$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f922387-c372-3943-a3d2-d872a8378668.roa File: 0f922387-c372-3943-a3d2-d872a8378668.roa (raw, json) Hash identifier: FJwxa5Y73azdrWEB7mbw5zcGEzrE/9SEcqxHr105tdM= Subject key identifier: 09:F7:26:48:1D:DC:EE:0D:92:EE:C6:33:EC:8B:F8:A6:83:3F:1E:24 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF0F15D5B0DC27677F1DCBE40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f922387-c372-3943-a3d2-d872a8378668.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 396554 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:5d:5b:0d:c2:76:77:f1:dc:be:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=a32689fa-5c3d-4209-b9e1-2f5b053592be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:98:78:2a:7f:bb:23:bb:0c:1b:f1:99:b4:13: d9:d0:02:44:73:e4:1c:f5:a1:6e:5a:42:3f:b1:9e: d4:51:fc:87:f9:d5:78:87:78:a7:69:11:2c:71:69: 6a:e6:45:c7:08:d2:ad:ac:90:5c:e6:12:5a:21:c9: 41:b5:0e:31:be:22:0a:49:97:f7:fa:80:b9:a1:d3: 86:a9:eb:25:2f:cd:54:59:0c:35:43:ff:f4:2f:e0: 45:45:a0:a2:63:9e:3f:9a:0a:3c:66:15:51:33:87: e1:aa:b1:de:47:88:7e:07:72:e9:48:67:f3:47:bf: b8:16:99:01:05:11:7d:86:32:0e:e0:d3:7d:a2:45: 59:55:5b:8d:ed:86:21:29:ba:36:94:f3:49:78:12: 16:0b:f5:56:ae:8e:35:28:22:f3:a6:08:5e:e5:d3: c0:7e:d6:be:3f:36:10:28:0b:ef:0b:59:dc:d0:1b: b1:dc:74:18:a3:54:92:fa:f4:85:31:9e:fd:f8:36: 46:f1:cf:62:75:f3:39:23:34:2d:f1:62:94:e5:69: 57:b7:ec:15:28:91:66:01:c4:0d:dc:62:48:3c:84: ab:c0:43:5d:dd:17:c6:cb:3c:a2:30:50:0d:46:31: 58:b7:21:eb:55:f2:30:29:6b:f8:fe:e5:cd:c7:5f: ec:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:F7:26:48:1D:DC:EE:0D:92:EE:C6:33:EC:8B:F8:A6:83:3F:1E:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f922387-c372-3943-a3d2-d872a8378668.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:af:c9:2f:15:1f:ea:7b:1b:b0:2a:c8:58:73:2f:43:79:ab: 48:c0:88:69:bb:ca:aa:9f:62:eb:4d:06:cd:43:94:9b:31:c8: 08:d0:ac:f9:38:0d:40:8a:3a:db:33:71:eb:8a:02:8b:8b:5f: 23:2a:30:3b:f9:42:64:c1:0f:e0:46:07:f0:95:52:1d:0b:9a: 45:81:c3:db:32:d1:3e:fb:66:83:a8:d4:72:c8:da:ea:45:60: 9e:65:80:d2:d6:3a:38:0b:e9:49:7b:f5:e4:91:19:1d:57:b8: 96:04:1d:d5:5f:19:a9:51:75:ca:51:42:c5:4b:d3:b3:7a:b8: d1:1f:64:5a:8a:bd:5e:a5:c8:1c:f8:89:7d:f1:53:67:a3:1c: 58:c8:18:11:30:16:62:5f:51:dc:fb:36:b0:fb:09:e6:2c:61: 44:26:0a:1c:e0:5b:e0:ce:bd:11:03:68:4b:03:ab:a1:48:70: b7:1f:be:44:e9:27:ee:4d:53:54:0a:74:35:e4:a1:bc:5a:e0: e3:59:03:6e:17:1f:5f:85:17:99:6c:b3:8b:47:a9:73:33:71: 72:20:9f:3c:fd:19:fa:7f:86:49:dd:c9:f3:7c:be:7f:81:e0: 91:b1:5c:26:86:50:e5:02:fc:aa:98:00:1e:39:21:95:3a:23: 77:15:8f:b6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8V1bDcJ2d/HcvkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk YTMyNjg5ZmEtNWMzZC00MjA5LWI5ZTEtMmY1YjA1MzU5MmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJh4Kn+7I7sMG/GZtBPZ0AJEc+Qc9aFuWkI/ sZ7UUfyH+dV4h3inaREscWlq5kXHCNKtrJBc5hJaIclBtQ4xviIKSZf3+oC5odOG qeslL81UWQw1Q//0L+BFRaCiY54/mgo8ZhVRM4fhqrHeR4h+B3LpSGfzR7+4FpkB BRF9hjIO4NN9okVZVVuN7YYhKbo2lPNJeBIWC/VWro41KCLzpghe5dPAfta+PzYQ KAvvC1nc0Bux3HQYo1SS+vSFMZ79+DZG8c9idfM5IzQt8WKU5WlXt+wVKJFmAcQN 3GJIPISrwENd3RfGyzyiMFANRjFYtyHrVfIwKWv4/uXNx1/stwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAn3Jkgd3O4Nku7GM+yL+KaDPx4kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGY5MjIzODctYzM3Mi0z OTQzLWEzZDItZDg3MmE4Mzc4NjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH2vyS8VH+p7G7AqyFhzL0N5q0jAiGm7yqqfYutNBs1DlJsxyAjQ rPk4DUCKOtszceuKAouLXyMqMDv5QmTBD+BGB/CVUh0LmkWBw9sy0T77ZoOo1HLI 2upFYJ5lgNLWOjgL6Ul79eSRGR1XuJYEHdVfGalRdcpRQsVL07N6uNEfZFqKvV6l yBz4iX3xU2ejHFjIGBEwFmJfUdz7NrD7CeYsYUQmChzgW+DOvREDaEsDq6FIcLcf vkTpJ+5NU1QKdDXkobxa4ONZA24XH1+FF5lss4tHqXMzcXIgnzz9Gfp/hkndyfN8 vn+B4JGxXCaGUOUC/KqYAB45IZU6I3cVj7Y= -----END CERTIFICATE-----Generated at Wed Oct 29 20:32:14 2025 by rpki-client