$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9f8b3e69-6874-3713-a3c4-f886a966c41c.roa File: 9f8b3e69-6874-3713-a3c4-f886a966c41c.roa (raw, json) Hash identifier: gReB8gHbawzck9T3iTEWfNTX7QcsbeZsnvDcRfwXrAs= Subject key identifier: 83:1E:D7:DD:02:C8:CF:BD:28:7B:A7:47:6B:0E:84:B5:20:2B:E6:A1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AD3A11D599006B5E544983F00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9f8b3e69-6874-3713-a3c4-f886a966c41c.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 7342 IP address blocks: 2620:74:38::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a1:1d:59:90:06:b5:e5:44:98:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=20889883-5831-4460-b10c-4b7ef6cbc1b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:09:b9:7f:20:a8:95:de:68:90:8f:ae:ac:84: bb:2b:71:eb:94:03:6b:09:7b:2f:7f:51:02:a2:29: c7:30:7f:86:bc:4c:b6:31:dc:54:0e:16:a3:e6:e5: e8:df:99:18:5c:2e:1f:e3:72:4b:c2:8d:1b:f0:5a: a2:20:7e:77:b9:89:5f:a9:74:15:72:a1:ae:53:3e: 23:23:6e:fa:df:a2:a6:de:90:f3:48:64:20:52:2c: e4:8e:04:1c:ab:5a:98:3d:fc:77:bc:88:95:de:af: 0e:89:9f:60:ea:e3:74:5e:1a:c2:bf:b6:7c:9c:ad: 3c:43:ed:c5:20:61:cf:e7:50:42:58:ca:6b:67:45: 09:76:ac:b7:46:8d:14:f2:86:51:c7:7d:ca:a5:d9: 44:2a:0a:ae:2b:be:4d:e3:73:d8:a5:f9:5f:9d:27: 01:5c:74:8a:53:10:fb:7c:de:cd:c9:a7:51:b7:fc: 57:ab:79:4d:db:7e:f7:47:81:f5:74:e9:a8:47:1d: 17:96:5c:db:b1:9d:86:56:48:49:fe:44:80:e1:47: fc:77:30:2b:58:7b:69:4b:d7:ef:09:ab:93:9c:e2: fc:f5:b3:cc:df:8c:4d:c8:80:7b:f3:4b:b5:b8:1e: 61:77:45:bb:ea:aa:33:95:1e:67:44:22:8a:62:80: 9f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:1E:D7:DD:02:C8:CF:BD:28:7B:A7:47:6B:0E:84:B5:20:2B:E6:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9f8b3e69-6874-3713-a3c4-f886a966c41c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:38::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:c0:fd:2e:42:23:da:0b:0b:34:ad:f5:1a:ea:90:26:de:9a: 32:8d:b5:e2:1a:bd:7f:ae:4d:23:10:34:70:59:ae:4c:f6:39: 50:36:7b:63:2e:12:9e:79:18:89:b3:1a:56:a1:68:2d:64:9a: 47:09:12:b0:7c:cf:75:7b:eb:74:15:26:08:20:4d:66:8c:4a: b5:47:e1:5b:aa:cb:b6:fa:ee:a7:f0:3c:8d:6b:e9:62:b4:93: ff:da:09:31:b1:40:c5:e7:f4:71:2c:04:01:7c:05:b5:37:ba: 03:2e:7b:48:5e:08:23:92:82:3e:1b:14:b5:7c:e5:f4:e4:41: 69:d5:d3:b0:a7:ec:0e:db:bb:ab:78:3e:3b:33:5f:c7:86:09: f1:79:4d:02:0a:33:c7:90:de:71:ba:db:a2:e7:ff:d0:64:da: 88:0a:19:db:f5:ab:c9:cb:44:da:3d:d6:c2:5a:a6:f2:f8:a6: 26:98:8a:f7:6f:29:41:0b:3e:8b:00:98:0a:91:9f:49:6f:48: cf:94:1a:de:c2:e3:27:3c:27:03:60:af:a9:e4:e0:21:06:90: ee:6a:a9:72:30:86:1e:51:c6:a3:15:1d:4c:e5:57:5c:a9:63: 6d:16:a9:1a:30:93:2c:e3:59:22:1d:33:d6:75:5c:1e:f1:ad: e3:50:78:81 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErToR1ZkAa15USYPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk MjA4ODk4ODMtNTgzMS00NDYwLWIxMGMtNGI3ZWY2Y2JjMWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAm5fyCold5okI+urIS7K3HrlANrCXsvf1EC oinHMH+GvEy2MdxUDhaj5uXo35kYXC4f43JLwo0b8FqiIH53uYlfqXQVcqGuUz4j I27636Km3pDzSGQgUizkjgQcq1qYPfx3vIiV3q8OiZ9g6uN0XhrCv7Z8nK08Q+3F IGHP51BCWMprZ0UJdqy3Ro0U8oZRx33KpdlEKgquK75N43PYpflfnScBXHSKUxD7 fN7NyadRt/xXq3lN2373R4H1dOmoRx0XllzbsZ2GVkhJ/kSA4Uf8dzArWHtpS9fv CauTnOL89bPM34xNyIB780u1uB5hd0W76qozlR5nRCKKYoCfawIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIMe190CyM+9KHunR2sOhLUgK+ahMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWY4YjNlNjktNjg3NC0z NzEzLWEzYzQtZjg4NmE5NjZjNDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAA4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGnA/S5CI9oLCzSt9RrqkCbemjKNteIavX+uTSMQNHBZrkz2OVA2 e2MuEp55GImzGlahaC1kmkcJErB8z3V763QVJgggTWaMSrVH4Vuqy7b67qfwPI1r 6WK0k//aCTGxQMXn9HEsBAF8BbU3ugMue0heCCOSgj4bFLV85fTkQWnV07Cn7A7b u6t4PjszX8eGCfF5TQIKM8eQ3nG626Ln/9Bk2ogKGdv1q8nLRNo91sJapvL4piaY ivdvKUELPosAmAqRn0lvSM+UGt7C4yc8JwNgr6nk4CEGkO5qqXIwhh5RxqMVHUzl V1ypY20WqRowkyzjWSIdM9Z1XB7xreNQeIE= -----END CERTIFICATE-----Generated at Wed Oct 29 20:23:53 2025 by rpki-client