$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/14e10e7c-49f9-30bb-abd7-481bd8f9db90.roa File: 14e10e7c-49f9-30bb-abd7-481bd8f9db90.roa (raw, json) Hash identifier: /AK3uiHGM057LSB6xsr36f7jmfh16URcAzCkhVNyOH0= Subject key identifier: 31:E2:1F:4B:79:0E:7B:46:54:32:E9:A1:94:DE:5B:51:8F:2C:56:18 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B99D7DBF39991F50C039E6200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/14e10e7c-49f9-30bb-abd7-481bd8f9db90.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 396608 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:db:f3:99:91:f5:0c:03:9e:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=394c9c43-2c43-4649-aa11-206037d7b3f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:30:da:37:82:a3:e8:59:f7:9f:ba:88:51:ae: f3:ac:0d:bd:33:ae:c4:84:9e:19:ea:f4:c9:fb:23: eb:a9:86:e9:02:a9:20:85:2f:80:60:b4:ee:9b:19: 7a:34:e2:8a:0a:4a:e1:e3:dd:16:50:f4:ba:68:cb: 26:0f:61:fd:2a:f6:e5:0b:0b:1b:1a:ea:8a:36:0a: 7b:4a:79:1a:35:54:72:30:0a:a6:7f:90:9d:09:27: 12:97:cb:3c:30:7c:a7:74:26:18:cc:51:78:52:27: e4:53:69:13:34:ae:5a:6e:aa:1b:c1:4f:12:6a:7f: cd:d7:12:ce:3f:ec:bf:6f:60:58:e9:97:ed:63:bf: 47:6f:9d:2a:1b:f9:e7:e1:5a:f0:b4:da:a7:87:4a: 10:7b:89:a7:92:98:1a:99:f5:a2:b2:9a:25:b1:15: bb:70:ec:24:e5:56:6f:57:8d:69:4c:83:ad:81:db: ad:6f:5d:0f:df:a7:e9:c5:e3:96:28:94:4f:23:d3: c0:96:10:4a:cd:bb:a0:33:4e:d8:dc:4c:b8:f5:66: b6:2c:1c:8c:2e:1d:3d:b2:11:f9:14:c9:40:75:29: 0e:82:b3:38:69:20:a4:c0:60:48:c1:d4:71:b0:05: a6:a3:24:d7:2d:3f:fc:93:83:a1:cf:9b:f5:51:07: 06:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:E2:1F:4B:79:0E:7B:46:54:32:E9:A1:94:DE:5B:51:8F:2C:56:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/14e10e7c-49f9-30bb-abd7-481bd8f9db90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:b3:c9:9e:eb:7f:65:0e:97:ad:bc:ce:2a:38:45:c1:ff:cb: 9d:64:bd:91:eb:60:77:0b:cf:a7:4b:d1:73:f1:8d:7e:a8:85: a2:af:57:0b:86:0a:53:f8:23:61:82:c6:bd:a4:0c:03:57:ae: eb:ba:46:a0:e0:c1:10:be:8e:21:b4:42:c4:e3:f6:c9:b8:d9: a8:20:06:a3:5d:55:88:d3:d1:a6:35:84:45:6b:f8:46:a6:41: 01:e4:65:3e:c0:17:e0:d2:52:e7:a8:96:41:ce:b8:2e:cb:40: 37:fe:f9:d1:66:98:74:1b:59:ba:fa:9c:25:57:03:f5:ed:af: bf:61:fa:8f:74:36:bf:36:63:43:d4:ab:f2:bc:b1:be:d9:c1: b6:00:e0:01:6e:c8:9a:22:28:bd:07:b3:cc:31:6c:24:09:0d: 63:d0:87:86:fd:db:d5:4d:e4:35:5a:c2:b6:9a:26:c4:d0:88: a0:7a:78:fe:39:c8:8f:53:30:c9:d6:7f:0d:94:e0:10:53:f3: 60:90:70:89:e5:80:f5:2c:24:4f:08:9f:bb:1c:07:2f:e7:b4: 7a:ea:01:ac:da:01:0b:7f:95:12:d4:7f:1d:dc:db:71:23:9c: 44:80:4f:b0:83:69:9e:ee:a0:bf:23:7e:a4:cf:dd:88:fe:e9: db:5c:98:17 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuZ19vzmZH1DAOeYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk Mzk0YzljNDMtMmM0My00NjQ5LWFhMTEtMjA2MDM3ZDdiM2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDDaN4Kj6Fn3n7qIUa7zrA29M67EhJ4Z6vTJ +yPrqYbpAqkghS+AYLTumxl6NOKKCkrh490WUPS6aMsmD2H9KvblCwsbGuqKNgp7 SnkaNVRyMAqmf5CdCScSl8s8MHyndCYYzFF4UifkU2kTNK5abqobwU8San/N1xLO P+y/b2BY6ZftY79Hb50qG/nn4VrwtNqnh0oQe4mnkpgamfWispolsRW7cOwk5VZv V41pTIOtgdutb10P36fpxeOWKJRPI9PAlhBKzbugM07Y3Ey49Wa2LByMLh09shH5 FMlAdSkOgrM4aSCkwGBIwdRxsAWmoyTXLT/8k4Ohz5v1UQcGNwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDHiH0t5DntGVDLpoZTeW1GPLFYYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTRlMTBlN2MtNDlmOS0z MGJiLWFiZDctNDgxYmQ4ZjlkYjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCJs8me639lDpetvM4qOEXB/8udZL2R62B3C8+n S9Fz8Y1+qIWir1cLhgpT+CNhgsa9pAwDV67rukag4MEQvo4htELE4/bJuNmoIAaj XVWI09GmNYRFa/hGpkEB5GU+wBfg0lLnqJZBzrguy0A3/vnRZph0G1m6+pwlVwP1 7a+/YfqPdDa/NmND1KvyvLG+2cG2AOABbsiaIii9B7PMMWwkCQ1j0IeG/dvVTeQ1 WsK2mibE0Iigenj+OciPUzDJ1n8NlOAQU/NgkHCJ5YD1LCRPCJ+7HAcv57R66gGs 2gELf5US1H8d3NtxI5xEgE+wg2me7qC/I36kz92I/unbXJgX -----END CERTIFICATE-----Generated at Wed Oct 29 20:36:38 2025 by rpki-client