$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/001e977a-d9eb-3bb3-82bc-4af07e7ecee4.roa File: 001e977a-d9eb-3bb3-82bc-4af07e7ecee4.roa (raw, json) Hash identifier: w2Hdl5ahP3I8+44GwVj3Nvaww9mNYgiqoZqAyHXVSfU= Subject key identifier: 20:34:24:7A:90:AB:7A:EC:1B:4E:FE:BF:95:93:AE:D1:78:CC:E8:D7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E794CCA04126CDD50CA400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/001e977a-d9eb-3bb3-82bc-4af07e7ecee4.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 397209 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:94:cc:a0:41:26:cd:d5:0c:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=9e57f39b-e383-4ec6-8fa3-d2291ed727f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3b:54:18:b2:6f:51:7b:87:83:55:44:0c:fc: 4d:c5:fa:79:6d:47:cf:12:1c:ad:bb:21:0e:69:73: ac:70:4c:48:92:c2:00:f0:49:15:bb:db:ad:7e:71: 85:93:53:de:65:08:3a:8d:52:1c:73:70:e6:6f:e4: 4c:44:77:af:1d:1b:14:6e:91:71:d2:f3:04:6c:c6: 1f:2f:6e:46:71:e8:7b:47:74:fa:dd:a2:ab:a2:d4: 4f:27:21:aa:88:1a:46:3b:68:8d:ed:32:fb:af:84: a7:ef:0d:32:f0:f2:a7:0e:ad:51:86:15:1c:c8:63: cf:3b:17:23:de:85:7d:f3:c7:ad:41:65:cd:16:06: 13:6e:76:6e:19:a2:0f:a8:e9:3f:16:42:82:01:03: df:76:a4:84:cb:48:b8:33:b1:24:e8:7f:85:21:13: 79:17:8b:11:f2:31:71:a1:6a:0a:39:12:a4:9f:e7: 86:6a:0f:e3:68:0e:c8:8e:d0:1e:c6:d8:9f:3a:e1: 07:5f:16:f0:22:85:06:05:2c:ec:ac:29:0c:15:c7: c8:1d:6d:7d:11:ba:dd:e8:63:eb:27:96:11:f8:4c: b5:96:fb:1a:ba:01:e7:d2:da:92:84:55:35:89:db: 3f:a2:2d:5f:5c:08:13:80:d9:35:a2:c5:1d:ee:59: f7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:34:24:7A:90:AB:7A:EC:1B:4E:FE:BF:95:93:AE:D1:78:CC:E8:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/001e977a-d9eb-3bb3-82bc-4af07e7ecee4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:26:f4:f0:54:7c:4c:d5:a8:7e:55:8b:d3:29:e6:a3:18:8a: db:67:b7:65:6a:b8:b7:ed:73:5b:a6:0c:8d:00:41:c4:88:8b: 42:ab:51:d7:71:9d:2d:f7:9f:b5:23:aa:8c:a2:c2:68:e1:6b: ad:19:0b:c0:5a:54:14:52:e6:06:14:c1:0b:95:17:f1:7a:9c: 26:f4:b0:0e:9a:b6:b8:f3:99:67:29:38:9a:62:d9:73:6b:cd: 15:a8:36:76:6a:ee:fd:b0:e9:f7:f1:12:2f:72:b4:3e:93:4f: 5b:12:3f:09:d7:17:05:d4:0b:50:99:da:ab:37:25:31:8f:12: 8e:eb:5a:db:bc:5f:65:94:12:d6:99:22:39:dd:8b:15:fa:c8: cf:79:9d:1b:2b:43:39:49:90:26:bf:f9:33:95:a3:83:e8:f3: 0c:30:f9:36:70:d6:64:1c:40:56:f6:1a:a5:11:4b:85:95:1e: 36:8d:9a:b2:e8:96:b0:c6:a1:a0:20:b7:97:60:7a:3d:9b:a1: 98:0a:5f:24:cb:eb:9a:dd:d0:09:af:00:33:a4:be:08:36:1f: 70:12:ce:b5:27:d9:21:10:52:a5:29:a0:33:5f:2d:06:c8:4c: 05:6b:6b:d0:f3:69:37:d8:9b:8f:3b:6a:e2:f9:8e:dc:1f:04: 42:2a:45:1f -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE55TMoEEmzdUMpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk OWU1N2YzOWItZTM4My00ZWM2LThmYTMtZDIyOTFlZDcyN2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDtUGLJvUXuHg1VEDPxNxfp5bUfPEhytuyEO aXOscExIksIA8EkVu9utfnGFk1PeZQg6jVIcc3Dmb+RMRHevHRsUbpFx0vMEbMYf L25Gceh7R3T63aKrotRPJyGqiBpGO2iN7TL7r4Sn7w0y8PKnDq1RhhUcyGPPOxcj 3oV988etQWXNFgYTbnZuGaIPqOk/FkKCAQPfdqSEy0i4M7Ek6H+FIRN5F4sR8jFx oWoKORKkn+eGag/jaA7IjtAextifOuEHXxbwIoUGBSzsrCkMFcfIHW19Ebrd6GPr J5YR+Ey1lvsaugHn0tqShFU1ids/oi1fXAgTgNk1osUd7ln3MQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCA0JHqQq3rsG07+v5WTrtF4zOjXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDAxZTk3N2EtZDllYi0z YmIzLTgyYmMtNGFmMDdlN2VjZWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAyJvTwVHxM1ah+VYvTKeajGIrbZ7dlari37XNb pgyNAEHEiItCq1HXcZ0t95+1I6qMosJo4WutGQvAWlQUUuYGFMELlRfxepwm9LAO mra485lnKTiaYtlza80VqDZ2au79sOn38RIvcrQ+k09bEj8J1xcF1AtQmdqrNyUx jxKO61rbvF9llBLWmSI53YsV+sjPeZ0bK0M5SZAmv/kzlaOD6PMMMPk2cNZkHEBW 9hqlEUuFlR42jZqy6JawxqGgILeXYHo9m6GYCl8ky+ua3dAJrwAzpL4INh9wEs61 J9khEFKlKaAzXy0GyEwFa2vQ82k32JuPO2ri+Y7cHwRCKkUf -----END CERTIFICATE-----Generated at Wed Oct 29 20:25:12 2025 by rpki-client