$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/68f3b0b0-21d9-39f5-892b-6cfe7d425596.roa File: 68f3b0b0-21d9-39f5-892b-6cfe7d425596.roa (raw, json) Hash identifier: uRrGdwxm1CroY7X6wsCNSw1NdMn/kCdqssFQzViX3EM= Subject key identifier: 02:EE:21:2F:45:29:A8:4A:49:0B:19:E0:99:D4:C1:E1:92:A7:09:D5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B99D7DBABFE5D4D8476F55DE0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/68f3b0b0-21d9-39f5-892b-6cfe7d425596.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 396578 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:db:ab:fe:5d:4d:84:76:f5:5d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=40aab369-b24b-42a0-b611-d0206940d876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:cb:12:8f:25:7b:fd:31:c4:1a:d3:7f:b5:47: 10:4c:49:4f:ab:19:6b:d1:84:d0:b3:d6:20:84:67: 43:20:64:2b:55:5f:a9:bd:b6:e0:5d:ad:ad:c1:42: c3:af:ec:54:33:7b:b6:88:71:44:c4:ca:17:56:60: 53:a7:f7:46:43:8a:fe:f8:43:b6:14:aa:f4:41:cc: 45:cc:a0:c5:89:82:59:12:e8:39:f7:5e:7c:8c:fd: 3b:df:10:c9:05:79:0b:a3:db:e9:b2:b1:b9:d5:f0: a5:d4:27:1f:c6:8d:7c:cd:ff:e5:41:81:ac:03:00: fc:f5:0c:94:e8:9f:c3:da:e8:90:55:cb:6b:5f:91: 92:f3:ce:07:fe:28:43:aa:6c:8e:3c:8d:83:01:3c: 3c:f4:ba:ff:a5:b2:f5:c8:a1:d7:4e:db:fa:e1:92: 85:c2:96:f5:24:52:e1:e2:8e:97:e8:02:f4:a7:69: ea:67:d1:49:e5:ae:b3:19:1d:11:74:b7:21:6b:44: e4:75:7f:90:53:85:bd:13:46:f3:dd:50:8c:5b:a5: ea:5d:04:5e:53:ab:b8:c1:06:59:2f:a0:cc:83:2a: e1:97:6e:a2:04:13:fc:64:ea:41:e9:f9:3d:e3:34: 0f:af:83:b4:27:9e:1d:49:ab:09:65:16:93:cb:d9: 98:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:EE:21:2F:45:29:A8:4A:49:0B:19:E0:99:D4:C1:E1:92:A7:09:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/68f3b0b0-21d9-39f5-892b-6cfe7d425596.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:3e:12:09:a1:da:81:c9:78:6f:63:f9:3f:af:e4:11:9e:44: ea:16:30:f8:d3:ef:d7:22:c9:7f:33:3b:96:72:f7:ac:54:3e: 12:ce:a3:c6:c8:87:50:f4:3c:60:a4:f3:97:58:e8:6e:95:cc: d2:17:f7:bd:bd:9b:5f:0d:ae:96:97:ed:7a:a0:5d:1e:fc:d1: 6d:16:13:b5:9c:d5:8a:4f:54:6c:cb:a8:35:5d:b9:77:20:35: fc:a2:ec:1c:1d:e3:d8:5f:5b:aa:9a:c3:66:3c:b9:7e:7b:c3: de:e5:08:0b:25:0c:d7:f6:4f:57:4c:1f:61:c6:e8:23:1f:0d: 35:2d:94:0b:0c:c9:47:dc:48:ec:6b:ba:64:60:42:12:b3:cf: 24:8a:5d:fc:b5:16:e3:f0:13:b4:71:0e:41:17:ac:66:6e:aa: de:12:f6:23:78:e5:7e:88:55:ef:9a:90:83:1a:84:85:55:18: 74:b6:0d:a0:af:85:87:21:64:73:20:67:4b:34:40:db:94:d4: 65:7d:bf:ad:86:c6:09:61:67:94:71:ab:5e:e7:c7:a5:36:c8: ae:ea:c9:b8:7f:02:52:ea:1a:89:11:88:79:9a:48:92:fa:89: 71:ed:91:66:d1:0d:be:0e:f7:27:78:12:64:85:bf:e0:be:c2: dc:b7:61:15 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuZ19ur/l1NhHb1XeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NDBhYWIzNjktYjI0Yi00MmEwLWI2MTEtZDAyMDY5NDBkODc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApssSjyV7/THEGtN/tUcQTElPqxlr0YTQs9Yg hGdDIGQrVV+pvbbgXa2twULDr+xUM3u2iHFExMoXVmBTp/dGQ4r++EO2FKr0QcxF zKDFiYJZEug59158jP073xDJBXkLo9vpsrG51fCl1Ccfxo18zf/lQYGsAwD89QyU 6J/D2uiQVctrX5GS884H/ihDqmyOPI2DATw89Lr/pbL1yKHXTtv64ZKFwpb1JFLh 4o6X6AL0p2nqZ9FJ5a6zGR0RdLcha0TkdX+QU4W9E0bz3VCMW6XqXQReU6u4wQZZ L6DMgyrhl26iBBP8ZOpB6fk94zQPr4O0J54dSasJZRaTy9mYOwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFALuIS9FKahKSQsZ4JnUweGSpwnVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjhmM2IwYjAtMjFkOS0z OWY1LTg5MmItNmNmZTdkNDI1NTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBIPhIJodqByXhvY/k/r+QRnkTqFjD40+/XIsl/ MzuWcvesVD4SzqPGyIdQ9DxgpPOXWOhulczSF/e9vZtfDa6Wl+16oF0e/NFtFhO1 nNWKT1Rsy6g1Xbl3IDX8ouwcHePYX1uqmsNmPLl+e8Pe5QgLJQzX9k9XTB9hxugj Hw01LZQLDMlH3Ejsa7pkYEISs88kil38tRbj8BO0cQ5BF6xmbqreEvYjeOV+iFXv mpCDGoSFVRh0tg2gr4WHIWRzIGdLNEDblNRlfb+thsYJYWeUcate58elNsiu6sm4 fwJS6hqJEYh5mkiS+olx7ZFm0Q2+DvcneBJkhb/gvsLct2EV -----END CERTIFICATE-----Generated at Wed Oct 29 13:24:25 2025 by rpki-client