$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b67d2449-0a1a-3022-bf24-1497fa2f892a.roa File: b67d2449-0a1a-3022-bf24-1497fa2f892a.roa (raw, json) Hash identifier: fUv/+GdQS6imnlyozEfXB8qtMmBmQIHZZK8rvNnHiTc= Subject key identifier: 7E:48:E9:B0:24:DB:E2:56:38:45:BB:75:54:5F:2F:11:6B:93:8C:15 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B62021C42F0323ABCDB5725C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b67d2449-0a1a-3022-bf24-1497fa2f892a.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 396546 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:1c:42:f0:32:3a:bc:db:57:25:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=7bed73d2-acf8-44cb-8ff8-9fca2fd6c59d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:aa:91:0d:ca:ed:98:90:82:37:24:a4:d2:f8: 0d:e9:0b:f8:da:67:35:ab:d6:c2:08:81:d0:5a:5e: 6a:a3:a2:fe:07:13:40:b7:2e:e7:23:a4:7a:c9:e6: c6:66:54:a5:28:9b:a9:7b:11:96:11:90:fc:8f:59: 0b:c1:46:a9:e0:d6:15:37:20:f9:9f:65:3f:6a:88: da:31:62:f7:3a:98:09:3a:91:24:16:03:ea:8c:4c: de:5a:63:8a:bf:0e:73:5b:e6:f9:6a:2f:5d:24:00: da:8a:64:02:85:8f:dc:a3:98:dc:29:85:df:62:bf: 19:3b:06:8b:7a:62:3d:85:43:e6:a0:82:a6:21:09: 9a:bd:18:5a:dc:61:85:1f:7c:23:0b:2b:8e:53:20: 3f:a5:65:78:77:c4:7c:3f:54:23:b4:68:02:2a:bf: 3f:92:6c:f2:b8:b9:23:ef:90:37:a1:da:ec:f7:9d: c7:e7:70:d7:98:43:49:a2:2c:a8:b6:8c:dd:a9:d7: 3c:bf:d2:2d:ed:85:f5:13:d5:c7:ae:57:11:ea:5a: dc:27:16:7e:ff:3d:40:63:b3:fe:1e:84:e5:a9:67: 2e:9d:29:2d:a2:5a:c5:f9:3e:2d:49:45:ce:57:92: 0f:79:cc:94:44:14:7a:d6:5d:06:85:25:c1:88:78: d0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:48:E9:B0:24:DB:E2:56:38:45:BB:75:54:5F:2F:11:6B:93:8C:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b67d2449-0a1a-3022-bf24-1497fa2f892a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:00:79:99:29:d0:15:b8:a9:03:7b:53:7a:42:31:a6:da:a0: 82:41:89:d2:41:f7:e8:a3:87:c9:c0:e0:fa:2d:9b:a2:a1:0a: 7a:1a:09:f8:64:ec:61:05:16:f8:c5:25:9e:59:75:0a:1e:57: e1:a9:15:b9:60:38:26:1d:f1:0e:7d:c1:13:49:75:13:23:67: 19:fe:37:91:4d:10:14:5b:3a:3b:f6:59:bb:0c:66:44:b7:20: 0f:8c:ea:3b:dd:d8:99:be:29:f7:6b:c6:2e:65:cc:85:00:2a: 05:75:e8:aa:5b:51:94:46:2b:76:b6:bd:03:e8:bb:72:87:94: 50:f5:b2:30:0a:3e:94:7b:c8:46:9f:7d:32:aa:2e:37:af:2c: 13:f3:f6:ae:c2:f7:d3:88:0c:1c:88:94:1b:92:ca:97:ff:cf: 96:13:db:a8:62:dc:24:0f:ba:8f:80:11:41:95:01:72:e0:c2: b2:fb:65:98:20:32:bf:63:3e:2e:36:26:3d:73:f8:83:01:70: f6:c4:6c:28:28:b7:d5:d7:ff:0e:b7:25:d9:aa:71:6a:f3:4a: 97:b4:d1:ae:a5:23:a6:1d:25:f6:5f:58:7e:e6:38:57:8c:de: d7:7f:c5:3a:9c:bb:09:ce:c6:0e:77:3f:39:b7:cc:9d:23:1f: f5:cb:26:06 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAhxC8DI6vNtXJcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk N2JlZDczZDItYWNmOC00NGNiLThmZjgtOWZjYTJmZDZjNTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaqRDcrtmJCCNySk0vgN6Qv42mc1q9bCCIHQ Wl5qo6L+BxNAty7nI6R6yebGZlSlKJupexGWEZD8j1kLwUap4NYVNyD5n2U/aoja MWL3OpgJOpEkFgPqjEzeWmOKvw5zW+b5ai9dJADaimQChY/co5jcKYXfYr8ZOwaL emI9hUPmoIKmIQmavRha3GGFH3wjCyuOUyA/pWV4d8R8P1QjtGgCKr8/kmzyuLkj 75A3odrs953H53DXmENJoiyotozdqdc8v9It7YX1E9XHrlcR6lrcJxZ+/z1AY7P+ HoTlqWcunSktolrF+T4tSUXOV5IPecyURBR61l0GhSXBiHjQKQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH5I6bAk2+JWOEW7dVRfLxFrk4wVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjY3ZDI0NDktMGExYS0z MDIyLWJmMjQtMTQ5N2ZhMmY4OTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACwAeZkp0BW4qQN7U3pCMabaoIJBidJB9+ijh8nA4Potm6KhCnoa Cfhk7GEFFvjFJZ5ZdQoeV+GpFblgOCYd8Q59wRNJdRMjZxn+N5FNEBRbOjv2WbsM ZkS3IA+M6jvd2Jm+Kfdrxi5lzIUAKgV16KpbUZRGK3a2vQPou3KHlFD1sjAKPpR7 yEaffTKqLjevLBPz9q7C99OIDByIlBuSypf/z5YT26hi3CQPuo+AEUGVAXLgwrL7 ZZggMr9jPi42Jj1z+IMBcPbEbCgot9XX/w63JdmqcWrzSpe00a6lI6YdJfZfWH7m OFeM3td/xTqcuwnOxg53Pzm3zJ0jH/XLJgY= -----END CERTIFICATE-----Generated at Wed Oct 29 20:03:09 2025 by rpki-client