$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/418d4552-dc88-382d-9b64-ee8c6d03988b.roa File: 418d4552-dc88-382d-9b64-ee8c6d03988b.roa (raw, json) Hash identifier: 5NFAE3ngTckp94F5Gila0BmTopzBVyMerWm8I/qihBg= Subject key identifier: 40:B3:CE:27:8E:9F:FA:21:51:33:9A:53:83:C1:50:D5:61:2A:FD:22 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AD9366B057DF5E269EB887900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/418d4552-dc88-382d-9b64-ee8c6d03988b.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 396587 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:6b:05:7d:f5:e2:69:eb:88:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=29d37521-c2b8-474d-be74-d4213f36dc56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:68:6f:6a:16:04:b9:c3:06:60:06:41:cd:2b: 46:04:b9:f4:ec:03:2a:f9:14:68:78:9f:37:f6:64: 7f:57:cf:9b:13:29:f4:2e:79:2c:01:a3:02:51:6b: d1:8b:9d:d8:fe:d6:a3:21:02:d3:c5:81:f7:f6:ae: ba:c5:87:cb:94:17:94:ec:57:1d:b3:ed:05:b8:34: 35:67:a0:2b:8d:e6:b6:fb:b5:8e:70:b0:46:0b:bf: ec:06:24:6c:a3:7c:5a:65:b4:e7:6f:fa:31:95:2a: 80:26:7c:dc:b7:34:63:32:35:66:56:d7:f5:a8:ad: 11:dc:b8:01:60:51:39:89:1f:5c:82:ef:45:d8:ff: a3:ef:7e:1b:b1:df:e2:2a:07:60:dd:14:b2:27:8e: cb:3f:f6:59:ee:68:82:ed:15:f5:c7:75:40:3c:ed: 57:07:04:58:35:43:e5:d7:67:51:e4:78:e8:1c:73: e8:af:ea:ac:05:b0:8a:9f:c4:ca:30:81:8e:c2:09: 76:b8:8c:cb:35:68:e0:33:f5:52:44:45:05:fa:20: 1c:a8:f1:6d:d5:71:8a:84:88:ac:6c:d5:26:71:85: a1:b3:db:90:9a:0b:3b:04:1a:66:a0:b8:a8:c9:2d: 4c:20:fd:87:32:72:12:a7:ed:b6:8d:b8:33:82:c6: df:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B3:CE:27:8E:9F:FA:21:51:33:9A:53:83:C1:50:D5:61:2A:FD:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/418d4552-dc88-382d-9b64-ee8c6d03988b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:4d:ea:63:39:bc:ec:d2:a6:fb:27:64:58:a2:2b:41:bc:ab: 37:14:2b:a3:25:9a:e9:e2:1d:df:46:69:54:cf:89:ac:9b:f1: 78:ee:51:f0:10:ba:c4:69:d8:a3:0a:01:a4:3f:07:d3:e6:db: 95:11:52:13:5b:df:68:a0:93:ac:2f:a2:cd:fb:9f:19:3d:f5: 0c:a4:1e:41:bd:dd:32:f4:44:76:ec:da:ca:8e:57:e5:c7:56: 5a:dd:71:0f:66:3a:75:47:f4:53:35:80:6e:e5:13:48:17:ed: 3e:e4:0f:a7:0d:d8:8d:fd:9a:c0:aa:24:2c:49:8a:0b:25:5b: a8:24:47:82:20:ca:1f:e7:10:bc:1c:34:e0:50:8d:32:01:7c: 18:e1:c9:c0:99:fe:88:96:dc:60:f4:c4:1e:0b:1f:49:d8:8a: 47:32:1d:c8:64:9d:41:06:00:b3:56:e3:da:aa:1a:22:d7:32: 27:80:d4:fd:58:db:ea:ee:a6:52:9f:05:03:ff:c8:e7:ab:d1: 96:97:1b:3b:42:04:3a:57:5c:85:44:66:de:48:6e:c5:e6:92: 67:97:36:a6:f6:80:63:bc:bf:e7:43:4b:8f:46:52:e8:96:42: a6:2f:10:4f:00:ef:c2:0a:aa:7d:de:07:50:ff:f3:ff:bc:80: a9:b5:78:f1 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErZNmsFffXiaeuIeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk MjlkMzc1MjEtYzJiOC00NzRkLWJlNzQtZDQyMTNmMzZkYzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmhvahYEucMGYAZBzStGBLn07AMq+RRoeJ83 9mR/V8+bEyn0LnksAaMCUWvRi53Y/tajIQLTxYH39q66xYfLlBeU7Fcds+0FuDQ1 Z6Arjea2+7WOcLBGC7/sBiRso3xaZbTnb/oxlSqAJnzctzRjMjVmVtf1qK0R3LgB YFE5iR9cgu9F2P+j734bsd/iKgdg3RSyJ47LP/ZZ7miC7RX1x3VAPO1XBwRYNUPl 12dR5HjoHHPor+qsBbCKn8TKMIGOwgl2uIzLNWjgM/VSREUF+iAcqPFt1XGKhIis bNUmcYWhs9uQmgs7BBpmoLioyS1MIP2HMnISp+22jbgzgsbfgQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFECzzieOn/ohUTOaU4PBUNVhKv0iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDE4ZDQ1NTItZGM4OC0z ODJkLTliNjQtZWU4YzZkMDM5ODhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBuTepjObzs0qb7J2RYoitBvKs3FCujJZrp4h3f RmlUz4msm/F47lHwELrEadijCgGkPwfT5tuVEVITW99ooJOsL6LN+58ZPfUMpB5B vd0y9ER27NrKjlflx1Za3XEPZjp1R/RTNYBu5RNIF+0+5A+nDdiN/ZrAqiQsSYoL JVuoJEeCIMof5xC8HDTgUI0yAXwY4cnAmf6Iltxg9MQeCx9J2IpHMh3IZJ1BBgCz VuPaqhoi1zIngNT9WNvq7qZSnwUD/8jnq9GWlxs7QgQ6V1yFRGbeSG7F5pJnlzam 9oBjvL/nQ0uPRlLolkKmLxBPAO/CCqp93gdQ//P/vICptXjx -----END CERTIFICATE-----Generated at Wed Oct 29 20:38:46 2025 by rpki-client