$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9b5a120c-3378-33d4-89e7-f09910e1d642.roa File: 9b5a120c-3378-33d4-89e7-f09910e1d642.roa (raw, json) Hash identifier: XX46xz6QYjJqO+E3SGpH1oPl3o9fONX8Wa3i0mWvfW8= Subject key identifier: 4B:EB:D2:60:D9:17:1B:AD:73:35:9F:F3:C9:E5:2E:FA:47:34:06:9A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B715CE82346A659C8F80068E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9b5a120c-3378-33d4-89e7-f09910e1d642.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 36627 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:e8:23:46:a6:59:c8:f8:00:68:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=89e44f9e-0ff6-4914-9576-2fddced0c942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ed:7e:72:43:93:03:8d:84:26:2d:d6:1d:44: 94:5e:13:7d:21:e2:3e:ac:61:4f:99:51:16:d9:da: f1:df:63:f1:09:d0:25:a2:c9:72:30:b9:8b:20:f7: 6d:68:c7:57:ae:51:1e:e7:9a:ad:7d:33:0d:ed:d8: a7:46:1e:6f:9e:c7:e6:17:34:b5:62:dc:83:d0:e7: ec:52:70:12:13:4f:e5:96:cb:c5:8c:59:a8:0d:7a: 23:15:9f:19:e5:26:c4:aa:ef:d6:a2:02:6b:09:e5: 16:75:21:25:b0:29:aa:6d:ee:b3:7d:ba:c5:b8:07: cb:1b:bb:28:6a:b2:a4:38:1c:4e:f0:6f:ee:6e:04: cf:af:26:27:8e:95:5f:12:fe:1b:79:0f:73:b3:00: 53:46:80:20:75:67:0c:a2:64:69:14:b6:c6:99:3b: 25:a4:f3:30:f3:bd:c7:04:90:73:1d:ff:f3:3d:f4: 91:6b:6b:e5:56:7c:5b:c7:54:b5:d4:53:95:62:d1: 00:3a:fc:54:dc:97:ca:1a:b2:be:1e:71:57:69:ce: a5:b0:42:84:78:d9:8c:bb:9d:a6:a1:9d:6e:6a:96: 43:0a:3c:0f:1e:33:12:2b:ee:33:8f:ee:c1:ba:e6: dc:42:87:a1:78:9c:65:19:d5:96:43:59:fd:62:f6: 48:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:EB:D2:60:D9:17:1B:AD:73:35:9F:F3:C9:E5:2E:FA:47:34:06:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9b5a120c-3378-33d4-89e7-f09910e1d642.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:0e:0d:fb:7a:27:38:a2:a7:e5:de:43:14:d7:4a:37:ab:89: e4:e3:27:b1:b2:49:a1:0f:fa:43:23:48:f2:98:9d:12:e9:8e: 95:2c:91:42:2c:49:e6:10:55:88:bb:be:4b:ab:49:da:a5:5e: c9:e7:24:4c:52:a9:8b:11:f2:e9:8a:af:59:6a:04:bd:e7:10: b8:c9:de:34:0a:44:f5:4e:f3:a4:28:ae:50:62:1f:3a:9c:29: 42:e5:11:70:b2:2d:39:1e:86:66:bb:64:a6:70:76:4a:f8:98: 31:4d:e9:f3:5b:27:7c:a8:47:77:bb:fb:ba:4a:ed:97:ae:2e: 19:88:28:a5:3e:5e:70:4b:85:6d:3b:d4:34:e7:cf:76:4c:28: d4:aa:0a:61:02:d9:eb:fb:52:1e:8b:85:46:b5:c6:e0:36:a8: ed:7a:19:10:5d:b0:4c:eb:64:94:9a:fb:eb:d3:8c:55:23:6a: 83:37:c7:56:7e:51:c4:f7:9e:8f:e4:fa:98:96:d2:2e:f4:20: 33:64:dd:e7:80:35:05:04:51:19:4f:3e:5b:c7:6b:f8:50:f8: 34:d6:79:52:d9:ee:cf:ce:85:dc:25:6c:cf:a9:d2:a0:99:dc: de:44:d1:bf:2f:a2:26:05:83:d1:a3:09:c9:dc:38:36:f1:ef: 0a:2a:97:03 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtxXOgjRqZZyPgAaOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ODllNDRmOWUtMGZmNi00OTE0LTk1NzYtMmZkZGNlZDBjOTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+1+ckOTA42EJi3WHUSUXhN9IeI+rGFPmVEW 2drx32PxCdAloslyMLmLIPdtaMdXrlEe55qtfTMN7dinRh5vnsfmFzS1YtyD0Ofs UnASE0/llsvFjFmoDXojFZ8Z5SbEqu/WogJrCeUWdSElsCmqbe6zfbrFuAfLG7so arKkOBxO8G/ubgTPryYnjpVfEv4beQ9zswBTRoAgdWcMomRpFLbGmTslpPMw873H BJBzHf/zPfSRa2vlVnxbx1S11FOVYtEAOvxU3JfKGrK+HnFXac6lsEKEeNmMu52m oZ1uapZDCjwPHjMSK+4zj+7BuubcQoeheJxlGdWWQ1n9YvZIQwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEvr0mDZFxutczWf88nlLvpHNAaaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWI1YTEyMGMtMzM3OC0z M2Q0LTg5ZTctZjA5OTEwZTFkNjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAJDg37eic4oqfl3kMU10o3q4nk4yexskmhD/pD I0jymJ0S6Y6VLJFCLEnmEFWIu75Lq0napV7J5yRMUqmLEfLpiq9ZagS95xC4yd40 CkT1TvOkKK5QYh86nClC5RFwsi05HoZmu2SmcHZK+JgxTenzWyd8qEd3u/u6Su2X ri4ZiCilPl5wS4VtO9Q05892TCjUqgphAtnr+1Iei4VGtcbgNqjtehkQXbBM62SU mvvr04xVI2qDN8dWflHE956P5PqYltIu9CAzZN3ngDUFBFEZTz5bx2v4UPg01nlS 2e7PzoXcJWzPqdKgmdzeRNG/L6ImBYPRownJ3Dg28e8KKpcD -----END CERTIFICATE-----Generated at Thu Oct 30 03:23:04 2025 by rpki-client