$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/03fbe936-8da8-38e1-b683-2b8ebc871675.roa File: 03fbe936-8da8-38e1-b683-2b8ebc871675.roa (raw, json) Hash identifier: qYk9bm71H4pO5tI3FgGwyyEluw0IIFTNw3vQGGM7AWM= Subject key identifier: CE:09:7F:30:5C:09:20:D5:40:7B:4D:94:89:B2:88:91:D4:2E:BA:05 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6202336335166DE85283C0E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/03fbe936-8da8-38e1-b683-2b8ebc871675.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 396611 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:33:63:35:16:6d:e8:52:83:c0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=84d2dd0c-ba1f-43fd-82cd-8ffe4a1268f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:56:32:d5:f5:2b:e4:d4:3f:f5:b7:cb:00:4e: af:8c:d4:5b:05:67:04:45:e6:8a:21:27:79:0b:b7: f7:23:d1:f9:e8:26:cd:d3:46:9e:5b:ff:eb:c9:fd: 18:0b:d6:12:fe:76:f1:38:39:03:f9:1a:ea:49:48: 0e:a7:c1:63:d1:bc:ee:d4:61:c2:60:e1:2a:33:54: 18:ff:68:56:43:6f:bd:e9:29:eb:e9:6f:11:97:a9: d9:57:ed:0a:d7:f3:f1:1d:be:87:f9:06:6d:8e:09: ed:8e:3b:5f:c0:62:94:15:0f:d4:7b:01:4f:26:73: 3e:2f:b0:2f:e6:94:6f:ad:63:29:dc:46:7a:be:4e: 8a:de:2c:9f:7f:bf:5f:2d:05:c5:01:d4:26:c8:2e: a2:70:e0:72:fa:16:f9:09:95:a8:15:50:67:8d:16: 82:0b:46:7b:bd:67:2f:aa:c2:cb:ea:de:00:44:8e: 64:e2:13:15:c7:bc:b3:6b:82:d5:1f:8f:c0:63:b7: 2e:b5:b9:93:fe:0e:13:08:4a:31:a7:14:77:58:52: 9f:7a:56:65:13:20:d7:43:96:8f:7d:53:b7:86:e0: e7:33:2a:57:21:bd:48:fe:07:5e:f3:14:47:62:e9: 1a:d7:80:ea:23:ab:8c:1b:75:6e:99:2a:84:49:08: f9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:09:7F:30:5C:09:20:D5:40:7B:4D:94:89:B2:88:91:D4:2E:BA:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/03fbe936-8da8-38e1-b683-2b8ebc871675.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:3a:fd:11:da:36:91:65:b8:8b:47:4b:39:bf:4f:a9:69:f0: c8:9e:fb:3c:bd:2a:1b:0a:86:ed:6d:4d:c1:01:b4:42:e8:86: ec:5d:7b:f8:2d:56:0a:54:e2:f9:36:df:09:99:42:01:7b:43: 37:cb:22:04:8b:bb:c1:94:ab:77:21:e2:71:a0:84:38:c9:ed: 78:dc:7b:79:ea:3c:c3:08:90:fb:a1:55:cc:bf:b0:00:2c:e9: 6e:39:eb:01:23:38:ab:03:49:ef:bd:e5:3b:a3:7e:0d:71:dd: b1:04:b8:90:b1:64:76:5b:4e:f0:95:ea:26:6d:27:2f:42:8c: d8:5e:c7:8a:5d:3b:37:85:e8:cd:0e:b4:aa:4e:a7:94:13:87: 17:0e:31:c0:ba:2c:eb:78:c9:f8:23:fa:46:29:57:d2:73:8f: 7f:5d:52:40:55:e5:03:7d:18:d0:fa:ef:a9:21:26:07:5f:64: 89:8d:47:23:3d:51:25:60:f9:ab:72:11:8b:d2:10:3c:90:31: 97:f7:6e:6b:e3:37:47:1e:f9:d9:4a:96:7f:d7:e2:c1:2b:62: c2:96:2b:a2:9c:b1:22:b3:f6:67:b7:22:45:01:06:8c:62:da: 5c:2b:09:39:e0:eb:82:4c:1e:45:69:e5:5c:45:49:b6:49:67: 77:f2:46:ff -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAjNjNRZt6FKDwOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ODRkMmRkMGMtYmExZi00M2ZkLTgyY2QtOGZmZTRhMTI2OGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVYy1fUr5NQ/9bfLAE6vjNRbBWcEReaKISd5 C7f3I9H56CbN00aeW//ryf0YC9YS/nbxODkD+RrqSUgOp8Fj0bzu1GHCYOEqM1QY /2hWQ2+96Snr6W8Rl6nZV+0K1/PxHb6H+QZtjgntjjtfwGKUFQ/UewFPJnM+L7Av 5pRvrWMp3EZ6vk6K3iyff79fLQXFAdQmyC6icOBy+hb5CZWoFVBnjRaCC0Z7vWcv qsLL6t4ARI5k4hMVx7yza4LVH4/AY7cutbmT/g4TCEoxpxR3WFKfelZlEyDXQ5aP fVO3huDnMypXIb1I/gde8xRHYuka14DqI6uMG3VumSqESQj5AQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM4JfzBcCSDVQHtNlImyiJHULroFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDNmYmU5MzYtOGRhOC0z OGUxLWI2ODMtMmI4ZWJjODcxNjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG06/RHaNpFluItHSzm/T6lp8Mie+zy9KhsKhu1tTcEBtELohuxd e/gtVgpU4vk23wmZQgF7QzfLIgSLu8GUq3ch4nGghDjJ7Xjce3nqPMMIkPuhVcy/ sAAs6W456wEjOKsDSe+95Tujfg1x3bEEuJCxZHZbTvCV6iZtJy9CjNhex4pdOzeF 6M0OtKpOp5QThxcOMcC6LOt4yfgj+kYpV9Jzj39dUkBV5QN9GND676khJgdfZImN RyM9USVg+atyEYvSEDyQMZf3bmvjN0ce+dlKln/X4sErYsKWK6KcsSKz9me3IkUB Boxi2lwrCTng64JMHkVp5VxFSbZJZ3fyRv8= -----END CERTIFICATE-----Generated at Wed Oct 29 20:39:50 2025 by rpki-client