$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24c9c28d-46b6-3549-8101-ad0cd851e804.roa File: 24c9c28d-46b6-3549-8101-ad0cd851e804.roa (raw, json) Hash identifier: fJ+pPshDGRWmVq4hbCUjsoACMLrtloRvROEEv4Q0heQ= Subject key identifier: 7A:FF:81:D6:AD:24:7D:66:C1:CF:7C:EB:68:1A:04:55:45:AD:1F:A6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584BAEC7C943E2D372B03FDAF820 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24c9c28d-46b6-3549-8101-ad0cd851e804.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 7342 IP address blocks: 2620:74:52::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:c9:43:e2:d3:72:b0:3f:da:f8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=c3a1e1c4-3a5b-4876-b0f7-c7f17538de81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:12:37:b8:74:c6:f9:87:b8:ed:ba:89:58:74: 74:94:a2:5d:18:a9:20:c8:9f:41:0f:da:7c:6f:26: c4:89:39:c5:0f:c3:a3:6c:74:02:38:14:9c:6d:a8: 3d:8e:7e:ec:75:73:f7:ef:33:18:bd:8a:de:66:df: e0:7b:34:99:20:46:10:15:1e:00:0f:70:85:3b:1e: 48:d9:58:0d:4d:7b:ea:76:96:44:25:de:d9:66:ef: 3a:50:50:60:1a:3a:06:fa:42:2c:2f:ab:8e:2a:c9: 86:b0:0d:73:34:a4:23:b6:30:ce:00:ad:0b:38:38: ae:b1:1d:20:c9:68:f1:c7:be:83:1c:37:42:c5:cb: 9c:10:03:d1:38:2e:16:4f:c2:8d:a0:e7:37:2e:5e: d1:7a:f1:cf:70:d4:33:1d:64:79:78:2b:d1:e0:a2: 71:02:09:94:6b:61:75:5c:7e:b3:7e:f9:d9:cb:26: 6a:ed:90:98:26:12:72:3f:91:11:a3:7e:05:8d:2a: 78:b8:2b:9c:55:49:84:0f:4b:c5:8a:27:24:d4:7c: 89:0f:c9:83:2f:33:df:92:23:54:dc:a2:18:93:dc: 6f:93:99:0b:f2:1f:c5:32:39:0c:0c:0b:d3:87:25: 92:f4:15:eb:c7:c1:ee:76:e5:0a:ee:3e:8c:3c:64: f5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:FF:81:D6:AD:24:7D:66:C1:CF:7C:EB:68:1A:04:55:45:AD:1F:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24c9c28d-46b6-3549-8101-ad0cd851e804.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:52::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:1c:0e:dd:4b:c0:19:ad:65:9d:4f:d3:16:94:1e:8a:89:92: 10:37:16:2e:b3:02:6a:43:7f:66:18:25:54:1e:02:d2:3c:9b: 14:cd:17:53:4f:fa:fd:f0:9d:92:5a:b0:da:40:c6:36:14:86: 52:c8:1c:39:34:96:fe:1a:c8:c9:84:c5:55:22:c8:00:4a:5d: f8:96:bd:e4:c7:36:17:4e:36:cc:4d:df:85:a5:67:87:e7:15: 14:75:da:99:a9:3d:51:49:25:3d:e6:11:5f:b8:b9:7a:b3:76: 79:4d:53:4d:81:6f:87:94:0f:1f:89:d5:ff:0f:07:67:e3:56: f8:75:6b:9a:50:c3:77:e4:94:ef:ea:28:00:8d:4c:cc:b7:e6: 3c:bc:f2:be:c0:79:40:f5:40:c3:b2:dd:70:dd:82:6a:5f:9c: 86:40:59:39:02:d9:93:d0:c0:b8:7b:86:35:ed:c1:81:15:19: 55:8b:61:21:5c:21:4b:84:f0:72:3c:16:34:25:99:28:f9:55: 03:ed:58:39:13:f2:e6:9e:ec:f4:d0:bc:b4:a1:0f:da:ea:8e: 37:a6:13:b8:f2:59:d6:cf:fb:6e:f4:e1:a5:dc:dc:f5:e1:0c: 4c:a8:04:77:2f:cb:3c:60:d1:52:f2:5a:59:1b:ad:89:59:c2: 19:83:9c:a0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuux8lD4tNysD/a+CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk YzNhMWUxYzQtM2E1Yi00ODc2LWIwZjctYzdmMTc1MzhkZTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+xI3uHTG+Ye47bqJWHR0lKJdGKkgyJ9BD9p8 bybEiTnFD8OjbHQCOBScbag9jn7sdXP37zMYvYreZt/gezSZIEYQFR4AD3CFOx5I 2VgNTXvqdpZEJd7ZZu86UFBgGjoG+kIsL6uOKsmGsA1zNKQjtjDOAK0LODiusR0g yWjxx76DHDdCxcucEAPROC4WT8KNoOc3Ll7RevHPcNQzHWR5eCvR4KJxAgmUa2F1 XH6zfvnZyyZq7ZCYJhJyP5ERo34FjSp4uCucVUmED0vFiick1HyJD8mDLzPfkiNU 3KIYk9xvk5kL8h/FMjkMDAvThyWS9BXrx8HuduUK7j6MPGT1NQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHr/gdatJH1mwc9862gaBFVFrR+mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjRjOWMyOGQtNDZiNi0z NTQ5LTgxMDEtYWQwY2Q4NTFlODA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHwcDt1LwBmtZZ1P0xaUHoqJkhA3Fi6zAmpDf2YYJVQeAtI8mxTN F1NP+v3wnZJasNpAxjYUhlLIHDk0lv4ayMmExVUiyABKXfiWveTHNhdONsxN34Wl Z4fnFRR12pmpPVFJJT3mEV+4uXqzdnlNU02Bb4eUDx+J1f8PB2fjVvh1a5pQw3fk lO/qKACNTMy35jy88r7AeUD1QMOy3XDdgmpfnIZAWTkC2ZPQwLh7hjXtwYEVGVWL YSFcIUuE8HI8FjQlmSj5VQPtWDkT8uae7PTQvLShD9rqjjemE7jyWdbP+2704aXc 3PXhDEyoBHcvyzxg0VLyWlkbrYlZwhmDnKA= -----END CERTIFICATE-----Generated at Wed Oct 29 20:26:11 2025 by rpki-client