$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b462fa8-0361-3b16-9418-ac7da4982a9e.roa File: 3b462fa8-0361-3b16-9418-ac7da4982a9e.roa (raw, json) Hash identifier: 8Zifcy2/OY9N/UsbzsqwoYni1glLwsUHm1ZGe/EW5mE= Subject key identifier: 8D:28:36:8A:17:89:AB:1E:AE:79:C2:03:26:15:65:10:AA:84:BB:9B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF0F158FF6C2D8B35906B2580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b462fa8-0361-3b16-9418-ac7da4982a9e.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 19836 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:58:ff:6c:2d:8b:35:90:6b:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=bb623923-c053-4bea-9e7f-2d74c7e415ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e4:9e:7d:d5:aa:dd:33:52:fb:8f:03:29:70: c5:92:46:8c:f8:2a:4d:fc:26:4f:84:9f:28:a1:10: 27:3f:48:d1:7e:92:c6:cb:de:b5:e0:e8:bf:cc:c0: 1a:e2:26:6f:f3:df:69:14:e2:c7:6c:ce:cc:d7:51: 43:a5:83:74:a2:6d:d3:68:01:f8:c6:9b:8a:60:ef: 1d:2d:7e:ac:ad:3e:05:88:27:07:f2:9b:5c:09:29: d7:6f:43:bf:2c:64:40:c5:38:40:bf:16:b8:ae:f6: ba:83:33:83:d3:ef:aa:ad:c1:33:01:20:ae:fb:07: 55:64:e8:5b:c1:ba:47:86:3a:68:7d:6f:92:a6:a5: bf:ef:a5:35:12:95:91:84:f1:6d:83:1c:08:9c:74: 03:41:18:b2:d3:2e:d2:c0:4e:91:52:37:df:d1:f8: d5:f9:74:6c:ec:14:97:15:15:53:a6:f0:69:27:43: a8:a4:16:7d:7b:4d:a9:d7:e8:87:ab:e5:2f:b2:18: 01:7d:6c:a0:f8:9e:10:9c:88:4e:c4:45:8a:80:53: 98:5f:74:c2:99:51:c6:29:e6:4d:60:25:c8:08:77: c9:30:43:f3:13:37:bd:e9:16:e7:70:eb:d4:32:23: d5:12:29:e0:b1:a7:7f:ff:df:59:bc:10:25:cf:7f: d2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:28:36:8A:17:89:AB:1E:AE:79:C2:03:26:15:65:10:AA:84:BB:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b462fa8-0361-3b16-9418-ac7da4982a9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:91:c3:14:60:49:02:de:a3:07:4f:25:2c:fd:1e:38:48:12: 1c:39:52:9d:0d:f8:23:2e:b8:48:c6:1e:4d:62:d8:a9:9b:2f: 87:95:b2:30:1e:37:e2:25:64:69:69:4d:9d:b2:e4:18:ca:a9: 49:a2:a4:70:d3:57:bb:f5:bb:7e:6b:74:35:40:dc:f4:30:f4: e8:95:b1:7b:59:01:d1:13:71:8b:f2:29:b4:b9:80:70:a9:bb: aa:88:44:73:e2:88:7a:d3:15:a5:75:1e:f9:e6:58:a8:3d:7d: 5c:a7:4c:9b:67:00:6f:10:83:56:e1:4e:33:0d:47:4f:fc:54: a2:16:ce:94:11:49:cf:07:2b:2a:39:28:54:0c:a6:66:a7:b1: fa:cd:4b:f6:1d:61:af:61:f8:05:4d:ad:c9:c8:fd:da:04:de: 52:38:f0:96:8e:2b:eb:4d:3e:d8:ba:ee:1d:9a:3a:f5:be:40: b5:fe:49:4a:3f:93:0b:7e:86:d7:4c:3d:72:de:15:83:40:85: 34:a2:a9:4d:8c:bf:aa:9d:18:56:ba:ad:d7:18:16:01:26:f7: f9:d2:e0:3a:cc:4f:28:5f:81:2d:8d:c5:69:30:12:82:4b:a9: e3:86:b6:25:28:f8:b5:ce:ae:8c:b3:c6:b2:eb:83:3c:a1:c4: 5f:94:47:d4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8Vj/bC2LNZBrJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk YmI2MjM5MjMtYzA1My00YmVhLTllN2YtMmQ3NGM3ZTQxNWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+SefdWq3TNS+48DKXDFkkaM+CpN/CZPhJ8o oRAnP0jRfpLGy9614Oi/zMAa4iZv899pFOLHbM7M11FDpYN0om3TaAH4xpuKYO8d LX6srT4FiCcH8ptcCSnXb0O/LGRAxThAvxa4rva6gzOD0++qrcEzASCu+wdVZOhb wbpHhjpofW+SpqW/76U1EpWRhPFtgxwInHQDQRiy0y7SwE6RUjff0fjV+XRs7BSX FRVTpvBpJ0OopBZ9e02p1+iHq+UvshgBfWyg+J4QnIhOxEWKgFOYX3TCmVHGKeZN YCXICHfJMEPzEze96RbncOvUMiPVEingsad//99ZvBAlz3/STwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI0oNooXiasernnCAyYVZRCqhLubMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2I0NjJmYTgtMDM2MS0z YjE2LTk0MTgtYWM3ZGE0OTgyYTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIqRwxRgSQLeowdPJSz9HjhIEhw5Up0N+CMuuEjGHk1i2KmbL4eV sjAeN+IlZGlpTZ2y5BjKqUmipHDTV7v1u35rdDVA3PQw9OiVsXtZAdETcYvyKbS5 gHCpu6qIRHPiiHrTFaV1HvnmWKg9fVynTJtnAG8Qg1bhTjMNR0/8VKIWzpQRSc8H Kyo5KFQMpmansfrNS/YdYa9h+AVNrcnI/doE3lI48JaOK+tNPti67h2aOvW+QLX+ SUo/kwt+htdMPXLeFYNAhTSiqU2Mv6qdGFa6rdcYFgEm9/nS4DrMTyhfgS2NxWkw EoJLqeOGtiUo+LXOroyzxrLrgzyhxF+UR9Q= -----END CERTIFICATE-----Generated at Wed Oct 29 11:55:29 2025 by rpki-client