$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/837c453a-673f-4481-b4c4-21ece5899901/47b86f2e-9a41-31e7-9b47-4e8398fe7a8e.roa File: 47b86f2e-9a41-31e7-9b47-4e8398fe7a8e.roa (raw, json) Hash identifier: dCOl7ukLAXp9zMT+uVb6fAK5RE/NnFAUV9Wlz5V9d2U= Subject key identifier: E1:3D:C9:81:5B:63:18:78:81:BB:08:51:BD:81:CB:F0:54:97:E6:56 Certificate issuer: /CN=837c453a-673f-4481-b4c4-21ece5899901 Certificate serial: 010D0C9F4328584BA50239B7B293AD03DAE5D480 Authority key identifier: 5C:6F:74:D4:FE:AB:73:A7:EC:FC:13:4A:C5:E5:25:9D:48:14:38:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/837c453a-673f-4481-b4c4-21ece5899901.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/837c453a-673f-4481-b4c4-21ece5899901/47b86f2e-9a41-31e7-9b47-4e8398fe7a8e.roa Signing time: Sun 26 Oct 2025 01:00:31 +0000 ROA not before: Sun 26 Oct 2025 01:00:31 +0000 ROA not after: Sat 24 Jan 2026 02:00:31 +0000 asID: 46475 IP address blocks: 2620:a6:2002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/837c453a-673f-4481-b4c4-21ece5899901/837c453a-673f-4481-b4c4-21ece5899901.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/837c453a-673f-4481-b4c4-21ece5899901/837c453a-673f-4481-b4c4-21ece5899901.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/837c453a-673f-4481-b4c4-21ece5899901.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a5:02:39:b7:b2:93:ad:03:da:e5:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=837c453a-673f-4481-b4c4-21ece5899901 Validity Not Before: Oct 26 01:00:31 2025 GMT Not After : Jan 24 02:00:31 2026 GMT Subject: CN=47cc41dc-1d2a-4e2b-a0c1-347e9931c6b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e8:ad:87:d6:0e:7a:4f:57:57:a4:e4:1f:b4: 5d:fa:61:af:c1:eb:c5:bf:ea:48:65:90:b3:5d:0a: a6:c5:5a:05:bd:d8:a4:ff:f2:fd:28:39:52:ee:a1: a8:43:dc:e1:44:2e:2b:44:62:74:e6:33:99:0b:b9: 2a:ad:0b:75:38:6b:dd:46:a4:ec:6e:6e:4c:74:0e: 9b:f9:90:f9:84:ad:c5:2f:69:c3:08:df:55:6d:a5: 45:ef:fd:f3:8e:6e:20:af:48:e7:1e:c1:ff:b2:56: 50:f0:66:07:5d:e5:8c:b4:52:93:d9:84:6c:5a:3e: 5a:14:2f:a9:f9:e6:48:d2:eb:ba:5b:b8:e5:2e:6e: b6:3f:0c:a6:5b:66:7e:2d:ed:de:22:0c:25:8e:1a: 25:66:d8:04:ea:26:96:c4:7c:88:6b:68:01:f2:28: 05:32:cf:8e:ad:bb:e1:65:ca:f7:5a:4e:5c:ef:85: 4c:21:55:90:b8:5e:b8:00:51:a8:74:8a:fe:c1:e6: dc:24:7a:d3:0a:10:16:d8:36:74:91:25:5a:eb:b0: 8d:10:97:87:11:fc:cc:ae:e2:3c:d7:d4:6e:6f:3a: ca:68:de:24:a7:f4:c9:85:2b:2e:a4:14:91:3d:79: 35:e9:fe:10:64:05:57:84:cf:1b:68:46:fa:17:91: ed:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:3D:C9:81:5B:63:18:78:81:BB:08:51:BD:81:CB:F0:54:97:E6:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/837c453a-673f-4481-b4c4-21ece5899901/47b86f2e-9a41-31e7-9b47-4e8398fe7a8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/837c453a-673f-4481-b4c4-21ece5899901/837c453a-673f-4481-b4c4-21ece5899901.crl X509v3 Authority Key Identifier: keyid:5C:6F:74:D4:FE:AB:73:A7:EC:FC:13:4A:C5:E5:25:9D:48:14:38:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/837c453a-673f-4481-b4c4-21ece5899901.cer sbgp-ipAddrBlock: critical IPv6: 2620:a6:2002::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:f4:21:60:e1:47:0a:d1:9c:13:de:70:90:58:2a:e2:6a:21: a6:15:3d:9c:ff:53:df:0e:d3:d4:31:bd:bf:e6:84:74:ea:14: f6:30:fe:38:0d:f1:5f:9b:b5:71:6d:c4:3e:db:35:d0:4a:93: 97:d3:ba:05:1e:30:02:e0:1a:c2:6c:78:78:c6:5f:21:03:48: cf:5c:db:d5:c1:be:63:f1:c4:04:5f:df:a7:b6:e9:1d:cf:b1: 4d:0d:78:43:00:0c:77:e9:33:42:a7:be:1f:cb:bc:1a:02:f7: 61:b6:1a:93:8b:5c:30:e0:84:6b:13:4b:e2:07:4f:20:b2:04: 23:9a:db:ec:93:13:94:55:37:cf:34:08:4a:95:67:f6:a4:4f: 65:c0:0e:10:85:d7:4c:23:bd:c3:0d:51:e5:62:31:e8:39:19: 1f:03:11:96:fc:dc:20:e4:2e:29:12:c1:06:7c:aa:b3:7d:67: fa:d9:47:a5:5a:56:39:51:7c:5a:5b:eb:62:1a:39:aa:82:f1: 57:7d:d3:f0:0c:7f:7f:c4:75:6a:1f:54:77:05:f6:ef:00:bd: d8:3d:37:4a:98:38:cc:90:b0:e3:21:6b:cb:32:3c:c1:d3:44: 5c:7a:b0:65:9f:0e:4e:7d:1a:97:bc:e9:e6:7d:0b:1f:8d:d1: d2:67:70:c1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEulAjm3spOtA9rl1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODM3YzQ1M2EtNjczZi00NDgxLWI0YzQtMjFlY2U1ODk5 OTAxMB4XDTI1MTAyNjAxMDAzMVoXDTI2MDEyNDAyMDAzMVowLzEtMCsGA1UEAxMk NDdjYzQxZGMtMWQyYS00ZTJiLWEwYzEtMzQ3ZTk5MzFjNmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+ith9YOek9XV6TkH7Rd+mGvwevFv+pIZZCz XQqmxVoFvdik//L9KDlS7qGoQ9zhRC4rRGJ05jOZC7kqrQt1OGvdRqTsbm5MdA6b +ZD5hK3FL2nDCN9VbaVF7/3zjm4gr0jnHsH/slZQ8GYHXeWMtFKT2YRsWj5aFC+p +eZI0uu6W7jlLm62PwymW2Z+Le3eIgwljholZtgE6iaWxHyIa2gB8igFMs+Orbvh Zcr3Wk5c74VMIVWQuF64AFGodIr+webcJHrTChAW2DZ0kSVa67CNEJeHEfzMruI8 19RubzrKaN4kp/TJhSsupBSRPXk16f4QZAVXhM8baEb6F5HtnwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOE9yYFbYxh4gbsIUb2By/BUl+ZWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84Mzdj NDUzYS02NzNmLTQ0ODEtYjRjNC0yMWVjZTU4OTk5MDEvNDdiODZmMmUtOWE0MS0z MWU3LTliNDctNGU4Mzk4ZmU3YThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODM3YzQ1M2EtNjczZi00NDgxLWI0 YzQtMjFlY2U1ODk5OTAxLzgzN2M0NTNhLTY3M2YtNDQ4MS1iNGM0LTIxZWNlNTg5 OTkwMS5jcmwwHwYDVR0jBBgwFoAUXG901P6rc6fs/BNKxeUlnUgUOOYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MzdjNDUzYS02NzNmLTQ0ODEtYjRjNC0yMWVj ZTU4OTk5MDEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAApiAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADj0IWDhRwrRnBPecJBYKuJqIaYVPZz/U98O09Qxvb/mhHTqFPYw /jgN8V+btXFtxD7bNdBKk5fTugUeMALgGsJseHjGXyEDSM9c29XBvmPxxARf36e2 6R3PsU0NeEMADHfpM0Knvh/LvBoC92G2GpOLXDDghGsTS+IHTyCyBCOa2+yTE5RV N880CEqVZ/akT2XADhCF10wjvcMNUeViMeg5GR8DEZb83CDkLikSwQZ8qrN9Z/rZ R6VaVjlRfFpb62IaOaqC8Vd90/AMf3/EdWofVHcF9u8Avdg9N0qYOMyQsOMha8sy PMHTRFx6sGWfDk59Gpe86eZ9Cx+N0dJncME= -----END CERTIFICATE-----Generated at Tue Nov 4 08:05:43 2025 by rpki-client