$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40473fe4-0171-356c-b712-dad01ceb2039.roa File: 40473fe4-0171-356c-b712-dad01ceb2039.roa (raw, json) Hash identifier: 6+XKjEtJXJ8rIY1FGCy93M6EupLVzwYbqIH9Btmu29M= Subject key identifier: C4:C1:C7:38:86:C2:BF:33:2F:18:C2:20:19:F8:8A:43:EE:43:8B:07 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B3557004B4ADB678644E77C00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40473fe4-0171-356c-b712-dad01ceb2039.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 396553 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:57:00:4b:4a:db:67:86:44:e7:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=2d1eeb07-f876-43c7-82cb-0933c151f439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d2:7e:b8:e4:10:a4:ae:5a:31:4f:f0:ec:37: f3:d0:2b:ef:4e:4d:12:da:29:6f:38:23:e2:76:3d: 19:b9:d3:f3:ba:1e:fa:a8:89:49:33:e2:b2:39:c6: b4:00:25:14:f8:11:52:fc:e1:ed:f3:1a:78:b0:8b: 39:76:e8:47:d4:d9:04:76:fd:0e:b7:0f:6e:23:e1: 9e:8c:5f:5e:1e:fb:1d:30:41:2f:f8:1a:45:20:1e: 49:29:f6:20:77:0e:72:a3:9d:e9:e9:72:35:0c:58: a3:c0:0f:47:d5:3e:7f:c0:61:7a:8a:fa:25:1b:df: 23:97:d0:bb:12:b6:bc:a5:bb:67:36:e2:f3:88:c6: 8d:f8:b8:b1:ef:88:64:b1:b7:28:39:c0:f7:b5:54: 62:89:2f:2d:b6:9f:e2:17:63:a5:4a:da:75:a8:30: 25:6c:9d:e7:74:d1:79:39:00:dc:cb:10:84:68:6e: 53:3f:59:78:31:75:55:da:38:23:1d:95:21:b8:0c: aa:ce:ba:28:32:aa:c0:74:fc:ee:0b:dc:d7:4b:76: e7:3d:8c:54:25:c5:4a:e8:33:59:3d:30:d9:67:b6: 81:36:9b:2c:7a:16:8a:8c:a8:53:eb:eb:c6:44:0a: 38:29:84:22:77:12:8f:54:d9:10:f1:b5:ff:bf:7d: ee:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:C1:C7:38:86:C2:BF:33:2F:18:C2:20:19:F8:8A:43:EE:43:8B:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40473fe4-0171-356c-b712-dad01ceb2039.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:06:d9:31:7b:9d:76:92:c7:a9:18:7a:05:08:31:63:9b:53: e8:e9:2c:7f:9e:3d:d6:15:ba:59:b3:85:3f:85:92:09:c0:33: f0:bf:d2:34:5a:d6:ab:c5:ae:35:1b:54:bd:71:d7:ef:0e:a3: d5:4b:cb:47:ba:92:82:62:c8:58:cc:4e:35:0b:43:82:4a:86: 65:18:7e:1d:96:ca:0d:23:fd:cb:69:31:ae:95:24:cb:96:32: 5d:14:be:69:4a:49:8b:a8:04:68:0d:fd:f0:83:2c:2b:c6:e1: 53:d2:de:13:41:18:37:2e:45:d9:9b:f8:55:bf:cb:6e:34:fd: 7f:90:27:15:0b:fa:05:44:9f:a8:42:9b:89:7a:03:31:ee:f1: a0:11:e0:d4:00:15:e2:43:97:50:aa:b3:b7:4f:1e:3d:f0:ea: 98:d8:f2:b8:bf:03:3d:74:02:31:02:a3:e0:8f:17:b4:d2:58: 1b:7d:9f:7a:c1:1e:3e:b1:d9:6a:d3:89:71:97:cc:25:1f:7f: f1:cc:28:0d:4a:ac:85:9c:b6:2a:18:4a:17:b1:dc:c8:ba:33: ff:5b:a4:41:9f:71:08:8c:77:a1:fe:54:39:06:84:84:b7:3f: ce:16:b9:b3:49:28:36:41:12:2f:67:36:28:69:f4:46:02:33: ce:79:28:a7 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEs1VwBLSttnhkTnfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk MmQxZWViMDctZjg3Ni00M2M3LTgyY2ItMDkzM2MxNTFmNDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNJ+uOQQpK5aMU/w7Dfz0CvvTk0S2ilvOCPi dj0ZudPzuh76qIlJM+KyOca0ACUU+BFS/OHt8xp4sIs5duhH1NkEdv0Otw9uI+Ge jF9eHvsdMEEv+BpFIB5JKfYgdw5yo53p6XI1DFijwA9H1T5/wGF6ivolG98jl9C7 Era8pbtnNuLziMaN+Lix74hksbcoOcD3tVRiiS8ttp/iF2OlStp1qDAlbJ3ndNF5 OQDcyxCEaG5TP1l4MXVV2jgjHZUhuAyqzrooMqrAdPzuC9zXS3bnPYxUJcVK6DNZ PTDZZ7aBNpssehaKjKhT6+vGRAo4KYQidxKPVNkQ8bX/v33u0QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMTBxziGwr8zLxjCIBn4ikPuQ4sHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDA0NzNmZTQtMDE3MS0z NTZjLWI3MTItZGFkMDFjZWIyMDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBvBtkxe512ksepGHoFCDFjm1Po6Sx/nj3WFbpZ s4U/hZIJwDPwv9I0Wtarxa41G1S9cdfvDqPVS8tHupKCYshYzE41C0OCSoZlGH4d lsoNI/3LaTGulSTLljJdFL5pSkmLqARoDf3wgywrxuFT0t4TQRg3LkXZm/hVv8tu NP1/kCcVC/oFRJ+oQpuJegMx7vGgEeDUABXiQ5dQqrO3Tx498OqY2PK4vwM9dAIx AqPgjxe00lgbfZ96wR4+sdlq04lxl8wlH3/xzCgNSqyFnLYqGEoXsdzIujP/W6RB n3EIjHeh/lQ5BoSEtz/OFrmzSSg2QRIvZzYoafRGAjPOeSin -----END CERTIFICATE-----Generated at Wed Oct 29 20:42:05 2025 by rpki-client