$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/016a1b50-7a2d-3f05-a867-8ac4321d3c3f.roa File: 016a1b50-7a2d-3f05-a867-8ac4321d3c3f.roa (raw, json) Hash identifier: p+NTK00TdKabFMf1cYclpIgmOXabJSxX3IKbUOHjQLU= Subject key identifier: AA:73:D6:44:06:53:40:3C:DA:6D:D6:79:C8:22:E5:02:0E:CB:29:3E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B99D7DBE34F839FE800033F40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/016a1b50-7a2d-3f05-a867-8ac4321d3c3f.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 397200 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:db:e3:4f:83:9f:e8:00:03:3f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=5c5af787-0d05-4be3-832b-d1416205a192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:44:83:57:4e:47:df:f5:45:8b:2d:e0:dc:32: 63:3f:7b:55:ef:37:18:2e:2c:7a:e8:ef:83:2c:65: 8d:8d:df:3f:c0:34:b2:af:61:e3:4d:5f:cf:99:6b: a0:36:4f:53:39:8a:2e:46:98:0c:11:41:8d:32:5f: 97:35:27:95:97:60:0e:92:54:30:ba:7b:c7:f4:3c: e0:65:95:74:85:ea:ab:36:63:b1:62:db:3a:62:a4: a2:a5:50:20:d1:45:da:98:a5:61:d5:49:b4:e2:86: 76:05:9c:fb:06:fc:8a:fb:10:b4:78:e6:3d:8c:96: 05:27:08:68:69:7a:c5:47:29:e0:3b:5e:67:e3:04: 71:82:16:bd:87:b8:33:eb:3d:e1:81:41:0e:52:61: 75:e8:8b:9d:5f:d1:21:e3:84:e7:86:ac:53:4e:7d: 06:46:48:8c:67:74:b5:41:c2:a7:0c:3b:cb:57:3c: e7:d0:e1:4e:04:7f:3e:42:fa:5e:81:2d:d4:b4:56: 5a:c3:b0:e0:91:9e:46:96:4c:53:8d:64:3a:cc:07: bf:6e:0d:d6:27:2d:97:cb:f7:06:07:78:86:85:94: 3e:ea:c0:53:f0:d8:30:ba:a0:4b:aa:cd:3a:a6:6a: c6:f0:7c:65:a5:78:ca:a2:5f:6d:9e:fd:f3:1e:46: 09:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:73:D6:44:06:53:40:3C:DA:6D:D6:79:C8:22:E5:02:0E:CB:29:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/016a1b50-7a2d-3f05-a867-8ac4321d3c3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:99:d0:5f:d5:26:8a:c6:9d:6c:35:04:b9:d4:36:73:4c:cc: 3d:52:a1:df:ac:ed:5e:a8:0c:63:f1:64:5d:b3:f8:5c:cd:59: 89:53:cb:58:fe:f1:a2:a4:f3:ec:3f:e9:ca:c1:7f:56:1d:54: f7:1d:d5:e1:a8:71:d6:c3:9e:74:85:d1:f5:98:97:de:73:79: 03:89:94:18:03:54:8f:2c:f0:09:66:e3:1c:b5:ea:bc:13:01: da:1f:fd:b5:0e:6a:b8:cf:20:46:84:77:00:8d:6d:ce:03:ef: ea:25:c3:05:6b:78:e5:67:40:8b:d2:0a:39:a3:b9:e2:74:b6: ed:4c:82:7c:86:d7:c6:a1:8e:5d:46:05:88:37:41:97:c5:7f: 9f:be:1b:59:83:c0:41:44:dc:58:70:69:a9:57:1b:4b:db:81: e5:a8:5a:57:54:dc:ff:95:40:33:87:51:1b:87:71:a7:1b:1f: 56:3b:d9:af:5f:05:51:f4:26:b3:09:70:82:8c:d8:5b:b3:45: 63:03:ea:1e:7f:95:63:da:da:3c:38:13:f5:d6:4b:b7:f1:64: 9a:9e:c0:0a:86:63:e4:f5:b0:09:dd:f8:c0:59:fc:d8:23:92: 91:61:a5:bf:01:b4:9c:a5:46:86:21:35:f4:2d:c4:e0:f9:b1: b9:f8:cf:9a -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuZ19vjT4Of6AADP0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NWM1YWY3ODctMGQwNS00YmUzLTgzMmItZDE0MTYyMDVhMTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30SDV05H3/VFiy3g3DJjP3tV7zcYLix66O+D LGWNjd8/wDSyr2HjTV/PmWugNk9TOYouRpgMEUGNMl+XNSeVl2AOklQwunvH9Dzg ZZV0heqrNmOxYts6YqSipVAg0UXamKVh1Um04oZ2BZz7BvyK+xC0eOY9jJYFJwho aXrFRyngO15n4wRxgha9h7gz6z3hgUEOUmF16IudX9Eh44TnhqxTTn0GRkiMZ3S1 QcKnDDvLVzzn0OFOBH8+QvpegS3UtFZaw7DgkZ5GlkxTjWQ6zAe/bg3WJy2Xy/cG B3iGhZQ+6sBT8NgwuqBLqs06pmrG8HxlpXjKol9tnv3zHkYJaQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKpz1kQGU0A82m3Wecgi5QIOyyk+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDE2YTFiNTAtN2EyZC0z ZjA1LWE4NjctOGFjNDMyMWQzYzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB2mdBf1SaKxp1sNQS51DZzTMw9UqHfrO1eqAxj 8WRds/hczVmJU8tY/vGipPPsP+nKwX9WHVT3HdXhqHHWw550hdH1mJfec3kDiZQY A1SPLPAJZuMcteq8EwHaH/21Dmq4zyBGhHcAjW3OA+/qJcMFa3jlZ0CL0go5o7ni dLbtTIJ8htfGoY5dRgWIN0GXxX+fvhtZg8BBRNxYcGmpVxtL24HlqFpXVNz/lUAz h1Ebh3GnGx9WO9mvXwVR9CazCXCCjNhbs0VjA+oef5Vj2to8OBP11ku38WSansAK hmPk9bAJ3fjAWfzYI5KRYaW/AbScpUaGITX0LcTg+bG5+M+a -----END CERTIFICATE-----Generated at Wed Oct 29 20:23:52 2025 by rpki-client