$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/672bd727-d3cf-3f4c-b729-8e92852e3e14.roa File: 672bd727-d3cf-3f4c-b729-8e92852e3e14.roa (raw, json) Hash identifier: Olo0d13NyeaD2LfDhTXCnBlIpgtOjX62vPFrwtPc2EQ= Subject key identifier: DA:90:8F:8E:A3:2E:21:0E:81:F7:D6:3F:C6:3B:21:6D:0B:E9:DB:CA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6201F768317C10ECB5F42820 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/672bd727-d3cf-3f4c-b729-8e92852e3e14.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 36624 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:f7:68:31:7c:10:ec:b5:f4:28:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=a7008850-150d-4e56-a40f-3753d14f6e76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:58:52:73:90:98:73:e3:00:31:81:d3:ff:66: 70:d3:ff:44:b6:d6:60:0c:a3:44:07:b5:19:b0:a7: 25:83:31:6f:57:ce:8d:30:98:43:80:ed:e5:3d:f9: e5:59:76:0a:33:e3:c1:1e:03:8c:da:4a:c1:c6:ef: 54:67:eb:1d:83:5c:ea:d4:d6:08:83:cb:12:ad:ba: 50:6d:a0:05:b5:44:a1:01:de:24:c6:45:f0:c6:a4: dd:32:ab:7e:4e:e2:07:44:a1:2c:21:d0:5c:84:a4: 2f:7a:d8:aa:21:79:ae:d3:36:84:f3:e0:1a:90:e0: d7:f9:45:d7:bd:0c:a3:17:d4:c3:08:8c:14:fc:ba: e0:90:ed:3d:a5:37:12:80:3c:5d:16:28:3e:86:5b: d4:e5:ea:a2:2c:7d:e6:a3:9d:85:3b:ec:c6:21:95: c9:9f:6f:da:97:40:a4:2d:fa:ea:f2:b8:54:71:aa: 5d:8a:d9:6c:9e:93:05:e6:72:92:a9:f3:9b:3e:31: 97:82:32:92:2d:a2:df:6b:98:b7:20:aa:97:e6:92: ff:25:ed:8c:8b:dd:31:ee:3e:d4:72:0b:47:80:fc: a5:38:49:50:be:5b:a9:a4:fc:7e:4d:c7:fb:45:76: 0e:76:56:96:e8:9b:4c:ed:6e:69:24:69:10:0f:19: f7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:90:8F:8E:A3:2E:21:0E:81:F7:D6:3F:C6:3B:21:6D:0B:E9:DB:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/672bd727-d3cf-3f4c-b729-8e92852e3e14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:4c:31:93:a9:5d:bc:00:be:47:75:42:06:b0:f6:65:f3:89: 43:ec:fc:65:45:01:b7:2a:54:09:73:7e:5a:00:46:50:79:66: 6c:9f:19:8d:77:84:9c:b3:c4:c9:16:55:6e:9e:de:fa:2a:26: e8:9d:4a:39:e0:a8:7e:ad:d6:c2:f1:aa:55:5e:bc:70:3a:59: 5f:6e:12:a9:41:e5:a9:a4:6f:bd:35:33:89:66:de:02:c7:83: ee:a1:f2:bb:a5:a3:51:c3:f7:7e:ae:02:32:61:4a:3e:a5:27: df:e8:87:cb:0c:79:5c:34:b3:d9:d9:25:1e:7c:66:82:11:ed: 4a:1d:15:93:dd:81:38:dc:76:cc:35:c1:46:ed:53:69:1c:87: 55:e2:11:da:13:e7:9a:e3:db:06:16:29:c5:79:ba:8d:d4:f9: ec:9d:37:91:40:82:68:b1:1e:e6:b5:b8:f3:6d:c8:0f:79:a3: 3e:8e:e7:2b:47:82:63:09:e1:57:9b:da:8b:02:d0:9e:4d:dd: 9e:cb:82:0a:b5:28:e0:7d:78:88:7b:30:a4:9e:99:09:57:ee: 9a:56:a1:a6:b5:d2:e9:07:5a:72:5f:9c:8f:52:33:58:8d:54: e0:48:9c:78:3f:45:75:4c:30:8b:4f:2b:dc:49:b0:65:49:77: c2:01:9a:d0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAfdoMXwQ7LX0KCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk YTcwMDg4NTAtMTUwZC00ZTU2LWE0MGYtMzc1M2QxNGY2ZTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1hSc5CYc+MAMYHT/2Zw0/9EttZgDKNEB7UZ sKclgzFvV86NMJhDgO3lPfnlWXYKM+PBHgOM2krBxu9UZ+sdg1zq1NYIg8sSrbpQ baAFtUShAd4kxkXwxqTdMqt+TuIHRKEsIdBchKQvetiqIXmu0zaE8+AakODX+UXX vQyjF9TDCIwU/LrgkO09pTcSgDxdFig+hlvU5eqiLH3mo52FO+zGIZXJn2/al0Ck Lfrq8rhUcapditlsnpMF5nKSqfObPjGXgjKSLaLfa5i3IKqX5pL/Je2Mi90x7j7U cgtHgPylOElQvluppPx+Tcf7RXYOdlaW6JtM7W5pJGkQDxn3+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNqQj46jLiEOgffWP8Y7IW0L6dvKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjcyYmQ3MjctZDNjZi0z ZjRjLWI3MjktOGU5Mjg1MmUzZTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF9MMZOpXbwAvkd1Qgaw9mXziUPs/GVFAbcqVAlzfloARlB5Zmyf GY13hJyzxMkWVW6e3voqJuidSjngqH6t1sLxqlVevHA6WV9uEqlB5amkb701M4lm 3gLHg+6h8rulo1HD936uAjJhSj6lJ9/oh8sMeVw0s9nZJR58ZoIR7UodFZPdgTjc dsw1wUbtU2kch1XiEdoT55rj2wYWKcV5uo3U+eydN5FAgmixHua1uPNtyA95oz6O 5ytHgmMJ4Veb2osC0J5N3Z7Lggq1KOB9eIh7MKSemQlX7ppWoaa10ukHWnJfnI9S M1iNVOBInHg/RXVMMItPK9xJsGVJd8IBmtA= -----END CERTIFICATE-----Generated at Wed Oct 29 20:10:30 2025 by rpki-client