$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c64404b8-c682-3274-8b46-28094b19f77f.roa File: c64404b8-c682-3274-8b46-28094b19f77f.roa (raw, json) Hash identifier: mJuFyDVqRSuHRKLR/Ah7b2fN2yzWFFn4vvC0ynIYGRc= Subject key identifier: 45:F7:22:F0:49:BF:B0:7B:A9:35:6C:23:56:44:54:01:03:69:D8:9C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B785743C8A87BA14890DC9470 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c64404b8-c682-3274-8b46-28094b19f77f.roa Signing time: Fri 10 Oct 2025 01:00:30 +0000 ROA not before: Fri 10 Oct 2025 01:00:30 +0000 ROA not after: Thu 08 Jan 2026 02:00:30 +0000 asID: 0 IP address blocks: 2620:74:c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:78:57:43:c8:a8:7b:a1:48:90:dc:94:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 10 01:00:30 2025 GMT Not After : Jan 8 02:00:30 2026 GMT Subject: CN=acf4c3eb-e17c-44a0-b238-b7d13a994f0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:b4:01:4b:d8:78:55:b5:c7:c9:c1:e8:f4:2f: e4:a1:40:9c:d1:fa:51:92:e6:a7:f5:68:19:0f:73: 1f:b5:0b:12:60:33:d5:6c:5d:13:f0:0c:37:49:ea: 0a:69:4d:04:ae:d6:7a:56:5b:7e:42:66:26:ba:5c: cc:8b:8e:38:a7:cd:9c:b0:72:3e:27:ff:df:1b:6f: 16:dc:f9:72:32:30:2c:90:02:db:0d:bc:a0:96:d9: c8:b8:c5:41:eb:40:54:5d:06:0c:e7:7c:c9:65:38: db:8d:76:d3:d8:36:95:d1:2f:fb:8e:a6:7a:01:70: a5:1f:65:fd:b4:a6:42:00:ab:a2:b9:b0:d1:9a:98: c1:83:1d:86:83:a5:32:8a:26:1d:0c:4f:2d:ab:a6: 02:bb:ca:9f:96:03:46:91:1e:5d:16:a7:bc:0e:63: 20:3c:ae:2f:53:fb:3f:e2:36:45:d1:39:0f:c0:78: 09:1a:67:fb:ac:5b:4b:7f:1a:e4:ea:49:68:a1:dc: a1:9d:c7:01:4c:74:63:ab:48:01:d0:38:9d:1d:e2: 57:0d:c9:09:b0:6c:91:44:1d:7a:cd:78:bd:0d:a4: 10:be:3b:6a:a2:57:80:96:f5:50:69:2c:59:b3:5c: 00:d9:8d:10:59:10:67:e9:1e:a9:0b:ff:d4:3c:e0: d8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:F7:22:F0:49:BF:B0:7B:A9:35:6C:23:56:44:54:01:03:69:D8:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c64404b8-c682-3274-8b46-28094b19f77f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:c1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:84:cb:10:a5:62:2a:88:2a:3d:1f:3d:0d:c7:44:e5:5a:e0: f0:3c:18:d6:72:81:fa:0f:22:80:bd:66:9e:8a:9a:e4:1d:5e: 10:f3:63:48:9a:e0:ee:86:fe:1c:49:20:cb:da:17:9e:7b:3c: 64:1c:46:a1:21:96:2b:ce:47:b1:f7:70:54:91:f4:51:2a:b7: 99:0a:4a:ff:a7:9a:63:eb:93:6f:69:82:c5:bb:82:33:17:a0: 85:6d:69:32:11:32:dd:94:47:80:a8:d9:8b:c7:e4:b9:45:19: 64:dd:64:f5:57:c2:7b:77:1f:e7:3a:61:9d:37:20:8b:df:51: c1:1a:14:95:92:99:d9:ca:5a:85:be:28:75:b1:b3:35:35:4f: bc:b8:f3:ac:20:8b:61:8e:4b:85:29:a5:04:2b:65:5b:ab:31: 6d:4c:f3:83:c5:dd:d0:12:81:47:9a:c6:95:fc:a4:f1:e5:6f: 09:f7:2a:65:80:d6:a2:c9:f5:eb:ee:8e:bc:1e:20:10:e5:2a: ca:ae:b3:40:cd:d2:8c:7f:5f:63:e4:d4:dc:54:1e:05:7a:b2: d2:83:47:0b:96:e8:72:8b:15:41:3d:a4:c5:4a:f1:16:37:d6: c8:cf:03:3f:61:a2:33:3d:77:b9:48:87:00:2b:83:74:6f:4f: 64:f1:a9:90 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt4V0PIqHuhSJDclHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMDAxMDAzMFoXDTI2MDEwODAyMDAzMFowLzEtMCsGA1UEAxMk YWNmNGMzZWItZTE3Yy00NGEwLWIyMzgtYjdkMTNhOTk0ZjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8rQBS9h4VbXHycHo9C/koUCc0fpRkuan9WgZ D3MftQsSYDPVbF0T8Aw3SeoKaU0ErtZ6Vlt+QmYmulzMi444p82csHI+J//fG28W 3PlyMjAskALbDbygltnIuMVB60BUXQYM53zJZTjbjXbT2DaV0S/7jqZ6AXClH2X9 tKZCAKuiubDRmpjBgx2Gg6UyiiYdDE8tq6YCu8qflgNGkR5dFqe8DmMgPK4vU/s/ 4jZF0TkPwHgJGmf7rFtLfxrk6kloodyhnccBTHRjq0gB0DidHeJXDckJsGyRRB16 zXi9DaQQvjtqoleAlvVQaSxZs1wA2Y0QWRBn6R6pC//UPODYqQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEX3IvBJv7B7qTVsI1ZEVAEDadicMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzY0NDA0YjgtYzY4Mi0z Mjc0LThiNDYtMjgwOTRiMTlmNzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdADB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAyEyxClYiqIKj0fPQ3HROVa4PA8GNZygfoPIoC9Zp6KmuQdXhDz Y0ia4O6G/hxJIMvaF557PGQcRqEhlivOR7H3cFSR9FEqt5kKSv+nmmPrk29pgsW7 gjMXoIVtaTIRMt2UR4Co2YvH5LlFGWTdZPVXwnt3H+c6YZ03IIvfUcEaFJWSmdnK WoW+KHWxszU1T7y486wgi2GOS4UppQQrZVurMW1M84PF3dASgUeaxpX8pPHlbwn3 KmWA1qLJ9evujrweIBDlKsqus0DN0ox/X2Pk1NxUHgV6stKDRwuW6HKLFUE9pMVK 8RY31sjPAz9hojM9d7lIhwArg3RvT2TxqZA= -----END CERTIFICATE-----Generated at Thu Oct 30 03:23:26 2025 by rpki-client