$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/142e4dd4-69fd-30dd-b84f-5d3ca9c4b003.roa File: 142e4dd4-69fd-30dd-b84f-5d3ca9c4b003.roa (raw, json) Hash identifier: qdbtJPVnumCFq5XxwzIOxiQ3WuJ7JSg+gM5wBhXg8ig= Subject key identifier: 35:F6:E6:13:4B:7F:91:FE:28:90:02:25:D7:E0:47:71:1F:40:BD:B2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B99D7DB7AAC822B6CB1B43B40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/142e4dd4-69fd-30dd-b84f-5d3ca9c4b003.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 396826 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:db:7a:ac:82:2b:6c:b1:b4:3b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=794ae342-1bb7-4972-a24f-bcb75675180c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6a:08:3c:aa:38:2d:49:8f:c0:51:41:b5:0e: e6:8a:ef:d8:56:4b:29:66:3e:bd:6e:83:f4:b8:ae: a2:7a:8c:97:b0:1c:69:37:bd:23:6f:6c:d1:ff:71: 99:4c:75:e5:67:4f:15:9d:d8:f7:75:c1:06:06:d5: 7c:fc:46:47:8b:37:7c:3c:be:57:b1:08:6b:ea:e2: 9c:85:af:b2:e4:f3:17:9b:85:96:28:88:73:d9:18: 03:f1:bb:09:cb:b1:b4:de:72:ee:01:39:8a:a4:3d: ac:f3:2b:17:bd:fe:6f:c8:1d:46:57:38:ec:a8:17: 86:77:1b:97:fd:6c:2f:93:d0:5e:0f:3c:44:97:35: 39:86:d9:47:8c:52:f2:ab:5f:c6:13:1e:a2:08:d0: 39:09:8e:55:6e:f6:cd:23:cb:a2:00:c2:57:0e:bd: 7e:33:22:3f:9f:c2:40:43:49:25:12:81:8a:12:bf: f5:ee:9a:f1:80:c6:b0:70:25:26:68:2a:34:97:89: ce:74:7d:4a:2b:98:a6:c1:4b:92:92:38:16:b7:3c: 05:fc:87:0d:e3:9c:a1:34:6f:18:87:2e:63:e6:5b: 14:a0:52:94:5f:b9:74:a7:4d:60:8e:5f:29:93:16: 77:d1:f2:d1:d1:e0:76:13:45:ac:81:47:6b:40:88: 80:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:F6:E6:13:4B:7F:91:FE:28:90:02:25:D7:E0:47:71:1F:40:BD:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/142e4dd4-69fd-30dd-b84f-5d3ca9c4b003.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:30:84:a0:e7:8b:7c:e2:5c:22:5d:04:07:dd:36:a6:14:01: c0:8a:83:8e:44:5d:0e:16:58:0a:f3:4d:dc:63:d1:68:ea:33: 37:26:a9:06:13:8e:60:b7:72:f6:41:df:2e:3b:a5:e5:ff:d7: 45:0c:04:a7:c9:5e:a7:2b:f3:65:dd:ff:07:2f:f0:6b:47:e7: 2b:d8:02:98:41:a3:4b:57:8b:04:21:ff:28:8c:70:46:fa:aa: 7e:51:91:e5:1b:12:39:a8:91:e0:25:2f:1e:5d:07:d0:cb:46: dc:1b:c4:90:b8:d6:bd:3b:ca:5e:5e:c4:19:90:3a:4a:7e:ce: d7:c1:17:f9:9e:63:96:18:89:15:c1:81:0c:05:58:1b:a1:9b: 8d:be:20:5c:56:df:cb:c2:16:12:87:cb:30:78:a5:e8:e2:0f: e6:13:5f:b6:a5:54:8a:27:5c:e6:29:ed:4b:c1:f0:4c:12:0d: f4:83:72:10:21:b6:c1:ce:95:06:1a:8e:b1:fa:a5:7d:bd:2a: f5:24:0c:ed:01:56:95:3e:85:58:bd:5d:14:53:03:2d:69:be: 0a:f2:83:9c:3c:be:74:25:57:ee:a7:24:7b:1d:7f:c7:9d:65: 60:48:61:03:24:a7:d1:14:49:69:a7:b3:33:1d:cd:52:cd:0e: 79:1f:9b:b4 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuZ19t6rIIrbLG0O0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk Nzk0YWUzNDItMWJiNy00OTcyLWEyNGYtYmNiNzU2NzUxODBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2oIPKo4LUmPwFFBtQ7miu/YVkspZj69boP0 uK6ieoyXsBxpN70jb2zR/3GZTHXlZ08Vndj3dcEGBtV8/EZHizd8PL5XsQhr6uKc ha+y5PMXm4WWKIhz2RgD8bsJy7G03nLuATmKpD2s8ysXvf5vyB1GVzjsqBeGdxuX /Wwvk9BeDzxElzU5htlHjFLyq1/GEx6iCNA5CY5VbvbNI8uiAMJXDr1+MyI/n8JA Q0klEoGKEr/17prxgMawcCUmaCo0l4nOdH1KK5imwUuSkjgWtzwF/IcN45yhNG8Y hy5j5lsUoFKUX7l0p01gjl8pkxZ30fLR0eB2E0WsgUdrQIiAzwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDX25hNLf5H+KJACJdfgR3EfQL2yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTQyZTRkZDQtNjlmZC0z MGRkLWI4NGYtNWQzY2E5YzRiMDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBoMISg54t84lwiXQQH3TamFAHAioOORF0OFlgK 803cY9Fo6jM3JqkGE45gt3L2Qd8uO6Xl/9dFDASnyV6nK/Nl3f8HL/BrR+cr2AKY QaNLV4sEIf8ojHBG+qp+UZHlGxI5qJHgJS8eXQfQy0bcG8SQuNa9O8peXsQZkDpK fs7XwRf5nmOWGIkVwYEMBVgboZuNviBcVt/LwhYSh8sweKXo4g/mE1+2pVSKJ1zm Ke1LwfBMEg30g3IQIbbBzpUGGo6x+qV9vSr1JAztAVaVPoVYvV0UUwMtab4K8oOc PL50JVfupyR7HX/HnWVgSGEDJKfRFElpp7MzHc1SzQ55H5u0 -----END CERTIFICATE-----Generated at Wed Oct 29 11:53:49 2025 by rpki-client