$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1487c29f-5570-325d-82af-e15061a6002b.roa File: 1487c29f-5570-325d-82af-e15061a6002b.roa (raw, json) Hash identifier: 7yvnxiba/2Kjk8XCQrOTntKahI50Ms34WoCMniVj2n8= Subject key identifier: AB:BA:E0:2C:F4:B5:85:4B:64:01:A1:1E:A2:EA:22:9F:B2:83:DF:73 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B62023ACC05E3347982E31480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1487c29f-5570-325d-82af-e15061a6002b.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 397195 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:3a:cc:05:e3:34:79:82:e3:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=d676f3ab-c9fb-45e2-bb34-21e113b0bd43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:87:ea:26:1f:d0:64:82:1c:78:11:61:53:cf: aa:ce:b8:85:46:e0:b7:ce:56:94:2c:bb:ae:76:49: 9d:b1:d9:2f:08:fd:87:4f:73:bb:79:aa:f7:8a:93: 49:4b:37:37:cf:92:b9:55:e9:8c:f9:90:06:e0:c1: 9c:66:e0:4c:f3:c6:49:51:93:76:99:b1:e7:51:df: 0c:2f:de:d8:5f:bd:0d:70:53:ba:70:92:d9:c0:d0: 87:d7:5d:65:d3:15:8f:8b:93:31:4b:c8:79:ef:80: ca:e8:0a:a7:b4:ac:4f:a4:d5:5a:86:58:e6:86:88: 54:61:6a:9e:d2:8b:bc:c4:6f:8c:0c:35:5d:b1:40: e6:27:a1:76:7d:42:ed:0d:12:17:9f:9c:b4:a5:be: 02:db:2b:3a:20:eb:bb:df:84:8f:a4:e2:07:34:ab: 91:e0:a1:e9:6f:54:30:2a:82:aa:c9:8d:18:8d:fa: 06:ad:5b:e9:ad:37:f2:08:31:bb:59:1a:dc:cd:1a: 24:5f:ea:e5:8c:8a:0e:18:13:02:49:c9:3e:99:58: a7:34:1b:25:2c:cd:d1:e9:a9:8b:f0:ed:78:7e:c3: c3:69:f5:57:10:57:55:b2:55:f2:33:43:71:a0:31: f1:cb:b4:6a:b2:0c:d7:a1:2a:89:ad:2a:60:80:f7: e1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:BA:E0:2C:F4:B5:85:4B:64:01:A1:1E:A2:EA:22:9F:B2:83:DF:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1487c29f-5570-325d-82af-e15061a6002b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:65:92:70:9d:90:00:de:59:10:95:dd:f9:23:27:20:b4:fb: 61:9d:d2:89:d1:8d:ae:32:97:ac:ef:ad:49:ea:6f:a5:7c:d5: c4:2a:47:67:2f:a2:d2:b9:fb:e3:04:87:cd:97:7d:2c:c0:bf: 2e:31:40:1c:27:ab:e9:15:d2:f1:40:5e:8c:64:14:08:d9:fc: 0e:e9:91:63:7a:bf:17:06:0e:eb:56:bf:15:8b:1a:b7:39:04: 57:95:cd:85:7f:f8:40:f9:bd:13:05:56:ac:51:35:06:c4:74: 9a:97:10:cf:bf:86:e9:19:66:32:8f:62:a4:8f:ef:2a:47:57: 96:b6:44:19:b5:5e:0a:f2:70:2f:d5:28:e2:4c:9c:53:19:88: 60:6a:b5:ae:a6:fd:65:57:f5:40:32:9c:76:6f:8e:ed:06:6f: b0:cd:07:1d:5d:31:bb:97:aa:17:c1:51:b2:40:1a:d9:e6:5f: 42:52:09:93:36:f9:dd:88:eb:3c:73:ff:8c:ab:4b:4a:cd:55: dc:f9:68:a5:b2:10:3e:34:fb:15:a1:f1:b4:fb:c5:0a:36:af: c6:58:a8:0e:fd:79:a9:e6:71:66:4b:a1:28:9c:b9:f6:77:c6: 50:04:86:79:8f:65:4a:4f:1a:ee:5e:00:47:c7:fd:57:b4:8c: 9b:98:35:77 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAjrMBeM0eYLjFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZDY3NmYzYWItYzlmYi00NWUyLWJiMzQtMjFlMTEzYjBiZDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYfqJh/QZIIceBFhU8+qzriFRuC3zlaULLuu dkmdsdkvCP2HT3O7ear3ipNJSzc3z5K5VemM+ZAG4MGcZuBM88ZJUZN2mbHnUd8M L97YX70NcFO6cJLZwNCH111l0xWPi5MxS8h574DK6AqntKxPpNVahljmhohUYWqe 0ou8xG+MDDVdsUDmJ6F2fULtDRIXn5y0pb4C2ys6IOu734SPpOIHNKuR4KHpb1Qw KoKqyY0YjfoGrVvprTfyCDG7WRrczRokX+rljIoOGBMCSck+mVinNBslLM3R6amL 8O14fsPDafVXEFdVslXyM0NxoDHxy7RqsgzXoSqJrSpggPfhSwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKu64Cz0tYVLZAGhHqLqIp+yg99zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTQ4N2MyOWYtNTU3MC0z MjVkLTgyYWYtZTE1MDYxYTYwMDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI5lknCdkADeWRCV3fkjJyC0+2Gd0onRja4yl6zvrUnqb6V81cQq R2cvotK5++MEh82XfSzAvy4xQBwnq+kV0vFAXoxkFAjZ/A7pkWN6vxcGDutWvxWL Grc5BFeVzYV/+ED5vRMFVqxRNQbEdJqXEM+/hukZZjKPYqSP7ypHV5a2RBm1Xgry cC/VKOJMnFMZiGBqta6m/WVX9UAynHZvju0Gb7DNBx1dMbuXqhfBUbJAGtnmX0JS CZM2+d2I6zxz/4yrS0rNVdz5aKWyED40+xWh8bT7xQo2r8ZYqA79eanmcWZLoSic ufZ3xlAEhnmPZUpPGu5eAEfH/Ve0jJuYNXc= -----END CERTIFICATE-----Generated at Wed Oct 29 13:50:22 2025 by rpki-client