$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/37af780a-7ad0-3a7d-8e72-f9650b109811.roa File: 37af780a-7ad0-3a7d-8e72-f9650b109811.roa (raw, json) Hash identifier: +D8cgUjD0gCxLQvSvuuHLwojVXqd/GJtFIwz+wEE7Jg= Subject key identifier: A4:F6:29:0E:E2:67:55:46:C7:09:3F:41:05:56:FF:E4:92:D1:FA:AE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E790D7F552441746181C40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/37af780a-7ad0-3a7d-8e72-f9650b109811.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 20172 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:90:d7:f5:52:44:17:46:18:1c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=9ac374c2-1150-4f54-b16e-6cd0c165f3c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:47:68:bc:2e:7b:f1:5d:6b:e9:86:a1:53:2e: 7a:ef:98:0d:b0:77:5c:75:af:20:95:e0:f6:b2:70: 14:6c:97:26:08:31:80:13:82:68:66:82:01:ef:96: 5d:0c:66:f7:48:16:cc:ef:87:31:79:aa:ed:04:e7: 06:ab:85:df:d1:1a:75:e8:cc:a8:95:34:8d:a2:ae: 61:fc:99:0b:ad:f8:5e:00:cd:25:1a:c6:62:f2:53: a8:38:96:7e:98:da:f2:74:12:46:9c:f1:b7:17:98: e0:a0:28:b1:fe:3d:70:cf:6b:dc:cd:9c:c1:ef:42: b3:95:f1:0f:06:ce:7e:38:3d:5c:f7:bc:d7:25:88: 31:c0:4b:3c:90:5a:f8:e5:30:90:87:e5:69:04:4a: d5:95:d4:f1:98:8b:e8:ae:72:9e:70:58:11:91:f8: 4e:34:c9:e2:57:e0:43:dd:1f:f2:47:2b:9a:bd:06: d9:ca:b1:0f:81:35:8d:12:71:f8:e3:41:0e:f7:b9: b7:b4:5d:0f:77:d9:a4:d2:d7:20:9f:b7:a5:63:79: fa:ed:59:a2:ab:9c:17:67:3d:a9:46:49:92:10:2d: 25:32:20:8c:18:66:67:e0:c9:a2:04:5d:2f:07:2c: 83:43:3d:ed:24:83:8e:44:44:1c:20:23:61:f2:3b: 11:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:F6:29:0E:E2:67:55:46:C7:09:3F:41:05:56:FF:E4:92:D1:FA:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/37af780a-7ad0-3a7d-8e72-f9650b109811.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:f3:82:e2:7a:43:ce:c1:14:bf:6c:b2:4a:3c:19:ff:51:57: 10:fe:5a:90:d5:d1:d9:df:a9:91:44:95:aa:6a:56:fd:b4:e4: b9:b6:a6:de:4f:c4:3b:3f:ee:63:70:20:84:e0:1f:30:0d:75: 28:88:a2:8b:e2:c2:8f:be:0c:48:ad:1e:f1:c5:e2:a8:c9:6d: 2f:78:ac:90:c6:43:e7:cd:f8:a2:3e:9f:8b:e2:b8:5e:dc:28: df:8b:56:d6:80:23:e5:5c:9e:8d:b2:51:81:05:5d:2b:f1:1c: 75:fb:f7:7a:be:f1:3b:63:a3:84:8a:36:df:c3:65:f3:b7:33: 18:76:fd:42:99:85:c5:d3:82:76:53:44:e1:02:e1:fe:22:0a: e8:1d:4e:07:79:49:e7:3f:f3:af:ae:c2:9f:bd:ed:b0:80:ab: b3:2b:c4:34:c1:ca:56:55:8d:c7:a2:86:2a:b9:12:c7:0f:d9: 30:80:90:05:16:9b:ad:c3:a0:55:ac:17:d8:bf:e2:ae:d0:8e: 2a:dd:cd:40:49:39:cc:26:f9:bc:27:f5:5d:45:ec:a6:97:a9: 77:60:32:a9:46:72:7e:3c:70:99:3b:8b:2e:40:36:16:4e:c3: 53:86:df:6b:7d:5b:1d:1f:2c:e3:af:14:fd:f5:72:01:12:38: 55:77:63:21 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE55DX9VJEF0YYHEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk OWFjMzc0YzItMTE1MC00ZjU0LWIxNmUtNmNkMGMxNjVmM2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUdovC578V1r6YahUy5675gNsHdcda8gleD2 snAUbJcmCDGAE4JoZoIB75ZdDGb3SBbM74cxeartBOcGq4Xf0Rp16MyolTSNoq5h /JkLrfheAM0lGsZi8lOoOJZ+mNrydBJGnPG3F5jgoCix/j1wz2vczZzB70KzlfEP Bs5+OD1c97zXJYgxwEs8kFr45TCQh+VpBErVldTxmIvornKecFgRkfhONMniV+BD 3R/yRyuavQbZyrEPgTWNEnH440EO97m3tF0Pd9mk0tcgn7elY3n67Vmiq5wXZz2p RkmSEC0lMiCMGGZn4MmiBF0vByyDQz3tJIOOREQcICNh8jsRhwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKT2KQ7iZ1VGxwk/QQVW/+SS0fquMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzdhZjc4MGEtN2FkMC0z YTdkLThlNzItZjk2NTBiMTA5ODExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBO84LiekPOwRS/bLJKPBn/UVcQ/lqQ1dHZ36mR RJWqalb9tOS5tqbeT8Q7P+5jcCCE4B8wDXUoiKKL4sKPvgxIrR7xxeKoyW0veKyQ xkPnzfiiPp+L4rhe3Cjfi1bWgCPlXJ6NslGBBV0r8Rx1+/d6vvE7Y6OEijbfw2Xz tzMYdv1CmYXF04J2U0ThAuH+IgroHU4HeUnnP/OvrsKfve2wgKuzK8Q0wcpWVY3H ooYquRLHD9kwgJAFFputw6BVrBfYv+Ku0I4q3c1ASTnMJvm8J/VdReyml6l3YDKp RnJ+PHCZO4suQDYWTsNTht9rfVsdHyzjrxT99XIBEjhVd2Mh -----END CERTIFICATE-----Generated at Wed Oct 29 20:39:49 2025 by rpki-client