$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/96d13d80-acc9-3459-a4d6-3df39e1cd05a.roa File: 96d13d80-acc9-3459-a4d6-3df39e1cd05a.roa (raw, json) Hash identifier: 5jViGCCTj+VFDSm1RYAfBPreDu2kQi6Q9eCioeH8SnI= Subject key identifier: 5A:3F:32:4F:93:FE:3E:66:F0:43:CE:4B:47:80:C9:51:27:4E:3F:88 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B48E1BC76EFAD4386F082F500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/96d13d80-acc9-3459-a4d6-3df39e1cd05a.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 396599 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:bc:76:ef:ad:43:86:f0:82:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=911abfae-4777-4587-8fdf-05655450817a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:84:5e:d0:ae:f2:24:72:29:f8:14:3b:9a:95: 11:a9:a6:c2:b1:ba:36:93:5d:91:4a:44:ce:e0:70: 46:c7:8e:af:c0:77:d2:b5:b5:e9:f1:e8:24:b1:d7: 71:2d:6d:69:da:64:52:c0:91:92:d7:61:42:7b:2d: 10:f5:50:9c:f8:79:8c:01:92:b7:91:b3:6d:dd:fe: 9d:c7:5e:b1:c2:73:cb:a0:97:73:f8:40:59:a6:95: 22:4b:6a:26:fe:3f:40:b5:e2:3c:f5:27:95:f6:0c: de:59:28:ce:01:1d:c2:2b:96:d3:22:74:e0:8b:22: b4:85:12:81:94:3e:e4:f0:71:34:89:d6:9d:e5:19: d3:cb:29:4f:2d:95:46:9e:f7:9b:f4:7f:1f:2d:c2: 49:ef:28:c3:f6:39:c1:c7:f4:84:34:07:78:3d:23: cb:e6:f9:25:95:51:54:92:38:d0:de:5e:2a:2f:e7: bf:e6:6d:47:cc:27:4c:aa:09:0b:2b:7d:4f:ec:db: b3:e7:9f:60:73:85:a7:d6:c8:20:9f:8b:ff:3e:f4: b0:8a:8c:23:3e:85:94:9e:80:25:5d:f7:58:c0:4a: 08:f8:c2:2e:92:2f:fd:37:07:4f:31:9a:29:4e:73: 16:d5:e0:78:22:ce:9c:82:74:ea:55:8d:a6:ed:2a: 49:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:3F:32:4F:93:FE:3E:66:F0:43:CE:4B:47:80:C9:51:27:4E:3F:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/96d13d80-acc9-3459-a4d6-3df39e1cd05a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:4a:6c:56:38:4c:da:c6:af:90:9e:11:2d:f0:c2:81:90:75: 65:10:45:8b:17:07:83:5b:28:76:dd:02:56:66:64:f7:e8:b8: dc:7a:3c:0e:37:9c:d5:73:9b:d7:2d:9f:02:fa:01:e4:9e:dd: 9e:c7:b8:11:9f:88:40:33:f2:e2:90:01:11:88:a4:72:05:f6: ab:a3:10:30:8a:b2:ba:b2:18:2c:cb:31:e3:b4:04:4e:65:e1: a7:e4:a4:24:d6:6f:12:b4:b8:21:b3:af:4b:9e:50:7e:16:ed: 24:91:6f:3e:2b:dd:06:b3:a0:e8:38:8a:b5:94:c1:39:f3:5c: 28:b4:5d:1b:d4:bc:24:2f:f4:29:ab:c9:15:0c:6f:24:98:18: ab:19:41:44:2b:ec:13:37:b6:e9:c1:13:ae:a2:63:cc:a7:cc: 1e:09:23:da:fe:66:c0:f6:ac:06:30:dc:ee:c8:a1:c0:39:c4: f6:e0:f9:d2:98:61:b6:8e:c8:24:44:1b:9d:66:c0:77:96:18: 44:ec:c3:e7:f1:10:58:eb:f2:e0:f7:89:32:5a:93:79:e9:8e: ef:17:23:fc:7b:b5:8d:73:32:6a:4c:e3:fb:f0:f9:88:c6:b4: 76:a2:1d:fe:c7:a7:0e:3f:9a:84:6b:35:ff:a9:fc:55:5a:af: d0:dc:23:c2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4bx2761DhvCC9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk OTExYWJmYWUtNDc3Ny00NTg3LThmZGYtMDU2NTU0NTA4MTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYRe0K7yJHIp+BQ7mpURqabCsbo2k12RSkTO 4HBGx46vwHfStbXp8egksddxLW1p2mRSwJGS12FCey0Q9VCc+HmMAZK3kbNt3f6d x16xwnPLoJdz+EBZppUiS2om/j9AteI89SeV9gzeWSjOAR3CK5bTInTgiyK0hRKB lD7k8HE0idad5RnTyylPLZVGnveb9H8fLcJJ7yjD9jnBx/SENAd4PSPL5vkllVFU kjjQ3l4qL+e/5m1HzCdMqgkLK31P7Nuz559gc4Wn1sggn4v/PvSwiowjPoWUnoAl XfdYwEoI+MIuki/9NwdPMZopTnMW1eB4Is6cgnTqVY2m7SpJCwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFo/Mk+T/j5m8EPOS0eAyVEnTj+IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTZkMTNkODAtYWNjOS0z NDU5LWE0ZDYtM2RmMzllMWNkMDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAxKbFY4TNrGr5CeES3wwoGQdWUQRYsXB4NbKHbdAlZmZPfouNx6 PA43nNVzm9ctnwL6AeSe3Z7HuBGfiEAz8uKQARGIpHIF9qujEDCKsrqyGCzLMeO0 BE5l4afkpCTWbxK0uCGzr0ueUH4W7SSRbz4r3QazoOg4irWUwTnzXCi0XRvUvCQv 9CmryRUMbySYGKsZQUQr7BM3tunBE66iY8ynzB4JI9r+ZsD2rAYw3O7IocA5xPbg +dKYYbaOyCREG51mwHeWGETsw+fxEFjr8uD3iTJak3npju8XI/x7tY1zMmpM4/vw +YjGtHaiHf7Hpw4/moRrNf+p/FVar9DcI8I= -----END CERTIFICATE-----Generated at Wed Oct 29 20:36:39 2025 by rpki-client