$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/81bf70f2-010c-3aa8-8401-8e4aa9a2548b.roa File: 81bf70f2-010c-3aa8-8401-8e4aa9a2548b.roa (raw, json) Hash identifier: J3vyx3fN/gI9RmeHOVM7jQLODp3wZZjiBC5Jg3fVPvg= Subject key identifier: E1:37:40:5E:6C:60:76:14:70:37:BF:00:D3:81:EC:CB:5D:D0:4E:98 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B48E1A7CA6056D0AF85D82120 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/81bf70f2-010c-3aa8-8401-8e4aa9a2548b.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 396546 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:a7:ca:60:56:d0:af:85:d8:21:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=02f60689-4f6e-4e6e-a569-40e15652cb5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:96:70:1e:fb:b5:1a:41:e5:ac:83:28:09:dc: f0:48:65:9a:e1:01:6d:c9:e5:62:90:6a:62:66:37: 57:95:15:c3:f0:3a:ea:e4:01:6b:63:55:47:ce:63: 49:01:aa:88:97:bb:04:de:43:2a:6a:6a:5e:ca:98: 48:68:39:98:0a:e4:8d:7b:1b:27:7b:21:b9:8d:fb: 57:de:7d:13:2f:98:8f:6f:cc:98:7e:77:a7:69:42: 4a:77:01:66:78:b6:ea:81:72:37:60:bd:01:75:b3: 62:7f:01:e4:a1:b8:51:3d:6f:6c:f1:da:1b:9d:a8: 0f:0e:bd:72:d3:be:36:a7:64:fa:bd:95:af:b9:b7: c2:08:d5:77:e2:0d:06:ab:ab:4a:24:2b:9f:38:78: b5:b4:6a:8f:76:ff:8f:95:87:71:80:8e:0a:ba:16: ad:e8:e9:c7:cd:21:8d:01:45:d1:bb:40:33:29:6f: b6:b5:79:14:17:42:88:66:3e:d2:d4:75:f9:01:98: f2:bf:42:de:2d:65:8c:5e:3f:a0:53:f5:3c:0a:ea: 49:04:9e:a4:ef:51:42:d3:6e:b7:a3:fd:b1:48:71: a5:79:3f:3e:3e:6b:c5:0d:50:9d:f9:12:d7:91:76: 72:f3:b6:12:a7:b7:ed:3d:5e:9d:85:ce:56:23:d0: 13:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:37:40:5E:6C:60:76:14:70:37:BF:00:D3:81:EC:CB:5D:D0:4E:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/81bf70f2-010c-3aa8-8401-8e4aa9a2548b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:3a:98:9f:5e:34:4a:8a:ca:4c:0f:d4:99:c0:52:50:05:29: 50:f4:d5:3b:b6:f7:27:23:e0:10:93:42:fd:93:c8:ec:49:fa: 95:29:76:39:6a:11:4d:61:72:9e:a7:e6:eb:37:cd:57:a1:f1: 0a:1f:b0:64:7a:7f:cb:2a:04:e4:f3:85:5e:c8:52:dd:95:62: a3:90:e4:fb:87:88:76:9d:df:25:b0:02:84:fb:9d:f1:56:5e: 87:6a:9a:05:e6:98:12:4c:52:7a:12:6a:29:81:66:d3:dd:7a: 75:9b:60:10:55:82:6f:9a:36:b6:18:29:da:5b:11:e2:9b:bc: d2:da:47:e3:ac:fd:fe:34:34:d7:0d:08:9a:6d:7a:58:d5:65: c3:cb:9e:2d:d6:28:51:bc:01:11:02:a6:8a:57:f3:bc:d2:75: 21:82:93:97:1c:72:7c:68:22:a1:6c:a6:b6:7a:00:a1:8e:ae: 89:fb:fa:7d:94:8e:87:83:f4:3d:f4:e0:5d:72:7b:e5:3c:68: c3:d3:50:98:db:10:68:e2:4a:c2:0e:a2:ad:2e:a4:26:dc:fa: 84:58:84:ff:00:03:88:a0:18:9c:d4:b4:2b:92:66:2d:71:eb: bc:2b:df:6f:40:79:70:9e:e6:94:9a:51:ac:92:8d:29:76:28: f8:34:ac:c0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4afKYFbQr4XYISAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MDJmNjA2ODktNGY2ZS00ZTZlLWE1NjktNDBlMTU2NTJjYjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZZwHvu1GkHlrIMoCdzwSGWa4QFtyeVikGpi ZjdXlRXD8Drq5AFrY1VHzmNJAaqIl7sE3kMqampeyphIaDmYCuSNexsneyG5jftX 3n0TL5iPb8yYfnenaUJKdwFmeLbqgXI3YL0BdbNifwHkobhRPW9s8dobnagPDr1y 0742p2T6vZWvubfCCNV34g0Gq6tKJCufOHi1tGqPdv+PlYdxgI4Kuhat6OnHzSGN AUXRu0AzKW+2tXkUF0KIZj7S1HX5AZjyv0LeLWWMXj+gU/U8CupJBJ6k71FC0263 o/2xSHGleT8+PmvFDVCd+RLXkXZy87YSp7ftPV6dhc5WI9ATPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOE3QF5sYHYUcDe/ANOB7Mtd0E6YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODFiZjcwZjItMDEwYy0z YWE4LTg0MDEtOGU0YWE5YTI1NDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHw6mJ9eNEqKykwP1JnAUlAFKVD01Tu29ycj4BCTQv2TyOxJ+pUp djlqEU1hcp6n5us3zVeh8QofsGR6f8sqBOTzhV7IUt2VYqOQ5PuHiHad3yWwAoT7 nfFWXodqmgXmmBJMUnoSaimBZtPdenWbYBBVgm+aNrYYKdpbEeKbvNLaR+Os/f40 NNcNCJpteljVZcPLni3WKFG8ARECpopX87zSdSGCk5cccnxoIqFsprZ6AKGOron7 +n2UjoeD9D304F1ye+U8aMPTUJjbEGjiSsIOoq0upCbc+oRYhP8AA4igGJzUtCuS Zi1x67wr329AeXCe5pSaUaySjSl2KPg0rMA= -----END CERTIFICATE-----Generated at Wed Oct 29 20:12:48 2025 by rpki-client