$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/90d4e5ed-066f-3875-abbe-8011e014668a.roa File: 90d4e5ed-066f-3875-abbe-8011e014668a.roa (raw, json) Hash identifier: VjxjyzgjzKUk0YLL4apBbEY28RzyZJblnipuMpwFN9Q= Subject key identifier: 4D:11:2D:F8:54:A1:EC:43:F2:03:55:87:1A:53:21:6B:41:8F:12:D0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B715CDFB276FB253ED51A7E40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/90d4e5ed-066f-3875-abbe-8011e014668a.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 396613 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:df:b2:76:fb:25:3e:d5:1a:7e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=c870f116-dae7-4003-81ed-d06240ac89da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:37:b6:b3:92:f2:9e:32:bf:21:54:72:a8:8c: d4:7e:a3:35:90:2a:1d:66:1a:7b:cc:60:a9:5e:34: 31:e7:82:32:6a:89:35:1e:f4:bd:b4:be:6c:a8:64: 93:cc:b2:10:03:66:93:15:8a:16:8f:58:f0:ea:a0: ac:5d:c1:01:5e:cf:d1:5f:02:cc:db:f5:29:dd:80: 2c:a9:f3:3c:e1:5d:14:d6:a9:21:e7:fa:11:bd:e5: 0d:25:fe:0c:f8:8f:75:f6:b0:0f:2d:e3:80:be:fa: 18:2e:da:18:d2:5b:4b:3f:1c:5f:06:8b:f9:89:dc: fc:7b:a3:61:c2:74:bb:c6:a2:14:ee:a0:b5:79:d2: b5:5e:a3:0f:f2:c5:54:db:42:cf:f4:d0:d0:f1:26: 60:cc:ba:37:5e:76:88:b2:31:f5:83:c5:d0:87:8a: 9f:e7:79:08:eb:fe:3a:f1:ff:c1:28:02:61:58:03: 7b:37:16:69:08:f9:95:29:0e:3f:fd:25:bb:ba:76: eb:2b:76:4c:68:b4:f5:e2:97:f9:d8:c3:e4:08:c7: 24:1d:25:88:6a:03:af:31:c3:ba:fa:f0:65:bb:de: cc:18:50:74:50:c4:45:c6:b6:22:48:89:11:40:92: 22:99:4d:eb:34:1e:f1:d0:3b:ef:8b:3c:5d:34:51: 96:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:11:2D:F8:54:A1:EC:43:F2:03:55:87:1A:53:21:6B:41:8F:12:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/90d4e5ed-066f-3875-abbe-8011e014668a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:83:e6:e0:f9:9e:39:72:a9:1b:43:0e:cf:59:ff:c1:98:77: 10:94:b4:9c:5b:c0:9a:e6:8a:03:9e:3e:4c:6d:1c:b2:04:f8: db:b6:5d:68:d6:d5:ac:22:54:6f:b4:b3:4f:73:13:cc:6e:d2: 75:64:5a:ab:33:d8:6c:2f:5b:65:ff:df:f1:bb:b1:ac:5b:f4: 23:04:4f:0c:0e:81:26:bb:5f:66:2b:34:2a:34:f8:30:d3:71: d4:8f:36:54:13:d0:bb:35:7e:c4:05:b3:c8:ee:36:e8:84:b6: 47:ed:35:30:85:8d:99:92:49:a2:07:a9:ee:10:e7:4a:30:2d: f4:37:53:22:00:9b:13:e3:12:21:da:63:7e:1a:64:88:82:b3: a8:35:ae:60:29:ba:e1:b2:0b:11:60:2f:ba:a9:bc:9b:95:44: 7d:05:6b:c0:3f:7c:3e:1b:8d:60:17:cc:3f:f9:d1:7e:6d:af: e2:36:cc:b2:c6:b7:cd:ad:53:49:de:fe:9e:02:f0:59:2f:b3: 36:71:95:b7:d1:e7:25:6b:37:b5:03:1d:92:be:85:a1:2e:93: db:43:64:e3:9f:6c:3b:42:ac:c6:7d:7d:50:c6:3b:24:aa:59: d5:ec:8e:0c:bd:f7:56:8d:a5:1a:3d:52:3e:43:3d:ea:9f:56: 02:18:4a:56 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtxXN+ydvslPtUafkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk Yzg3MGYxMTYtZGFlNy00MDAzLTgxZWQtZDA2MjQwYWM4OWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTe2s5LynjK/IVRyqIzUfqM1kCodZhp7zGCp XjQx54Iyaok1HvS9tL5sqGSTzLIQA2aTFYoWj1jw6qCsXcEBXs/RXwLM2/Up3YAs qfM84V0U1qkh5/oRveUNJf4M+I919rAPLeOAvvoYLtoY0ltLPxxfBov5idz8e6Nh wnS7xqIU7qC1edK1XqMP8sVU20LP9NDQ8SZgzLo3XnaIsjH1g8XQh4qf53kI6/46 8f/BKAJhWAN7NxZpCPmVKQ4//SW7unbrK3ZMaLT14pf52MPkCMckHSWIagOvMcO6 +vBlu97MGFB0UMRFxrYiSIkRQJIimU3rNB7x0DvvizxdNFGWAwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFE0RLfhUoexD8gNVhxpTIWtBjxLQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTBkNGU1ZWQtMDY2Zi0z ODc1LWFiYmUtODAxMWUwMTQ2NjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB5g+bg+Z45cqkbQw7PWf/BmHcQlLScW8Ca5ooD nj5MbRyyBPjbtl1o1tWsIlRvtLNPcxPMbtJ1ZFqrM9hsL1tl/9/xu7GsW/QjBE8M DoEmu19mKzQqNPgw03HUjzZUE9C7NX7EBbPI7jbohLZH7TUwhY2ZkkmiB6nuEOdK MC30N1MiAJsT4xIh2mN+GmSIgrOoNa5gKbrhsgsRYC+6qbyblUR9BWvAP3w+G41g F8w/+dF+ba/iNsyyxrfNrVNJ3v6eAvBZL7M2cZW30eclaze1Ax2SvoWhLpPbQ2Tj n2w7QqzGfX1QxjskqlnV7I4MvfdWjaUaPVI+Qz3qn1YCGEpW -----END CERTIFICATE-----Generated at Wed Oct 29 20:38:51 2025 by rpki-client