$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c8dc9c1-0a52-344e-aad8-1efc66fbe38f.roa File: 5c8dc9c1-0a52-344e-aad8-1efc66fbe38f.roa (raw, json) Hash identifier: kcwSyGEIfXZhUmMiB0MkO6zVMW+P+hKO9253CW4/Oew= Subject key identifier: 01:3A:C9:FB:CB:3D:2C:34:44:D0:D7:61:02:EB:B8:5C:4A:59:80:84 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B48E2116E2FCA79D1A9D30840 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c8dc9c1-0a52-344e-aad8-1efc66fbe38f.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 36627 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:11:6e:2f:ca:79:d1:a9:d3:08:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=17164fa3-d9d3-421e-916a-dbe4fd956c3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:e3:ac:5d:50:82:31:b5:21:9a:66:e5:1a:5b: 18:e1:a8:3c:aa:0a:b5:31:6b:bb:3c:74:0e:3c:ec: 8e:24:d2:0b:5d:88:75:4c:a2:73:55:08:25:76:6e: d5:da:6d:57:a6:26:f0:b0:86:ee:95:e3:d1:4e:06: 01:f5:2a:f6:ce:e0:44:e4:5c:59:0d:c5:ad:56:8f: 1f:37:b1:68:2d:c7:89:e6:9f:33:f8:52:23:cb:5f: 16:91:b1:5d:37:bf:1a:e9:ad:22:79:d2:7c:ee:8f: 68:74:23:10:7e:1f:27:62:5e:fc:3a:d6:de:d7:3f: b5:ea:72:17:c7:8e:53:08:c0:b0:dd:cb:eb:4e:7e: 08:ab:1f:8f:03:85:30:2b:d1:0d:21:2c:a1:16:7d: e6:01:e9:c5:40:64:fe:72:1c:30:78:1b:c4:46:61: d9:8a:eb:a4:38:ce:52:66:a1:40:36:a2:fb:a4:18: 43:5e:5e:2f:f2:08:cf:a1:f0:51:b8:06:1a:29:f8: c5:fb:dd:b3:eb:56:1f:92:86:39:6b:c7:4e:35:0a: 07:50:2e:e0:3e:83:74:fc:52:4f:e0:45:98:ea:7c: 5a:86:2b:da:f4:6d:ee:02:51:b9:f6:56:24:ef:48: a1:7c:3f:a3:ee:82:91:70:e4:8a:a4:1f:b7:f9:84: 7e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:3A:C9:FB:CB:3D:2C:34:44:D0:D7:61:02:EB:B8:5C:4A:59:80:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c8dc9c1-0a52-344e-aad8-1efc66fbe38f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:4e:56:a9:0e:a0:4e:53:df:e6:71:d6:b2:e5:22:a8:26:88: a8:93:7e:0c:10:8c:25:39:da:bd:21:55:13:c2:17:55:ae:a7: 41:66:39:ab:50:41:94:15:df:b2:74:0c:0e:e8:91:00:e9:ff: d7:73:ba:7f:25:be:97:5d:56:17:e6:74:3b:f7:ad:e5:46:d2: 76:f7:fc:af:f7:10:fd:61:f3:2b:2b:4f:52:f0:af:48:62:a2: fd:f1:90:52:ee:56:bf:b3:31:0c:23:e8:f8:c3:39:86:de:68: 88:7b:a5:9d:21:4a:5e:5a:4f:56:2c:56:ac:98:f9:a2:b9:f4: bf:72:e7:ed:9f:3a:14:52:d0:93:77:b8:dd:be:81:b1:b6:09: e0:e0:5e:36:67:6f:5d:9a:21:99:92:44:74:cd:de:13:bf:fc: d8:c7:53:4b:bb:35:99:61:76:87:89:af:a3:3b:42:27:5a:a4: 78:d6:18:9d:62:68:fb:f5:eb:94:32:7a:cd:26:bb:32:4d:95: e9:4d:9c:30:af:68:90:88:85:32:2c:d5:44:83:77:f4:09:f2: 8d:37:dd:a2:46:aa:90:ee:3b:85:33:7e:13:32:58:ac:71:ff: af:6e:c5:0e:50:96:c8:ad:8f:c7:d1:68:d9:7a:8a:a9:0a:2a: af:8f:9d:ca -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4hFuL8p50anTCEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MTcxNjRmYTMtZDlkMy00MjFlLTkxNmEtZGJlNGZkOTU2YzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9uOsXVCCMbUhmmblGlsY4ag8qgq1MWu7PHQO POyOJNILXYh1TKJzVQgldm7V2m1XpibwsIbulePRTgYB9Sr2zuBE5FxZDcWtVo8f N7FoLceJ5p8z+FIjy18WkbFdN78a6a0iedJ87o9odCMQfh8nYl78Otbe1z+16nIX x45TCMCw3cvrTn4Iqx+PA4UwK9ENISyhFn3mAenFQGT+chwweBvERmHZiuukOM5S ZqFANqL7pBhDXl4v8gjPofBRuAYaKfjF+92z61YfkoY5a8dONQoHUC7gPoN0/FJP 4EWY6nxahiva9G3uAlG59lYk70ihfD+j7oKRcOSKpB+3+YR+hQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAE6yfvLPSw0RNDXYQLruFxKWYCEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWM4ZGM5YzEtMGE1Mi0z NDRlLWFhZDgtMWVmYzY2ZmJlMzhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD5OVqkOoE5T3+Zx1rLlIqgmiKiTfgwQjCU52r0hVRPCF1Wup0Fm OatQQZQV37J0DA7okQDp/9dzun8lvpddVhfmdDv3reVG0nb3/K/3EP1h8ysrT1Lw r0hiov3xkFLuVr+zMQwj6PjDOYbeaIh7pZ0hSl5aT1YsVqyY+aK59L9y5+2fOhRS 0JN3uN2+gbG2CeDgXjZnb12aIZmSRHTN3hO//NjHU0u7NZlhdoeJr6M7QidapHjW GJ1iaPv165Qyes0muzJNlelNnDCvaJCIhTIs1USDd/QJ8o033aJGqpDuO4UzfhMy WKxx/69uxQ5Qlsitj8fRaNl6iqkKKq+Pnco= -----END CERTIFICATE-----Generated at Thu Oct 30 03:25:13 2025 by rpki-client