$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/830d28a5-9591-30b5-b21d-71a46b8e4ec8.roa File: 830d28a5-9591-30b5-b21d-71a46b8e4ec8.roa (raw, json) Hash identifier: /uSdmsVOsFCPWhipegpLO4DMS12HjgVbEiP6jxIpJj8= Subject key identifier: 0A:22:10:C0:7D:C3:B1:24:94:8F:A5:CB:26:42:00:BE:A4:7C:F9:DF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584BAEC7C922483A04C1703BA500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/830d28a5-9591-30b5-b21d-71a46b8e4ec8.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 7342 IP address blocks: 2620:74:3b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:c9:22:48:3a:04:c1:70:3b:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=fbe55b5f-3772-439c-a152-1837e22d2367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d2:e5:33:4e:48:25:cc:14:8c:96:3d:c3:cf: cf:77:93:54:19:be:fc:a1:68:36:12:6c:c3:f7:6f: 6a:6a:f6:86:77:be:11:be:7d:d7:08:08:c7:69:32: 09:af:b9:6a:f9:ea:97:93:44:b9:9e:69:f8:57:2d: 45:3e:a4:b7:8e:47:1f:f8:52:c7:85:77:fc:42:cc: 4d:62:3a:2a:0b:13:6f:05:6c:b0:e6:65:f9:d3:c8: bd:a3:72:43:74:42:a4:1c:cc:2b:ee:26:1b:94:6a: d2:dc:f1:8b:60:24:df:c6:1d:0b:75:bb:2a:a9:4a: b2:88:c6:d7:50:5f:cf:5a:c2:44:79:6d:0f:af:4d: 92:d8:27:46:6b:2d:1b:97:59:5b:68:e3:88:0a:d4: 02:db:17:d5:4c:fe:7c:01:6d:15:01:ad:3d:43:8e: 98:61:7c:59:9f:d0:55:cf:3f:2b:cd:1b:af:5c:49: ba:c9:a9:97:5e:17:a4:5b:b4:28:aa:56:0b:ec:76: 90:b9:80:37:5b:0d:7e:c1:d5:11:f5:56:92:0d:be: de:e0:0f:ea:73:b6:42:c5:fe:91:a0:b8:b1:ea:ff: 8e:aa:e9:2f:d7:c7:cb:87:4a:e7:48:ad:03:3f:f6: 5a:d6:30:2f:44:96:9f:fe:10:ff:d5:c6:47:d5:14: e6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:22:10:C0:7D:C3:B1:24:94:8F:A5:CB:26:42:00:BE:A4:7C:F9:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/830d28a5-9591-30b5-b21d-71a46b8e4ec8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:3b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:97:d6:68:a3:3d:c3:3d:2a:d1:0b:0c:7a:d1:d6:19:15:50: 20:47:b5:88:1b:8c:b5:5a:ef:ee:84:4e:d2:e7:a5:7d:36:fc: e4:a5:0a:2e:e8:72:25:c3:42:05:68:e5:73:e8:db:51:50:5f: f0:8a:93:90:60:c6:1a:c5:ca:d8:e0:d6:8f:6d:5a:6a:09:1f: a4:e9:06:30:20:0d:e1:f0:a5:a6:0d:4c:2a:72:a9:33:7f:c1: c8:92:00:ed:b3:33:ab:6d:f9:26:0a:1f:e1:d0:7c:b2:ad:31: 23:9e:67:b4:5c:3a:36:80:59:8f:ee:9d:33:96:db:f8:52:59: 9f:e5:b2:c6:7b:34:7e:35:96:b4:38:2e:ce:04:17:e6:4d:fc: 3f:ae:92:c0:02:8a:50:88:62:a5:85:d8:d0:36:13:79:86:c8: 09:28:0e:ba:60:c2:bf:24:dc:4f:33:e5:f9:d7:b3:64:67:54: 99:9d:5b:d2:2c:65:c6:f5:3f:2d:a5:57:99:8b:dd:a9:cd:f5: eb:cf:29:83:e5:29:1a:62:c4:54:2e:de:d8:a7:10:fb:71:27: dd:76:f2:2f:9d:06:e8:91:3c:16:f5:51:1c:53:5d:bd:a1:bc: 5a:d6:01:fa:6f:c6:bb:63:be:61:1c:f4:7d:56:00:fa:dc:3a: 32:16:cf:db -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuux8kiSDoEwXA7pQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk ZmJlNTViNWYtMzc3Mi00MzljLWExNTItMTgzN2UyMmQyMzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNLlM05IJcwUjJY9w8/Pd5NUGb78oWg2EmzD 929qavaGd74Rvn3XCAjHaTIJr7lq+eqXk0S5nmn4Vy1FPqS3jkcf+FLHhXf8QsxN YjoqCxNvBWyw5mX508i9o3JDdEKkHMwr7iYblGrS3PGLYCTfxh0LdbsqqUqyiMbX UF/PWsJEeW0Pr02S2CdGay0bl1lbaOOICtQC2xfVTP58AW0VAa09Q46YYXxZn9BV zz8rzRuvXEm6yamXXhekW7QoqlYL7HaQuYA3Ww1+wdUR9VaSDb7e4A/qc7ZCxf6R oLix6v+Oqukv18fLh0rnSK0DP/Za1jAvRJaf/hD/1cZH1RTmUwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAoiEMB9w7EklI+lyyZCAL6kfPnfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODMwZDI4YTUtOTU5MS0z MGI1LWIyMWQtNzFhNDZiOGU0ZWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAA7 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG6X1mijPcM9KtELDHrR1hkVUCBHtYgbjLVa7+6ETtLnpX02/OSl Ci7ociXDQgVo5XPo21FQX/CKk5BgxhrFytjg1o9tWmoJH6TpBjAgDeHwpaYNTCpy qTN/wciSAO2zM6tt+SYKH+HQfLKtMSOeZ7RcOjaAWY/unTOW2/hSWZ/lssZ7NH41 lrQ4Ls4EF+ZN/D+uksACilCIYqWF2NA2E3mGyAkoDrpgwr8k3E8z5fnXs2RnVJmd W9IsZcb1Py2lV5mL3anN9evPKYPlKRpixFQu3tinEPtxJ9128i+dBuiRPBb1URxT Xb2hvFrWAfpvxrtjvmEc9H1WAPrcOjIWz9s= -----END CERTIFICATE-----Generated at Wed Oct 29 20:29:25 2025 by rpki-client