$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/45660512-52c3-3f7c-9dfb-cce3420d71dc.roa File: 45660512-52c3-3f7c-9dfb-cce3420d71dc.roa (raw, json) Hash identifier: r45jHUB4mu2Mo+5boXicwkaZjzFZKesyYGPPdP1dIpw= Subject key identifier: 64:FD:08:A2:02:CA:3F:1F:CB:47:1D:1B:CB:88:E2:B6:22:2C:97:02 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF0F15D6E9A3449B2E4B43F80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/45660512-52c3-3f7c-9dfb-cce3420d71dc.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 396615 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:5d:6e:9a:34:49:b2:e4:b4:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=ca08c179-c5ed-4fc1-ad9b-830c6e7e2270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:81:b7:32:18:3d:5a:e9:e9:8f:34:1d:e5:46: 78:b2:a6:07:62:1e:ff:ae:f6:f3:60:7d:2f:c6:78: 71:40:2e:34:d4:bc:a2:fc:75:24:0f:23:b1:f7:e3: e3:36:d5:89:36:55:1d:75:2e:ca:d0:8a:1b:40:c1: 69:e6:48:43:65:6b:13:0a:69:dd:d0:8d:1a:50:da: a1:aa:d6:67:6a:c6:b8:14:c5:bf:b3:31:92:5c:2e: 8d:60:c6:62:75:a5:fc:21:64:7c:09:49:56:b0:f7: 0e:71:ca:cc:44:d6:3d:ae:c3:e6:81:a8:67:b9:d7: 36:7f:57:15:cc:5c:23:03:11:fa:39:9c:d7:54:0a: 70:b7:89:28:32:c3:35:6b:74:d5:08:4f:a8:a0:f4: c4:a9:49:74:7f:27:2f:e2:44:18:7b:d8:43:bf:3e: cb:29:22:92:b0:3b:ee:cf:73:9f:c2:17:6b:dd:ed: 57:dd:ac:92:3a:a5:91:80:02:b9:44:36:26:f9:85: b4:54:5d:39:25:ba:f5:bf:b3:e2:25:83:68:71:a9: 9d:42:6f:cb:41:3e:29:02:2f:db:08:5e:db:f3:04: 4e:9f:fd:35:29:52:d6:a0:50:71:a4:6b:7d:67:46: a6:44:a8:4f:16:38:aa:60:3e:21:20:ad:8e:63:a9: 5e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:FD:08:A2:02:CA:3F:1F:CB:47:1D:1B:CB:88:E2:B6:22:2C:97:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/45660512-52c3-3f7c-9dfb-cce3420d71dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:6a:cc:49:45:80:61:15:8a:70:92:6b:02:94:e0:cf:d8:50: 0f:3d:4d:ed:63:08:fb:8c:dc:f9:e6:3d:76:c0:55:b5:7c:5c: b9:4f:cf:1d:76:6a:d6:a4:fe:46:4e:cb:59:1d:03:85:d7:11: 17:4c:8b:22:97:eb:77:68:a7:96:d3:e0:1d:8e:33:b2:45:46: 2a:6c:b5:b4:09:25:4f:6c:a3:9d:d4:f6:27:ee:71:94:ad:2b: c7:67:7a:7c:39:bb:96:5a:cc:75:7c:ab:7a:e9:50:77:be:b1: 01:94:13:af:71:57:7e:74:df:ff:98:8a:f7:a9:31:5a:e5:b9: 8c:fc:52:86:16:eb:d2:86:aa:69:3a:6f:61:e3:87:2a:d2:ae: 70:8f:07:4b:d9:35:86:50:69:ea:99:a6:13:c9:4e:da:5a:16: 35:21:4b:b5:0f:88:8f:10:92:f9:bd:20:da:fe:95:1b:00:7b: 9b:42:32:5b:42:f4:cf:64:f7:28:af:6d:37:19:c1:74:31:08: 74:7b:d5:e9:b9:2d:72:a2:d2:f0:ff:a4:9c:a2:01:a2:4c:f2: 85:16:c6:82:ab:0a:d0:8e:8e:c0:d6:06:81:fe:3d:1b:71:4f: bd:86:41:9a:86:ab:25:f5:f8:a1:b6:bc:1b:58:05:c4:a2:c9: df:74:99:d2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8V1umjRJsuS0P4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk Y2EwOGMxNzktYzVlZC00ZmMxLWFkOWItODMwYzZlN2UyMjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIG3Mhg9WunpjzQd5UZ4sqYHYh7/rvbzYH0v xnhxQC401Lyi/HUkDyOx9+PjNtWJNlUddS7K0IobQMFp5khDZWsTCmnd0I0aUNqh qtZnasa4FMW/szGSXC6NYMZidaX8IWR8CUlWsPcOccrMRNY9rsPmgahnudc2f1cV zFwjAxH6OZzXVApwt4koMsM1a3TVCE+ooPTEqUl0fycv4kQYe9hDvz7LKSKSsDvu z3Ofwhdr3e1X3aySOqWRgAK5RDYm+YW0VF05Jbr1v7PiJYNocamdQm/LQT4pAi/b CF7b8wROn/01KVLWoFBxpGt9Z0amRKhPFjiqYD4hIK2OY6levwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGT9CKICyj8fy0cdG8uI4rYiLJcCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDU2NjA1MTItNTJjMy0z ZjdjLTlkZmItY2NlMzQyMGQ3MWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFxqzElFgGEVinCSawKU4M/YUA89Te1jCPuM3PnmPXbAVbV8XLlP zx12atak/kZOy1kdA4XXERdMiyKX63dop5bT4B2OM7JFRipstbQJJU9so53U9ifu cZStK8dnenw5u5ZazHV8q3rpUHe+sQGUE69xV3503/+YivepMVrluYz8UoYW69KG qmk6b2HjhyrSrnCPB0vZNYZQaeqZphPJTtpaFjUhS7UPiI8Qkvm9INr+lRsAe5tC MltC9M9k9yivbTcZwXQxCHR71em5LXKi0vD/pJyiAaJM8oUWxoKrCtCOjsDWBoH+ PRtxT72GQZqGqyX1+KG2vBtYBcSiyd90mdI= -----END CERTIFICATE-----Generated at Wed Oct 29 20:42:51 2025 by rpki-client