$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/454fde4e-a5a1-3b9d-9523-906df8478324.roa File: 454fde4e-a5a1-3b9d-9523-906df8478324.roa (raw, json) Hash identifier: usmZpx8tOcDPX8OhQCLFuazxDxIljlr2w5qU3GYKIL8= Subject key identifier: C1:70:22:00:AD:DF:88:FC:D3:18:C4:6F:CC:1C:41:C9:3C:02:61:0C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF0F15A65C586AB8E159D7400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/454fde4e-a5a1-3b9d-9523-906df8478324.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 396590 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:5a:65:c5:86:ab:8e:15:9d:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=4cb52f96-b32f-410f-8148-6557591f9008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f1:d6:03:4f:5f:dd:49:69:6f:ed:c8:46:0b: dd:32:95:7f:81:7d:64:a5:00:88:7e:1b:28:62:ba: 3b:1c:ad:eb:7d:35:50:eb:fb:2c:01:78:c1:0e:8c: 57:72:d3:6c:76:55:da:3a:2c:4e:27:36:9e:a9:93: 40:70:4e:3d:11:3a:7c:50:f8:a4:f3:87:c5:05:9d: 1d:cf:2f:ef:63:c4:ca:5d:f2:6e:84:b3:5f:97:3d: d6:0b:f8:5a:b3:e3:01:51:67:cf:86:cf:2e:6d:be: db:8d:4c:48:dd:1d:ad:ff:94:ca:b9:55:4f:71:b0: 7a:ac:c5:47:0c:c0:c1:bb:88:ef:c6:c4:3d:ff:39: 92:ff:dd:bd:39:28:80:c5:4c:3b:18:19:8e:1f:c8: 14:61:7e:93:e6:57:2c:0f:03:2d:ea:28:50:00:24: a7:bc:c1:d9:4f:b9:dc:92:cc:e6:2f:3a:53:ef:22: c0:07:46:32:13:1e:45:ea:22:00:a2:85:65:9a:d4: 72:90:8b:a4:69:d0:9d:fd:bf:ea:8c:42:7b:1e:58: f5:cd:97:9a:af:98:fc:12:46:7a:fb:04:67:df:28: 4a:a4:2e:ea:d4:3e:81:c5:e9:12:ac:e4:84:d3:89: 2d:1a:93:a3:1f:0a:6d:59:4c:a1:7f:c2:c9:eb:3f: a5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:70:22:00:AD:DF:88:FC:D3:18:C4:6F:CC:1C:41:C9:3C:02:61:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/454fde4e-a5a1-3b9d-9523-906df8478324.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:0f:3b:e2:98:3f:1a:94:6c:57:38:13:6c:ce:d4:e8:0f:08: 82:74:4e:ff:65:bb:58:76:09:d8:47:9a:c9:76:a8:75:d5:e8: a8:ab:b2:63:ff:4e:f4:43:f0:bc:d3:c5:28:46:f7:71:b5:88: 4f:0b:70:58:f7:64:4d:d4:d6:92:e3:2f:07:fe:e5:29:46:76: 90:09:c1:37:54:9f:52:5f:26:83:3d:f5:1d:d3:68:92:64:6f: d2:01:8f:18:bd:bd:5d:73:bd:80:b8:bc:a1:d5:1b:61:43:d8: e6:01:0a:c3:c2:c4:fe:fb:9e:f9:e7:f6:bd:c5:27:94:44:6a: a1:a7:ef:3b:b7:89:5c:37:84:fe:a3:1b:31:27:b4:db:40:7b: ad:62:f4:01:64:b0:76:76:a9:da:5a:5d:2f:54:6a:a6:15:c8: 86:ce:c6:7d:c1:d3:59:0a:4d:57:45:58:68:6a:93:7c:4c:18: d6:67:4f:ab:e0:eb:b4:a2:b2:cb:28:fe:5c:14:e9:ee:c7:66: ee:2c:48:7c:29:e4:22:8c:2d:81:8c:56:04:e7:95:2d:d4:fe: af:95:dc:dd:c7:cd:b2:90:50:bc:e1:fc:81:81:b4:f9:18:c9: 29:dc:94:a6:38:3b:07:a0:6d:28:f7:48:09:e9:6c:02:32:60: 06:f7:bc:df -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8VplxYarjhWddAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk NGNiNTJmOTYtYjMyZi00MTBmLTgxNDgtNjU1NzU5MWY5MDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5vHWA09f3Ulpb+3IRgvdMpV/gX1kpQCIfhso Yro7HK3rfTVQ6/ssAXjBDoxXctNsdlXaOixOJzaeqZNAcE49ETp8UPik84fFBZ0d zy/vY8TKXfJuhLNflz3WC/has+MBUWfPhs8ubb7bjUxI3R2t/5TKuVVPcbB6rMVH DMDBu4jvxsQ9/zmS/929OSiAxUw7GBmOH8gUYX6T5lcsDwMt6ihQACSnvMHZT7nc kszmLzpT7yLAB0YyEx5F6iIAooVlmtRykIukadCd/b/qjEJ7Hlj1zZear5j8EkZ6 +wRn3yhKpC7q1D6BxekSrOSE04ktGpOjHwptWUyhf8LJ6z+lFwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMFwIgCt34j80xjEb8wcQck8AmEMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDU0ZmRlNGUtYTVhMS0z YjlkLTk1MjMtOTA2ZGY4NDc4MzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABEPO+KYPxqUbFc4E2zO1OgPCIJ0Tv9lu1h2CdhHmsl2qHXV6Kir smP/TvRD8LzTxShG93G1iE8LcFj3ZE3U1pLjLwf+5SlGdpAJwTdUn1JfJoM99R3T aJJkb9IBjxi9vV1zvYC4vKHVG2FD2OYBCsPCxP77nvnn9r3FJ5REaqGn7zu3iVw3 hP6jGzEntNtAe61i9AFksHZ2qdpaXS9UaqYVyIbOxn3B01kKTVdFWGhqk3xMGNZn T6vg67Sissso/lwU6e7HZu4sSHwp5CKMLYGMVgTnlS3U/q+V3N3HzbKQULzh/IGB tPkYySnclKY4OwegbSj3SAnpbAIyYAb3vN8= -----END CERTIFICATE-----Generated at Wed Oct 29 20:29:22 2025 by rpki-client