$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a3e480c9-7065-379a-a7a0-3741030cb8a7.roa File: a3e480c9-7065-379a-a7a0-3741030cb8a7.roa (raw, json) Hash identifier: wyt8BvAweWy1mfHS/hQOzUiZVrwgDduy/LqHMQS1i4g= Subject key identifier: 0F:61:B9:D5:C3:4C:56:F1:C5:01:88:B2:DA:3C:15:5E:8E:68:67:56 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B99D7D87A826601CDFDCC9EA0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a3e480c9-7065-379a-a7a0-3741030cb8a7.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 396596 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:d8:7a:82:66:01:cd:fd:cc:9e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=8228aa70-5f13-4f4c-a793-cf7219029082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ab:8a:aa:0b:81:74:22:c3:4c:d4:a7:b6:bc: 27:cc:48:4f:b9:2b:e9:7c:d2:0c:d2:c6:e6:8d:27: e8:34:7e:44:df:6e:8b:0c:bd:87:20:d8:63:c8:4a: 01:1b:3f:d6:38:7a:39:3a:44:a1:da:65:18:14:a0: f6:26:b8:bc:61:f8:fc:b9:56:5b:5f:88:3b:ca:13: 87:eb:c6:5a:06:68:c0:a6:e8:c2:fd:72:ad:bb:e4: 28:d1:7c:0d:e7:20:09:f9:d4:c1:cf:4b:d9:17:08: 00:a0:88:39:c6:af:93:95:33:e4:b2:39:67:23:72: d9:43:60:97:bc:09:e3:04:24:61:8e:e8:20:51:ca: 6e:c1:03:74:70:20:fa:55:38:5b:50:cd:5c:b3:07: ab:04:ae:c1:2c:04:e0:33:c9:18:e3:5c:d5:3d:67: 4b:53:c1:0b:c7:22:6d:fc:24:3d:72:ae:4a:74:e6: 16:fc:01:06:2a:ae:6a:c8:64:52:68:11:bc:ae:12: 39:a6:0b:f0:94:ff:09:47:52:54:40:4f:8c:bb:28: 62:5e:5e:ff:57:5d:6c:8f:6c:62:e3:d3:6d:ed:27: 4a:a4:ba:44:88:1a:f8:80:8f:e8:af:15:33:25:a2: d5:c1:fb:b4:e2:d8:cd:6e:dd:f4:a4:cb:18:09:66: c0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:61:B9:D5:C3:4C:56:F1:C5:01:88:B2:DA:3C:15:5E:8E:68:67:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a3e480c9-7065-379a-a7a0-3741030cb8a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:4e:9a:35:21:4c:dd:f9:9c:ed:b5:a0:eb:c6:b7:64:d1:b0: 91:f6:1a:1d:c0:26:49:28:d2:f7:6a:47:42:ac:ad:b6:9d:d8: 9c:5e:05:69:89:ea:d1:0b:45:36:3a:92:08:bd:d8:b5:af:c0: f5:19:dc:90:5e:8b:4e:9e:16:5b:0b:28:e5:b9:52:41:58:bd: 97:f2:ce:36:59:98:e7:64:c8:97:20:9b:ea:42:6b:a5:66:b5: 78:7d:93:16:fa:ea:72:23:b4:50:f7:02:55:7d:4f:49:96:2d: 7e:22:37:d9:a9:79:06:d7:56:4b:ff:8c:0c:2c:cc:6d:e9:3f: 07:26:54:b5:3d:e7:bf:24:ca:05:cc:29:07:0d:19:4f:24:a7: 2f:07:39:22:14:b8:0e:8f:9e:a7:53:a4:f2:6a:4a:9b:e9:78: 94:6e:8b:20:e5:4d:de:93:44:d5:6d:d8:8c:5e:a0:a8:01:0a: d2:ff:b8:9e:0f:8a:01:f7:83:99:88:e0:16:e7:d9:72:c7:32: 3c:4e:cf:29:f4:26:de:9f:2d:4f:31:cc:8b:48:4f:6a:c6:27: 74:d6:fc:fe:a2:16:b7:a2:e1:df:d6:97:00:93:c3:c6:96:54: 28:22:8a:c9:52:67:c0:9b:c3:12:c3:38:4e:65:4e:df:91:96: 50:44:37:f4 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuZ19h6gmYBzf3MnqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ODIyOGFhNzAtNWYxMy00ZjRjLWE3OTMtY2Y3MjE5MDI5MDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4auKqguBdCLDTNSntrwnzEhPuSvpfNIM0sbm jSfoNH5E326LDL2HINhjyEoBGz/WOHo5OkSh2mUYFKD2Jri8Yfj8uVZbX4g7yhOH 68ZaBmjApujC/XKtu+Qo0XwN5yAJ+dTBz0vZFwgAoIg5xq+TlTPksjlnI3LZQ2CX vAnjBCRhjuggUcpuwQN0cCD6VThbUM1cswerBK7BLATgM8kY41zVPWdLU8ELxyJt /CQ9cq5KdOYW/AEGKq5qyGRSaBG8rhI5pgvwlP8JR1JUQE+MuyhiXl7/V11sj2xi 49Nt7SdKpLpEiBr4gI/orxUzJaLVwfu04tjNbt30pMsYCWbAUQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFA9hudXDTFbxxQGIsto8FV6OaGdWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTNlNDgwYzktNzA2NS0z NzlhLWE3YTAtMzc0MTAzMGNiOGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAMTpo1IUzd+ZzttaDrxrdk0bCR9hodwCZJKNL3 akdCrK22ndicXgVpierRC0U2OpIIvdi1r8D1GdyQXotOnhZbCyjluVJBWL2X8s42 WZjnZMiXIJvqQmulZrV4fZMW+upyI7RQ9wJVfU9Jli1+IjfZqXkG11ZL/4wMLMxt 6T8HJlS1Pee/JMoFzCkHDRlPJKcvBzkiFLgOj56nU6Tyakqb6XiUbosg5U3ek0TV bdiMXqCoAQrS/7ieD4oB94OZiOAW59lyxzI8Ts8p9Cbeny1PMcyLSE9qxid01vz+ oha3ouHf1pcAk8PGllQoIorJUmfAm8MSwzhOZU7fkZZQRDf0 -----END CERTIFICATE-----Generated at Wed Oct 29 20:09:46 2025 by rpki-client