$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/53c4457a-8d70-366c-bc84-ccda67b517c9.roa File: 53c4457a-8d70-366c-bc84-ccda67b517c9.roa (raw, json) Hash identifier: jcG3CJBKux+Y1tJEe0N8Q9iDXC8DB9b+dQ+C7ZI/+CY= Subject key identifier: 24:45:B5:3B:1F:92:79:44:6E:D3:EC:2D:07:5A:95:57:0E:9F:10:4B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B76F25DDC8C8A9A53F68D8E00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/53c4457a-8d70-366c-bc84-ccda67b517c9.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 7342 IP address blocks: 2620:74:a6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:5d:dc:8c:8a:9a:53:f6:8d:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=0eae5932-cad3-40b5-9ef7-8a91adad76ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:10:ca:4d:2d:63:fd:e4:cf:cb:e6:d9:8e:05: 23:08:f2:c8:69:22:b9:30:cb:23:5c:fb:b1:a3:aa: 5f:3c:d2:73:cf:4d:3b:7f:b0:9d:ac:d8:68:c1:c6: 5d:e1:ab:be:a6:86:c0:25:dd:88:52:a9:a1:19:b6: 8c:d4:a6:30:b5:78:64:9a:a7:c6:4f:45:96:ec:37: cb:51:2b:2c:90:0e:f8:3f:fa:e1:d6:06:ac:a9:4f: a6:58:67:64:3a:0a:9b:c6:37:84:71:3d:2a:d4:cb: af:c1:ec:80:5d:4a:a5:6b:b2:56:58:3c:41:dc:4e: 93:a6:86:45:6e:48:4b:e0:c8:63:41:97:43:f0:db: 4d:80:71:0f:8b:1e:81:80:dc:75:d5:a8:50:3a:61: a7:25:09:57:11:a0:ac:1f:d5:7c:bf:6e:20:11:1e: 1d:48:78:b8:ad:c1:f2:c0:a6:93:c6:12:ae:a5:f8: 7f:58:fa:b3:08:53:ba:7c:5f:f6:33:51:fa:3b:c3: 35:3c:cc:02:f9:b2:5c:96:e9:16:b1:40:f2:2b:70: c9:03:a8:b8:87:a8:e5:00:da:73:5d:64:be:87:b2: f2:22:13:82:f0:72:b7:34:a6:f8:e8:04:d8:4d:4f: 5a:b9:c4:ca:0a:94:f8:58:1c:11:d0:8d:74:4d:06: e7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:45:B5:3B:1F:92:79:44:6E:D3:EC:2D:07:5A:95:57:0E:9F:10:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/53c4457a-8d70-366c-bc84-ccda67b517c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:a6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:f2:ec:09:b1:96:27:47:66:8c:c0:0e:fa:d6:d2:52:ff:35: e6:01:1e:fe:ac:ab:4d:6e:96:f6:29:b9:a8:14:e4:b5:95:b2: be:63:e7:4e:02:1c:0e:4d:fb:53:fe:18:2c:57:ec:23:6b:18: 85:00:e4:2d:5e:42:25:0a:97:99:7b:c3:3f:1b:91:f6:87:ca: 49:fd:20:01:3a:4f:42:39:39:13:1b:45:b5:3c:c4:df:5f:76: cf:ba:dd:c7:f8:8c:d5:b6:26:83:8d:c7:7c:ae:c4:b2:4a:88: a5:cd:a6:ab:df:21:7a:83:29:41:2d:f4:82:59:ad:d8:6e:e2: 05:eb:0c:4f:c7:d1:96:29:a5:c9:f4:b2:1b:e0:71:2f:b5:fd: e3:2f:a5:ef:c8:7d:16:10:b3:15:41:bb:7f:49:6f:f0:ac:fe: 66:f1:ab:49:22:fb:d5:bf:90:de:39:43:2c:3c:38:eb:22:ba: ce:c5:ab:a0:97:95:13:42:07:f9:6e:a3:8d:9a:d4:90:55:8d: d9:d0:32:a6:db:00:25:42:34:5d:7a:ec:ec:1b:a4:c4:f4:de: 87:ea:5b:53:5e:49:dc:6b:77:57:94:7e:d2:88:a3:27:34:b8: fa:a2:6e:f8:fb:0d:af:d3:c5:4a:91:71:b3:f0:3e:9e:c0:00: 0c:55:e5:84 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt28l3cjIqaU/aNjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MGVhZTU5MzItY2FkMy00MGI1LTllZjctOGE5MWFkYWQ3NmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBDKTS1j/eTPy+bZjgUjCPLIaSK5MMsjXPux o6pfPNJzz007f7CdrNhowcZd4au+pobAJd2IUqmhGbaM1KYwtXhkmqfGT0WW7DfL USsskA74P/rh1gasqU+mWGdkOgqbxjeEcT0q1MuvweyAXUqla7JWWDxB3E6TpoZF bkhL4MhjQZdD8NtNgHEPix6BgNx11ahQOmGnJQlXEaCsH9V8v24gER4dSHi4rcHy wKaTxhKupfh/WPqzCFO6fF/2M1H6O8M1PMwC+bJclukWsUDyK3DJA6i4h6jlANpz XWS+h7LyIhOC8HK3NKb46ATYTU9aucTKCpT4WBwR0I10TQbn7QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCRFtTsfknlEbtPsLQdalVcOnxBLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTNjNDQ1N2EtOGQ3MC0z NjZjLWJjODQtY2NkYTY3YjUxN2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdACm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEfy7AmxlidHZozADvrW0lL/NeYBHv6sq01ulvYpuagU5LWVsr5j 504CHA5N+1P+GCxX7CNrGIUA5C1eQiUKl5l7wz8bkfaHykn9IAE6T0I5ORMbRbU8 xN9fds+63cf4jNW2JoONx3yuxLJKiKXNpqvfIXqDKUEt9IJZrdhu4gXrDE/H0ZYp pcn0shvgcS+1/eMvpe/IfRYQsxVBu39Jb/Cs/mbxq0ki+9W/kN45Qyw8OOsius7F q6CXlRNCB/luo42a1JBVjdnQMqbbACVCNF167OwbpMT03ofqW1NeSdxrd1eUftKI oyc0uPqibvj7Da/TxUqRcbPwPp7AAAxV5YQ= -----END CERTIFICATE-----Generated at Wed Oct 29 20:35:13 2025 by rpki-client