$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/544ffe41-db17-3076-acc5-02766f91448c.roa File: 544ffe41-db17-3076-acc5-02766f91448c.roa (raw, json) Hash identifier: kyBrpijqdNtz1Rl7ybe7szGPZHSZd4sLTKvu1tWqH2U= Subject key identifier: 0B:E3:A2:A4:08:75:65:DE:E4:BC:43:44:90:DF:77:81:53:84:BF:60 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B3556FD1D96C18031ADB4AB80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/544ffe41-db17-3076-acc5-02766f91448c.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 396591 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:fd:1d:96:c1:80:31:ad:b4:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=ea6ad8f7-d699-47d9-9c06-e014dad099c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e5:d9:c4:4e:0f:6f:45:2b:30:c3:ca:b3:ff: 12:6b:9b:f2:4a:7a:af:64:d4:4d:39:bd:e8:39:b0: c4:97:9c:60:c0:e7:f0:85:13:3b:d5:8b:a9:6e:32: e9:36:e6:4e:eb:97:1e:08:b5:87:35:dc:a2:98:44: 4a:db:a6:fb:0c:b6:3b:88:a2:fd:40:48:4d:19:e2: 3f:50:e8:4b:c4:65:a0:75:e6:c9:44:00:06:a5:77: a9:7d:41:54:be:75:3a:03:0d:5b:3f:93:09:df:d2: 1a:b7:78:27:28:67:cf:d8:c5:60:ed:a0:4e:07:3d: c8:ec:a5:9f:2f:bc:b3:9d:83:2d:5a:e8:72:ff:6d: b1:a9:db:a6:5d:08:97:ee:35:2e:11:c8:04:f3:02: bf:1c:c7:22:9f:5f:0b:6a:60:75:4a:d0:f0:ca:83: bc:79:cd:7f:70:2f:38:a1:f4:7e:a2:42:fb:0e:6a: ec:45:28:e4:3f:c9:77:ea:8e:f5:d3:fb:bf:06:dd: fb:bd:9b:54:3d:39:e3:5e:e6:c4:ef:7c:51:c1:06: 22:54:c0:4f:cf:63:6c:4c:46:01:06:67:87:c4:2f: 0c:bf:bc:1e:f3:9b:0f:55:d5:b6:cc:8f:ea:66:59: c9:70:1a:ac:f6:d6:e8:28:4a:7f:0e:42:a1:6c:0d: ca:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:E3:A2:A4:08:75:65:DE:E4:BC:43:44:90:DF:77:81:53:84:BF:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/544ffe41-db17-3076-acc5-02766f91448c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:74:07:b2:5a:56:db:c7:e9:5b:02:a3:66:0e:ff:dd:9a:28: 4d:bf:5a:77:76:18:19:64:74:11:81:11:b6:07:a2:3f:18:43: 6f:81:2b:a0:82:38:ed:b7:b6:23:30:33:d6:2f:5d:9c:04:0c: bf:69:ab:19:2a:d0:16:6e:be:c4:09:dd:cf:04:8b:cd:c9:cb: bd:65:d6:24:6a:d8:9c:8e:01:8a:1f:1d:5c:d1:25:88:49:09: fd:0d:42:e9:dd:60:a3:ef:ae:64:a6:e4:88:c8:0a:a4:92:51: c3:5f:f5:b1:6c:19:27:d2:d6:71:c7:86:17:d9:2e:bd:e6:a2: 2a:2d:0a:31:f6:f0:7f:3e:60:8a:19:52:44:ee:58:d8:c3:52: 06:24:21:8a:8a:f4:92:a5:bb:e7:b0:80:c6:54:aa:01:19:39: 2f:8c:8a:52:a2:2d:d5:b5:63:16:96:e6:4d:98:96:e4:83:b2: cf:17:9b:fe:c5:f4:6b:83:8f:c3:d0:0a:08:3c:41:7c:f8:cc: 36:f0:cd:19:2c:2d:1a:5b:a5:6a:7a:7a:40:c6:d0:aa:ed:a9: c3:9a:4a:90:eb:25:ea:1a:6e:68:c1:c4:63:7c:24:b6:4a:75: 9b:c4:9e:97:4a:f1:38:6c:f2:d0:f0:ce:4d:8d:30:a9:84:63: 78:b9:eb:f2 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEs1Vv0dlsGAMa20q4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk ZWE2YWQ4ZjctZDY5OS00N2Q5LTljMDYtZTAxNGRhZDA5OWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+XZxE4Pb0UrMMPKs/8Sa5vySnqvZNRNOb3o ObDEl5xgwOfwhRM71YupbjLpNuZO65ceCLWHNdyimERK26b7DLY7iKL9QEhNGeI/ UOhLxGWgdebJRAAGpXepfUFUvnU6Aw1bP5MJ39Iat3gnKGfP2MVg7aBOBz3I7KWf L7yznYMtWuhy/22xqdumXQiX7jUuEcgE8wK/HMcin18LamB1StDwyoO8ec1/cC84 ofR+okL7DmrsRSjkP8l36o710/u/Bt37vZtUPTnjXubE73xRwQYiVMBPz2NsTEYB BmeHxC8Mv7we85sPVdW2zI/qZlnJcBqs9tboKEp/DkKhbA3KQwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAvjoqQIdWXe5LxDRJDfd4FThL9gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTQ0ZmZlNDEtZGIxNy0z MDc2LWFjYzUtMDI3NjZmOTE0NDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBVdAeyWlbbx+lbAqNmDv/dmihNv1p3dhgZZHQR gRG2B6I/GENvgSuggjjtt7YjMDPWL12cBAy/aasZKtAWbr7ECd3PBIvNycu9ZdYk aticjgGKHx1c0SWISQn9DULp3WCj765kpuSIyAqkklHDX/WxbBkn0tZxx4YX2S69 5qIqLQox9vB/PmCKGVJE7ljYw1IGJCGKivSSpbvnsIDGVKoBGTkvjIpSoi3VtWMW luZNmJbkg7LPF5v+xfRrg4/D0AoIPEF8+Mw28M0ZLC0aW6VqenpAxtCq7anDmkqQ 6yXqGm5owcRjfCS2SnWbxJ6XSvE4bPLQ8M5NjTCphGN4uevy -----END CERTIFICATE-----Generated at Wed Oct 29 20:45:17 2025 by rpki-client