd:6b:b4:02:d4:59:cc:ae:b0:bf:11:6a: 6e:09:f6:94:ff:34:3a:d9:7c:27:3c:fc:85:8f:99: d9:36:f0:3e:15:38:ec:9d:f9:41:e2:a5:8f:d1:18: 99:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:C0:78:11:8B:57:40:2F:57:21:A6:07:F0:57:F5:FD:58:6D:60:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fffe64cd-8bd0-3bee-8d1a-a408a66c2895.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:b1:4d:76:cd:63:ff:65:8f:26:44:2b:53:1d:5a:e6:8e:8d: cc:f5:33:cb:ce:f8:3b:3a:4d:76:e3:56:d7:cc:47:05:e8:62: d8:91:0b:73:88:9d:0a:bb:54:37:58:3d:6d:aa:1f:7f:ab:16: ac:cb:e7:cc:97:c0:d5:18:33:74:a8:a8:51:54:1a:1d:1e:9a: 33:ad:d3:96:e9:b0:62:c1:06:f6:e8:f2:91:3a:23:8b:49:fc: 41:83:73:10:41:db:4b:89:5a:6e:00:5e:c1:d9:42:51:cc:bf: d4:22:08:ee:85:42:d5:86:f2:cc:e2:f1:cc:51:66:ac:d0:81: 02:10:5c:96:5f:f8:f2:3a:a2:3c:ca:28:e5:f8:74:f8:34:15: ac:e5:b1:37:46:34:82:b0:e7:b2:01:c2:6d:3f:ab:13:34:6c: a5:9f:4f:94:42:3b:08:64:d1:6b:e6:29:f5:9c:3e:9f:0b:07: 3a:bf:47:11:f1:03:fc:60:e1:fa:6c:00:48:c1:4b:15:2d:0b: ad:2d:b2:09:9e:58:69:f5:cb:d2:ba:41:a5:ff:3c:7a:da:c9: da:43:79:f8:11:a3:2b:74:80:cc:6d:49:e0:03:5b:9c:b6:c6: 40:83:cf:2c:47:46:dc:ed:0a:45:ac:af:dd:8b:ee:f9:ad:88: 1d:86:e0:ed -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAinlju5fNz7eLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NjhhNDBjYzktNzc3YS00YTE2LWI1YTUtMWM4NjY5YWI4ZTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKTsWNCyPthPtBO83P7RPD5CwHpHkvTQLGJW nbxycqSLpXcWg0jOymZbWCh+dnnvyuJ31vrfSYWpV8pMwiVqO+8EK5wHZyevL9/W cSpHgpMp2xyXPKLdApEb6mCg3o/F2L1hpn2A3s9yESVO7FQIsmaNjbpQNTRk4xIG LhXMNzz1vcYoxSw+fQq/DYz93/E1OTfcWxvw8AeJTNpP0SexvpNGsPrj8DIYMB5M qw4p6hZXal5gdFS96RCWnCNeeHN7J1fLNi0Blv7W60L3XvhtezW/AnTda7QC1FnM rrC/EWpuCfaU/zQ62XwnPPyFj5nZNvA+FTjsnflB4qWP0RiZuQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHvAeBGLV0AvVyGmB/BX9f1YbWAsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmZmZTY0Y2QtOGJkMC0z YmVlLThkMWEtYTQwOGE2NmMyODk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEqxTXbNY/9ljyZEK1MdWuaOjcz1M8vO+Ds6TXbjVtfMRwXoYtiR C3OInQq7VDdYPW2qH3+rFqzL58yXwNUYM3SoqFFUGh0emjOt05bpsGLBBvbo8pE6 I4tJ/EGDcxBB20uJWm4AXsHZQlHMv9QiCO6FQtWG8szi8cxRZqzQgQIQXJZf+PI6 ojzKKOX4dPg0FazlsTdGNIKw57IBwm0/qxM0bKWfT5RCOwhk0WvmKfWcPp8LBzq/ RxHxA/xg4fpsAEjBSxUtC60tsgmeWGn1y9K6QaX/PHraydpDefgRoyt0gMxtSeAD W5y2xkCDzyxHRtztCkWsr92L7vmtiB2G4O0= -----END CERTIFICATE-----Generated at Mon Oct 20 10:22:50 2025 by rpki-client