$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5af86b2c-f905-30cb-ac88-af600896191f.roa File: 5af86b2c-f905-30cb-ac88-af600896191f.roa (raw, json) Hash identifier: E/9kd2Y8Sai8SW7Rq7RfNWVCYlS9JI3of7DdOxIJ6+E= Subject key identifier: 28:92:97:D8:55:8F:78:F4:61:22:53:4E:D1:5C:BE:9B:48:D8:8D:12 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B715CDD3835B5C501157018C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5af86b2c-f905-30cb-ac88-af600896191f.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 396617 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:dd:38:35:b5:c5:01:15:70:18:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=f7bc53a5-079a-46c8-a399-607328cc38e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:69:fa:19:01:ab:b6:3b:98:0a:37:11:de:c2: e2:d0:73:cc:d9:91:5c:7d:06:b9:89:f2:be:b3:75: 0b:5d:9e:1e:95:7c:58:f8:e0:be:3d:18:5b:1a:91: 8c:28:ee:b0:56:5b:9d:ea:c7:53:ee:84:73:88:c4: b0:86:3d:39:ca:4f:16:1f:ae:ba:77:63:7e:36:c4: da:b2:c6:0c:1a:db:a7:cd:66:dc:6c:91:ab:79:6c: 6b:b7:9f:5e:d4:0d:6f:a3:71:89:75:2f:89:ac:9b: 83:bb:a9:40:a4:d0:9e:78:26:9c:85:d0:80:ab:b1: 00:cd:23:e8:90:69:f2:6e:09:55:f8:c1:1d:47:f5: 29:86:6a:0b:61:30:3d:31:c2:4b:b4:c3:bb:ba:d0: b3:c3:a8:76:4d:48:b7:63:34:ef:ff:40:b5:c3:68: 7e:02:30:31:f7:3c:0b:c3:be:0c:70:e2:82:13:d1: c8:94:9e:b6:52:cf:9a:f0:0a:8c:49:34:1c:03:b6: d2:0a:14:ad:1c:c2:8d:85:75:d7:49:5a:a8:f9:f9: 00:ae:d0:5b:87:0b:87:be:84:72:d1:81:20:1b:f5: a0:dc:9a:52:ec:4c:04:1e:05:2b:34:72:98:89:fc: ae:9f:85:10:7c:ac:16:26:ba:e6:49:24:e0:ac:d1: 09:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:92:97:D8:55:8F:78:F4:61:22:53:4E:D1:5C:BE:9B:48:D8:8D:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5af86b2c-f905-30cb-ac88-af600896191f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:84:cf:5b:c0:e2:0a:da:07:03:05:31:eb:ad:a2:ab:ab:1a: d0:2d:55:b0:3c:a4:9e:99:45:c5:99:4d:ca:cf:16:c7:d8:dc: 3d:a4:b5:a0:c3:6a:d8:5a:bb:91:79:65:ac:19:df:33:e3:81: 73:91:cb:74:ff:0f:a8:d4:1b:10:13:46:55:8d:cd:4a:d2:52: 00:c2:93:5d:23:90:e1:fc:64:a4:5a:b2:39:8f:6f:3d:8f:b7: ae:d5:84:1c:9b:e0:c0:b2:2c:77:91:fa:ba:18:e3:f5:0f:19: ff:0c:55:8c:90:fc:15:de:cd:aa:d0:88:2d:1b:b8:d0:5a:55: ae:b0:f2:32:9d:09:af:26:66:a4:b3:d7:61:04:bd:46:7a:b1: d3:67:34:fd:0e:d1:91:ea:35:ac:49:30:20:b3:53:54:51:d5: ae:90:c7:59:21:b0:00:ec:5e:d8:36:8c:ea:fc:00:2f:31:00: 61:d0:d7:74:e8:bd:9b:7a:1e:f2:6e:e1:f5:02:99:4d:cb:b6: 51:58:c2:1a:f7:03:bd:94:ef:c4:cd:92:2a:76:d9:27:57:a1: b0:4e:d3:3d:4d:6d:8e:86:67:89:a1:8c:b9:20:cc:1e:e2:f5: fc:33:92:82:00:18:c1:3e:d9:de:f2:f4:b6:2c:66:a4:8c:ba: 40:3f:69:14 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtxXN04NbXFARVwGMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ZjdiYzUzYTUtMDc5YS00NmM4LWEzOTktNjA3MzI4Y2MzOGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9mn6GQGrtjuYCjcR3sLi0HPM2ZFcfQa5ifK+ s3ULXZ4elXxY+OC+PRhbGpGMKO6wVlud6sdT7oRziMSwhj05yk8WH666d2N+NsTa ssYMGtunzWbcbJGreWxrt59e1A1vo3GJdS+JrJuDu6lApNCeeCachdCAq7EAzSPo kGnybglV+MEdR/UphmoLYTA9McJLtMO7utCzw6h2TUi3YzTv/0C1w2h+AjAx9zwL w74McOKCE9HIlJ62Us+a8AqMSTQcA7bSChStHMKNhXXXSVqo+fkArtBbhwuHvoRy 0YEgG/Wg3JpS7EwEHgUrNHKYifyun4UQfKwWJrrmSSTgrNEJ1QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCiSl9hVj3j0YSJTTtFcvptI2I0SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWFmODZiMmMtZjkwNS0z MGNiLWFjODgtYWY2MDA4OTYxOTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQARhM9bwOIK2gcDBTHrraKrqxrQLVWwPKSemUXF mU3KzxbH2Nw9pLWgw2rYWruReWWsGd8z44Fzkct0/w+o1BsQE0ZVjc1K0lIAwpNd I5Dh/GSkWrI5j289j7eu1YQcm+DAsix3kfq6GOP1Dxn/DFWMkPwV3s2q0IgtG7jQ WlWusPIynQmvJmaks9dhBL1GerHTZzT9DtGR6jWsSTAgs1NUUdWukMdZIbAA7F7Y Nozq/AAvMQBh0Nd06L2beh7ybuH1AplNy7ZRWMIa9wO9lO/EzZIqdtknV6GwTtM9 TW2OhmeJoYy5IMwe4vX8M5KCABjBPtne8vS2LGakjLpAP2kU -----END CERTIFICATE-----Generated at Wed Oct 29 20:39:50 2025 by rpki-client