$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5def59c5-37b7-3c90-bfa1-36532b4634f2.roa File: 5def59c5-37b7-3c90-bfa1-36532b4634f2.roa (raw, json) Hash identifier: sSyFJtEUCRnGdK5RwocCB+VDw5mhZ5dcSmPig+QNjz0= Subject key identifier: 42:65:AC:F9:18:FD:8B:2E:01:5D:E7:0C:B4:0E:9F:C0:83:C8:6D:BF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AD9366DEDC0C554E06B42B5E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5def59c5-37b7-3c90-bfa1-36532b4634f2.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 36618 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:6d:ed:c0:c5:54:e0:6b:42:b5:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=43d52284-0fef-4606-8eb2-2a6e5be0b5d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0b:b4:d1:c4:da:0b:21:99:1c:05:04:f0:82: c2:92:c6:a0:a6:c2:09:42:56:aa:85:cb:4b:08:47: cf:97:12:9d:14:50:45:c9:01:dd:9e:7f:56:12:b0: 18:89:dd:19:05:c7:c1:63:b0:ff:ac:48:a7:fe:d0: 51:e5:73:e1:c2:b7:c9:c7:ba:05:94:71:5f:c1:40: 55:87:dc:4a:43:67:14:16:cb:55:ff:2a:6e:bf:a0: 49:50:84:5b:d5:d6:c3:f1:fb:4d:db:b3:8d:3c:35: c2:f5:82:f7:9c:9e:33:53:0f:98:82:9a:b4:22:9b: 26:c6:12:91:ab:9b:66:21:03:8b:63:ce:e6:29:01: 9b:8d:31:06:4c:d8:bf:4b:7d:48:92:26:e2:11:57: e9:85:29:f5:b5:a0:af:f3:65:bc:d9:55:89:37:00: 77:40:36:ec:0d:0f:9b:d7:c7:99:cb:6b:5f:7c:4d: c1:5b:0f:19:29:cc:d9:7d:1c:b5:6f:f0:c5:09:fe: 97:fd:a6:b8:7c:f0:22:95:2f:cf:59:38:7f:47:d1: 74:1c:44:e9:70:6f:28:cc:69:20:99:e3:f0:d1:d3: fe:1f:3e:aa:16:0e:79:b4:f9:c7:c2:6a:aa:47:75: 78:69:47:77:1e:4e:e5:21:0e:35:da:95:02:f2:1e: 75:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:65:AC:F9:18:FD:8B:2E:01:5D:E7:0C:B4:0E:9F:C0:83:C8:6D:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5def59c5-37b7-3c90-bfa1-36532b4634f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:75:3c:d2:38:19:82:b6:41:90:c4:c7:4f:79:7e:b9:f1:06: d1:2f:a8:34:c0:e3:65:64:bf:c3:48:eb:77:d7:bd:0c:1d:97: 69:72:99:3a:18:a1:05:c1:4e:12:1a:dc:08:cd:40:87:3b:00: ed:bd:6c:8a:56:a7:77:6c:29:21:cd:d9:b6:5a:0f:9c:bf:3b: 05:94:87:6e:f2:52:75:03:e8:93:f2:90:66:50:16:0d:c8:3c: 40:6a:23:e0:e8:73:a6:b4:f2:4d:5d:52:8b:40:33:45:72:46: 7e:2c:49:37:68:36:03:85:c6:43:7e:7e:70:84:55:95:7f:e3: 86:d8:0a:42:86:a9:46:78:b3:e7:5d:8b:1a:ec:7a:8a:7c:b3: 85:ec:15:6d:2e:9a:27:87:3d:f5:24:43:e7:a2:99:ea:b2:23: ae:d1:7f:77:29:54:4f:34:dc:75:dc:38:b1:79:2b:d1:5f:de: c6:e0:37:be:d9:89:0d:22:55:3f:cb:c5:ff:32:e9:42:5f:27: 61:36:1c:7e:79:ef:f7:74:c0:cd:f9:76:d3:af:e0:4e:f7:23: 5e:02:be:68:63:25:c7:21:63:87:ce:9e:c4:d4:1b:83:7f:4f: 96:af:9c:7e:0c:c6:c8:cc:d2:27:f3:c9:fb:6f:52:b4:42:c2: 8e:49:4e:50 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErZNm3twMVU4GtCteAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk NDNkNTIyODQtMGZlZi00NjA2LThlYjItMmE2ZTViZTBiNWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgu00cTaCyGZHAUE8ILCksagpsIJQlaqhctL CEfPlxKdFFBFyQHdnn9WErAYid0ZBcfBY7D/rEin/tBR5XPhwrfJx7oFlHFfwUBV h9xKQ2cUFstV/ypuv6BJUIRb1dbD8ftN27ONPDXC9YL3nJ4zUw+Ygpq0IpsmxhKR q5tmIQOLY87mKQGbjTEGTNi/S31IkibiEVfphSn1taCv82W82VWJNwB3QDbsDQ+b 18eZy2tffE3BWw8ZKczZfRy1b/DFCf6X/aa4fPAilS/PWTh/R9F0HETpcG8ozGkg mePw0dP+Hz6qFg55tPnHwmqqR3V4aUd3Hk7lIQ412pUC8h51QwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEJlrPkY/YsuAV3nDLQOn8CDyG2/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWRlZjU5YzUtMzdiNy0z YzkwLWJmYTEtMzY1MzJiNDYzNGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBKdTzSOBmCtkGQxMdPeX658QbRL6g0wONlZL/D SOt3170MHZdpcpk6GKEFwU4SGtwIzUCHOwDtvWyKVqd3bCkhzdm2Wg+cvzsFlIdu 8lJ1A+iT8pBmUBYNyDxAaiPg6HOmtPJNXVKLQDNFckZ+LEk3aDYDhcZDfn5whFWV f+OG2ApChqlGeLPnXYsa7HqKfLOF7BVtLponhz31JEPnopnqsiOu0X93KVRPNNx1 3DixeSvRX97G4De+2YkNIlU/y8X/MulCXydhNhx+ee/3dMDN+XbTr+BO9yNeAr5o YyXHIWOHzp7E1BuDf0+Wr5x+DMbIzNIn88n7b1K0QsKOSU5Q -----END CERTIFICATE-----Generated at Wed Oct 29 20:38:18 2025 by rpki-client