$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5869f543-037a-37f1-a73b-f4599a019390.roa File: 5869f543-037a-37f1-a73b-f4599a019390.roa (raw, json) Hash identifier: 0D0q/TcTxuRmYU3yeRsSwOVMGR+tNBkND2h8kRRl8nY= Subject key identifier: 57:82:0F:E5:EC:D8:00:1D:96:FF:20:01:33:95:72:4E:F9:47:FF:9D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B21CC3CCFBB8E74EC7B31DB40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5869f543-037a-37f1-a73b-f4599a019390.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 36631 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:3c:cf:bb:8e:74:ec:7b:31:db:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=da2a07c5-303b-484f-841d-549d965e4286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4e:ce:fc:43:25:c2:b3:97:68:0e:48:65:da: 87:9c:01:9f:02:23:1f:68:09:6a:f3:c1:44:03:01: ed:26:88:bd:85:bb:fd:89:c1:c1:67:c5:14:e3:01: 58:4d:00:40:e6:e6:8e:39:7c:97:8f:9e:25:24:82: f8:44:e4:cf:d8:42:46:d9:c6:49:ae:e2:db:94:49: f9:24:bc:8d:c6:eb:7b:e3:2d:ae:9d:65:98:79:dc: 26:7b:2c:e3:0f:ef:48:b7:39:8f:17:d6:94:45:41: e5:f9:e3:1b:7b:90:8e:12:ff:e1:72:e7:79:5e:aa: 9a:4d:9c:68:63:03:fe:59:c4:cf:30:ee:c5:1d:26: 1d:ca:28:5f:10:54:2d:01:bb:ca:bc:ff:af:f4:08: 7c:0d:1e:f0:b2:ff:37:e5:b0:cc:cc:82:47:1e:e1: 4c:55:4b:3f:e6:f8:fb:25:f6:46:a3:8c:8a:32:20: e9:59:a4:15:9e:86:a6:eb:b8:30:b4:d1:37:e7:0f: 1b:52:01:db:80:d0:de:06:cd:5b:35:3e:a9:1f:64: 49:bc:48:98:e8:98:32:dc:d1:38:a8:13:db:b0:b3: 54:7c:d1:e1:3a:f1:f8:0e:01:7c:72:08:13:3d:77: 13:97:94:79:23:55:28:97:02:a3:7d:f6:c7:fc:2b: dc:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:82:0F:E5:EC:D8:00:1D:96:FF:20:01:33:95:72:4E:F9:47:FF:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5869f543-037a-37f1-a73b-f4599a019390.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:c2:71:85:a2:9b:49:5f:69:42:18:39:3a:bb:94:d4:bf:5d: 71:c1:f2:0c:5b:3f:42:90:54:9a:f9:53:8c:48:0c:35:d4:f0: c6:3b:6b:2e:8b:0a:ed:27:1b:bb:25:77:1a:d3:18:72:56:70: 60:db:05:73:fd:37:47:53:e8:35:f5:62:e8:af:46:f8:62:ba: 7e:e6:ee:a3:da:16:d8:d4:12:ed:5b:78:d9:67:c2:61:4a:1d: e2:ec:fb:33:9c:58:0e:37:e4:cc:a9:17:20:0e:07:d5:02:5f: 78:77:3a:62:35:97:84:1c:41:3a:44:d3:d0:4c:07:95:a4:6a: 52:6b:e0:f8:49:ec:a9:86:ae:57:2a:11:ef:41:fc:0b:2d:6e: c3:94:a3:39:af:31:b1:f2:be:98:83:f9:93:19:76:31:58:3e: 8b:e2:19:b0:2f:f6:8e:6b:cf:52:a6:72:ec:78:35:73:91:3d: dc:ff:3a:0e:18:66:52:09:16:c7:be:3f:bb:1a:df:58:10:07: a3:54:ae:31:8b:64:9e:e5:e2:f3:6c:f8:4a:2f:48:aa:12:ce: 48:6d:17:ad:5c:dc:e3:21:22:bc:62:e6:6d:8b:e4:6e:b5:85: 47:38:42:78:55:14:ad:88:74:07:dc:bb:e5:02:92:43:0b:02: 6d:d3:13:b6 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEshzDzPu4507Hsx20AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk ZGEyYTA3YzUtMzAzYi00ODRmLTg0MWQtNTQ5ZDk2NWU0Mjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApk7O/EMlwrOXaA5IZdqHnAGfAiMfaAlq88FE AwHtJoi9hbv9icHBZ8UU4wFYTQBA5uaOOXyXj54lJIL4ROTP2EJG2cZJruLblEn5 JLyNxut74y2unWWYedwmeyzjD+9ItzmPF9aURUHl+eMbe5COEv/hcud5XqqaTZxo YwP+WcTPMO7FHSYdyihfEFQtAbvKvP+v9Ah8DR7wsv835bDMzIJHHuFMVUs/5vj7 JfZGo4yKMiDpWaQVnoam67gwtNE35w8bUgHbgNDeBs1bNT6pH2RJvEiY6Jgy3NE4 qBPbsLNUfNHhOvH4DgF8cggTPXcTl5R5I1UolwKjffbH/CvcGwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFeCD+Xs2AAdlv8gATOVck75R/+dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTg2OWY1NDMtMDM3YS0z N2YxLWE3M2ItZjQ1OTlhMDE5MzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQADwnGFoptJX2lCGDk6u5TUv11xwfIMWz9CkFSa +VOMSAw11PDGO2suiwrtJxu7JXca0xhyVnBg2wVz/TdHU+g19WLor0b4Yrp+5u6j 2hbY1BLtW3jZZ8JhSh3i7PsznFgON+TMqRcgDgfVAl94dzpiNZeEHEE6RNPQTAeV pGpSa+D4Seyphq5XKhHvQfwLLW7DlKM5rzGx8r6Yg/mTGXYxWD6L4hmwL/aOa89S pnLseDVzkT3c/zoOGGZSCRbHvj+7Gt9YEAejVK4xi2Se5eLzbPhKL0iqEs5IbRet XNzjISK8YuZti+RutYVHOEJ4VRStiHQH3LvlApJDCwJt0xO2 -----END CERTIFICATE-----Generated at Wed Oct 29 20:28:29 2025 by rpki-client