$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d7fa64eb-c9b7-376e-8b2a-2ce16e9d5a84.roa File: d7fa64eb-c9b7-376e-8b2a-2ce16e9d5a84.roa (raw, json) Hash identifier: 6SJVbOl5G/ndqVRdabta4ktz9LyxZKhReUKgmzbjVhw= Subject key identifier: 76:F5:19:79:11:09:E0:69:A9:4A:1E:36:FE:B5:0D:66:80:39:0E:0C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B62022122DF14D0AD87784D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d7fa64eb-c9b7-376e-8b2a-2ce16e9d5a84.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 36617 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:21:22:df:14:d0:ad:87:78:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=c4925de4-1ca1-4fb8-8080-5a542413a9ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:44:55:7b:3a:15:6c:70:dd:f1:3e:6b:e5:17: 8c:39:54:10:68:dd:dd:f6:74:bf:87:8e:6f:de:88: 8e:d4:6d:fd:20:17:9f:34:e8:64:4e:97:bd:d9:99: 45:63:94:c0:1b:4b:a9:be:22:f0:3d:61:62:ce:17: a5:44:50:4c:21:92:a0:da:bd:32:fa:ed:fe:ba:da: 55:33:00:ea:28:ed:fb:a3:ee:78:ed:48:fe:e7:a6: 24:29:03:07:74:be:1e:11:37:14:6c:a5:6d:ca:88: fc:12:bd:ee:c5:c7:43:e4:70:5f:26:ff:28:98:8c: 75:8c:20:f5:04:2e:5c:23:58:24:b2:13:f6:17:06: 58:38:3e:40:52:fe:14:4d:bc:be:b6:c9:56:5f:14: 5f:5c:b1:7e:fe:53:bd:cf:29:b0:7b:13:88:1d:c3: e2:ee:7e:75:cd:ae:a8:26:cb:89:3a:eb:2b:a5:06: 4a:8c:02:bc:c0:b2:21:29:70:42:b2:cb:33:c0:fe: fa:55:ec:aa:04:4b:13:d9:fd:93:e2:1f:d7:6b:00: 6e:9a:3e:aa:f7:3d:54:25:df:61:33:e2:da:cf:8a: 16:d6:cc:56:c9:3d:44:bc:7e:e6:79:c0:6b:47:c0: 08:f6:01:76:11:64:0c:5d:be:67:68:b4:0d:be:02: a5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:F5:19:79:11:09:E0:69:A9:4A:1E:36:FE:B5:0D:66:80:39:0E:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d7fa64eb-c9b7-376e-8b2a-2ce16e9d5a84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:6a:4d:48:2a:4b:d7:0d:86:91:34:cd:46:60:f4:af:8a:63: 07:55:f5:ff:46:74:d1:52:fa:84:ca:de:db:4e:ac:d7:ec:f5: 5e:2b:c7:a8:8e:cc:58:9e:9a:ea:e6:33:08:ee:e8:34:cc:0e: 66:57:aa:97:dc:fb:92:29:aa:3e:43:e0:dd:11:90:d9:ae:60: 31:d4:f9:1b:c1:b2:a4:6a:36:07:0e:a0:4e:51:cb:8d:b3:f6: dc:36:3b:8f:be:d6:02:44:a5:49:ab:30:70:8e:8f:d6:1c:3e: 75:3b:3e:4f:ce:1d:c3:60:43:95:1a:f2:02:4f:7c:2d:09:db: 3a:8d:6f:59:dc:91:d4:94:4b:01:c6:70:89:ce:06:ad:55:87: 8e:34:f3:c3:1b:b8:33:fd:01:7e:f2:4b:b1:ca:a4:88:45:55: 26:81:d1:de:b9:e1:11:5b:54:18:6f:9f:61:43:75:a3:5d:61: 4c:33:5c:44:86:0c:3b:35:24:e6:1c:bd:75:26:98:b8:ef:1b: b7:9a:aa:f1:44:2d:af:3b:4f:ca:85:af:8d:53:b0:da:0e:45: 3f:b4:a3:48:06:7f:39:43:42:f5:82:1f:2b:64:7f:b4:47:1b: a2:c9:71:4e:4b:5d:7f:15:46:f3:a3:bf:00:dd:bd:e9:42:4f: 4f:e9:d8:82 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAiEi3xTQrYd4TYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk YzQ5MjVkZTQtMWNhMS00ZmI4LTgwODAtNWE1NDI0MTNhOWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0RVezoVbHDd8T5r5ReMOVQQaN3d9nS/h45v 3oiO1G39IBefNOhkTpe92ZlFY5TAG0upviLwPWFizhelRFBMIZKg2r0y+u3+utpV MwDqKO37o+547Uj+56YkKQMHdL4eETcUbKVtyoj8Er3uxcdD5HBfJv8omIx1jCD1 BC5cI1gkshP2FwZYOD5AUv4UTby+tslWXxRfXLF+/lO9zymwexOIHcPi7n51za6o JsuJOusrpQZKjAK8wLIhKXBCssszwP76VeyqBEsT2f2T4h/XawBumj6q9z1UJd9h M+Laz4oW1sxWyT1EvH7mecBrR8AI9gF2EWQMXb5naLQNvgKlPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHb1GXkRCeBpqUoeNv61DWaAOQ4MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDdmYTY0ZWItYzliNy0z NzZlLThiMmEtMmNlMTZlOWQ1YTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAClqTUgqS9cNhpE0zUZg9K+KYwdV9f9GdNFS+oTK3ttOrNfs9V4r x6iOzFiemurmMwju6DTMDmZXqpfc+5Ipqj5D4N0RkNmuYDHU+RvBsqRqNgcOoE5R y42z9tw2O4++1gJEpUmrMHCOj9YcPnU7Pk/OHcNgQ5Ua8gJPfC0J2zqNb1nckdSU SwHGcInOBq1Vh44088MbuDP9AX7yS7HKpIhFVSaB0d654RFbVBhvn2FDdaNdYUwz XESGDDs1JOYcvXUmmLjvG7eaqvFELa87T8qFr41TsNoORT+0o0gGfzlDQvWCHytk f7RHG6LJcU5LXX8VRvOjvwDdvelCT0/p2II= -----END CERTIFICATE-----Generated at Wed Oct 29 22:40:53 2025 by rpki-client