$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9b8e3e5a-46b8-3d95-8f93-3c9616cc1765.roa File: 9b8e3e5a-46b8-3d95-8f93-3c9616cc1765.roa (raw, json) Hash identifier: yh4xuiTrHQwcRdMRD9NWqAb1PU0kUdsgx4Z/5QBV4rI= Subject key identifier: F3:E8:58:52:01:B1:4B:26:F6:83:58:48:99:C7:61:95:96:B7:20:25 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B99D7DB3A26D3A31A98D34430 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9b8e3e5a-46b8-3d95-8f93-3c9616cc1765.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 396592 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:db:3a:26:d3:a3:1a:98:d3:44:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=1f5d3c2d-b8f4-4377-818d-e5c1f359b8f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e2:72:27:0d:1a:64:bb:84:75:2d:33:15:fc: 5c:9e:e7:67:94:be:d6:4a:23:f2:64:42:70:54:af: 4a:5f:55:21:56:11:f2:7f:b6:ac:98:c1:49:78:dc: 49:88:03:2a:e4:42:29:f3:0e:d8:97:77:1b:57:63: 63:f1:f9:b4:dc:35:5a:6f:95:0e:68:00:d0:0c:95: 6f:0d:c9:87:20:f8:38:a7:21:6c:5e:70:f2:4e:d5: 39:17:d4:46:12:85:20:13:3f:5b:5a:b2:cd:ea:f3: d8:de:c0:02:59:32:41:f7:d8:34:d7:bc:b5:d2:7d: e0:ab:11:1e:a2:50:56:a8:3b:dd:84:fe:ed:35:43: 71:86:f4:26:d8:c7:d7:e7:a6:e3:fb:d0:f2:1a:db: 62:f2:6c:6b:61:cc:1a:a4:65:39:22:16:b9:7f:22: e7:35:0a:4f:ab:ee:ce:72:f9:5c:44:73:cb:c9:87: cb:a5:35:a3:c0:1c:b5:b4:6d:d0:e5:81:a1:3a:2a: 54:bf:d1:54:d3:b7:f9:02:e8:b9:3c:cc:c4:4c:10: f4:d1:fa:42:65:ed:2c:f9:73:cd:1e:f3:c3:a4:b3: 98:57:c6:16:d2:0f:b6:06:87:2a:c3:6c:7c:f6:82: 64:dd:f8:db:60:75:90:d3:05:91:71:dc:f4:b1:34: 1b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E8:58:52:01:B1:4B:26:F6:83:58:48:99:C7:61:95:96:B7:20:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9b8e3e5a-46b8-3d95-8f93-3c9616cc1765.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:e8:99:fb:1a:c3:38:af:05:cc:70:4e:02:9d:99:05:8e:03: 9d:25:56:ea:40:af:19:54:ff:a7:09:1e:6c:8d:c9:3b:98:33: f1:dd:0e:c0:95:b2:60:45:36:02:05:aa:b9:f6:c3:7e:78:ae: 0c:fa:cf:16:a7:e3:13:59:03:d3:1d:a1:60:75:55:4f:7f:96: d8:1d:b1:47:ec:6b:c1:b9:ab:14:f4:82:23:8b:90:3a:fb:e4: 34:23:4f:de:fe:13:2a:93:52:3d:e6:88:ad:58:b8:6b:d9:49: 4a:b8:63:b2:af:9f:0a:10:75:c6:b9:24:50:5c:34:66:a8:9d: 66:6f:ba:5f:82:d4:70:49:82:bd:3d:b1:39:86:70:38:51:b5: b5:1f:74:68:1a:f0:12:b0:e5:f8:97:15:19:a6:4c:2f:82:ce: 1a:58:39:27:12:86:79:e2:ad:93:b9:b2:95:64:3a:23:a1:ea: 4e:7b:c7:7c:5d:2b:7e:05:52:37:01:2a:19:7a:86:46:eb:70: 41:ea:2d:8c:dc:23:ea:91:f6:b7:0e:24:d3:3d:f0:f8:d0:a1: f2:aa:96:38:7d:0d:d4:0b:1c:d1:88:19:bc:10:40:df:29:f0: a1:a8:56:2e:ab:e9:e7:7b:53:52:06:04:9f:6b:f9:a4:00:2c: eb:42:1b:48 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuZ19s6JtOjGpjTRDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MWY1ZDNjMmQtYjhmNC00Mzc3LTgxOGQtZTVjMWYzNTliOGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eJyJw0aZLuEdS0zFfxcnudnlL7WSiPyZEJw VK9KX1UhVhHyf7asmMFJeNxJiAMq5EIp8w7Yl3cbV2Nj8fm03DVab5UOaADQDJVv DcmHIPg4pyFsXnDyTtU5F9RGEoUgEz9bWrLN6vPY3sACWTJB99g017y10n3gqxEe olBWqDvdhP7tNUNxhvQm2MfX56bj+9DyGtti8mxrYcwapGU5Iha5fyLnNQpPq+7O cvlcRHPLyYfLpTWjwBy1tG3Q5YGhOipUv9FU07f5Aui5PMzETBD00fpCZe0s+XPN HvPDpLOYV8YW0g+2Bocqw2x89oJk3fjbYHWQ0wWRcdz0sTQb2wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPPoWFIBsUsm9oNYSJnHYZWWtyAlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWI4ZTNlNWEtNDZiOC0z ZDk1LThmOTMtM2M5NjE2Y2MxNzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBp6Jn7GsM4rwXMcE4CnZkFjgOdJVbqQK8ZVP+n CR5sjck7mDPx3Q7AlbJgRTYCBaq59sN+eK4M+s8Wp+MTWQPTHaFgdVVPf5bYHbFH 7GvBuasU9IIji5A6++Q0I0/e/hMqk1I95oitWLhr2UlKuGOyr58KEHXGuSRQXDRm qJ1mb7pfgtRwSYK9PbE5hnA4UbW1H3RoGvASsOX4lxUZpkwvgs4aWDknEoZ54q2T ubKVZDojoepOe8d8XSt+BVI3ASoZeoZG63BB6i2M3CPqkfa3DiTTPfD40KHyqpY4 fQ3UCxzRiBm8EEDfKfChqFYuq+nne1NSBgSfa/mkACzrQhtI -----END CERTIFICATE-----Generated at Wed Oct 29 20:26:12 2025 by rpki-client