$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9a4e15c6-3bfa-3872-b307-d53f4dda7137.roa File: 9a4e15c6-3bfa-3872-b307-d53f4dda7137.roa (raw, json) Hash identifier: zbPuIF39vyBaryw2b74G56V7yMIMt0v9FczP1k5QvKU= Subject key identifier: 53:42:5F:5C:7F:89:7E:BA:3E:DB:80:4A:44:39:47:85:A8:97:5D:FE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF0F159A80028C4DB703692C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9a4e15c6-3bfa-3872-b307-d53f4dda7137.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 36630 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:59:a8:00:28:c4:db:70:36:92:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=e4f3c6b6-8b0f-4832-bbb0-078213f667cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:0f:da:cd:3f:0d:3d:e6:3b:b9:6d:1e:03:e2: 24:35:72:81:7a:f3:c4:b1:0e:09:31:e4:ce:ca:37: e1:d9:a9:9b:88:16:e7:a8:b1:24:d2:63:c0:33:92: 19:bc:f9:8d:dd:d9:fb:ad:96:b0:8e:0b:5a:1e:0f: d6:4a:da:7f:a0:30:3e:34:9e:d6:b9:af:e4:d7:60: 5c:87:09:b2:f4:79:a9:db:a5:58:37:9b:7a:4e:8a: aa:a0:6d:8f:b4:da:df:15:30:d6:96:e7:52:3c:38: 4d:7d:de:cf:a0:82:fe:ba:2b:77:9e:ce:7d:64:c9: 90:9a:89:24:43:2d:9a:1d:e9:a1:25:19:9c:89:ac: af:15:cf:01:b2:b9:95:6d:ed:12:2a:88:4b:e0:2f: ca:6c:3c:0b:0f:f5:06:e4:c8:01:77:5b:fe:f6:38: 07:ee:a6:e5:56:a9:00:b2:03:0e:8f:e2:90:03:2c: 66:33:d4:23:89:6e:38:6d:d9:69:2e:17:87:19:e5: b0:f7:66:49:e6:57:4f:6f:9c:8e:9c:f8:6d:59:c0: 52:92:1d:2f:d6:23:83:8f:0c:35:af:c8:1f:d7:19: 5a:76:68:e5:7a:3c:e8:3b:0f:fc:96:03:4f:fe:47: b6:82:18:00:04:e4:c1:47:3a:dd:7b:85:95:cc:e5: 53:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:42:5F:5C:7F:89:7E:BA:3E:DB:80:4A:44:39:47:85:A8:97:5D:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9a4e15c6-3bfa-3872-b307-d53f4dda7137.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:68:51:9c:c5:42:7d:92:10:08:4d:66:78:6b:a2:5e:59:07: f7:2f:b3:80:e4:a2:a5:6d:dd:d6:f7:1f:26:00:f9:0e:d4:10: 9b:47:b9:49:c7:8c:08:f1:06:68:f2:46:d8:cb:78:64:63:a3: ea:de:9f:17:f1:8d:a9:9d:89:e2:20:02:e4:32:a1:3b:42:04: 55:b5:22:26:e4:41:8e:fa:9b:c7:c1:a9:45:57:31:88:6f:10: c9:fa:09:8a:e1:68:26:9e:fb:ed:77:6e:7c:1e:f5:a0:01:66: d8:e3:db:e1:20:fa:9f:1d:bb:b9:ba:49:ed:8a:83:6a:49:32: 8d:a2:27:1e:af:7c:67:de:c1:e4:c9:94:49:29:43:45:fb:5f: 3c:e2:96:54:c2:28:41:18:30:b1:6f:8e:28:69:58:b9:e9:3a: f1:dc:7a:fe:46:9e:3e:49:34:83:58:99:67:7f:a9:ae:2e:4c: 66:f3:18:00:b1:a7:e9:06:85:9e:0a:37:9b:c2:9a:0e:e1:38: 87:1d:ca:b6:d2:15:d6:3c:c9:20:8e:1e:07:cf:00:1e:af:8a: 9f:e8:30:fc:6c:7c:7c:de:e3:4b:be:b4:1e:37:c0:32:2d:7a: dc:8a:57:27:85:a4:e8:10:da:01:47:e1:7d:b7:f7:e3:24:e3: 04:09:4b:6c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8VmoACjE23A2ksAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk ZTRmM2M2YjYtOGIwZi00ODMyLWJiYjAtMDc4MjEzZjY2N2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhg/azT8NPeY7uW0eA+IkNXKBevPEsQ4JMeTO yjfh2ambiBbnqLEk0mPAM5IZvPmN3dn7rZawjgtaHg/WStp/oDA+NJ7Wua/k12Bc hwmy9Hmp26VYN5t6ToqqoG2PtNrfFTDWludSPDhNfd7PoIL+uit3ns59ZMmQmokk Qy2aHemhJRmciayvFc8BsrmVbe0SKohL4C/KbDwLD/UG5MgBd1v+9jgH7qblVqkA sgMOj+KQAyxmM9QjiW44bdlpLheHGeWw92ZJ5ldPb5yOnPhtWcBSkh0v1iODjww1 r8gf1xladmjlejzoOw/8lgNP/ke2ghgABOTBRzrde4WVzOVT5QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFNCX1x/iX66PtuASkQ5R4Wol13+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWE0ZTE1YzYtM2JmYS0z ODcyLWIzMDctZDUzZjRkZGE3MTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFtoUZzFQn2SEAhNZnhrol5ZB/cvs4DkoqVt3db3HyYA+Q7UEJtH uUnHjAjxBmjyRtjLeGRjo+renxfxjamdieIgAuQyoTtCBFW1IibkQY76m8fBqUVX MYhvEMn6CYrhaCae++13bnwe9aABZtjj2+Eg+p8du7m6Se2Kg2pJMo2iJx6vfGfe weTJlEkpQ0X7XzzillTCKEEYMLFvjihpWLnpOvHcev5Gnj5JNINYmWd/qa4uTGbz GACxp+kGhZ4KN5vCmg7hOIcdyrbSFdY8ySCOHgfPAB6vip/oMPxsfHze40u+tB43 wDItetyKVyeFpOgQ2gFH4X239+Mk4wQJS2w= -----END CERTIFICATE-----Generated at Wed Oct 29 20:10:32 2025 by rpki-client