$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b341c3a-7e09-3b4b-bd2e-e9ea70718d54.roa File: 2b341c3a-7e09-3b4b-bd2e-e9ea70718d54.roa (raw, json) Hash identifier: jX790vjSiMnjxHYU6J8yV0myDIHWv+czXyfpCcAl1vg= Subject key identifier: C3:CD:2D:6A:B0:4D:B6:B8:C5:77:7D:52:C8:EC:04:60:0C:2B:B4:DF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584BAEC7C6432E9C233E6C48D840 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b341c3a-7e09-3b4b-bd2e-e9ea70718d54.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 7342 IP address blocks: 2620:74:45::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:c6:43:2e:9c:23:3e:6c:48:d8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=bc7efafd-d659-4895-814f-fd2545984245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:af:ee:32:3f:87:65:94:dd:86:8b:30:1a:26: 16:a8:28:a1:b5:7b:1a:cf:a3:87:b5:71:e3:81:eb: 38:11:dd:50:22:e8:b4:67:e9:a4:a5:e7:8d:81:f1: 23:4e:6e:b1:c3:db:7c:72:00:e4:23:5f:b7:46:b4: 09:ce:ca:15:5d:7c:72:ae:1b:38:54:1c:1c:af:99: 76:6e:29:87:79:63:e5:2f:e3:43:0d:60:df:e4:0b: 81:8c:d3:3c:32:e5:12:d7:27:f7:3c:5f:1d:99:14: 7e:9a:9b:1a:2c:8d:fe:24:4c:ee:9a:98:dd:60:6b: 7c:65:0f:ce:57:d1:71:35:2d:6a:56:36:26:97:7d: fb:95:a0:a9:68:df:9f:23:c1:70:3f:0c:4a:cf:37: 93:be:db:db:60:ab:8f:ba:2c:45:cd:00:6a:d2:b5: 5f:e5:ca:32:43:fe:3b:fa:c6:9b:02:e3:81:c0:4f: c5:df:69:ef:9f:b6:5e:be:b4:d7:c9:a1:7d:0f:6c: cc:5f:04:5b:f3:62:60:00:8d:8b:b1:01:59:fc:e5: 26:4a:0d:a1:bc:0e:9f:78:71:5c:99:b9:40:c9:7f: 93:b8:ce:cc:14:01:a1:6d:27:97:d9:34:1d:4b:d4: f7:eb:ea:12:e6:77:d8:85:ed:dd:bb:1a:4e:07:61: 36:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:CD:2D:6A:B0:4D:B6:B8:C5:77:7D:52:C8:EC:04:60:0C:2B:B4:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b341c3a-7e09-3b4b-bd2e-e9ea70718d54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:45::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:c7:0d:71:35:ae:9f:c4:7a:3f:b1:a3:4c:0b:73:76:40:1d: de:88:73:15:b7:87:45:8f:13:12:5b:db:66:e2:22:c8:08:db: 75:23:f8:13:47:07:6f:82:10:27:ac:c4:d7:2b:83:9e:ac:12: 96:55:e6:6f:f7:32:66:1c:ae:c9:81:44:d0:30:68:82:cb:47: 39:75:2e:eb:c5:a0:a4:ee:47:a6:3a:35:90:2a:7a:44:b3:34: a8:b0:65:ab:b4:41:96:c8:fb:1d:31:b2:20:6d:23:73:36:91: d6:4c:e8:40:1e:5d:7b:ee:be:a6:95:af:a5:39:60:7e:07:7f: 91:13:c2:4e:ae:7e:bf:38:16:6e:3b:6c:13:b9:bb:fc:07:0d: e8:30:13:8a:3d:e1:db:fb:92:bb:1f:1f:df:00:7d:0f:af:66: 8e:2b:91:b7:8c:9e:cf:88:09:4e:39:25:11:8a:c2:c2:74:bb: 47:99:3f:17:2a:a9:71:55:ab:72:dc:77:33:44:ce:a3:98:f1: 99:a8:92:7d:dc:46:fc:13:87:30:a8:2a:8c:4f:21:d8:c4:81: a0:d2:e4:d7:53:04:88:e3:3b:4a:22:b0:17:03:89:3c:64:3a: 11:a7:7b:38:5d:e1:66:b1:30:d4:c5:db:df:d8:bc:78:0b:61: bc:06:3e:e9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuux8ZDLpwjPmxI2EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk YmM3ZWZhZmQtZDY1OS00ODk1LTgxNGYtZmQyNTQ1OTg0MjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6/uMj+HZZTdhoswGiYWqCihtXsaz6OHtXHj ges4Ed1QIui0Z+mkpeeNgfEjTm6xw9t8cgDkI1+3RrQJzsoVXXxyrhs4VBwcr5l2 bimHeWPlL+NDDWDf5AuBjNM8MuUS1yf3PF8dmRR+mpsaLI3+JEzumpjdYGt8ZQ/O V9FxNS1qVjYml337laCpaN+fI8FwPwxKzzeTvtvbYKuPuixFzQBq0rVf5coyQ/47 +sabAuOBwE/F32nvn7ZevrTXyaF9D2zMXwRb82JgAI2LsQFZ/OUmSg2hvA6feHFc mblAyX+TuM7MFAGhbSeX2TQdS9T36+oS5nfYhe3duxpOB2E2MwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMPNLWqwTba4xXd9UsjsBGAMK7TfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmIzNDFjM2EtN2UwOS0z YjRiLWJkMmUtZTllYTcwNzE4ZDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA3HDXE1rp/Eej+xo0wLc3ZAHd6IcxW3h0WPExJb22biIsgI23Uj +BNHB2+CECesxNcrg56sEpZV5m/3MmYcrsmBRNAwaILLRzl1LuvFoKTuR6Y6NZAq ekSzNKiwZau0QZbI+x0xsiBtI3M2kdZM6EAeXXvuvqaVr6U5YH4Hf5ETwk6ufr84 Fm47bBO5u/wHDegwE4o94dv7krsfH98AfQ+vZo4rkbeMns+ICU45JRGKwsJ0u0eZ PxcqqXFVq3LcdzNEzqOY8Zmokn3cRvwThzCoKoxPIdjEgaDS5NdTBIjjO0oisBcD iTxkOhGnezhd4WaxMNTF29/YvHgLYbwGPuk= -----END CERTIFICATE-----Generated at Wed Oct 29 20:25:09 2025 by rpki-client