$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb0ab366-4f1a-3171-a1fe-b1b4484e5092.roa File: fb0ab366-4f1a-3171-a1fe-b1b4484e5092.roa (raw, json) Hash identifier: 3+nyuwXspg+0nEA366BXi7RyZ7+5wvld/sTrmZrTW3g= Subject key identifier: 06:64:84:ED:B7:51:95:08:78:44:D9:D0:60:76:76:57:2B:3F:00:83 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B48E1BC8C9E6A6715502F2280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb0ab366-4f1a-3171-a1fe-b1b4484e5092.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 396604 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:bc:8c:9e:6a:67:15:50:2f:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=7e930c8c-ab1b-4bf3-a302-b20685218f5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:12:f3:38:75:d3:31:9f:a3:fa:ad:d3:e3:db: a8:11:a4:9a:e8:19:5b:2b:d3:57:8b:ab:49:90:c2: 3d:c6:66:48:15:b1:d6:6e:8c:b2:1e:99:20:42:ef: a3:3f:2b:60:06:a9:9e:4d:ab:47:1c:71:eb:eb:58: 30:68:b8:48:b3:8d:12:2c:78:07:ea:d7:ae:32:c1: fe:b1:51:bd:44:9d:06:b9:39:29:9a:e7:6e:81:b3: d4:a8:b6:d3:2d:2b:f1:d0:bf:48:ea:21:ed:17:16: 74:6f:c5:8b:e0:79:dd:b5:3e:d0:6c:27:fb:50:c1: 99:1e:ee:87:ae:b5:24:fe:74:7c:94:58:8c:a9:b7: fa:ff:bf:bc:0d:c8:05:63:cf:c2:35:97:65:ad:89: 16:c5:48:4e:a2:90:54:fa:ca:bf:e7:c1:b2:bd:9d: 52:55:76:0e:1c:0a:ed:9e:f1:9a:02:9a:68:e8:db: 6a:61:9d:65:41:67:a9:4d:f7:c6:a6:72:ca:7f:b6: b9:6c:1d:bd:54:e1:a0:e5:98:c8:f6:58:8b:96:90: bf:b0:ef:20:27:b1:4c:03:1b:70:0f:9f:da:63:96: 8d:f2:18:ff:9d:ce:72:99:4d:0f:5a:0d:48:82:95: 0d:e2:4e:98:8f:05:ba:98:9d:a4:cf:ee:ec:1c:d0: e5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:64:84:ED:B7:51:95:08:78:44:D9:D0:60:76:76:57:2B:3F:00:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb0ab366-4f1a-3171-a1fe-b1b4484e5092.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:45:78:80:60:fd:bf:31:aa:41:90:fe:a2:6b:5e:53:88:14: 35:7a:39:3d:00:63:b6:08:b1:88:20:b6:52:d8:31:c0:1c:ff: 1c:31:1b:65:3f:8c:1c:55:d6:b7:10:60:6a:c7:9d:84:4c:11: 1c:67:e2:52:bd:19:1a:84:f5:aa:e5:44:68:74:b6:f7:74:d0: 95:7e:bd:d5:bb:64:37:62:21:1e:f5:8c:28:f3:ab:12:67:cb: 90:7f:e9:84:9c:4d:e2:eb:3d:2c:e8:59:4a:d2:c9:fe:87:9a: 64:e9:a4:ec:36:93:6a:66:d6:6c:fd:80:2c:9c:f8:b9:01:f5: 5c:3a:af:24:fc:01:72:2b:63:0d:d8:0c:b4:7d:f3:65:bf:ca: 40:d8:05:2d:99:56:7d:d3:0d:82:4d:79:43:b3:75:48:b9:08: a9:8a:40:06:ae:82:2b:60:fc:1b:7a:f0:7f:32:fd:2d:b3:35: ae:9d:79:a9:1b:a5:09:5d:81:bc:55:6f:67:c5:a1:3b:97:fe: 12:1e:08:46:d2:c2:58:e5:14:f9:cc:d9:e2:4c:7d:01:19:de: 63:48:05:88:04:5b:56:a4:b7:43:1d:34:a4:99:31:44:60:cd: a7:06:53:58:9f:22:25:90:0d:62:40:f9:c5:1e:09:46:98:1d: 05:3b:f8:f3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4byMnmpnFVAvIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk N2U5MzBjOGMtYWIxYi00YmYzLWEzMDItYjIwNjg1MjE4ZjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhLzOHXTMZ+j+q3T49uoEaSa6BlbK9NXi6tJ kMI9xmZIFbHWboyyHpkgQu+jPytgBqmeTatHHHHr61gwaLhIs40SLHgH6teuMsH+ sVG9RJ0GuTkpmudugbPUqLbTLSvx0L9I6iHtFxZ0b8WL4HndtT7QbCf7UMGZHu6H rrUk/nR8lFiMqbf6/7+8DcgFY8/CNZdlrYkWxUhOopBU+sq/58GyvZ1SVXYOHArt nvGaAppo6NtqYZ1lQWepTffGpnLKf7a5bB29VOGg5ZjI9liLlpC/sO8gJ7FMAxtw D5/aY5aN8hj/nc5ymU0PWg1IgpUN4k6YjwW6mJ2kz+7sHNDlxQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAZkhO23UZUIeETZ0GB2dlcrPwCDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmIwYWIzNjYtNGYxYS0z MTcxLWExZmUtYjFiNDQ4NGU1MDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIZFeIBg/b8xqkGQ/qJrXlOIFDV6OT0AY7YIsYggtlLYMcAc/xwx G2U/jBxV1rcQYGrHnYRMERxn4lK9GRqE9arlRGh0tvd00JV+vdW7ZDdiIR71jCjz qxJny5B/6YScTeLrPSzoWUrSyf6HmmTppOw2k2pm1mz9gCyc+LkB9Vw6ryT8AXIr Yw3YDLR982W/ykDYBS2ZVn3TDYJNeUOzdUi5CKmKQAaugitg/Bt68H8y/S2zNa6d eakbpQldgbxVb2fFoTuX/hIeCEbSwljlFPnM2eJMfQEZ3mNIBYgEW1akt0MdNKSZ MURgzacGU1ifIiWQDWJA+cUeCUaYHQU7+PM= -----END CERTIFICATE-----Generated at Wed Oct 29 11:38:08 2025 by rpki-client