$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3f662078-c87e-3e94-b9f7-e83fa6ac8a50.roa File: 3f662078-c87e-3e94-b9f7-e83fa6ac8a50.roa (raw, json) Hash identifier: bRKUYoTOQ9PCmLVgtc29DpL76BxlVH/aaVWLf1rEnU0= Subject key identifier: FF:F0:0B:FE:69:1C:07:D0:55:44:D2:99:CB:36:57:62:86:4E:91:52 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E79997F16E4EE796587680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3f662078-c87e-3e94-b9f7-e83fa6ac8a50.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 36628 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:99:97:f1:6e:4e:e7:96:58:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=7fb8876e-1423-4ee5-b2f2-7e974e8384c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:79:cd:64:e9:48:65:77:2d:9b:52:5e:78:92: 07:34:e1:97:04:1f:c6:7d:30:80:ee:bf:b6:35:bc: ce:5c:a2:8e:7c:03:17:09:c9:a8:f2:47:39:65:14: 83:a6:c9:81:37:3c:07:7f:2d:6d:d8:1c:47:6f:99: 60:a4:d3:fd:50:5e:bd:73:ef:29:36:7f:a3:3f:8d: 35:89:57:ba:e8:44:e7:72:06:78:b9:40:86:e8:a7: d8:40:4b:de:45:aa:b5:26:21:fa:13:ff:fc:66:e4: 0a:7c:f3:0e:bf:55:73:0a:25:38:9c:86:d7:eb:95: 79:0b:b3:59:87:e1:83:0f:6c:7d:00:c6:d7:dc:09: 3e:fb:2a:60:ee:04:0b:d4:a8:62:89:3e:b2:31:cf: c4:e8:4b:26:24:03:48:5f:51:e0:9d:78:84:ea:6a: 4f:6e:5b:b7:bb:c1:0d:af:7b:c2:b7:0a:3c:af:d8: 90:8c:49:19:db:34:84:93:72:48:4f:92:85:96:7d: 4b:53:06:b0:8c:16:b4:d2:82:2b:6d:26:f7:84:57: bd:4e:79:dd:32:b5:8b:3d:fb:df:b0:4c:c9:68:1b: 38:91:41:5e:a6:98:34:c6:97:8d:14:f9:86:e4:49: 6d:7f:3a:17:18:d8:8d:0a:30:54:fc:d6:30:80:9b: b2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F0:0B:FE:69:1C:07:D0:55:44:D2:99:CB:36:57:62:86:4E:91:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3f662078-c87e-3e94-b9f7-e83fa6ac8a50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:5f:10:17:b0:bf:6e:0d:83:02:5b:62:2a:b5:f1:d9:81:0f: f4:67:69:9d:05:b7:f8:0e:d0:3c:3f:00:70:38:fe:34:b4:92: af:b5:88:4d:42:c7:60:46:67:12:51:81:d0:96:33:d4:2f:ee: 61:80:16:15:1e:11:3d:9f:ca:7b:2f:20:dd:30:75:52:f9:a8: 1e:7f:2f:05:a0:0f:47:99:d8:c6:3c:92:6c:82:31:96:41:b2: 8c:c2:66:95:b6:e4:f8:f9:50:31:62:46:9a:d8:8d:23:7a:9c: 70:e4:1f:c6:be:bf:c6:63:7b:3c:fc:f1:05:a5:e7:4f:73:de: c8:5a:83:da:77:1d:b5:14:48:2f:23:b3:bc:8f:a0:5d:42:5d: 91:e2:08:89:1b:16:d6:79:b0:b2:26:46:48:f1:23:9a:71:9d: cb:4c:ba:7a:30:ce:bb:97:59:5c:97:ed:bc:40:4b:fc:93:9e: fa:a1:80:b7:bf:2e:4b:41:44:cf:64:f5:76:dc:ee:92:00:76: a9:f3:33:04:be:8c:3c:42:35:56:2e:89:ef:dd:30:35:c7:00: ce:94:23:4e:55:63:ea:33:37:ee:79:d7:29:26:11:c8:49:25: a3:0e:6e:e7:c6:fc:b3:69:65:9a:9c:2c:93:af:1c:88:4f:dc: 50:2a:15:77 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE55mX8W5O55ZYdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk N2ZiODg3NmUtMTQyMy00ZWU1LWIyZjItN2U5NzRlODM4NGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXnNZOlIZXctm1JeeJIHNOGXBB/GfTCA7r+2 NbzOXKKOfAMXCcmo8kc5ZRSDpsmBNzwHfy1t2BxHb5lgpNP9UF69c+8pNn+jP401 iVe66ETncgZ4uUCG6KfYQEveRaq1JiH6E//8ZuQKfPMOv1VzCiU4nIbX65V5C7NZ h+GDD2x9AMbX3Ak++ypg7gQL1KhiiT6yMc/E6EsmJANIX1HgnXiE6mpPblu3u8EN r3vCtwo8r9iQjEkZ2zSEk3JIT5KFln1LUwawjBa00oIrbSb3hFe9TnndMrWLPfvf sEzJaBs4kUFeppg0xpeNFPmG5EltfzoXGNiNCjBU/NYwgJuyNQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFP/wC/5pHAfQVUTSmcs2V2KGTpFSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2Y2NjIwNzgtYzg3ZS0z ZTk0LWI5ZjctZTgzZmE2YWM4YTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAIXxAXsL9uDYMCW2IqtfHZgQ/0Z2mdBbf4DtA8 PwBwOP40tJKvtYhNQsdgRmcSUYHQljPUL+5hgBYVHhE9n8p7LyDdMHVS+agefy8F oA9HmdjGPJJsgjGWQbKMwmaVtuT4+VAxYkaa2I0jepxw5B/Gvr/GY3s8/PEFpedP c97IWoPadx21FEgvI7O8j6BdQl2R4giJGxbWebCyJkZI8SOacZ3LTLp6MM67l1lc l+28QEv8k576oYC3vy5LQUTPZPV23O6SAHap8zMEvow8QjVWLonv3TA1xwDOlCNO VWPqMzfuedcpJhHISSWjDm7nxvyzaWWanCyTrxyIT9xQKhV3 -----END CERTIFICATE-----Generated at Wed Oct 29 20:35:51 2025 by rpki-client