$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c68a42b1-be3f-33b5-a424-037b4328a509.roa File: c68a42b1-be3f-33b5-a424-037b4328a509.roa (raw, json) Hash identifier: CjDRM2KqxNEy3fJPI0w7xyYOCfZvKdk8P3Z4mVHKoxc= Subject key identifier: 7A:5D:82:F0:A2:D4:61:C8:45:0A:5F:26:0E:66:02:35:AB:16:8B:68 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B8EACFF6BAA5E97DD5D2B1840 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c68a42b1-be3f-33b5-a424-037b4328a509.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 0 IP address blocks: 2620:74:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:ff:6b:aa:5e:97:dd:5d:2b:18:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=f49fa555-6d53-4547-9d4d-a596032c33d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:32:78:aa:3c:91:01:e9:14:b0:0c:2b:98:db: 43:10:51:4a:33:81:ca:df:68:80:db:dd:72:8d:b9: 5f:87:ae:91:2a:c3:82:cd:19:e9:83:df:9b:45:62: d0:53:95:45:a4:a7:1e:b7:42:2f:1d:f0:a2:59:4e: ac:25:21:a2:ef:72:82:5d:a6:ec:24:28:0d:27:31: 8d:4d:f7:81:cf:fb:5e:03:19:7a:b6:32:ad:13:21: 20:9b:22:98:bf:d9:d9:5f:f5:ca:1c:99:bc:ec:e2: 99:57:07:0f:9f:7e:f4:77:4e:23:9b:0b:b8:8a:ab: e1:41:12:2f:31:a1:b8:12:11:f1:2d:c2:3a:e7:42: 29:db:dd:22:f8:49:e1:8b:1f:df:e4:af:06:5b:da: 34:84:0f:73:35:64:27:37:c1:6f:8e:4b:6b:f9:07: 60:f2:9d:dc:db:e5:94:aa:e6:c2:34:f0:5b:47:63: b8:8c:87:77:1c:09:ba:59:29:ab:eb:bc:61:33:6c: 14:e3:7c:17:ca:e4:a5:fb:d9:3c:0a:45:7f:ae:6b: 49:35:e3:bc:40:d7:39:05:ed:a3:90:93:e3:68:f7: d4:a7:bc:9e:59:96:14:c9:52:cf:78:6f:ae:e1:e8: 05:6c:96:86:1d:27:61:86:68:2b:6a:3a:14:cc:c8: 73:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:5D:82:F0:A2:D4:61:C8:45:0A:5F:26:0E:66:02:35:AB:16:8B:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c68a42b1-be3f-33b5-a424-037b4328a509.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:d9:5f:64:a9:ef:45:29:a5:33:dc:ce:2d:a4:b4:f5:86:c7: 55:46:4f:c7:90:73:ee:08:a8:93:3f:08:03:81:55:28:4a:f3: da:90:c3:21:21:ad:cb:57:64:57:e5:bc:0a:8b:3b:e7:32:2c: c4:e7:30:b1:20:54:0d:f1:c0:57:aa:5a:5b:73:5d:1a:d3:48: 30:ba:cf:8a:23:c2:5b:43:60:ed:bc:f3:38:81:eb:28:b7:52: a2:d5:06:9d:d2:cf:51:10:41:dc:34:55:52:55:7e:af:3b:70: d4:f5:34:9e:60:2f:55:85:05:29:23:76:f0:fe:e0:b9:25:ee: 53:25:17:07:1e:2a:bb:66:06:ea:66:b2:2f:e5:45:40:ab:5d: 1f:08:3e:04:44:d2:69:f1:36:22:d5:50:24:40:0b:02:91:c3: a6:2f:b7:82:3b:50:ee:a0:bd:6a:33:8e:bf:05:92:3f:2c:58: 31:74:57:f3:98:f2:a9:04:dc:80:74:61:5b:b3:28:e6:6c:30: 2f:69:a5:53:a9:f6:70:0e:ab:b6:82:47:69:6c:f3:ee:30:d5: 0d:26:84:ef:f0:91:bd:7c:5a:c6:98:1b:77:b1:69:5e:76:1c: e6:f1:8d:53:fb:47:88:f9:33:0a:25:15:7f:d2:d2:53:7f:94: d9:ad:87:9e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuOrP9rql6X3V0rGEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk ZjQ5ZmE1NTUtNmQ1My00NTQ3LTlkNGQtYTU5NjAzMmMzM2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjJ4qjyRAekUsAwrmNtDEFFKM4HK32iA291y jblfh66RKsOCzRnpg9+bRWLQU5VFpKcet0IvHfCiWU6sJSGi73KCXabsJCgNJzGN TfeBz/teAxl6tjKtEyEgmyKYv9nZX/XKHJm87OKZVwcPn370d04jmwu4iqvhQRIv MaG4EhHxLcI650Ip290i+Enhix/f5K8GW9o0hA9zNWQnN8Fvjktr+Qdg8p3c2+WU qubCNPBbR2O4jId3HAm6WSmr67xhM2wU43wXyuSl+9k8CkV/rmtJNeO8QNc5Be2j kJPjaPfUp7yeWZYUyVLPeG+u4egFbJaGHSdhhmgrajoUzMhzbwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHpdgvCi1GHIRQpfJg5mAjWrFotoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzY4YTQyYjEtYmUzZi0z M2I1LWE0MjQtMDM3YjQzMjhhNTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD3ZX2Sp70UppTPczi2ktPWGx1VGT8eQc+4IqJM/CAOBVShK89qQ wyEhrctXZFflvAqLO+cyLMTnMLEgVA3xwFeqWltzXRrTSDC6z4ojwltDYO288ziB 6yi3UqLVBp3Sz1EQQdw0VVJVfq87cNT1NJ5gL1WFBSkjdvD+4Lkl7lMlFwceKrtm Bupmsi/lRUCrXR8IPgRE0mnxNiLVUCRACwKRw6Yvt4I7UO6gvWozjr8Fkj8sWDF0 V/OY8qkE3IB0YVuzKOZsMC9ppVOp9nAOq7aCR2ls8+4w1Q0mhO/wkb18WsaYG3ex aV52HObxjVP7R4j5MwolFX/S0lN/lNmth54= -----END CERTIFICATE-----Generated at Thu Oct 30 03:15:36 2025 by rpki-client