$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a099164e-5f34-35c4-bf82-e25c0813663b.roa File: a099164e-5f34-35c4-bf82-e25c0813663b.roa (raw, json) Hash identifier: nJBx+0jthz0r90jS+Zv8iIa1bfwTrPZ7Dok/ZsfB3HY= Subject key identifier: B6:AA:D7:6A:9A:17:8E:75:A1:E9:17:CD:74:6B:DA:1A:61:A9:C7:23 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AD3A12389945D1C0A07C68280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a099164e-5f34-35c4-bf82-e25c0813663b.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 7342 IP address blocks: 2620:74:58::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a1:23:89:94:5d:1c:0a:07:c6:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=9ee91959-92c0-48d7-8b7c-1004c0130625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:70:ec:de:56:2e:af:e3:48:35:2b:69:40:15: 61:d1:9f:a4:ce:e7:81:e5:d9:57:e1:bb:f7:0c:7d: 30:47:24:a9:19:e3:d1:e3:d7:d3:ca:b4:69:22:ed: 70:2f:03:38:1f:4c:f4:0b:ae:93:49:a6:24:d9:fb: a3:13:69:ba:4d:00:81:f7:4a:c5:3d:76:55:3b:2a: c8:e2:a6:16:85:0d:59:9c:a5:4a:28:d2:b8:d9:9d: ef:48:06:e3:9f:2f:b1:21:21:06:ed:6d:2d:ac:32: d6:42:df:30:43:9c:ae:0c:af:af:7e:a6:5c:59:58: 4b:a1:35:cd:cd:f9:49:56:3f:3d:ca:3b:42:f8:31: f5:e0:03:6c:fa:b5:11:dd:91:49:df:ea:7d:0f:41: 74:fa:79:19:99:ef:31:b9:74:e2:b8:10:75:06:83: bc:9d:e6:14:1d:c0:54:c1:85:74:6a:55:9a:b0:66: c4:58:d4:b0:16:2a:f2:57:e8:54:82:1c:fd:08:fc: 24:22:ec:3c:7b:1c:b9:77:e9:59:b7:db:42:ad:fe: 56:29:20:6d:a1:69:0b:58:21:34:2c:ee:4b:12:d7: 37:c5:d3:bd:fa:bb:31:a9:80:be:c7:4d:9a:27:e3: e7:69:e3:dd:3d:9b:43:17:b7:ca:35:a0:a4:e9:ff: c7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:AA:D7:6A:9A:17:8E:75:A1:E9:17:CD:74:6B:DA:1A:61:A9:C7:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a099164e-5f34-35c4-bf82-e25c0813663b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:58::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:0a:e3:a0:2b:1c:f0:07:76:1a:f2:64:0b:02:b0:c0:97:98: f4:af:da:08:fa:e6:c4:50:20:fd:9f:4b:4b:7f:87:1c:6d:39: a5:4b:f1:04:a1:f5:97:c6:f0:b3:fd:43:d1:68:5e:89:ff:53: e0:6a:b8:a8:21:f2:11:25:af:c2:69:b6:49:13:73:83:0f:7e: 67:72:e5:2f:dc:51:92:a9:94:10:ae:d2:5c:cd:48:fb:1f:f4: bc:0e:7c:07:d9:c5:9b:c9:6a:41:7a:0b:89:36:8f:5f:39:b0: 87:ec:19:a2:f5:a1:98:02:8b:8e:aa:ba:b3:a9:5e:15:e5:72: 92:e2:68:c7:9c:ae:9f:44:3e:2d:b3:e3:a4:6b:9f:97:8d:65: 24:fa:64:51:20:3c:b3:03:e2:48:77:e7:0d:ff:d3:76:2d:38: a4:8f:c6:5a:da:95:6a:58:e9:4e:e6:a1:05:fe:5a:1d:39:80: 98:f3:95:eb:22:5a:e4:e9:2b:db:a1:23:f8:96:a9:6d:51:b9: 53:c8:07:3d:bc:ab:64:be:69:66:0d:48:29:8b:3d:96:97:83: 81:70:b9:99:5f:12:fb:7d:a1:98:e1:f4:45:44:e9:94:b6:ad: 7e:4b:2c:a0:10:84:bf:b8:ea:54:d0:cd:4b:26:d1:35:2a:e6: 8f:3d:45:38 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErToSOJlF0cCgfGgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk OWVlOTE5NTktOTJjMC00OGQ3LThiN2MtMTAwNGMwMTMwNjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XDs3lYur+NINStpQBVh0Z+kzueB5dlX4bv3 DH0wRySpGePR49fTyrRpIu1wLwM4H0z0C66TSaYk2fujE2m6TQCB90rFPXZVOyrI 4qYWhQ1ZnKVKKNK42Z3vSAbjny+xISEG7W0trDLWQt8wQ5yuDK+vfqZcWVhLoTXN zflJVj89yjtC+DH14ANs+rUR3ZFJ3+p9D0F0+nkZme8xuXTiuBB1BoO8neYUHcBU wYV0alWasGbEWNSwFiryV+hUghz9CPwkIuw8exy5d+lZt9tCrf5WKSBtoWkLWCE0 LO5LEtc3xdO9+rsxqYC+x02aJ+PnaePdPZtDF7fKNaCk6f/HyQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLaq12qaF451oekXzXRr2hphqccjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTA5OTE2NGUtNWYzNC0z NWM0LWJmODItZTI1YzA4MTM2NjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADIK46ArHPAHdhryZAsCsMCXmPSv2gj65sRQIP2fS0t/hxxtOaVL 8QSh9ZfG8LP9Q9FoXon/U+BquKgh8hElr8JptkkTc4MPfmdy5S/cUZKplBCu0lzN SPsf9LwOfAfZxZvJakF6C4k2j185sIfsGaL1oZgCi46qurOpXhXlcpLiaMecrp9E Pi2z46Rrn5eNZST6ZFEgPLMD4kh35w3/03YtOKSPxlralWpY6U7moQX+Wh05gJjz lesiWuTpK9uhI/iWqW1RuVPIBz28q2S+aWYNSCmLPZaXg4FwuZlfEvt9oZjh9EVE 6ZS2rX5LLKAQhL+46lTQzUsm0TUq5o89RTg= -----END CERTIFICATE-----Generated at Wed Oct 29 20:35:12 2025 by rpki-client