$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e9fba4a-ed0e-3f6f-8ea7-1d449adeb1af.roa File: 3e9fba4a-ed0e-3f6f-8ea7-1d449adeb1af.roa (raw, json) Hash identifier: gR5Zv5SiG5vEEVKhmCsTo2r8ZnPWROsC55FjtbBrs9M= Subject key identifier: A7:D9:9B:4A:2C:F5:31:64:C4:EB:C3:A0:C6:18:67:25:B0:E1:D4:3F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B48E2120D00B0FA9E1BFB0530 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e9fba4a-ed0e-3f6f-8ea7-1d449adeb1af.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397198 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:12:0d:00:b0:fa:9e:1b:fb:05:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=64c173ef-2fe3-4815-90a1-ecda78fdb9ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f0:d2:98:5f:9e:61:1b:60:f7:aa:d3:f9:1b: 1c:08:ce:15:03:4b:ec:63:98:58:2a:7b:54:d5:8a: 93:0b:51:3d:64:a5:c5:dc:a9:63:36:55:e2:1f:c0: 05:87:17:c5:a9:87:09:ad:01:76:a9:60:6a:40:80: 95:54:fc:2e:4a:29:42:f0:43:2a:6c:e7:08:05:86: 48:c2:e6:e8:79:2d:ec:50:04:98:42:aa:d7:49:30: 73:96:c5:cf:5a:45:b1:08:a0:56:ee:4c:7a:94:81: c9:fc:d5:6e:6e:0e:29:d8:bb:5d:b1:ae:61:77:e7: de:2a:9f:0a:57:86:96:9c:39:3a:96:b9:02:c5:aa: 2e:cb:7e:25:9e:24:39:b6:36:c0:8e:bc:dd:11:8a: 6e:a5:ca:06:b9:a3:8a:c0:b6:8c:cc:cc:41:79:1f: 0a:90:b2:0d:e0:97:93:98:4d:23:50:d7:bf:06:96: 1c:dd:1b:77:b9:e9:0c:16:82:05:50:4d:01:b9:4c: 11:c3:b2:d4:cc:a3:de:99:c5:70:1a:82:32:de:c4: 86:2a:3b:d1:ab:d2:24:b0:c0:67:16:93:10:32:4f: 07:e0:84:10:4a:b0:7e:80:ae:51:6e:ed:5e:ce:4c: 54:89:35:ae:27:34:21:b9:0b:6e:d0:dd:d7:08:0e: 40:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:D9:9B:4A:2C:F5:31:64:C4:EB:C3:A0:C6:18:67:25:B0:E1:D4:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e9fba4a-ed0e-3f6f-8ea7-1d449adeb1af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:02:fd:07:b2:53:41:9f:02:99:38:13:11:85:1b:e6:d3:0b: a8:84:45:1c:ed:59:aa:77:51:e8:b4:1b:8d:65:8c:ef:39:06: 86:bc:dd:83:7a:0a:e0:82:cd:c6:b7:1f:a9:64:af:ee:cf:a7: 33:60:62:7d:30:ae:8a:c6:72:c8:c8:05:8d:7c:10:ae:61:4b: 6f:b2:21:09:1e:02:c7:71:6a:5d:18:76:0d:a8:73:36:ac:fd: ba:97:0c:be:9e:46:99:19:c0:3e:d9:68:a8:3c:26:40:15:17: e9:6b:27:74:7d:52:c1:a4:74:1c:b9:44:60:68:37:fa:e2:1b: 9c:9e:e9:b4:2b:db:98:61:9a:8f:92:0d:f6:5e:3d:5a:cc:1f: 2e:e9:4b:a3:d4:35:81:15:ee:4f:28:9f:5a:f6:b6:95:c6:28: 26:8d:02:05:cb:a4:b9:45:32:ee:f5:9a:b9:ff:52:76:75:e5: 35:b5:e6:a7:03:63:53:44:bc:69:e2:ac:cd:ed:1d:5f:09:8f: 80:b2:db:3f:6a:b8:8f:9b:fd:5b:49:7b:6b:7b:58:f4:46:47: 9d:33:08:15:8b:4b:0a:fd:e6:1a:1b:c6:c5:d8:58:d0:52:5c: db:f6:9e:45:f9:1f:67:57:5d:de:fe:39:31:cc:99:6e:54:73: 21:02:3d:87 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4hINALD6nhv7BTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk NjRjMTczZWYtMmZlMy00ODE1LTkwYTEtZWNkYTc4ZmRiOWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufDSmF+eYRtg96rT+RscCM4VA0vsY5hYKntU 1YqTC1E9ZKXF3KljNlXiH8AFhxfFqYcJrQF2qWBqQICVVPwuSilC8EMqbOcIBYZI wuboeS3sUASYQqrXSTBzlsXPWkWxCKBW7kx6lIHJ/NVubg4p2Ltdsa5hd+feKp8K V4aWnDk6lrkCxaouy34lniQ5tjbAjrzdEYpupcoGuaOKwLaMzMxBeR8KkLIN4JeT mE0jUNe/BpYc3Rt3uekMFoIFUE0BuUwRw7LUzKPemcVwGoIy3sSGKjvRq9IksMBn FpMQMk8H4IQQSrB+gK5Rbu1ezkxUiTWuJzQhuQtu0N3XCA5AIQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKfZm0os9TFkxOvDoMYYZyWw4dQ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2U5ZmJhNGEtZWQwZS0z ZjZmLThlYTctMWQ0NDlhZGViMWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAUC/QeyU0GfApk4ExGFG+bTC6iERRztWap3Uei0G41ljO85Boa8 3YN6CuCCzca3H6lkr+7PpzNgYn0wrorGcsjIBY18EK5hS2+yIQkeAsdxal0Ydg2o czas/bqXDL6eRpkZwD7ZaKg8JkAVF+lrJ3R9UsGkdBy5RGBoN/riG5ye6bQr25hh mo+SDfZePVrMHy7pS6PUNYEV7k8on1r2tpXGKCaNAgXLpLlFMu71mrn/UnZ15TW1 5qcDY1NEvGnirM3tHV8Jj4Cy2z9quI+b/VtJe2t7WPRGR50zCBWLSwr95hobxsXY WNBSXNv2nkX5H2dXXd7+OTHMmW5UcyECPYc= -----END CERTIFICATE-----Generated at Wed Oct 29 20:25:14 2025 by rpki-client