$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f96cca7-c1d8-3505-b3b2-845b54d28c24.roa File: 0f96cca7-c1d8-3505-b3b2-845b54d28c24.roa (raw, json) Hash identifier: KUrc93sdtlJhNYv3JsE1rPKCdcvPEK0oI77hHGmsfgs= Subject key identifier: 74:A2:92:44:1D:5B:66:26:AA:13:2A:21:6A:03:F0:20:DF:68:B1:A3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B99D7DA13CA2198D211D23B38 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f96cca7-c1d8-3505-b3b2-845b54d28c24.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 396582 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:da:13:ca:21:98:d2:11:d2:3b:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=1b4238e1-b418-4208-a739-63b2abfc9b76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:8d:dc:ee:ff:57:05:35:0a:08:30:fe:ea:af: c5:af:b4:69:4a:ab:7a:86:44:9b:ce:dc:c8:4b:61: 2a:8a:01:01:03:19:4e:a7:22:8b:71:2d:a1:10:d4: 7a:a1:c4:cc:51:f5:f0:8e:89:79:82:b6:04:53:fa: 6e:25:65:ac:49:e6:d8:0a:4e:ee:59:eb:59:1a:98: 0d:76:fa:ae:e9:22:63:75:02:13:89:f8:f1:06:cb: 16:42:e0:15:03:1f:9d:98:c5:36:f2:b8:3c:39:12: fc:69:d4:81:d8:66:0f:db:4d:f9:ed:78:8b:0b:8b: 54:73:68:d0:8d:fd:be:ba:ed:d8:8a:aa:d0:e8:8f: 59:c2:95:15:98:4e:0f:3f:51:90:88:3c:a6:5a:37: 44:96:e9:3c:a3:5a:5e:b0:80:e8:87:40:26:d7:e5: 14:7b:f6:9b:83:b5:5e:b8:3e:2e:2e:72:cc:d7:90: 2e:d1:5e:83:ec:72:28:c0:5d:d2:3c:9d:ec:4c:b7: a0:57:0d:87:6d:37:21:49:52:e3:19:0c:d8:79:a7: 4a:33:33:d0:f0:2a:e8:5b:bc:01:51:03:a1:22:44: 85:8a:a0:d2:5b:00:f6:85:3a:01:d0:50:da:9a:17: ea:3c:d3:be:8a:50:6f:a2:bd:d9:6a:f8:76:22:25: 61:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A2:92:44:1D:5B:66:26:AA:13:2A:21:6A:03:F0:20:DF:68:B1:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f96cca7-c1d8-3505-b3b2-845b54d28c24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:86:7c:91:c0:b5:04:4c:d4:9a:34:94:eb:8e:a7:bc:91:a9: f3:c0:81:7a:8a:00:ff:40:c0:f8:41:0f:4f:b1:26:f0:8d:a0: 3a:23:b6:6c:34:2f:84:2f:58:2f:7e:2c:0e:cd:7f:c6:b9:bc: 6a:dc:ac:f5:03:6e:c7:6d:62:5b:25:03:8d:ab:b8:b9:5c:a2: 2e:f4:17:9d:62:f5:60:66:06:4a:c4:b4:8b:6e:71:aa:ab:46: c4:2f:23:9f:e2:73:18:49:de:a7:91:02:a7:2f:63:aa:c0:60: db:20:a6:63:7b:58:77:21:9b:bf:dd:e6:ac:41:e8:e1:44:1a: 27:aa:52:3e:51:8a:c1:4a:f3:4a:a1:27:b1:d8:6a:ed:75:64: 01:e5:df:26:4c:06:84:b7:01:a6:05:ca:18:48:3c:88:f1:65: 80:f7:86:cf:2b:6f:24:d7:f2:88:a5:50:28:2b:07:f5:0e:77: da:3b:59:c3:8d:be:03:7f:aa:9d:e0:e7:24:f6:5f:ac:99:5f: e9:67:f3:df:e0:79:22:0c:97:b1:37:5b:57:cd:0b:8a:4f:60: b3:31:ef:8f:d8:e8:39:90:40:c8:a6:23:ba:19:a1:c2:f7:ae: af:48:12:4c:68:22:c6:17:38:df:f3:aa:2f:12:ab:e7:0e:bb: bf:02:f2:a5 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuZ19oTyiGY0hHSOzgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MWI0MjM4ZTEtYjQxOC00MjA4LWE3MzktNjNiMmFiZmM5Yjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgY3c7v9XBTUKCDD+6q/Fr7RpSqt6hkSbztzI S2EqigEBAxlOpyKLcS2hENR6ocTMUfXwjol5grYEU/puJWWsSebYCk7uWetZGpgN dvqu6SJjdQITifjxBssWQuAVAx+dmMU28rg8ORL8adSB2GYP20357XiLC4tUc2jQ jf2+uu3YiqrQ6I9ZwpUVmE4PP1GQiDymWjdEluk8o1pesIDoh0Am1+UUe/abg7Ve uD4uLnLM15Au0V6D7HIowF3SPJ3sTLegVw2HbTchSVLjGQzYeadKMzPQ8CroW7wB UQOhIkSFiqDSWwD2hToB0FDamhfqPNO+ilBvor3Zavh2IiVhpQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHSikkQdW2YmqhMqIWoD8CDfaLGjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGY5NmNjYTctYzFkOC0z NTA1LWIzYjItODQ1YjU0ZDI4YzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB4hnyRwLUETNSaNJTrjqe8kanzwIF6igD/QMD4 QQ9PsSbwjaA6I7ZsNC+EL1gvfiwOzX/Gubxq3Kz1A27HbWJbJQONq7i5XKIu9Bed YvVgZgZKxLSLbnGqq0bELyOf4nMYSd6nkQKnL2OqwGDbIKZje1h3IZu/3easQejh RBonqlI+UYrBSvNKoSex2GrtdWQB5d8mTAaEtwGmBcoYSDyI8WWA94bPK28k1/KI pVAoKwf1DnfaO1nDjb4Df6qd4Ock9l+smV/pZ/Pf4HkiDJexN1tXzQuKT2CzMe+P 2Og5kEDIpiO6GaHC966vSBJMaCLGFzjf86ovEqvnDru/AvKl -----END CERTIFICATE-----Generated at Wed Oct 29 20:36:30 2025 by rpki-client