$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e8e1ac9-c89d-31b0-b675-916171460635.roa File: 4e8e1ac9-c89d-31b0-b675-916171460635.roa (raw, json) Hash identifier: I1ojmaVsArfflt4rrRgNcqrKuy9vFtw3VX9GccJS4mQ= Subject key identifier: B2:40:75:12:84:49:DE:2B:C2:AB:34:98:9D:01:F1:9B:40:CE:1E:FB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B99D7DC16CA62E71170140710 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e8e1ac9-c89d-31b0-b675-916171460635.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 36621 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:dc:16:ca:62:e7:11:70:14:07:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=677aef61-c29d-43a8-afe3-822ccecc9219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:e0:55:78:57:f4:1b:b6:e9:fb:ce:91:88:d8: 78:a2:61:c4:ae:61:0e:13:e5:43:8d:ed:48:a7:6f: 90:9c:13:89:bc:d3:20:64:b9:c0:38:3e:72:ca:74: c8:6a:bb:e0:e6:56:2c:5d:a9:3b:c5:4f:8e:14:7c: a4:ab:4e:08:f3:34:e0:54:6d:09:76:24:f9:4f:fd: 8e:66:79:99:60:14:68:ec:bb:5a:7a:47:de:fd:5c: fa:e6:9f:77:40:9a:46:56:6b:d0:f0:e8:32:da:4d: 77:2e:9e:89:c7:21:28:f3:94:e7:5b:d7:e6:bf:d7: e0:06:37:81:ab:37:97:a8:37:5b:e7:df:16:69:bb: 4b:07:1e:e7:09:2f:69:6a:9b:83:ee:a2:b3:8c:1a: 56:5c:d3:c2:a0:bc:98:ba:2e:d4:2f:0b:6b:8e:4c: c3:db:6c:66:f9:fd:c9:d9:61:f4:c3:6d:31:a4:e7: bc:65:84:57:7e:bd:38:57:19:68:f7:57:29:d0:4c: 70:cd:2a:cc:c6:38:78:1a:01:c4:61:e2:23:da:4f: 8c:cf:17:47:50:31:62:23:52:e7:44:36:cc:aa:f5: 1d:06:13:5c:cc:92:bd:2b:c6:e2:24:f4:3c:54:88: b0:4b:87:aa:7b:47:2b:2b:01:10:08:4d:9a:a0:a8: 8f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:40:75:12:84:49:DE:2B:C2:AB:34:98:9D:01:F1:9B:40:CE:1E:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e8e1ac9-c89d-31b0-b675-916171460635.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:bc:76:32:8a:da:ec:3c:cb:b1:28:2f:54:ec:49:f8:e7:47: 4f:3e:40:df:da:08:55:d7:d3:af:80:02:db:d5:6d:37:be:85: 6d:55:fc:77:81:9d:8b:6a:ab:85:4e:ff:f9:d9:e5:e2:eb:5a: c5:92:68:f2:5e:d8:5f:db:bb:e1:c7:0b:99:9b:54:b1:82:e7: 62:62:65:52:62:9c:73:fe:56:ab:9f:09:cf:f6:46:98:3a:af: fb:af:0c:56:d7:e0:9f:14:b7:24:4b:8c:16:b1:87:b6:1f:85: 3f:b4:82:d1:96:4f:f7:d3:8b:11:99:a3:ea:44:17:02:c8:8d: a5:92:a5:11:80:b3:36:c9:56:bb:cb:cf:2e:c0:7f:22:3f:bd: 65:14:3a:93:64:86:45:1a:17:97:0b:c8:62:42:f9:35:e4:c5: 2f:01:09:d3:d3:32:47:d8:42:63:8a:51:5a:af:59:1a:52:de: 43:a3:64:c1:a7:b1:03:49:13:5e:95:32:d6:83:b3:6f:bd:71: 6b:98:ac:2a:8b:8c:de:64:04:83:0c:4f:71:24:9c:dd:3a:34: 73:32:8c:e8:87:7d:49:3c:cf:33:cf:37:de:6d:dc:9e:48:ee: 1d:55:ad:35:ba:01:cc:00:30:2b:63:86:f8:a5:b9:19:a5:74: 2b:f1:bc:90 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuZ19wWymLnEXAUBxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk Njc3YWVmNjEtYzI5ZC00M2E4LWFmZTMtODIyY2NlY2M5MjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7+BVeFf0G7bp+86RiNh4omHErmEOE+VDje1I p2+QnBOJvNMgZLnAOD5yynTIarvg5lYsXak7xU+OFHykq04I8zTgVG0JdiT5T/2O ZnmZYBRo7Ltaekfe/Vz65p93QJpGVmvQ8Ogy2k13Lp6JxyEo85TnW9fmv9fgBjeB qzeXqDdb598WabtLBx7nCS9papuD7qKzjBpWXNPCoLyYui7ULwtrjkzD22xm+f3J 2WH0w20xpOe8ZYRXfr04Vxlo91cp0ExwzSrMxjh4GgHEYeIj2k+MzxdHUDFiI1Ln RDbMqvUdBhNczJK9K8biJPQ8VIiwS4eqe0crKwEQCE2aoKiP+wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLJAdRKESd4rwqs0mJ0B8ZtAzh77MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGU4ZTFhYzktYzg5ZC0z MWIwLWI2NzUtOTE2MTcxNDYwNjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBavHYyitrsPMuxKC9U7En450dPPkDf2ghV19Ov gALb1W03voVtVfx3gZ2LaquFTv/52eXi61rFkmjyXthf27vhxwuZm1SxgudiYmVS Ypxz/larnwnP9kaYOq/7rwxW1+CfFLckS4wWsYe2H4U/tILRlk/304sRmaPqRBcC yI2lkqURgLM2yVa7y88uwH8iP71lFDqTZIZFGheXC8hiQvk15MUvAQnT0zJH2EJj ilFar1kaUt5Do2TBp7EDSRNelTLWg7NvvXFrmKwqi4zeZASDDE9xJJzdOjRzMozo h31JPM8zzzfebdyeSO4dVa01ugHMADArY4b4pbkZpXQr8byQ -----END CERTIFICATE-----Generated at Wed Oct 29 20:44:56 2025 by rpki-client