$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3df4436b-cf8d-3938-a752-30d9d66f0d80.roa File: 3df4436b-cf8d-3938-a752-30d9d66f0d80.roa (raw, json) Hash identifier: RmHolLf3sv2giYZk+t04y81r8NapBvgME+wAUFzl8G4= Subject key identifier: 9E:B7:F6:B9:1A:44:2B:0F:2A:E2:6C:7A:1F:53:59:59:EB:9D:4C:FF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B715CDBDFF78E50D173725100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3df4436b-cf8d-3938-a752-30d9d66f0d80.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 396611 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:db:df:f7:8e:50:d1:73:72:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=e6e93aa0-b0bf-4ce8-9df6-12ef83ce3a7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:cd:9a:7c:e8:01:88:4a:98:ac:a3:64:f2:72: b8:a2:6c:4b:21:b3:5c:83:1c:03:ff:e5:a1:b9:fd: f2:53:d2:72:4d:de:f4:49:13:5f:1f:b1:14:1b:a4: 3c:b3:52:b8:28:5b:52:ef:a6:4f:71:7f:08:d5:e9: 35:f6:2e:ff:7e:6f:8a:8d:d3:2c:2b:db:89:82:d3: 27:fe:ef:e6:57:12:6c:44:b0:05:94:36:81:4f:e1: 95:ea:62:5b:93:1c:bb:3a:c5:db:cb:ab:ff:46:53: 66:c6:e8:0e:71:a8:bb:be:bb:1f:59:f7:18:79:52: a3:66:02:5a:9e:f2:81:08:5d:16:65:c0:56:40:0c: 09:2d:9c:8b:8a:1f:92:ba:e6:dd:e4:16:00:f9:a6: b6:4e:c0:b0:56:83:4b:c8:cf:f1:fa:e3:e1:f8:de: 7a:63:27:ea:ad:74:d8:ae:19:2a:29:68:d5:e7:aa: db:a7:63:d4:e3:17:7a:2f:ca:bf:74:3b:7e:02:92: d5:4d:3f:53:0b:b4:f5:8f:fc:6f:60:8f:8d:75:29: 9b:91:a4:b3:5d:cc:3e:74:0a:93:95:53:1c:78:9b: 8e:9b:6f:75:c9:51:43:2d:0e:46:61:6e:5e:2a:de: 45:cf:95:43:82:d6:2c:36:bf:ac:83:63:1f:2b:f5: ed:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B7:F6:B9:1A:44:2B:0F:2A:E2:6C:7A:1F:53:59:59:EB:9D:4C:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3df4436b-cf8d-3938-a752-30d9d66f0d80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:79:09:9d:71:3d:57:f3:6c:a7:93:db:2c:ae:eb:78:eb:ea: 33:05:23:3f:87:56:e0:46:d3:ce:30:37:58:05:a8:1b:41:fd: 2c:2d:78:5b:2d:52:72:e3:cb:2c:b5:4e:53:6d:8d:35:23:4f: 82:88:c3:2f:52:c7:98:35:dc:46:7a:7a:05:d8:f9:e7:66:d9: 15:ce:1f:fd:6b:00:49:45:bc:8a:2f:ee:fe:55:57:9f:14:4a: 60:5a:78:9f:bb:d9:cc:fb:bf:7e:54:6c:79:21:39:40:f8:62: 92:66:29:9a:6d:f2:1f:90:90:cf:6d:04:fe:c1:ce:03:c5:c0: 2c:92:91:1f:3f:81:d9:a8:db:bc:19:25:b2:b9:d3:e3:c8:7f: 95:1e:45:6c:bc:42:f9:6a:ff:fa:42:fb:a6:3d:9b:e9:ed:84: be:90:da:d9:c7:16:08:10:59:59:8d:51:40:0b:9e:a7:9e:77: 40:cd:04:40:49:95:58:4f:3d:da:d8:69:52:3f:19:fc:d9:d8: 8d:8a:fb:8c:04:24:dd:b2:6d:e8:39:32:cc:73:42:be:e0:1c: 61:f9:fa:a6:71:5f:25:2a:78:d6:66:67:31:e4:0c:ee:b7:64: b2:0d:21:03:cd:b9:aa:15:02:87:2d:2f:ee:a6:26:f7:72:7b: bd:ea:df:0e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtxXNvf945Q0XNyUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ZTZlOTNhYTAtYjBiZi00Y2U4LTlkZjYtMTJlZjgzY2UzYTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7M2afOgBiEqYrKNk8nK4omxLIbNcgxwD/+Wh uf3yU9JyTd70SRNfH7EUG6Q8s1K4KFtS76ZPcX8I1ek19i7/fm+KjdMsK9uJgtMn /u/mVxJsRLAFlDaBT+GV6mJbkxy7OsXby6v/RlNmxugOcai7vrsfWfcYeVKjZgJa nvKBCF0WZcBWQAwJLZyLih+Suubd5BYA+aa2TsCwVoNLyM/x+uPh+N56YyfqrXTY rhkqKWjV56rbp2PU4xd6L8q/dDt+ApLVTT9TC7T1j/xvYI+NdSmbkaSzXcw+dAqT lVMceJuOm291yVFDLQ5GYW5eKt5Fz5VDgtYsNr+sg2MfK/XtkQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJ639rkaRCsPKuJseh9TWVnrnUz/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2RmNDQzNmItY2Y4ZC0z OTM4LWE3NTItMzBkOWQ2NmYwZDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB8eQmdcT1X82ynk9ssrut46+ozBSM/h1bgRtPO MDdYBagbQf0sLXhbLVJy48sstU5TbY01I0+CiMMvUseYNdxGenoF2PnnZtkVzh/9 awBJRbyKL+7+VVefFEpgWnifu9nM+79+VGx5ITlA+GKSZimabfIfkJDPbQT+wc4D xcAskpEfP4HZqNu8GSWyudPjyH+VHkVsvEL5av/6QvumPZvp7YS+kNrZxxYIEFlZ jVFAC56nnndAzQRASZVYTz3a2GlSPxn82diNivuMBCTdsm3oOTLMc0K+4Bxh+fqm cV8lKnjWZmcx5Azut2SyDSEDzbmqFQKHLS/upib3cnu96t8O -----END CERTIFICATE-----Generated at Wed Oct 29 20:36:39 2025 by rpki-client