$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9343c900-89c1-369a-b048-3a29aa1898e0.roa File: 9343c900-89c1-369a-b048-3a29aa1898e0.roa (raw, json) Hash identifier: wEO2Covsyt8ipRmUjh4osxrtElFy13yJ1bxZ5l3nc+k= Subject key identifier: 86:48:22:B5:B6:8A:64:0A:67:B1:64:5D:56:58:5F:BB:51:01:8D:6A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B99D7D9D23250AC85D656F998 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9343c900-89c1-369a-b048-3a29aa1898e0.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 397197 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:d9:d2:32:50:ac:85:d6:56:f9:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=e86b2d00-3e3a-4bac-8591-3564a796537d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:83:36:f2:28:1c:70:d0:95:95:92:03:7d:0f: fe:23:d8:a9:b5:76:3f:53:c9:08:44:35:de:a6:99: af:af:b6:e2:36:af:35:63:e8:02:2e:5c:f2:31:1b: dc:d3:2c:77:fb:80:62:77:62:df:ef:83:14:11:67: 42:88:95:d4:bb:89:66:a7:a5:14:9d:fa:4a:d9:52: 86:03:d2:2f:23:b4:e6:29:68:c4:ed:49:40:32:8c: 40:d6:4f:c1:11:b1:62:45:10:d4:67:74:20:ec:45: be:ec:46:24:40:30:0f:2a:14:0e:2f:ad:94:f1:8b: 44:d2:ea:2c:25:30:58:2f:8d:a3:36:2c:fa:61:3d: 6e:51:13:7a:08:73:37:31:70:c4:1d:25:8a:c4:31: 2a:0c:ef:0a:ba:54:f9:6d:73:c7:cb:5f:0c:b5:ed: c8:e1:c4:c0:bb:2d:f0:61:31:08:96:98:8c:43:39: 3a:95:1c:2c:82:c9:25:21:6e:c7:aa:ed:43:21:ad: f0:db:35:47:2b:49:8f:df:12:ef:b2:0f:2c:a1:5e: a6:5c:46:f2:da:4f:16:68:cc:b3:85:97:e1:53:ca: 89:e3:ed:22:3b:a2:d7:47:38:72:d2:3c:f7:40:7c: 29:48:de:f3:b8:de:79:c0:83:e6:78:c1:68:ab:51: 57:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:48:22:B5:B6:8A:64:0A:67:B1:64:5D:56:58:5F:BB:51:01:8D:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9343c900-89c1-369a-b048-3a29aa1898e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:34:3d:bc:a2:cf:a2:3a:b3:4f:80:a2:b8:52:1c:2e:a5:84: 09:61:f0:e9:44:21:ee:38:64:29:73:b9:3d:42:fd:e0:5d:33: 48:e3:60:cc:89:ec:80:00:ad:63:8c:dd:de:fe:21:a5:bf:8a: 31:5f:7a:71:53:11:9d:4c:d6:6e:38:5e:ee:16:b8:13:58:a4: 6c:71:dd:93:4e:84:b8:16:99:77:65:23:1d:b3:a5:e0:1d:1d: 5f:0c:33:69:59:22:39:80:3e:c0:f2:e7:ec:ea:82:13:ae:54: 38:57:e3:2a:e6:31:33:5e:f9:87:d4:dd:ab:ff:3a:c2:83:09: 6a:39:42:59:d6:35:5b:f8:28:d9:c9:60:9e:bf:9a:7d:ee:f2: eb:7b:df:ba:9e:6e:13:67:d4:c7:a6:f4:37:2f:61:f6:2b:d9: 23:8a:14:8b:a9:c7:ff:83:2c:49:22:ad:6c:5d:6d:31:72:c6: 48:fb:c5:0d:1d:b4:1b:e9:52:f1:f1:f1:52:63:fe:22:76:5d: e3:62:67:f6:95:8c:9b:86:af:43:ea:5b:5d:60:b3:12:cb:43: db:4b:3b:5d:66:9d:fc:72:06:7c:90:e0:e5:65:e5:bd:96:d3: a6:97:ed:86:ee:fc:08:3c:f0:e0:b0:08:76:62:a7:cc:12:8c: 7c:af:66:99 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuZ19nSMlCshdZW+ZgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZTg2YjJkMDAtM2UzYS00YmFjLTg1OTEtMzU2NGE3OTY1MzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4M28igccNCVlZIDfQ/+I9iptXY/U8kIRDXe ppmvr7biNq81Y+gCLlzyMRvc0yx3+4Bid2Lf74MUEWdCiJXUu4lmp6UUnfpK2VKG A9IvI7TmKWjE7UlAMoxA1k/BEbFiRRDUZ3Qg7EW+7EYkQDAPKhQOL62U8YtE0uos JTBYL42jNiz6YT1uURN6CHM3MXDEHSWKxDEqDO8KulT5bXPHy18Mte3I4cTAuy3w YTEIlpiMQzk6lRwsgsklIW7Hqu1DIa3w2zVHK0mP3xLvsg8soV6mXEby2k8WaMyz hZfhU8qJ4+0iO6LXRzhy0jz3QHwpSN7zuN55wIPmeMFoq1FXBwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIZIIrW2imQKZ7FkXVZYX7tRAY1qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTM0M2M5MDAtODljMS0z NjlhLWIwNDgtM2EyOWFhMTg5OGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQADND28os+iOrNPgKK4UhwupYQJYfDpRCHuOGQp c7k9Qv3gXTNI42DMieyAAK1jjN3e/iGlv4oxX3pxUxGdTNZuOF7uFrgTWKRscd2T ToS4Fpl3ZSMds6XgHR1fDDNpWSI5gD7A8ufs6oITrlQ4V+Mq5jEzXvmH1N2r/zrC gwlqOUJZ1jVb+CjZyWCev5p97vLre9+6nm4TZ9THpvQ3L2H2K9kjihSLqcf/gyxJ Iq1sXW0xcsZI+8UNHbQb6VLx8fFSY/4idl3jYmf2lYybhq9D6ltdYLMSy0PbSztd Zp38cgZ8kODlZeW9ltOml+2G7vwIPPDgsAh2YqfMEox8r2aZ -----END CERTIFICATE-----Generated at Wed Oct 29 20:08:58 2025 by rpki-client