$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6ffe2313-74bf-345a-930e-f6ff8c36bac7.roa File: 6ffe2313-74bf-345a-930e-f6ff8c36bac7.roa (raw, json) Hash identifier: mYKAdZWay9EEdeAunWYKDOb5Uj71CSHH26sslE3PFEc= Subject key identifier: A3:8B:65:DC:89:68:53:36:29:33:26:49:AC:74:99:A9:84:E0:AD:8E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B48E1A77DEEEF933F8816DD50 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6ffe2313-74bf-345a-930e-f6ff8c36bac7.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397196 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:a7:7d:ee:ef:93:3f:88:16:dd:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=7977b71f-7bec-47e5-adc5-821488e9e92a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f4:ba:12:0c:ae:04:5b:49:6b:f4:33:86:09: 88:bd:42:d7:6b:de:d4:c1:ef:85:5c:0b:3c:97:85: 4d:b3:9d:0d:ac:4e:aa:07:19:df:a2:a2:7e:53:07: 08:1b:91:52:4c:73:5c:d0:dc:25:ca:3a:45:67:0e: a7:b3:6e:ef:3a:85:1d:4b:e2:46:c8:b6:68:cc:09: 7f:ff:03:ef:9c:3d:92:ea:67:d3:3d:50:b5:5f:72: 32:24:c3:f2:bb:04:ca:29:8b:9c:37:b2:f8:a4:4e: 73:fc:0a:4b:0a:30:58:73:0a:50:63:4d:1f:c6:7e: 92:6e:40:23:e2:d8:d4:1c:d1:19:04:f3:fd:31:c4: 9b:4e:42:51:82:00:2b:a4:61:2c:cf:eb:8f:ac:0e: 8d:ce:66:a3:4f:a2:94:2e:07:76:0c:12:9f:da:54: 1a:87:3c:18:a0:c5:c3:2c:0f:3f:3c:ee:e9:cb:c6: 86:f9:d8:e1:ae:08:d0:99:a8:ef:05:1f:d6:8c:2e: ca:82:ec:4d:3b:63:85:4f:cf:b7:de:b2:0f:26:37: 88:58:63:82:1f:ab:e2:94:2c:f8:75:f4:16:e1:eb: ee:25:1d:5c:b0:3a:16:53:90:90:26:5a:6b:aa:31: cc:73:b2:ac:9b:2b:0a:39:dc:d7:b7:2d:f0:8a:a2: 9c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:8B:65:DC:89:68:53:36:29:33:26:49:AC:74:99:A9:84:E0:AD:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6ffe2313-74bf-345a-930e-f6ff8c36bac7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:8c:31:e9:46:31:9c:05:c7:09:69:c9:dc:db:83:25:eb:55: ee:36:8b:13:42:55:9e:b7:6d:59:23:02:d9:87:e7:39:1f:67: d4:ab:c7:69:53:1a:cd:50:89:f3:d0:9f:3c:cc:42:34:d3:a0: a0:00:1d:fb:75:fa:0e:30:8a:b3:f5:cd:b9:ee:da:db:5c:c5: 0c:20:c2:e9:f8:38:79:3f:af:92:d2:b2:19:8b:8c:7c:4e:0f: 37:26:d0:d8:d9:91:fe:16:63:91:4e:03:bd:2b:a3:6c:ef:94: f8:ef:44:0d:17:5b:6b:23:6a:6d:ce:88:19:7f:a4:82:a5:60: 4b:c6:a2:00:e9:8e:18:00:f1:3a:a7:ee:6f:76:28:f7:94:d2: ac:05:0c:3d:93:ab:27:9a:ea:0a:2f:96:36:73:4e:92:6b:82: a9:81:ed:c9:06:46:0f:d5:8c:b5:1d:f4:c7:ce:12:73:31:5a: 43:ca:b4:52:3c:7c:f7:b4:5e:41:1d:fa:f6:58:bf:42:09:2e: e8:69:dc:22:7e:ad:61:a5:66:25:d7:5a:1d:eb:cd:02:c8:88: a7:7d:d6:a8:89:65:5c:dd:46:34:71:39:d7:6d:6d:02:00:49: 7b:83:f2:63:86:90:36:d4:d5:06:f7:a1:7e:90:d5:08:74:e2: fd:4a:1a:df -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4ad97u+TP4gW3VAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk Nzk3N2I3MWYtN2JlYy00N2U1LWFkYzUtODIxNDg4ZTllOTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPS6EgyuBFtJa/QzhgmIvULXa97Uwe+FXAs8 l4VNs50NrE6qBxnfoqJ+UwcIG5FSTHNc0NwlyjpFZw6ns27vOoUdS+JGyLZozAl/ /wPvnD2S6mfTPVC1X3IyJMPyuwTKKYucN7L4pE5z/ApLCjBYcwpQY00fxn6SbkAj 4tjUHNEZBPP9McSbTkJRggArpGEsz+uPrA6NzmajT6KULgd2DBKf2lQahzwYoMXD LA8/PO7py8aG+djhrgjQmajvBR/WjC7KguxNO2OFT8+33rIPJjeIWGOCH6vilCz4 dfQW4evuJR1csDoWU5CQJlprqjHMc7KsmysKOdzXty3wiqKcbwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKOLZdyJaFM2KTMmSax0mamE4K2OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmZmZTIzMTMtNzRiZi0z NDVhLTkzMGUtZjZmZjhjMzZiYWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHWMMelGMZwFxwlpydzbgyXrVe42ixNCVZ63bVkjAtmH5zkfZ9Sr x2lTGs1QifPQnzzMQjTToKAAHft1+g4wirP1zbnu2ttcxQwgwun4OHk/r5LSshmL jHxODzcm0NjZkf4WY5FOA70ro2zvlPjvRA0XW2sjam3OiBl/pIKlYEvGogDpjhgA 8Tqn7m92KPeU0qwFDD2Tqyea6govljZzTpJrgqmB7ckGRg/VjLUd9MfOEnMxWkPK tFI8fPe0XkEd+vZYv0IJLuhp3CJ+rWGlZiXXWh3rzQLIiKd91qiJZVzdRjRxOddt bQIASXuD8mOGkDbU1Qb3oX6Q1Qh04v1KGt8= -----END CERTIFICATE-----Generated at Wed Oct 29 20:45:20 2025 by rpki-client