$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3293ab3a-72e7-3881-9d1f-04b65ea49c6d.roa File: 3293ab3a-72e7-3881-9d1f-04b65ea49c6d.roa (raw, json) Hash identifier: KAoFl6RMxJEH+6X/MFV+tnr5zfK2IXNL1WMXi91+pIc= Subject key identifier: C2:A2:2A:6F:12:88:50:5A:C7:B0:05:23:8E:98:82:1A:DC:F3:06:25 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B21CC3CAC82BBB7F797CC2580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3293ab3a-72e7-3881-9d1f-04b65ea49c6d.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 396560 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:3c:ac:82:bb:b7:f7:97:cc:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=aaf58cc2-bcbd-4368-9d2c-7b78c1428482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a4:e7:60:6f:95:68:68:8a:8d:aa:63:1e:ed: db:fa:a7:a2:a3:51:04:4c:34:0c:26:95:1b:eb:d6: 0b:ff:91:cf:d9:73:c1:ab:d1:6b:2c:6e:99:e2:8a: 43:2b:f7:d9:8d:4c:db:c1:83:ff:46:4a:6b:82:f0: 2b:b2:cf:58:5e:1b:1a:d8:90:aa:7a:47:65:63:21: ae:d3:ab:19:6d:b5:b2:24:6f:56:26:c4:60:0e:0d: 6b:f6:f2:6d:9f:ea:ce:eb:09:02:db:a5:cc:56:fb: 3c:8c:86:f8:93:23:b5:e4:a6:20:0c:ff:16:31:22: 35:86:9e:75:62:a9:04:dd:12:f4:ba:0d:18:2e:67: 7e:b1:c6:e3:fb:69:e7:12:aa:63:40:5b:f2:7b:69: 23:41:fc:83:50:97:9d:be:bc:57:cd:f2:9e:1d:3e: 7b:aa:a2:a4:f6:a4:79:e0:5a:59:af:b2:0f:20:62: a5:29:e5:a4:25:66:a2:9c:f2:3e:b8:be:78:4b:3d: 17:6c:8a:47:b9:d6:ae:86:1d:61:d2:aa:3e:df:63: 9c:eb:bc:5f:1e:2f:f9:8f:94:0b:74:57:34:c7:05: 7e:c8:e7:80:b3:c7:2d:c9:92:17:80:cb:e9:25:94: f5:5b:96:41:e4:8c:58:ab:9a:9e:4f:1d:15:cd:30: b6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A2:2A:6F:12:88:50:5A:C7:B0:05:23:8E:98:82:1A:DC:F3:06:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3293ab3a-72e7-3881-9d1f-04b65ea49c6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:4c:e5:bb:de:69:18:17:2a:4e:48:b2:63:9d:cc:8f:14:6a: ad:eb:7c:b1:23:20:b7:73:68:b9:67:96:a7:ec:f0:e9:29:62: 5f:c7:3b:fd:7e:e8:c3:88:5b:6c:52:49:95:6a:2c:53:1d:dc: 95:2b:b9:f1:79:24:4e:e8:0e:72:af:4a:eb:88:8c:14:14:c8: 65:e4:69:a3:35:cf:12:17:43:cd:ed:11:06:61:15:b2:40:bd: d4:de:5f:48:d1:2e:85:99:e6:ca:b1:af:8d:cc:3f:cf:e3:7b: 40:48:04:41:db:98:5b:72:65:03:00:8c:5b:26:bc:2b:af:91: 99:25:15:18:b7:e4:c8:9b:ae:2c:06:38:e5:5f:b1:88:fe:f5: 4f:66:9d:9d:cd:98:8b:29:5f:b9:48:89:45:73:20:85:47:44: ba:c7:17:f9:95:a7:07:52:6d:c1:d3:b6:97:a3:4d:1d:62:b6: bc:9f:1a:fb:7a:fe:cd:4f:c5:2c:92:2e:93:98:14:d1:77:3e: ed:b3:85:4c:2b:d7:19:cc:c6:e9:bc:00:07:29:40:f1:c8:1b: bf:af:13:57:1b:8b:f6:71:8b:d8:d4:0f:a3:c8:99:f8:90:71: 2a:4d:e7:b0:77:79:49:a0:e3:72:29:95:d4:6b:e7:22:21:94: c5:dc:80:82 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEshzDysgru395fMJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk YWFmNThjYzItYmNiZC00MzY4LTlkMmMtN2I3OGMxNDI4NDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aTnYG+VaGiKjapjHu3b+qeio1EETDQMJpUb 69YL/5HP2XPBq9FrLG6Z4opDK/fZjUzbwYP/RkprgvArss9YXhsa2JCqekdlYyGu 06sZbbWyJG9WJsRgDg1r9vJtn+rO6wkC26XMVvs8jIb4kyO15KYgDP8WMSI1hp51 YqkE3RL0ug0YLmd+scbj+2nnEqpjQFvye2kjQfyDUJedvrxXzfKeHT57qqKk9qR5 4FpZr7IPIGKlKeWkJWainPI+uL54Sz0XbIpHudauhh1h0qo+32Oc67xfHi/5j5QL dFc0xwV+yOeAs8ctyZIXgMvpJZT1W5ZB5IxYq5qeTx0VzTC2BwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMKiKm8SiFBax7AFI46Yghrc8wYlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzI5M2FiM2EtNzJlNy0z ODgxLTlkMWYtMDRiNjVlYTQ5YzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB8TOW73mkYFypOSLJjncyPFGqt63yxIyC3c2i5 Z5an7PDpKWJfxzv9fujDiFtsUkmVaixTHdyVK7nxeSRO6A5yr0rriIwUFMhl5Gmj Nc8SF0PN7REGYRWyQL3U3l9I0S6FmebKsa+NzD/P43tASARB25hbcmUDAIxbJrwr r5GZJRUYt+TIm64sBjjlX7GI/vVPZp2dzZiLKV+5SIlFcyCFR0S6xxf5lacHUm3B 07aXo00dYra8nxr7ev7NT8Uski6TmBTRdz7ts4VMK9cZzMbpvAAHKUDxyBu/rxNX G4v2cYvY1A+jyJn4kHEqTeewd3lJoONyKZXUa+ciIZTF3ICC -----END CERTIFICATE-----Generated at Wed Oct 29 20:45:21 2025 by rpki-client