$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24a899b4-321a-378a-a29f-36469e6ae33a.roa File: 24a899b4-321a-378a-a29f-36469e6ae33a.roa (raw, json) Hash identifier: aniIj7zDJkBV92oJsf7qP4xDhm9nQEehSj+jMoRMqQc= Subject key identifier: 4E:B2:DF:CD:5A:28:E8:18:71:20:63:FF:DB:35:40:BD:04:1E:02:7A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B715CDBBC2F01DE18D93CDB58 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24a899b4-321a-378a-a29f-36469e6ae33a.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 396615 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:db:bc:2f:01:de:18:d9:3c:db:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=eb06dae5-ec13-4971-aab6-9136a4f48847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ca:cb:cb:8d:34:56:2b:a2:8b:30:ce:92:68: 06:20:04:40:c5:09:8d:47:c0:af:cb:f0:77:dd:25: 97:9d:b7:70:c2:74:8b:3f:4e:8d:14:4e:38:7f:c9: 32:d6:cf:b1:d7:24:5b:a3:85:6c:d9:fa:7e:db:14: 79:5b:5e:20:90:2f:e9:3f:54:8d:e3:9c:71:91:89: df:10:c2:76:da:30:45:db:4c:f9:b8:39:2f:e9:60: 65:fb:24:a7:07:d7:d8:fc:75:b2:d4:b2:3f:73:04: 2d:45:ef:17:d0:ee:7d:fd:4b:1f:b9:e6:f8:80:96: 8a:f1:5f:3f:d5:15:7b:c3:4a:08:12:de:df:c8:b9: 22:c3:cc:24:22:50:de:40:40:6a:29:01:8e:81:90: c3:08:73:1e:02:db:05:de:2f:a5:46:4b:91:94:f5: b0:23:8b:a8:0a:ee:4d:c3:6c:76:ab:ea:33:f3:35: c1:7e:14:b0:b0:37:67:fa:8a:df:98:38:44:bb:3f: 68:c9:a9:2d:f9:f9:0d:86:38:bf:d4:32:bf:ae:52: d5:a2:ee:b8:8f:8a:00:90:71:dd:5f:18:54:13:6e: c6:74:19:14:2f:49:c6:43:53:03:e6:49:33:a9:75: c9:7a:0f:2b:e3:f6:bd:8f:97:5c:03:ab:d7:3b:6d: 90:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:B2:DF:CD:5A:28:E8:18:71:20:63:FF:DB:35:40:BD:04:1E:02:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24a899b4-321a-378a-a29f-36469e6ae33a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:b7:2a:f8:a4:b2:0b:dc:1c:29:82:f3:af:0e:df:9f:6b:3c: 8c:ca:ff:a0:bc:96:59:93:c1:32:a0:f3:aa:4d:17:1f:be:28: 79:80:3d:49:8b:b8:39:1d:61:3a:02:a4:67:2a:b5:f1:b0:4c: 26:b5:b4:ce:63:67:22:29:1b:be:f3:0a:f4:8d:85:13:bc:8c: 9d:c7:7e:01:fb:ae:4e:0b:be:c1:8f:54:17:bc:f6:91:83:aa: a5:24:35:ce:99:01:a0:9d:60:2f:d7:84:ab:3a:9b:c2:8b:8d: be:c5:bb:27:6c:af:e0:bf:9a:6c:b1:b8:d6:13:42:67:3a:e9: 45:15:9a:7a:96:85:29:53:d3:1f:48:1f:7e:37:12:0d:c9:f0: d2:7a:04:d4:59:19:b9:fd:ec:aa:3a:8c:ee:fd:b1:21:aa:5e: 17:e1:79:9c:bb:35:29:e2:db:95:c1:34:80:d2:a5:36:20:7a: 8f:1c:57:25:03:b6:f5:fc:32:df:70:58:7d:8f:1a:0d:a0:b2: 1e:a0:01:74:de:d7:98:59:f1:0b:67:d8:d7:d2:37:6d:45:66: 19:f1:8e:8f:c4:89:35:7c:f6:a8:e4:77:f7:80:a0:64:a3:76: ac:24:a0:ab:13:6d:29:c9:51:01:33:05:94:8a:0f:46:dc:27: 5d:41:9b:60 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtxXNu8LwHeGNk821gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ZWIwNmRhZTUtZWMxMy00OTcxLWFhYjYtOTEzNmE0ZjQ4ODQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMrLy400ViuiizDOkmgGIARAxQmNR8Cvy/B3 3SWXnbdwwnSLP06NFE44f8ky1s+x1yRbo4Vs2fp+2xR5W14gkC/pP1SN45xxkYnf EMJ22jBF20z5uDkv6WBl+ySnB9fY/HWy1LI/cwQtRe8X0O59/Usfueb4gJaK8V8/ 1RV7w0oIEt7fyLkiw8wkIlDeQEBqKQGOgZDDCHMeAtsF3i+lRkuRlPWwI4uoCu5N w2x2q+oz8zXBfhSwsDdn+orfmDhEuz9oyakt+fkNhji/1DK/rlLVou64j4oAkHHd XxhUE27GdBkUL0nGQ1MD5kkzqXXJeg8r4/a9j5dcA6vXO22Q8QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFE6y381aKOgYcSBj/9s1QL0EHgJ6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjRhODk5YjQtMzIxYS0z NzhhLWEyOWYtMzY0NjllNmFlMzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBltyr4pLIL3BwpgvOvDt+fazyMyv+gvJZZk8Ey oPOqTRcfvih5gD1Ji7g5HWE6AqRnKrXxsEwmtbTOY2ciKRu+8wr0jYUTvIydx34B +65OC77Bj1QXvPaRg6qlJDXOmQGgnWAv14SrOpvCi42+xbsnbK/gv5pssbjWE0Jn OulFFZp6loUpU9MfSB9+NxINyfDSegTUWRm5/eyqOozu/bEhql4X4XmcuzUp4tuV wTSA0qU2IHqPHFclA7b1/DLfcFh9jxoNoLIeoAF03teYWfELZ9jX0jdtRWYZ8Y6P xIk1fPao5Hf3gKBko3asJKCrE20pyVEBMwWUig9G3CddQZtg -----END CERTIFICATE-----Generated at Wed Oct 29 20:38:51 2025 by rpki-client