$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/574e528e-ce2d-37a5-bc93-a32c6aaa5904.roa File: 574e528e-ce2d-37a5-bc93-a32c6aaa5904.roa (raw, json) Hash identifier: 3rWCbctJKpo8nbGsC4x9ClKFjD8ZyFg6cVTATCdeU4E= Subject key identifier: 2D:BC:85:A5:61:A4:90:61:76:60:40:5E:63:4F:2A:2A:F0:64:C4:FC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B21CC3DFC0FB7A1DB3EB72180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/574e528e-ce2d-37a5-bc93-a32c6aaa5904.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 21313 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:3d:fc:0f:b7:a1:db:3e:b7:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=dc06d028-fa0b-4447-902b-f05cdfabcfa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a6:b3:4b:49:0b:3f:02:69:8c:69:57:32:b6: c1:78:3c:57:67:92:50:7e:f6:2b:2b:1a:59:79:e9: fb:d0:91:ae:83:5c:77:5c:78:a8:6d:1d:83:ef:ad: 16:c9:2b:d6:ee:7e:37:5f:d3:83:a3:20:72:f6:bd: f1:ec:5c:8d:42:81:82:95:df:d1:32:10:72:21:ac: 9e:12:49:2b:b5:6a:98:5e:67:f0:a4:12:b0:ff:6f: b5:d7:17:52:7d:81:63:f7:9c:dc:0a:bc:81:0a:ca: d4:78:de:70:ae:80:18:fe:86:18:15:a6:96:cb:68: f8:50:80:98:0e:69:0c:cf:f0:f0:04:4d:3c:22:aa: f0:ef:79:b1:a7:47:df:c5:7b:53:8d:d8:1a:10:1a: 93:6a:d4:d6:ba:2f:75:a5:b3:d4:11:67:47:86:32: 21:be:4e:28:3e:60:26:38:17:44:d1:c8:eb:04:0a: 33:30:7a:44:96:a1:14:fc:7d:87:9f:eb:08:f3:a3: 00:54:ba:58:2c:ed:89:e4:85:73:01:d9:01:5b:74: 5f:58:1e:89:48:69:f2:93:31:8e:66:6f:2b:c8:88: d4:91:6e:b2:34:d0:e2:0f:07:ad:0a:ba:39:ad:a1: ff:3d:67:da:dd:3f:51:88:7d:52:39:4e:25:6e:b3: 8c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:BC:85:A5:61:A4:90:61:76:60:40:5E:63:4F:2A:2A:F0:64:C4:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/574e528e-ce2d-37a5-bc93-a32c6aaa5904.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:1b:1b:fb:bf:09:d8:5d:e5:95:1f:d8:1b:1d:c9:87:c9:0e: 85:91:a8:dc:48:73:ea:83:b7:ee:50:96:0f:fa:cd:3b:25:94: 4d:62:05:b5:6c:3e:5c:a3:d3:d4:d2:94:fe:ad:e9:4e:21:9c: 48:67:c2:65:92:68:c7:ba:15:df:43:ca:61:8f:39:f0:cd:6a: 46:41:d4:90:96:fc:93:f9:eb:8a:ce:b2:60:5a:03:b1:ff:82: ac:e3:7b:d0:c2:ef:05:1d:81:bf:eb:ea:e8:fc:ab:87:2d:9d: 52:67:2e:c2:d7:87:c4:ec:28:08:49:82:1d:16:54:13:86:09: c1:f7:45:0f:0c:b1:16:53:dd:bc:e2:18:92:05:8b:32:08:eb: 91:a4:28:ea:2e:55:1e:75:5e:74:54:67:a1:1e:b6:33:6b:54: 2b:77:57:40:5d:23:af:95:86:aa:02:53:82:10:1a:49:4d:66: eb:6b:7c:6d:54:07:df:ea:56:a0:ff:69:07:e2:e3:a4:5b:09: 4a:37:73:a1:04:d5:02:eb:7d:28:f0:c8:1e:b9:57:5e:37:9c: f8:b1:96:ed:66:3a:42:32:11:66:35:98:42:95:73:8b:23:54: 4c:65:1f:ba:e8:ca:7a:7f:98:e7:18:01:86:58:e3:5e:d5:17: 8a:52:eb:f4 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEshzD38D7eh2z63IYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk ZGMwNmQwMjgtZmEwYi00NDQ3LTkwMmItZjA1Y2RmYWJjZmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaazS0kLPwJpjGlXMrbBeDxXZ5JQfvYrKxpZ een70JGug1x3XHiobR2D760WySvW7n43X9ODoyBy9r3x7FyNQoGCld/RMhByIaye EkkrtWqYXmfwpBKw/2+11xdSfYFj95zcCryBCsrUeN5wroAY/oYYFaaWy2j4UICY DmkMz/DwBE08Iqrw73mxp0ffxXtTjdgaEBqTatTWui91pbPUEWdHhjIhvk4oPmAm OBdE0cjrBAozMHpElqEU/H2Hn+sI86MAVLpYLO2J5IVzAdkBW3RfWB6JSGnykzGO Zm8ryIjUkW6yNNDiDwetCro5raH/PWfa3T9RiH1SOU4lbrOMhQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFC28haVhpJBhdmBAXmNPKirwZMT8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTc0ZTUyOGUtY2UyZC0z N2E1LWJjOTMtYTMyYzZhYWE1OTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCLGxv7vwnYXeWVH9gbHcmHyQ6FkajcSHPqg7fu UJYP+s07JZRNYgW1bD5co9PU0pT+relOIZxIZ8JlkmjHuhXfQ8phjznwzWpGQdSQ lvyT+euKzrJgWgOx/4Ks43vQwu8FHYG/6+ro/KuHLZ1SZy7C14fE7CgISYIdFlQT hgnB90UPDLEWU9284hiSBYsyCOuRpCjqLlUedV50VGehHrYza1Qrd1dAXSOvlYaq AlOCEBpJTWbra3xtVAff6lag/2kH4uOkWwlKN3OhBNUC630o8MgeuVdeN5z4sZbt ZjpCMhFmNZhClXOLI1RMZR+66Mp6f5jnGAGGWONe1ReKUuv0 -----END CERTIFICATE-----Generated at Wed Oct 29 20:36:33 2025 by rpki-client