$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40801f6c-baf4-39ca-8afd-ff4f25798169.roa File: 40801f6c-baf4-39ca-8afd-ff4f25798169.roa (raw, json) Hash identifier: DCsmVvyJIqqU84T5cvl+/6EoOUDfCEUKZvNanIzUqMI= Subject key identifier: B7:E2:71:BA:CB:18:06:B1:9B:77:F8:D6:3D:BC:B9:1B:CB:14:BE:32 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B48E1A9FEBADFBEE5986D6E00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40801f6c-baf4-39ca-8afd-ff4f25798169.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 396585 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:a9:fe:ba:df:be:e5:98:6d:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=1188b76b-03af-405c-973c-d3424fe07d23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:91:8e:9c:f5:1c:ed:ad:aa:1b:5c:b1:93:a9: 36:8b:c6:f0:9e:e1:3a:f6:fc:f5:c4:b6:c5:7e:f2: 96:f5:05:1a:7a:18:20:a1:ce:04:2d:69:e4:8e:94: dd:0c:56:dd:f2:15:28:28:f5:6a:1c:35:29:36:1b: 73:3d:c7:60:1d:26:df:06:3d:7a:90:49:35:d8:5d: 7c:6e:07:a1:10:33:19:39:12:10:18:e3:41:a3:20: b7:01:21:b9:61:6a:6d:e4:34:10:6b:b1:56:89:9e: 5a:9a:e6:be:74:4e:04:60:52:5a:82:f7:a8:0c:e2: 72:77:58:96:5d:9d:55:0d:a7:fd:04:8e:c8:e6:e8: 4e:ab:29:b8:e2:5d:8e:8b:94:a1:a7:b7:c8:40:8d: cc:d4:64:64:cb:cf:f0:d3:2e:0f:4e:09:76:cb:a5: 64:4c:fd:ec:ad:30:38:35:fd:3c:94:28:31:b9:c5: be:b1:ac:31:8d:25:c1:fc:5f:05:73:bc:78:e0:a2: 57:4f:10:46:3d:e0:ba:c3:20:a6:07:55:94:bb:22: 93:48:46:5a:ac:61:98:ac:98:7a:e7:ad:41:1a:90: 62:04:9a:6e:52:88:9a:b0:9c:1c:43:f7:5e:44:79: e9:64:1f:3c:26:e0:38:89:18:35:c8:54:58:dd:7a: ad:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E2:71:BA:CB:18:06:B1:9B:77:F8:D6:3D:BC:B9:1B:CB:14:BE:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40801f6c-baf4-39ca-8afd-ff4f25798169.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:a5:cd:5b:ad:24:7e:a7:12:6b:2e:93:f5:a9:13:29:5d:a6: 25:17:0c:b8:de:8b:a1:13:d3:99:ab:63:e1:7a:11:01:a4:34: 51:32:f9:b5:fb:f9:58:6e:7b:45:b2:fa:d0:a0:24:43:f8:57: 09:86:41:33:d2:73:fe:eb:b1:34:0a:0d:01:f2:3d:ac:63:fa: b0:e9:24:79:f4:3c:aa:9f:f5:80:91:14:d5:c8:37:e2:86:ca: b4:1b:18:dc:89:01:da:00:63:71:5d:31:df:7f:38:03:7a:e1: 1e:85:9d:80:ca:df:83:c2:76:e0:2b:4c:a1:fe:c5:9f:17:9e: 0e:10:06:68:8b:b0:3c:af:f7:f5:39:9a:e2:1a:55:e8:c2:8f: 3f:7d:37:41:00:55:c7:18:3a:52:fa:7c:4c:68:a9:65:60:28: b5:fc:d0:8c:15:fb:d9:e4:a0:ed:1f:f7:f5:e6:53:00:9c:81: b5:35:a9:74:e7:07:6b:4b:5f:cf:5e:b0:f3:93:ea:fe:1b:0a: 52:c3:94:f4:7b:9b:68:c1:18:bc:73:8c:b9:57:53:ec:2e:8c: bb:c4:30:81:8a:af:e2:08:24:3b:16:65:7b:80:21:27:6e:04: 20:9c:4e:c5:c7:3a:71:bb:ae:50:3f:ca:1f:1f:13:5e:70:15: 11:bc:4c:e0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4an+ut++5ZhtbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MTE4OGI3NmItMDNhZi00MDVjLTk3M2MtZDM0MjRmZTA3ZDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipGOnPUc7a2qG1yxk6k2i8bwnuE69vz1xLbF fvKW9QUaehggoc4ELWnkjpTdDFbd8hUoKPVqHDUpNhtzPcdgHSbfBj16kEk12F18 bgehEDMZORIQGONBoyC3ASG5YWpt5DQQa7FWiZ5amua+dE4EYFJagveoDOJyd1iW XZ1VDaf9BI7I5uhOqym44l2Oi5Shp7fIQI3M1GRky8/w0y4PTgl2y6VkTP3srTA4 Nf08lCgxucW+sawxjSXB/F8Fc7x44KJXTxBGPeC6wyCmB1WUuyKTSEZarGGYrJh6 561BGpBiBJpuUoiasJwcQ/deRHnpZB88JuA4iRg1yFRY3XqtNwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLficbrLGAaxm3f41j28uRvLFL4yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDA4MDFmNmMtYmFmNC0z OWNhLThhZmQtZmY0ZjI1Nzk4MTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFKlzVutJH6nEmsuk/WpEyldpiUXDLjei6ET05mrY+F6EQGkNFEy +bX7+Vhue0Wy+tCgJEP4VwmGQTPSc/7rsTQKDQHyPaxj+rDpJHn0PKqf9YCRFNXI N+KGyrQbGNyJAdoAY3FdMd9/OAN64R6FnYDK34PCduArTKH+xZ8Xng4QBmiLsDyv 9/U5muIaVejCjz99N0EAVccYOlL6fExoqWVgKLX80IwV+9nkoO0f9/XmUwCcgbU1 qXTnB2tLX89esPOT6v4bClLDlPR7m2jBGLxzjLlXU+wujLvEMIGKr+IIJDsWZXuA ISduBCCcTsXHOnG7rlA/yh8fE15wFRG8TOA= -----END CERTIFICATE-----Generated at Wed Oct 29 20:44:59 2025 by rpki-client