$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2fe844bc-d58b-357d-8a03-037039e894bd.roa File: 2fe844bc-d58b-357d-8a03-037039e894bd.roa (raw, json) Hash identifier: e2ugvP56zim/qWkQNfBCfIjRnHcttc3rhhekkltv0Ds= Subject key identifier: 99:FC:48:59:EA:72:23:CF:C8:13:55:CF:EA:85:2E:A3:97:94:63:D2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584BAEC7C6559E97E0651E749780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2fe844bc-d58b-357d-8a03-037039e894bd.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 7342 IP address blocks: 2620:74:5f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:c6:55:9e:97:e0:65:1e:74:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=5b0dc7bb-9210-48fd-8db2-09f8f48c1dc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c6:e7:eb:2f:53:f6:e9:7e:43:a3:49:6e:b4: f9:28:93:b4:6e:22:79:da:32:7a:3d:49:1b:2b:23: 20:c3:37:86:d5:f7:46:14:bd:f8:4e:00:32:4d:6f: fa:5d:b7:e9:be:e0:e5:cf:2c:df:9e:c3:6d:f6:d5: 6c:de:c4:2a:64:5f:54:f9:2c:34:1d:94:61:bb:0d: e9:8b:b6:46:76:25:fe:44:6f:ce:74:3c:35:58:a1: 36:64:66:78:43:a8:14:90:3a:f0:4e:27:41:b4:6e: 9a:98:39:40:04:6f:55:3d:85:11:ac:d1:6c:c3:42: f1:a9:25:96:c9:08:0e:12:14:15:70:d4:0f:8d:c1: 1f:45:d7:ae:40:80:42:1f:3a:51:9a:79:a3:d2:2d: cd:78:d7:27:78:7e:5c:d3:dd:5c:a7:53:6f:d5:f0: ce:17:2d:02:be:10:00:0c:bc:b7:6e:17:de:e8:90: fa:f4:8b:1a:74:27:e3:57:80:32:56:f8:62:52:43: ec:a5:8c:b3:2f:ea:39:98:05:9d:5d:1d:27:80:9c: b9:e5:35:44:6c:1f:db:73:a6:2d:1e:f3:87:84:b9: 0f:eb:28:34:e5:2f:da:9e:1d:68:9b:b8:7f:39:22: 2f:5e:8c:ae:cf:2d:c4:4a:26:97:18:de:54:d1:2c: a9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:FC:48:59:EA:72:23:CF:C8:13:55:CF:EA:85:2E:A3:97:94:63:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2fe844bc-d58b-357d-8a03-037039e894bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:5f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:f6:b7:f6:db:05:41:d3:f2:f2:4b:87:c3:8a:5e:30:92:63: 95:a1:ac:9f:97:e5:fe:01:29:21:a5:e7:e9:e0:fd:40:24:76: 97:12:dc:ea:e2:22:46:8a:c4:57:80:80:8e:66:70:47:45:be: 32:77:08:f8:63:62:58:a8:ca:16:21:6e:60:4f:ae:2a:b6:e4: 10:c3:fb:e1:1a:d9:a1:ed:52:42:68:97:6b:ae:12:e9:11:cf: 3b:72:72:d2:a8:d8:2c:ed:13:e0:35:4f:2e:db:f8:14:5d:de: 2e:60:93:55:e0:5c:c1:70:92:07:c1:a0:d7:8c:a0:fd:23:70: f7:0a:1c:a0:69:34:c6:f2:1b:88:34:b6:da:39:d3:fb:5d:96: 06:e9:ea:63:15:fe:58:f0:84:dd:1a:9c:a0:c6:63:e7:1e:a9: 2b:2b:e8:f0:13:7f:9d:8f:3c:60:53:17:45:f5:e0:a4:ba:0f: b5:2b:ca:8a:1e:6a:98:87:0e:4e:0c:74:06:f9:fa:24:30:52: a3:b9:e3:e3:e3:ff:3d:48:5c:5f:10:94:8b:2e:49:9e:73:99: ad:5d:5d:eb:03:06:22:a3:c1:63:11:56:cf:c2:53:4b:60:fb: 19:37:6b:06:dd:35:95:fc:19:29:53:43:9e:c8:32:ed:ea:8e: b0:f4:43:f5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuux8ZVnpfgZR50l4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk NWIwZGM3YmItOTIxMC00OGZkLThkYjItMDlmOGY0OGMxZGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6sbn6y9T9ul+Q6NJbrT5KJO0biJ52jJ6PUkb KyMgwzeG1fdGFL34TgAyTW/6XbfpvuDlzyzfnsNt9tVs3sQqZF9U+Sw0HZRhuw3p i7ZGdiX+RG/OdDw1WKE2ZGZ4Q6gUkDrwTidBtG6amDlABG9VPYURrNFsw0LxqSWW yQgOEhQVcNQPjcEfRdeuQIBCHzpRmnmj0i3NeNcneH5c091cp1Nv1fDOFy0CvhAA DLy3bhfe6JD69IsadCfjV4AyVvhiUkPspYyzL+o5mAWdXR0ngJy55TVEbB/bc6Yt HvOHhLkP6yg05S/anh1om7h/OSIvXoyuzy3ESiaXGN5U0SypJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJn8SFnqciPPyBNVz+qFLqOXlGPSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmZlODQ0YmMtZDU4Yi0z NTdkLThhMDMtMDM3MDM5ZTg5NGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFP2t/bbBUHT8vJLh8OKXjCSY5WhrJ+X5f4BKSGl5+ng/UAkdpcS 3OriIkaKxFeAgI5mcEdFvjJ3CPhjYlioyhYhbmBPriq25BDD++Ea2aHtUkJol2uu EukRzztyctKo2CztE+A1Ty7b+BRd3i5gk1XgXMFwkgfBoNeMoP0jcPcKHKBpNMby G4g0tto50/tdlgbp6mMV/ljwhN0anKDGY+ceqSsr6PATf52PPGBTF0X14KS6D7Ur yooeapiHDk4MdAb5+iQwUqO54+Pj/z1IXF8QlIsuSZ5zma1dXesDBiKjwWMRVs/C U0tg+xk3awbdNZX8GSlTQ57IMu3qjrD0Q/U= -----END CERTIFICATE-----Generated at Wed Nov 5 02:53:16 2025 by rpki-client