$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2104f919-945b-3c3e-8c3e-04789e8799b6.roa File: 2104f919-945b-3c3e-8c3e-04789e8799b6.roa (raw, json) Hash identifier: pBUHTE6e7nkxby1L+1kdThb1mzsD2mCauE0VRnjGmcI= Subject key identifier: FD:EB:A8:87:76:81:92:10:D2:83:F6:48:A2:EC:66:96:43:0D:B0:59 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B99D7DFC4F80B2D3EDFDFB420 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2104f919-945b-3c3e-8c3e-04789e8799b6.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 397212 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:df:c4:f8:0b:2d:3e:df:df:b4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=ce208214-62bf-46d5-be3a-0cb0dd6eb82c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a7:75:4f:8b:ce:0a:05:28:8c:c1:8e:ac:9e: a0:ef:58:9d:af:c0:53:48:d3:f8:7a:72:af:c2:d9: b5:12:d0:39:6d:cf:93:04:b8:9b:9f:ba:3f:c9:fd: 2e:13:f1:61:24:69:98:07:b4:0f:53:14:c0:b9:e7: ce:e5:f4:84:e5:92:e3:80:49:ba:23:e0:72:ba:68: 08:17:3c:ff:d4:2d:2f:12:c0:4e:23:9c:16:86:80: 3f:45:ad:27:cb:c9:9f:28:4a:b3:87:56:80:5a:ad: 1c:e8:87:00:e2:1d:82:b7:77:b2:9e:ce:3f:08:0c: 60:f5:22:25:52:50:1e:34:0b:1a:69:80:47:45:04: 05:95:b3:32:75:e8:0d:fd:26:64:54:d8:98:99:0a: bc:d5:e3:11:7e:bf:81:3c:9b:46:d1:79:fc:4a:2e: 8c:02:8d:58:f4:3c:4d:74:a3:11:9b:71:2e:83:06: 1d:c1:35:b0:da:df:0c:60:0c:d4:fd:7c:d0:60:91: 94:d7:6c:12:da:b7:0f:74:d3:6e:81:b1:c4:64:8e: 5c:cc:41:0b:f5:58:a4:4d:d4:ae:92:a6:54:b1:7e: 2e:3a:fd:7d:a7:63:6c:f1:c2:22:f2:da:4f:1c:b2: ae:1b:ca:c4:7c:17:87:57:b2:b7:ea:fa:2b:5f:cc: 12:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:EB:A8:87:76:81:92:10:D2:83:F6:48:A2:EC:66:96:43:0D:B0:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2104f919-945b-3c3e-8c3e-04789e8799b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:01:40:5e:8f:33:d7:7b:f3:47:8b:b5:5c:11:45:ec:e9:3b: d5:ad:0b:eb:fb:d9:74:88:4f:8e:18:dc:94:2a:63:4e:aa:e3: cd:59:fb:02:9c:66:b3:0f:2d:db:cd:d1:16:d8:3d:cc:c8:0d: 92:8c:7d:fe:c7:be:73:b2:76:11:1c:56:24:b1:4a:52:aa:9b: cf:a5:f4:89:3a:77:9d:00:e1:f6:af:e1:b0:6d:44:32:14:75: 0b:aa:1d:a2:48:fe:ff:af:22:f0:1b:8c:d0:1b:34:48:78:9b: 20:a5:15:8c:88:b2:b7:48:91:c8:be:c2:84:80:2f:ae:18:ef: f2:3b:e2:a5:68:03:cf:63:79:ef:db:5f:0d:f7:1a:97:3e:e3: 8c:ae:65:0c:65:30:70:f1:a7:fa:2b:68:e6:81:80:26:64:1e: 33:b8:d5:ec:1c:ec:3e:3c:c4:fa:c7:23:29:4c:86:c9:99:6b: 4b:48:37:6e:4a:ce:86:7b:74:f5:3e:c0:bb:74:0e:ae:20:48: 34:50:51:7f:2d:4d:fd:dd:ac:7e:d2:cb:89:75:fe:03:71:28: 22:9c:14:d4:4a:67:fe:24:05:dd:8f:f0:cc:78:c9:a7:84:a9: 1f:1c:da:d9:ff:d8:21:c3:37:0b:f1:ef:55:f5:44:38:13:68: 0a:c6:33:89 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuZ19/E+AstPt/ftCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk Y2UyMDgyMTQtNjJiZi00NmQ1LWJlM2EtMGNiMGRkNmViODJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKd1T4vOCgUojMGOrJ6g71idr8BTSNP4enKv wtm1EtA5bc+TBLibn7o/yf0uE/FhJGmYB7QPUxTAuefO5fSE5ZLjgEm6I+ByumgI Fzz/1C0vEsBOI5wWhoA/Ra0ny8mfKEqzh1aAWq0c6IcA4h2Ct3eyns4/CAxg9SIl UlAeNAsaaYBHRQQFlbMydegN/SZkVNiYmQq81eMRfr+BPJtG0Xn8Si6MAo1Y9DxN dKMRm3EugwYdwTWw2t8MYAzU/XzQYJGU12wS2rcPdNNugbHEZI5czEEL9VikTdSu kqZUsX4uOv19p2Ns8cIi8tpPHLKuG8rEfBeHV7K36vorX8wS/QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFP3rqId2gZIQ0oP2SKLsZpZDDbBZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjEwNGY5MTktOTQ1Yi0z YzNlLThjM2UtMDQ3ODllODc5OWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBRAUBejzPXe/NHi7VcEUXs6TvVrQvr+9l0iE+O GNyUKmNOquPNWfsCnGazDy3bzdEW2D3MyA2SjH3+x75zsnYRHFYksUpSqpvPpfSJ OnedAOH2r+GwbUQyFHULqh2iSP7/ryLwG4zQGzRIeJsgpRWMiLK3SJHIvsKEgC+u GO/yO+KlaAPPY3nv218N9xqXPuOMrmUMZTBw8af6K2jmgYAmZB4zuNXsHOw+PMT6 xyMpTIbJmWtLSDduSs6Ge3T1PsC7dA6uIEg0UFF/LU393ax+0suJdf4DcSginBTU Smf+JAXdj/DMeMmnhKkfHNrZ/9ghwzcL8e9V9UQ4E2gKxjOJ -----END CERTIFICATE-----Generated at Wed Oct 29 11:53:49 2025 by rpki-client