$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43d5319b-dad4-3129-af20-515f299b677f.roa File: 43d5319b-dad4-3129-af20-515f299b677f.roa (raw, json) Hash identifier: GHNqHZDnFJJPAEMSlG8crNjFy7C7hoktrGwDbXQbu2g= Subject key identifier: 6F:3D:D8:B1:68:DA:37:D2:7C:F7:6F:57:30:9B:5D:16:6E:9A:04:40 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B99D7D9C16CC77AF906716900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43d5319b-dad4-3129-af20-515f299b677f.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 396583 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:d9:c1:6c:c7:7a:f9:06:71:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=35ab7beb-5638-4ca9-84f5-b2450e626a5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:41:af:e2:95:84:c9:58:97:60:79:d3:3f:a2: 36:a3:f1:0a:e6:9a:f8:57:e9:54:6b:26:c0:c8:94: e6:41:6f:37:38:a6:4c:10:5d:95:4d:15:c2:d6:0a: 16:39:e6:d0:67:94:6d:7b:26:39:87:02:55:49:45: 20:24:f3:5c:45:61:da:59:33:d3:cc:65:b6:cb:28: 82:65:8f:05:7c:ae:0b:57:e8:69:ac:2a:2a:26:6c: 42:c5:19:54:90:a3:bb:81:d2:b4:3e:57:b0:8a:ce: fa:18:0d:b1:f8:2e:21:d8:1b:63:30:21:ba:df:e6: ea:8a:71:46:a7:7e:fa:f5:14:25:55:88:9f:04:64: 22:0b:81:f5:20:4a:38:99:a5:5f:d5:5c:60:73:1f: f1:f1:d6:01:a0:62:26:bb:ba:6b:f8:6b:16:ae:4e: 8b:3d:73:87:6f:31:04:b3:13:84:c7:1c:d9:71:be: 5a:9b:ce:ee:49:e4:55:39:c2:8c:ec:0d:f1:7a:3a: 09:24:78:d2:19:d2:f5:49:be:42:c3:44:b6:1d:67: 1c:68:91:5b:fe:56:67:5f:e0:a1:bd:30:b8:6d:3c: 50:3a:a9:e2:75:d2:33:a1:39:20:74:ce:a6:02:28: 17:5f:d6:f4:e1:19:a8:c6:51:f5:67:5f:f6:a8:35: b9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:3D:D8:B1:68:DA:37:D2:7C:F7:6F:57:30:9B:5D:16:6E:9A:04:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43d5319b-dad4-3129-af20-515f299b677f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:fa:c4:95:96:d9:5b:8e:73:b3:10:95:8c:45:2f:9f:28:40: d8:73:49:40:20:64:94:c6:19:70:2f:4c:94:88:2f:8c:90:e5: 16:8d:64:2a:44:64:38:0d:bf:3d:ce:b4:64:84:8b:a7:3a:a9: 5a:b5:fd:7e:6d:60:4c:54:00:29:e1:ce:d5:0b:aa:38:ae:5a: c8:55:2f:79:32:bd:28:36:a5:37:32:95:ba:a1:60:cc:7a:c9: ee:7c:95:28:1d:15:a3:e7:2f:fd:cb:ac:9b:75:6e:95:4d:d7: 13:8c:c1:0e:b1:a8:ee:2d:29:4a:3c:1e:c8:21:c9:fb:ee:0e: df:84:79:57:ce:5f:3b:79:c3:0a:68:b8:30:05:2d:db:69:c9: 60:b6:78:aa:ab:2a:42:c8:ef:a3:21:86:9c:31:1d:ce:2e:15: 72:87:c5:9a:2b:b3:c8:7b:7f:61:16:8c:74:a4:d3:80:d6:d5: f2:46:2b:31:fd:50:60:28:9b:7b:18:d4:72:5b:2d:93:f1:f7: 02:da:8c:b7:69:d6:d4:d4:b9:00:b8:a6:53:e7:4e:b4:eb:fc: 29:8e:7e:73:dd:71:9f:a0:d3:71:c5:c3:3c:6a:b3:6b:7e:58: d9:5d:44:14:14:ae:5b:2b:f2:2c:76:4e:f2:30:ab:27:33:43: 7d:ea:1a:59 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuZ19nBbMd6+QZxaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MzVhYjdiZWItNTYzOC00Y2E5LTg0ZjUtYjI0NTBlNjI2YTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUGv4pWEyViXYHnTP6I2o/EK5pr4V+lUaybA yJTmQW83OKZMEF2VTRXC1goWOebQZ5RteyY5hwJVSUUgJPNcRWHaWTPTzGW2yyiC ZY8FfK4LV+hprCoqJmxCxRlUkKO7gdK0Plewis76GA2x+C4h2BtjMCG63+bqinFG p3769RQlVYifBGQiC4H1IEo4maVf1Vxgcx/x8dYBoGImu7pr+GsWrk6LPXOHbzEE sxOExxzZcb5am87uSeRVOcKM7A3xejoJJHjSGdL1Sb5Cw0S2HWccaJFb/lZnX+Ch vTC4bTxQOqniddIzoTkgdM6mAigXX9b04RmoxlH1Z1/2qDW5xwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFG892LFo2jfSfPdvVzCbXRZumgRAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDNkNTMxOWItZGFkNC0z MTI5LWFmMjAtNTE1ZjI5OWI2NzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAH+sSVltlbjnOzEJWMRS+fKEDYc0lAIGSUxhlw L0yUiC+MkOUWjWQqRGQ4Db89zrRkhIunOqlatf1+bWBMVAAp4c7VC6o4rlrIVS95 Mr0oNqU3MpW6oWDMesnufJUoHRWj5y/9y6ybdW6VTdcTjMEOsajuLSlKPB7IIcn7 7g7fhHlXzl87ecMKaLgwBS3baclgtniqqypCyO+jIYacMR3OLhVyh8WaK7PIe39h Fox0pNOA1tXyRisx/VBgKJt7GNRyWy2T8fcC2oy3adbU1LkAuKZT50606/wpjn5z 3XGfoNNxxcM8arNrfljZXUQUFK5bK/Isdk7yMKsnM0N96hpZ -----END CERTIFICATE-----Generated at Wed Oct 29 20:38:48 2025 by rpki-client