$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4ad182e9-358b-30a8-9be5-a8e305941580.roa File: 4ad182e9-358b-30a8-9be5-a8e305941580.roa (raw, json) Hash identifier: EEiez7OBDxaH8yw6m0kRn6BFF5suM5dh0v++nT98dHk= Subject key identifier: DE:B8:26:4D:CD:62:FA:37:84:5F:21:87:9E:FA:F3:EE:E1:D7:DA:3B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584BA7CD1A3EE3730BBA4AF47934 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4ad182e9-358b-30a8-9be5-a8e305941580.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 7342 IP address blocks: 2620:74:48::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:1a:3e:e3:73:0b:ba:4a:f4:79:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=d362acb6-e9eb-483b-8af0-3287df9d5ecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8c:ee:a6:8c:8c:96:63:78:44:4b:ac:ed:b4: 56:c3:af:40:41:8d:53:8e:50:d5:0b:eb:cf:be:ef: a5:cd:14:3e:8a:31:53:6a:83:9d:6c:92:c4:63:dd: d8:17:23:fa:d9:e7:8d:de:21:75:d5:2b:ba:31:1e: 8e:88:4b:2f:2c:a5:48:7f:d7:f2:0e:0b:32:4e:fa: 3d:f5:e8:a4:db:62:09:22:8b:0c:7d:ab:39:24:00: 24:6c:01:3b:ee:37:65:e4:35:b3:da:d0:9e:55:e1: c6:c4:ab:e2:70:44:b0:70:7a:ac:40:af:56:64:6b: f2:7e:0b:9b:bd:e9:a2:45:1c:d2:96:cf:dd:70:8d: 23:79:b8:8e:20:dc:18:63:ca:64:da:4d:0d:14:15: 01:90:74:72:cd:19:0c:37:89:2c:23:83:33:53:c7: 1f:6c:84:72:d5:6e:d1:5a:ce:22:01:f0:ab:dd:2a: 6f:d1:53:b9:cb:0f:ac:fb:4d:9c:2e:5f:e7:21:05: 49:51:c4:ff:a7:73:f2:83:3d:e9:8e:4b:d7:07:04: 7b:5c:e8:ae:3c:09:90:8c:05:68:17:88:55:8c:53: 17:25:33:f7:47:c5:14:4c:1d:75:57:99:23:c8:06: ab:da:c4:fd:78:7d:9a:c8:76:cf:f5:d3:47:a7:13: 4d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B8:26:4D:CD:62:FA:37:84:5F:21:87:9E:FA:F3:EE:E1:D7:DA:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4ad182e9-358b-30a8-9be5-a8e305941580.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:48::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:cb:a1:53:f5:df:02:48:80:a0:52:cb:75:cc:40:31:7d:80: be:52:3e:82:c9:31:89:14:08:5c:9a:d3:a5:b7:7b:bf:a9:13: da:df:f7:5e:83:8c:8a:09:39:b8:08:10:3c:e2:c2:8e:36:35: 64:ad:b1:95:08:12:ba:17:65:2b:ef:bc:93:44:ef:2e:9d:5b: f0:34:56:82:b0:bc:54:15:eb:9b:15:1c:fc:2f:88:5b:ad:e2: 26:19:a9:21:48:85:53:f2:0a:9e:47:9b:f8:ce:9b:0c:af:47: 5a:4d:48:43:56:ae:24:c2:58:58:04:6b:3e:19:7c:50:85:9b: de:47:45:59:73:a4:5b:70:cc:e0:da:3a:8a:73:68:7d:bb:02: 22:76:a6:ae:e3:41:f5:7e:e7:f3:21:eb:55:48:bc:03:cb:53: c6:7f:27:2a:fb:6c:03:49:43:fd:af:ec:5e:ee:24:1d:bc:f3: 74:5d:d0:d0:a8:3b:4e:e7:d7:38:7c:c0:85:17:46:c1:2d:4a: 6e:3c:6c:e2:0a:20:53:72:ce:52:2c:bb:f0:db:37:7e:25:16: 0e:77:14:3a:9e:7f:26:29:01:07:76:cf:7d:dc:d6:2c:e3:fd: b5:91:d1:e7:79:48:f4:7d:46:21:0a:be:2b:f3:d3:c1:1e:29: f1:2d:ff:77 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEunzRo+43MLukr0eTQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk ZDM2MmFjYjYtZTllYi00ODNiLThhZjAtMzI4N2RmOWQ1ZWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsozupoyMlmN4REus7bRWw69AQY1TjlDVC+vP vu+lzRQ+ijFTaoOdbJLEY93YFyP62eeN3iF11Su6MR6OiEsvLKVIf9fyDgsyTvo9 9eik22IJIosMfas5JAAkbAE77jdl5DWz2tCeVeHGxKvicESwcHqsQK9WZGvyfgub vemiRRzSls/dcI0jebiOINwYY8pk2k0NFBUBkHRyzRkMN4ksI4MzU8cfbIRy1W7R Ws4iAfCr3Spv0VO5yw+s+02cLl/nIQVJUcT/p3Pygz3pjkvXBwR7XOiuPAmQjAVo F4hVjFMXJTP3R8UUTB11V5kjyAar2sT9eH2ayHbP9dNHpxNNlwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN64Jk3NYvo3hF8hh5768+7h19o7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGFkMTgyZTktMzU4Yi0z MGE4LTliZTUtYThlMzA1OTQxNTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGHLoVP13wJIgKBSy3XMQDF9gL5SPoLJMYkUCFya06W3e7+pE9rf 916DjIoJObgIEDziwo42NWStsZUIEroXZSvvvJNE7y6dW/A0VoKwvFQV65sVHPwv iFut4iYZqSFIhVPyCp5Hm/jOmwyvR1pNSENWriTCWFgEaz4ZfFCFm95HRVlzpFtw zODaOopzaH27AiJ2pq7jQfV+5/Mh61VIvAPLU8Z/Jyr7bANJQ/2v7F7uJB2883Rd 0NCoO07n1zh8wIUXRsEtSm48bOIKIFNyzlIsu/DbN34lFg53FDqefyYpAQd2z33c 1izj/bWR0ed5SPR9RiEKvivz08EeKfEt/3c= -----END CERTIFICATE-----Generated at Wed Oct 29 20:35:14 2025 by rpki-client