$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/643b16f3-0003-312a-b913-39d2058a3ec7.roa File: 643b16f3-0003-312a-b913-39d2058a3ec7.roa (raw, json) Hash identifier: jwWWAgWAfM4lVMVgTZ1Eesa1xsCWaYjuwsQ+dgKWDPE= Subject key identifier: DA:A9:6B:1C:8E:6B:78:A7:30:46:68:67:4F:E7:1C:EB:5A:6A:C8:C9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B99D7DD9D2005345001E50400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/643b16f3-0003-312a-b913-39d2058a3ec7.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 40717 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:dd:9d:20:05:34:50:01:e5:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=875c3b7c-9f63-4834-872b-0393d2155b87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:97:e5:20:50:ef:d6:3b:3e:f7:24:a1:81:d3: 2e:82:36:ab:fe:9c:de:05:c6:52:b4:da:5e:19:39: 73:71:c0:e2:22:a3:51:c5:a3:ad:b6:25:9b:04:05: fc:33:8c:96:57:41:55:c6:a9:e7:45:12:95:47:3f: 1f:c6:e5:8c:af:a1:44:9d:b4:2b:75:15:2d:6d:72: 1e:11:64:5a:8c:bf:27:24:fd:af:4c:4f:36:c5:b0: b8:40:3a:9c:46:25:28:af:a5:e5:1b:02:71:10:07: a3:02:40:26:b2:4a:eb:54:08:c7:f7:32:90:f9:92: cf:04:de:d9:f3:50:f6:a7:84:8b:96:44:60:3d:91: f9:8f:44:82:e9:fa:b3:01:15:df:eb:da:55:f8:99: fc:93:3f:99:c1:54:fd:ee:d9:63:94:1e:a0:57:7a: 2f:cb:35:c0:d1:27:c6:1a:db:a8:d3:02:df:57:62: dc:3b:8e:a4:4d:03:fa:ed:9e:da:b2:f4:e2:f5:71: 9a:b9:62:c5:ca:10:76:43:c0:d6:a3:d2:de:39:0e: 3a:8b:4f:2b:f0:a5:43:c5:7b:e8:fb:a0:16:9a:ad: 52:27:82:dd:66:5b:02:33:ca:24:ae:10:3c:9a:96: 34:7d:1c:20:03:f5:9e:6d:e8:7b:1c:42:19:57:4c: 54:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:A9:6B:1C:8E:6B:78:A7:30:46:68:67:4F:E7:1C:EB:5A:6A:C8:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/643b16f3-0003-312a-b913-39d2058a3ec7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:21:ee:36:8e:26:0c:aa:8b:70:44:95:f2:5b:82:52:ba:54: f1:89:66:bb:93:c0:34:95:2b:01:07:29:23:6c:f6:20:2b:e4: a9:26:a2:4c:cd:bd:ee:1d:15:21:f2:03:ff:79:e8:70:f6:ae: 9a:56:df:bf:cd:74:67:48:6b:37:a1:5a:36:ed:c0:f1:17:08: 1b:c0:30:fd:6f:10:ec:c2:65:97:4e:c8:3c:63:cc:2e:be:22: 16:da:f9:27:8a:97:06:65:13:23:89:fe:b1:ca:af:97:a5:6d: 74:3e:cb:15:84:43:85:a9:2b:18:c2:88:40:9f:6e:4d:d2:f2: 89:23:bd:8d:c6:76:c6:d2:12:45:7e:c4:7c:1c:9d:3c:f4:6c: 67:45:d0:e4:9e:e6:a5:d6:32:19:c2:24:57:36:07:f8:6c:2a: ae:8a:07:6c:5d:76:ed:64:d5:07:c7:0d:0d:bf:4f:8c:6f:d0: 13:21:14:f2:9e:e0:64:12:e0:c1:ec:f6:f9:ca:e5:85:86:fc: 24:e3:8d:9d:be:0a:2c:a5:86:e1:86:1b:7b:99:c6:b1:10:92: a0:99:b4:81:64:ea:a6:d3:8d:26:c5:50:54:de:73:3e:55:47: 03:04:6b:79:18:5c:7f:f7:ee:bf:67:24:50:d0:f0:52:22:91: 0c:50:16:a1 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuZ192dIAU0UAHlBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ODc1YzNiN2MtOWY2My00ODM0LTg3MmItMDM5M2QyMTU1Yjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZflIFDv1js+9yShgdMugjar/pzeBcZStNpe GTlzccDiIqNRxaOttiWbBAX8M4yWV0FVxqnnRRKVRz8fxuWMr6FEnbQrdRUtbXIe EWRajL8nJP2vTE82xbC4QDqcRiUor6XlGwJxEAejAkAmskrrVAjH9zKQ+ZLPBN7Z 81D2p4SLlkRgPZH5j0SC6fqzARXf69pV+Jn8kz+ZwVT97tljlB6gV3ovyzXA0SfG Gtuo0wLfV2LcO46kTQP67Z7asvTi9XGauWLFyhB2Q8DWo9LeOQ46i08r8KVDxXvo +6AWmq1SJ4LdZlsCM8okrhA8mpY0fRwgA/Webeh7HEIZV0xUfQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNqpaxyOa3inMEZoZ0/nHOtaasjJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjQzYjE2ZjMtMDAwMy0z MTJhLWI5MTMtMzlkMjA1OGEzZWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBLIe42jiYMqotwRJXyW4JSulTxiWa7k8A0lSsB BykjbPYgK+SpJqJMzb3uHRUh8gP/eehw9q6aVt+/zXRnSGs3oVo27cDxFwgbwDD9 bxDswmWXTsg8Y8wuviIW2vknipcGZRMjif6xyq+XpW10PssVhEOFqSsYwohAn25N 0vKJI72NxnbG0hJFfsR8HJ089GxnRdDknual1jIZwiRXNgf4bCquigdsXXbtZNUH xw0Nv0+Mb9ATIRTynuBkEuDB7Pb5yuWFhvwk442dvgospYbhhht7mcaxEJKgmbSB ZOqm040mxVBU3nM+VUcDBGt5GFx/9+6/ZyRQ0PBSIpEMUBah -----END CERTIFICATE-----Generated at Wed Oct 29 20:38:23 2025 by rpki-client