$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/081d5bf2-a6ad-3d11-84ac-b6ee4f2dba3e.roa File: 081d5bf2-a6ad-3d11-84ac-b6ee4f2dba3e.roa (raw, json) Hash identifier: wBeS9+LrNWMKSvz707JXGuKuNzpRLgTJ/DwXJN/LUgY= Subject key identifier: 86:6B:A1:92:04:FA:3A:FA:4D:A3:29:E3:DF:5C:54:1C:E6:1B:1A:39 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B99D7DA8B0DA5CA722DC257B0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/081d5bf2-a6ad-3d11-84ac-b6ee4f2dba3e.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 397208 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:da:8b:0d:a5:ca:72:2d:c2:57:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=0739b27b-a01f-4364-9350-351c3b90e67d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:40:05:66:3e:b6:38:b4:5d:2e:09:0a:1c:82: a6:7c:27:1a:88:b5:5d:81:02:20:e2:7e:f1:6a:5b: 10:23:e9:78:4d:1c:5f:09:8a:08:19:58:12:1f:ff: 31:12:ca:0d:67:ee:e6:19:9c:b9:d0:33:88:96:e7: 87:db:be:30:f9:e8:2d:a1:8f:10:cc:65:ce:3f:e5: cd:b2:18:02:d3:dd:99:66:54:86:c0:14:d3:70:d3: ac:67:c8:d1:3b:75:2f:76:28:1e:b2:a5:93:f5:4a: 4f:75:ba:64:2a:9c:b6:1a:bc:3c:86:82:85:60:83: 9c:90:25:d2:56:16:39:7d:db:45:82:b8:27:b1:13: 57:f3:a9:0f:c8:0f:e0:da:70:30:4b:9e:c0:22:6a: 7e:39:0a:f9:0f:e2:af:e2:9b:f2:88:7e:f0:35:0b: 98:e9:ec:82:95:5f:8e:f4:4a:0b:22:e5:cb:9f:d9: 91:50:72:ff:d8:ad:04:87:1f:a3:09:c1:56:29:1d: 12:f5:f6:69:de:4f:c4:db:55:77:fa:ca:ae:76:cc: ba:74:69:3e:b5:48:28:fa:b6:8c:9b:f3:3f:c4:73: a3:db:00:87:ea:19:93:9a:a7:05:7f:33:53:30:d8: 20:d6:15:5e:cf:a4:ab:50:71:69:33:92:d5:81:e9: 80:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:6B:A1:92:04:FA:3A:FA:4D:A3:29:E3:DF:5C:54:1C:E6:1B:1A:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/081d5bf2-a6ad-3d11-84ac-b6ee4f2dba3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:b1:c3:73:71:7f:06:49:37:ec:f3:4e:a9:53:f8:ad:b7:75: 8a:07:0f:e4:9d:52:17:b1:71:44:d8:1d:c8:a9:cd:43:25:b4: 87:71:86:cd:46:0c:e1:32:df:87:79:e7:b9:8f:1c:ac:62:fa: 34:76:82:36:b5:ed:2e:ab:e4:03:fd:a9:08:5f:e3:21:78:45: 8c:57:9f:71:29:b4:c0:29:43:cf:2b:93:02:7a:2f:42:19:67: 80:c2:5f:65:c7:6a:06:d1:45:40:97:69:8c:77:f2:b2:18:d5: 32:79:41:2b:64:ef:fc:d2:44:de:e1:1e:39:8b:38:98:d9:3e: 96:e1:90:fe:4a:26:19:8f:27:b9:c5:9f:72:9d:92:3e:d1:12: 09:0e:84:da:45:8b:f4:8e:5c:8c:36:69:b4:f5:92:22:4b:34: 45:2d:c4:a1:4c:e2:0a:ff:b0:e4:d5:62:51:67:66:ca:b0:6d: d8:93:59:25:a9:24:d0:c2:75:65:c0:40:1a:bf:40:62:3f:ea: 4e:fe:2d:c6:f7:1a:68:3d:7e:d7:2a:90:da:86:f4:86:65:1d: a0:bf:19:53:e9:f9:49:8d:17:8a:5e:d1:1d:b3:67:78:a1:8e: 45:73:f1:df:a5:ab:8b:59:61:4e:89:91:75:ca:cd:76:34:97: 4f:70:08:9a -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuZ19qLDaXKci3CV7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MDczOWIyN2ItYTAxZi00MzY0LTkzNTAtMzUxYzNiOTBlNjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0AFZj62OLRdLgkKHIKmfCcaiLVdgQIg4n7x alsQI+l4TRxfCYoIGVgSH/8xEsoNZ+7mGZy50DOIlueH274w+egtoY8QzGXOP+XN shgC092ZZlSGwBTTcNOsZ8jRO3UvdigesqWT9UpPdbpkKpy2Grw8hoKFYIOckCXS VhY5fdtFgrgnsRNX86kPyA/g2nAwS57AImp+OQr5D+Kv4pvyiH7wNQuY6eyClV+O 9EoLIuXLn9mRUHL/2K0Ehx+jCcFWKR0S9fZp3k/E21V3+squdsy6dGk+tUgo+raM m/M/xHOj2wCH6hmTmqcFfzNTMNgg1hVez6SrUHFpM5LVgemAYwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIZroZIE+jr6TaMp499cVBzmGxo5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDgxZDViZjItYTZhZC0z ZDExLTg0YWMtYjZlZTRmMmRiYTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBdscNzcX8GSTfs806pU/itt3WKBw/knVIXsXFE 2B3Iqc1DJbSHcYbNRgzhMt+Heee5jxysYvo0doI2te0uq+QD/akIX+MheEWMV59x KbTAKUPPK5MCei9CGWeAwl9lx2oG0UVAl2mMd/KyGNUyeUErZO/80kTe4R45iziY 2T6W4ZD+SiYZjye5xZ9ynZI+0RIJDoTaRYv0jlyMNmm09ZIiSzRFLcShTOIK/7Dk 1WJRZ2bKsG3Yk1klqSTQwnVlwEAav0BiP+pO/i3G9xpoPX7XKpDahvSGZR2gvxlT 6flJjReKXtEds2d4oY5Fc/HfpauLWWFOiZF1ys12NJdPcAia -----END CERTIFICATE-----Generated at Wed Oct 29 20:35:51 2025 by rpki-client