$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/86d5d6ca-d361-37c6-b3ec-62cd68a8227c.roa File: 86d5d6ca-d361-37c6-b3ec-62cd68a8227c.roa (raw, json) Hash identifier: lfP/0LPkoXK+ZlraGPbjFwXF4VgPS3uAyzOFEMk0fk4= Subject key identifier: CC:EC:EB:30:F6:BB:99:2D:7F:8B:FB:9D:41:8E:56:75:5B:50:F8:EF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF0F15CE08725C829856F4B50 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/86d5d6ca-d361-37c6-b3ec-62cd68a8227c.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 36617 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:5c:e0:87:25:c8:29:85:6f:4b:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=8bea361d-2943-4ef6-a681-7a119c49c604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e3:99:34:18:31:cf:03:78:ef:50:a2:fd:69: 88:14:5b:9e:79:64:5d:a5:44:f5:85:50:09:d7:45: fb:ae:6b:64:99:e7:d4:19:f9:c2:e3:ed:1b:66:c6: df:c0:7b:ac:e6:52:2c:d2:02:ee:fd:5a:5b:39:98: 34:64:02:57:6e:df:e5:55:9d:0b:69:1a:fa:d2:f2: 22:f6:0f:d0:ac:a3:51:e3:05:2e:ff:02:64:25:73: 23:05:02:da:ad:5d:02:4b:2b:7d:6e:e3:c2:8a:0d: 3b:6c:72:38:c1:77:50:36:ff:03:f1:a0:c9:59:24: 59:0a:82:59:d0:0d:98:8d:d2:92:ad:d6:54:1f:b7: f2:e6:c5:03:7d:0f:e4:07:71:22:23:60:ba:99:36: 86:ae:14:ec:2d:76:35:b0:02:f6:91:ae:60:87:96: 54:ee:6b:8d:95:c6:b9:0a:06:56:a7:e5:ce:98:78: 7b:81:f8:74:37:1a:60:d0:9e:b8:d3:3f:77:b1:36: ee:75:78:f6:f8:72:ff:72:8a:6e:ce:9c:4a:53:10: c6:a7:f6:24:d9:1e:1c:46:85:29:be:02:8b:39:a0: d5:aa:3c:07:53:e2:e3:15:a7:88:fa:57:b4:2e:6b: 7f:96:41:84:a0:f9:81:e6:2e:90:8a:43:cb:96:3a: 7a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:EC:EB:30:F6:BB:99:2D:7F:8B:FB:9D:41:8E:56:75:5B:50:F8:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/86d5d6ca-d361-37c6-b3ec-62cd68a8227c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:d2:96:ee:98:0a:7b:86:b2:e5:0a:7d:27:f0:2a:48:d0:26: f0:ea:e5:d0:c0:c2:f5:ed:2c:00:53:17:03:94:0e:6e:ac:3f: 67:90:17:dd:6b:6f:61:eb:a9:a7:62:c3:36:56:78:de:e5:13: 40:5c:65:4f:44:e8:fc:1a:b1:25:01:db:0f:6d:91:d0:e3:6c: 1a:3e:82:e3:ed:73:99:10:80:0b:86:ba:c9:47:ee:60:14:df: db:67:f2:73:1f:1b:23:a7:95:b7:35:74:df:73:3a:bf:35:4a: 10:18:71:5a:15:fa:9f:55:4c:7d:0a:f9:d2:73:ee:2d:16:2d: 42:c2:8a:15:7e:2e:c1:1c:1d:9f:00:de:c3:4b:c7:29:cd:e9: b9:b5:ce:47:dc:98:b9:ac:70:5d:4a:24:4b:ec:5b:09:b7:d4: 2b:d5:e0:a1:47:0a:4d:e6:bd:e0:36:0e:85:ad:74:bb:a1:6f: f4:80:6c:bb:37:b9:17:21:97:75:55:3e:33:e9:91:be:d9:19: aa:2d:bb:67:79:4e:e2:18:d1:59:25:73:24:1d:d4:a0:d2:07: b6:66:8c:2d:c2:08:44:e2:40:61:49:62:bf:32:10:a1:48:4d: f5:34:5f:86:d8:6f:16:3d:98:0e:69:32:94:ba:cb:ac:92:62: 93:4f:12:2c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8VzghyXIKYVvS1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk OGJlYTM2MWQtMjk0My00ZWY2LWE2ODEtN2ExMTljNDljNjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluOZNBgxzwN471Ci/WmIFFueeWRdpUT1hVAJ 10X7rmtkmefUGfnC4+0bZsbfwHus5lIs0gLu/VpbOZg0ZAJXbt/lVZ0LaRr60vIi 9g/QrKNR4wUu/wJkJXMjBQLarV0CSyt9buPCig07bHI4wXdQNv8D8aDJWSRZCoJZ 0A2YjdKSrdZUH7fy5sUDfQ/kB3EiI2C6mTaGrhTsLXY1sAL2ka5gh5ZU7muNlca5 CgZWp+XOmHh7gfh0Nxpg0J640z93sTbudXj2+HL/copuzpxKUxDGp/Yk2R4cRoUp vgKLOaDVqjwHU+LjFaeI+le0Lmt/lkGEoPmB5i6QikPLljp6BQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMzs6zD2u5ktf4v7nUGOVnVbUPjvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODZkNWQ2Y2EtZDM2MS0z N2M2LWIzZWMtNjJjZDY4YTgyMjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAELSlu6YCnuGsuUKfSfwKkjQJvDq5dDAwvXtLABTFwOUDm6sP2eQ F91rb2HrqadiwzZWeN7lE0BcZU9E6PwasSUB2w9tkdDjbBo+guPtc5kQgAuGuslH 7mAU39tn8nMfGyOnlbc1dN9zOr81ShAYcVoV+p9VTH0K+dJz7i0WLULCihV+LsEc HZ8A3sNLxynN6bm1zkfcmLmscF1KJEvsWwm31CvV4KFHCk3mveA2DoWtdLuhb/SA bLs3uRchl3VVPjPpkb7ZGaotu2d5TuIY0VklcyQd1KDSB7ZmjC3CCETiQGFJYr8y EKFITfU0X4bYbxY9mA5pMpS6y6ySYpNPEiw= -----END CERTIFICATE-----Generated at Wed Oct 29 22:45:07 2025 by rpki-client