$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b70beb28-c07c-394c-a4bd-01aa89549710.roa File: b70beb28-c07c-394c-a4bd-01aa89549710.roa (raw, json) Hash identifier: Vp9aH+wakwz3LVutiApfhahjJm1uv2/eMLJnHvKeaZc= Subject key identifier: 68:F7:F0:D9:22:70:EF:DF:7B:73:B1:BF:3A:20:41:F1:22:5A:CE:0B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B62023C33FDCC20B430388780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b70beb28-c07c-394c-a4bd-01aa89549710.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 397204 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:3c:33:fd:cc:20:b4:30:38:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=6212866f-2ed9-45f3-b7c7-d6133b541329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:47:2f:a4:56:f6:6b:cd:94:f8:a4:0e:03:d0: 25:b7:cf:44:a6:f7:31:cb:e3:4b:36:0e:05:ee:04: fe:42:86:a3:a5:db:9f:83:07:ae:9a:3a:f3:d5:33: b6:33:2c:29:56:7f:50:20:dd:28:09:0a:af:63:c0: d7:7b:e9:aa:7c:ff:74:83:73:5d:ed:f1:1c:b2:d8: db:eb:06:8f:23:dd:80:90:b4:de:dd:25:74:2e:a5: 66:a2:14:be:d3:0c:87:9d:78:38:9b:c5:3a:49:e3: 68:f6:c5:51:0f:c2:48:39:ff:14:0c:ad:38:b0:ae: e3:3d:7c:25:e7:cc:10:3f:97:a4:8b:91:7a:88:ff: 0e:fb:bb:2f:1b:83:7c:30:af:bd:80:15:00:52:02: ff:01:f2:89:ef:30:4d:86:f7:23:8e:fc:6e:4e:1e: d1:49:78:61:13:98:5a:8a:d0:9a:67:73:24:b6:e5: 9a:13:c3:6b:9b:89:40:73:31:2e:52:9d:c5:83:d9: d5:a6:35:9a:be:09:76:d8:5e:e8:f7:39:37:36:f5: e1:6a:3a:51:46:2a:a0:11:cd:62:29:c9:9e:49:cb: cd:ab:25:d7:25:88:85:c7:d3:9c:f3:b7:34:fe:d9: da:bb:9e:d1:d5:76:cf:b2:12:1f:89:0f:ca:f1:ec: 55:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F7:F0:D9:22:70:EF:DF:7B:73:B1:BF:3A:20:41:F1:22:5A:CE:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b70beb28-c07c-394c-a4bd-01aa89549710.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:39:e0:28:fb:f1:10:59:a4:97:7e:85:9c:85:6c:02:a9:5c: df:60:0c:f9:d8:16:d9:c6:16:10:71:10:34:6b:17:38:39:9a: 8e:e2:f1:20:73:25:8f:ba:a2:50:b8:a5:e4:d5:28:8e:67:2b: 99:f2:c5:cb:57:95:e9:a4:47:9a:e3:d0:3e:e1:ca:ec:d9:e7: 15:3b:c0:24:47:97:80:d9:69:26:fd:11:0e:82:e4:da:8c:3f: 38:bc:7d:e0:df:50:03:a3:3e:67:e4:2e:1d:fb:8e:0e:db:95: 09:a6:63:3a:22:3b:a3:62:81:13:08:da:2f:76:e4:be:34:eb: 70:b5:0a:7c:04:bd:3b:9f:cd:00:5f:a5:2a:d9:79:2a:3b:0a: 81:7c:31:bd:94:a5:24:f4:d8:fc:cf:61:b0:19:5e:99:3b:ed: d7:94:ff:15:8a:93:b3:98:c0:81:2d:cd:39:f0:ab:8c:5b:c2: 69:44:1a:dc:a2:ca:24:c2:61:24:8d:25:4a:90:51:40:22:1e: eb:43:e5:71:4d:e9:d4:bf:a0:d4:34:43:d6:ca:59:2b:1e:b4: a5:68:e4:a0:d4:46:f5:d8:95:f0:62:48:e5:59:60:f5:4a:2a: aa:f3:2f:08:b0:6e:9e:45:82:7f:c6:4b:ca:8b:02:b3:db:33: f1:dd:e0:03 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAjwz/cwgtDA4h4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NjIxMjg2NmYtMmVkOS00NWYzLWI3YzctZDYxMzNiNTQxMzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkcvpFb2a82U+KQOA9Alt89Epvcxy+NLNg4F 7gT+Qoajpdufgweumjrz1TO2MywpVn9QIN0oCQqvY8DXe+mqfP90g3Nd7fEcstjb 6waPI92AkLTe3SV0LqVmohS+0wyHnXg4m8U6SeNo9sVRD8JIOf8UDK04sK7jPXwl 58wQP5eki5F6iP8O+7svG4N8MK+9gBUAUgL/AfKJ7zBNhvcjjvxuTh7RSXhhE5ha itCaZ3MktuWaE8Nrm4lAczEuUp3Fg9nVpjWavgl22F7o9zk3NvXhajpRRiqgEc1i KcmeScvNqyXXJYiFx9Oc87c0/tnau57R1XbPshIfiQ/K8exVtwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGj38NkicO/fe3OxvzogQfEiWs4LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjcwYmViMjgtYzA3Yy0z OTRjLWE0YmQtMDFhYTg5NTQ5NzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAII54Cj78RBZpJd+hZyFbAKpXN9gDPnYFtnGFhBxEDRrFzg5mo7i 8SBzJY+6olC4peTVKI5nK5nyxctXlemkR5rj0D7hyuzZ5xU7wCRHl4DZaSb9EQ6C 5NqMPzi8feDfUAOjPmfkLh37jg7blQmmYzoiO6NigRMI2i925L4063C1CnwEvTuf zQBfpSrZeSo7CoF8Mb2UpST02PzPYbAZXpk77deU/xWKk7OYwIEtzTnwq4xbwmlE GtyiyiTCYSSNJUqQUUAiHutD5XFN6dS/oNQ0Q9bKWSsetKVo5KDURvXYlfBiSOVZ YPVKKqrzLwiwbp5Fgn/GS8qLArPbM/Hd4AM= -----END CERTIFICATE-----Generated at Wed Oct 29 20:05:25 2025 by rpki-client