$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fd67ddd1-a432-367e-917b-469914bddcb2.roa File: fd67ddd1-a432-367e-917b-469914bddcb2.roa (raw, json) Hash identifier: /xpVT2M8kS1TXDegqUgs2XwrLt/XUoYAesivqf2trbI= Subject key identifier: 22:DC:43:B4:55:1D:F5:0D:80:A1:E4:55:4F:27:30:4A:39:C0:3C:0A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584BAEC7C8C9678136C89285A900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fd67ddd1-a432-367e-917b-469914bddcb2.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 7342 IP address blocks: 2620:74:3f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:c8:c9:67:81:36:c8:92:85:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=7ef65f8c-680e-411e-a4d0-0a2ccde3084c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f1:54:a8:01:64:51:af:6c:20:f4:25:13:94: 85:24:da:f6:6e:49:bf:c2:32:69:a9:7c:01:09:3f: 98:a2:bc:10:e5:b6:c5:f8:b2:8c:cc:d7:90:a9:80: 79:10:c5:23:71:bd:a9:e1:1b:61:b0:bf:1b:29:35: f6:62:e1:a5:fb:4c:66:e3:78:29:64:0d:48:5b:90: 52:20:47:07:5b:5e:c5:16:15:e7:20:28:6e:3f:e9: 93:b7:41:2a:e9:5c:b1:a0:e1:6a:b3:d1:6a:03:74: 50:41:2e:5f:c7:93:22:22:d0:60:ae:86:01:3f:40: 05:37:a4:5f:54:d2:4a:19:bc:38:78:14:05:49:a8: 1b:13:7a:b7:54:79:68:ad:bc:cf:67:61:18:bf:79: 6a:ab:31:c5:8b:1a:1e:9e:f0:5d:c4:e1:aa:60:80: 7f:72:6d:bd:4f:7e:b3:14:f2:2b:e0:7f:00:3f:45: 8d:61:06:d8:7a:e9:25:9e:d8:77:61:b1:20:79:60: 29:e7:34:fa:ed:af:cc:22:ad:4d:e7:1a:1d:d0:bc: 2f:5b:ba:98:75:f7:61:3e:93:7a:30:ba:a4:7e:ab: 75:60:6a:a4:14:64:a8:6c:30:f9:e0:aa:5b:26:1d: 40:e3:4b:d3:50:a3:ee:09:6f:d6:cb:66:67:fa:03: ab:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:DC:43:B4:55:1D:F5:0D:80:A1:E4:55:4F:27:30:4A:39:C0:3C:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fd67ddd1-a432-367e-917b-469914bddcb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:3f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:d6:ac:dc:31:e1:e6:15:61:e1:ea:3f:89:37:1d:d1:31:4f: 6d:0f:32:93:89:dc:b3:9c:8c:43:ce:67:b1:fe:bb:0f:75:94: 39:66:ca:d7:d3:bc:8d:d6:98:1e:40:c9:fd:43:53:a9:52:44: e3:2f:a1:33:39:35:39:4f:e3:f9:e1:7b:6a:0d:0d:84:74:37: c1:b5:e6:0e:85:d3:dd:18:fd:7f:3c:0a:95:0a:8d:35:76:f9: ee:ad:0f:43:3a:8e:ea:30:01:70:9b:ad:a5:df:69:c4:eb:08: 15:e2:7a:af:f8:e3:38:a9:b0:d1:a4:fb:1b:fe:07:28:c3:36: d6:96:08:f4:53:a2:0f:3e:34:d3:fb:db:e1:dc:07:1e:5a:8c: 30:0f:c8:50:18:90:b5:02:03:76:ea:58:27:5a:23:56:22:9e: 41:4c:ff:88:bf:52:c7:b6:aa:ad:af:b4:f6:b9:55:b0:bd:8c: bb:e2:81:1f:d9:26:ae:37:13:51:bd:9f:10:82:1f:a7:0c:43: a3:c8:4a:46:d9:6a:1e:a1:15:85:ca:0f:01:91:89:65:4d:88: 7b:ce:24:25:cc:73:b9:e1:81:ca:08:24:1d:1c:73:9d:d5:43: e9:d7:14:a4:42:08:48:09:8a:2b:8b:89:21:e7:1a:01:6a:67: b3:02:f7:90 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuux8jJZ4E2yJKFqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk N2VmNjVmOGMtNjgwZS00MTFlLWE0ZDAtMGEyY2NkZTMwODRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPFUqAFkUa9sIPQlE5SFJNr2bkm/wjJpqXwB CT+YorwQ5bbF+LKMzNeQqYB5EMUjcb2p4RthsL8bKTX2YuGl+0xm43gpZA1IW5BS IEcHW17FFhXnIChuP+mTt0Eq6VyxoOFqs9FqA3RQQS5fx5MiItBgroYBP0AFN6Rf VNJKGbw4eBQFSagbE3q3VHlorbzPZ2EYv3lqqzHFixoenvBdxOGqYIB/cm29T36z FPIr4H8AP0WNYQbYeuklnth3YbEgeWAp5zT67a/MIq1N5xod0LwvW7qYdfdhPpN6 MLqkfqt1YGqkFGSobDD54KpbJh1A40vTUKPuCW/Wy2Zn+gOrBwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCLcQ7RVHfUNgKHkVU8nMEo5wDwKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmQ2N2RkZDEtYTQzMi0z NjdlLTkxN2ItNDY5OTE0YmRkY2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAA/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGDWrNwx4eYVYeHqP4k3HdExT20PMpOJ3LOcjEPOZ7H+uw91lDlm ytfTvI3WmB5Ayf1DU6lSROMvoTM5NTlP4/nhe2oNDYR0N8G15g6F090Y/X88CpUK jTV2+e6tD0M6juowAXCbraXfacTrCBXieq/44zipsNGk+xv+ByjDNtaWCPRTog8+ NNP72+HcBx5ajDAPyFAYkLUCA3bqWCdaI1YinkFM/4i/Use2qq2vtPa5VbC9jLvi gR/ZJq43E1G9nxCCH6cMQ6PISkbZah6hFYXKDwGRiWVNiHvOJCXMc7nhgcoIJB0c c53VQ+nXFKRCCEgJiiuLiSHnGgFqZ7MC95A= -----END CERTIFICATE-----Generated at Wed Oct 29 20:29:24 2025 by rpki-client