$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/42b3b98f-53d5-34aa-be3f-f5e31d5a89da.roa File: 42b3b98f-53d5-34aa-be3f-f5e31d5a89da.roa (raw, json) Hash identifier: fTDWiHH2LZpOg5EJ9qBnsH5BHz3o8iNAfTuIjDjWyoU= Subject key identifier: F7:05:12:DB:11:54:30:45:26:E4:7A:0D:80:8A:B8:46:04:3F:59:94 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AD93670E53DEA9EB7F344BDE0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/42b3b98f-53d5-34aa-be3f-f5e31d5a89da.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 396564 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:70:e5:3d:ea:9e:b7:f3:44:bd:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=bc556739-d4d5-48cb-a596-408907d58554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:2b:2b:ef:88:12:55:74:ae:18:5b:d1:91:04: a2:a4:d7:8e:ea:49:c3:8c:18:8c:5b:1b:8a:cc:0b: 79:f5:21:68:2d:fd:6b:fd:0f:fc:8d:c9:89:cb:57: fc:d5:cf:7e:d5:56:d4:ab:4b:73:4e:66:84:df:42: 03:4f:f9:26:6c:33:72:4e:09:85:a9:70:3a:40:35: 12:c9:4a:ef:f4:61:6e:78:37:f3:b2:66:73:3b:28: 3c:82:c7:eb:a2:74:20:c1:89:30:8c:71:b0:59:d2: f3:c8:a9:e8:5d:48:ca:71:87:87:a5:c0:b5:b5:aa: 78:26:ec:b0:1e:08:8c:99:ad:31:b7:02:f5:61:99: e5:1b:d5:aa:1c:da:cf:89:8c:c1:ee:9c:70:cf:dd: 3d:50:2a:32:41:51:44:5f:72:23:4d:51:45:9f:6a: 71:d8:c4:15:02:cd:f7:1a:eb:46:cc:fb:96:b6:0f: 05:5c:2a:10:fa:08:98:0b:0d:ed:b0:70:24:7c:f4: 8e:48:fe:7d:77:99:81:c6:2e:c2:78:33:8d:5a:4f: 5e:d7:cc:fa:c0:a0:34:82:0d:7f:e6:3f:74:bb:98: b7:e4:81:df:94:48:0b:20:5e:ee:39:ee:22:48:5e: 57:76:9f:fb:3f:46:17:c9:cf:2d:93:dd:15:7c:63: 72:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:05:12:DB:11:54:30:45:26:E4:7A:0D:80:8A:B8:46:04:3F:59:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/42b3b98f-53d5-34aa-be3f-f5e31d5a89da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:66:77:3c:48:da:6c:02:58:99:8c:f0:5b:31:38:9a:5d:55: 30:ba:ec:67:cd:92:fb:c1:49:77:56:88:cf:3b:ff:d2:7b:3b: cb:40:7e:57:7e:f7:93:96:a2:22:55:96:e1:4e:df:4a:a5:a2: b7:a6:4d:44:46:fa:4b:8c:6d:55:7d:94:a5:72:f0:ce:26:cf: 2c:d5:e1:f2:c0:b6:4d:b7:a4:aa:80:66:0a:c1:01:78:3d:e3: 50:5e:fe:74:d5:72:d3:df:b0:f1:02:1f:96:d3:da:74:7e:46: fe:85:84:f9:3b:f4:4b:36:38:1e:65:83:b1:7a:b6:9e:9b:3a: 4f:7b:8f:27:41:d6:ff:d5:18:b3:9d:16:0b:69:d7:40:02:ec: 40:8a:a7:9c:9f:ab:05:1d:96:74:17:35:0a:01:da:c9:15:76: 48:ca:95:53:7f:ac:85:8a:4f:06:19:3e:60:17:ac:33:34:80: b3:5b:fe:05:71:c2:56:b2:a5:ea:e7:51:21:7e:22:72:42:ef: d2:e4:17:e8:5c:c1:a8:2c:a5:68:f2:7f:81:17:15:bd:d2:04: 36:49:ab:e8:d5:5d:49:9c:9c:b5:6b:d3:9d:80:9b:5f:4c:11: 6c:26:4c:b6:b5:90:2c:ee:06:b0:f9:03:03:3c:d2:36:e7:2d: cc:8b:e6:87 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErZNnDlPeqet/NEveAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk YmM1NTY3MzktZDRkNS00OGNiLWE1OTYtNDA4OTA3ZDU4NTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ysr74gSVXSuGFvRkQSipNeO6knDjBiMWxuK zAt59SFoLf1r/Q/8jcmJy1f81c9+1VbUq0tzTmaE30IDT/kmbDNyTgmFqXA6QDUS yUrv9GFueDfzsmZzOyg8gsfronQgwYkwjHGwWdLzyKnoXUjKcYeHpcC1tap4Juyw HgiMma0xtwL1YZnlG9WqHNrPiYzB7pxwz909UCoyQVFEX3IjTVFFn2px2MQVAs33 GutGzPuWtg8FXCoQ+giYCw3tsHAkfPSOSP59d5mBxi7CeDONWk9e18z6wKA0gg1/ 5j90u5i35IHflEgLIF7uOe4iSF5Xdp/7P0YXyc8tk90VfGNygQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPcFEtsRVDBFJuR6DYCKuEYEP1mUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDJiM2I5OGYtNTNkNS0z NGFhLWJlM2YtZjVlMzFkNWE4OWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAsZnc8SNpsAliZjPBbMTiaXVUwuuxnzZL7wUl3 VojPO//SezvLQH5XfveTlqIiVZbhTt9KpaK3pk1ERvpLjG1VfZSlcvDOJs8s1eHy wLZNt6SqgGYKwQF4PeNQXv501XLT37DxAh+W09p0fkb+hYT5O/RLNjgeZYOxerae mzpPe48nQdb/1RiznRYLaddAAuxAiqecn6sFHZZ0FzUKAdrJFXZIypVTf6yFik8G GT5gF6wzNICzW/4FccJWsqXq51EhfiJyQu/S5BfoXMGoLKVo8n+BFxW90gQ2Savo 1V1JnJy1a9OdgJtfTBFsJky2tZAs7gaw+QMDPNI25y3Mi+aH -----END CERTIFICATE-----Generated at Wed Oct 29 20:22:27 2025 by rpki-client