$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2dd55a0f-7178-33d2-a173-746a78dd0360.roa File: 2dd55a0f-7178-33d2-a173-746a78dd0360.roa (raw, json) Hash identifier: O+PEoMZLebHwxk9aA/yOJ2oEVnJtLGVJKtdDk0xwQgE= Subject key identifier: 5F:46:0C:A8:FA:03:90:1A:E2:C7:AD:5C:57:CC:B4:DB:0D:DE:85:71 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B620214B887CFFA41351EDB00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2dd55a0f-7178-33d2-a173-746a78dd0360.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 396567 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:14:b8:87:cf:fa:41:35:1e:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=b87fd8c7-d594-40b3-b581-1dc368002373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a1:8b:4f:ab:e0:af:f9:d4:94:eb:de:73:6d: da:9b:a7:21:df:09:9d:26:15:25:d9:23:46:cb:43: be:07:3b:5d:45:6e:96:ed:0f:17:b8:5a:e7:d5:42: 5a:db:ab:6e:42:d4:4e:39:57:5c:c3:43:f4:71:44: 72:55:33:48:bf:06:e4:27:dc:ac:9d:28:64:5a:f4: d3:45:09:a7:65:23:8d:e6:08:78:09:89:55:82:6f: f9:a0:41:fa:ce:23:32:63:f1:7d:bf:ca:f7:42:7f: 9a:3c:c9:3d:9e:f3:bf:79:71:c7:0a:c8:8d:d7:fc: 60:fb:9d:3a:77:9e:d7:5c:f0:c6:30:63:37:b0:88: 51:95:49:30:4f:36:b1:15:ce:0d:b9:41:73:b4:34: 66:72:d2:fe:88:9a:d2:d5:49:dd:39:d2:2b:cf:c1: b1:ca:03:51:59:82:d3:30:16:19:39:ad:66:fd:2a: 72:7e:47:ac:88:a5:46:84:2c:e5:18:50:0e:0d:54: 7b:af:33:d5:92:5b:ee:cb:90:d6:94:bd:31:28:0f: 92:01:0f:98:81:12:85:f3:6d:63:17:7e:e7:c5:49: 4b:e9:f7:16:51:e1:17:e2:27:c9:c4:80:80:8d:01: 6b:4f:3e:0d:e0:cd:fb:b6:8b:1d:a2:31:04:37:ee: 80:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:46:0C:A8:FA:03:90:1A:E2:C7:AD:5C:57:CC:B4:DB:0D:DE:85:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2dd55a0f-7178-33d2-a173-746a78dd0360.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:4f:53:89:91:e9:d3:73:ea:8b:78:ff:f7:6f:9e:10:e7:f4: 49:a3:bc:21:78:7b:82:3d:6e:57:ad:09:16:82:31:9a:6c:28: 69:e3:36:b5:a9:0f:41:2e:c9:1f:ee:0f:ec:21:12:a2:f9:85: 04:66:0e:a1:99:66:63:2e:85:5b:b6:df:02:f3:73:1e:eb:c6: 7f:aa:d9:49:c2:69:03:27:00:11:b7:d8:33:e9:e0:ee:0b:a0: 8d:ea:32:4a:8a:15:61:b0:ab:01:39:db:e8:54:43:3c:84:a1: 6b:98:b2:11:60:2f:cd:e2:73:32:97:63:76:fb:6e:64:7b:14: 8c:2a:77:5d:d0:cc:3e:e4:52:7f:7c:4d:0a:d5:b0:b9:f2:17: a8:52:d6:2e:b8:f1:18:fb:9a:bf:d7:39:7b:8f:a8:02:f6:e4: d2:da:2d:7b:9e:44:ce:d4:af:7e:76:93:6c:e6:8b:da:00:4c: 18:1d:b5:88:61:b2:53:04:b6:d1:09:b6:4d:02:6d:f5:81:95: d5:ad:1f:63:35:ba:96:0a:f2:c9:67:c2:79:c4:ab:d9:34:a0: 72:4f:75:14:5c:79:5c:24:7f:33:e8:16:06:cc:66:ab:e2:fa: c6:ff:97:77:9f:6a:5e:a4:53:fc:84:03:4f:15:fa:f2:28:3e: 5f:20:96:3f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAhS4h8/6QTUe2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk Yjg3ZmQ4YzctZDU5NC00MGIzLWI1ODEtMWRjMzY4MDAyMzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKGLT6vgr/nUlOvec23am6ch3wmdJhUl2SNG y0O+BztdRW6W7Q8XuFrn1UJa26tuQtROOVdcw0P0cURyVTNIvwbkJ9ysnShkWvTT RQmnZSON5gh4CYlVgm/5oEH6ziMyY/F9v8r3Qn+aPMk9nvO/eXHHCsiN1/xg+506 d57XXPDGMGM3sIhRlUkwTzaxFc4NuUFztDRmctL+iJrS1UndOdIrz8GxygNRWYLT MBYZOa1m/SpyfkesiKVGhCzlGFAODVR7rzPVklvuy5DWlL0xKA+SAQ+YgRKF821j F37nxUlL6fcWUeEX4ifJxICAjQFrTz4N4M37tosdojEEN+6A5QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF9GDKj6A5Aa4setXFfMtNsN3oVxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmRkNTVhMGYtNzE3OC0z M2QyLWExNzMtNzQ2YTc4ZGQwMzYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACxPU4mR6dNz6ot4//dvnhDn9EmjvCF4e4I9bletCRaCMZpsKGnj NrWpD0EuyR/uD+whEqL5hQRmDqGZZmMuhVu23wLzcx7rxn+q2UnCaQMnABG32DPp 4O4LoI3qMkqKFWGwqwE52+hUQzyEoWuYshFgL83iczKXY3b7bmR7FIwqd13QzD7k Un98TQrVsLnyF6hS1i648Rj7mr/XOXuPqAL25NLaLXueRM7Ur352k2zmi9oATBgd tYhhslMEttEJtk0CbfWBldWtH2M1upYK8slnwnnEq9k0oHJPdRRceVwkfzPoFgbM Zqvi+sb/l3efal6kU/yEA08V+vIoPl8glj8= -----END CERTIFICATE-----Generated at Wed Oct 29 20:43:02 2025 by rpki-client