$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a4a7da04-0d35-3299-81c5-78e3b98e77ae.roa File: a4a7da04-0d35-3299-81c5-78e3b98e77ae.roa (raw, json) Hash identifier: /ZM9U8jkw7+Xr0q7laSTgdhXCkzepYSPZYfMvxUo1VA= Subject key identifier: F9:F1:3F:7E:E0:FB:87:FE:D2:DD:84:CE:83:8A:D7:93:4C:D1:F6:93 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B99D7DDE0E88558515D820700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a4a7da04-0d35-3299-81c5-78e3b98e77ae.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 396597 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:dd:e0:e8:85:58:51:5d:82:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=b82d3360-936d-487a-98a4-2c9440bc5a23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:55:20:5f:7c:7e:39:6b:d0:da:43:df:53:4f: 35:28:9d:4f:52:ab:a7:d6:3e:78:e9:b9:98:4d:9f: 2c:9b:af:09:2a:b2:21:33:12:f0:9a:7c:eb:c2:56: 16:71:ff:e1:ec:b5:31:70:d0:84:b1:77:f9:eb:4a: 6b:1b:c5:36:58:fc:0d:96:14:3c:27:fd:b2:db:3a: 48:c7:06:21:e2:18:f0:e9:4f:23:90:a8:12:8c:bf: 9c:31:3c:35:76:ad:30:5c:7f:a4:fa:7f:31:38:a8: c3:81:89:c7:27:54:05:6a:3a:60:44:6c:24:b8:ec: 08:53:3d:b6:f9:a5:09:fd:dd:7b:da:03:2e:50:8d: 39:11:92:bb:db:a8:0e:cb:1c:20:b7:f9:97:99:c2: 7d:c6:e7:e0:3b:c4:55:53:67:77:14:9a:69:93:f9: a4:cd:5d:a6:61:86:41:54:60:b1:a7:45:c5:a8:6e: 75:94:d1:2c:ae:13:39:70:28:07:ed:e2:68:6d:af: 62:af:6c:c1:61:93:68:4c:79:2c:2e:11:a6:b9:ac: 33:d4:bc:48:bb:3a:dc:20:b3:64:3c:26:ad:1c:aa: 46:d6:0d:23:aa:54:82:eb:57:03:61:f1:9f:14:b6: bc:73:70:55:18:67:15:9f:2e:ee:f5:65:75:82:79: d7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:F1:3F:7E:E0:FB:87:FE:D2:DD:84:CE:83:8A:D7:93:4C:D1:F6:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a4a7da04-0d35-3299-81c5-78e3b98e77ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:4c:fd:50:46:78:d5:f9:48:e3:44:1c:67:f0:e8:85:d5:3c: 55:23:4e:89:bf:44:ab:6b:b2:88:82:31:23:b2:cf:14:0b:8c: e5:c6:4c:74:86:59:71:60:3e:f5:2f:f5:ed:0d:48:f9:2b:da: 62:d3:b1:12:4e:79:d0:18:3f:d3:bd:b4:f3:6f:f4:b2:f7:3d: 48:37:12:06:a8:c5:87:87:05:1a:08:33:9d:a5:48:52:a5:62: 21:7e:80:2f:94:a2:da:fb:5d:73:df:f8:66:b4:88:1f:f3:55: 47:0a:02:77:5f:9a:cd:85:0f:f2:39:f9:a7:e4:d6:8e:6e:7e: 9a:18:61:fc:ff:44:85:e3:98:e1:16:3c:af:62:02:09:10:20: 49:64:d7:3c:5a:54:f7:b5:87:1c:c9:4b:35:75:b5:75:35:14: ec:77:ca:48:aa:c2:44:24:72:8f:a5:f2:97:6b:91:40:56:b3: 2e:8a:c1:91:b3:b9:25:3a:96:d6:a4:e5:8b:70:52:33:b2:45: 42:80:a9:ec:0c:59:a8:9d:50:01:0f:33:4f:0e:5f:98:1c:d0: 97:73:59:6f:bd:fb:df:45:cf:ee:f2:47:ff:0b:83:9c:47:99: 2c:ad:25:e7:41:9c:ab:7f:dd:f2:a1:20:b3:71:0f:cc:52:fe: 93:26:2f:00 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuZ193g6IVYUV2CBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk YjgyZDMzNjAtOTM2ZC00ODdhLTk4YTQtMmM5NDQwYmM1YTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFUgX3x+OWvQ2kPfU081KJ1PUqun1j546bmY TZ8sm68JKrIhMxLwmnzrwlYWcf/h7LUxcNCEsXf560prG8U2WPwNlhQ8J/2y2zpI xwYh4hjw6U8jkKgSjL+cMTw1dq0wXH+k+n8xOKjDgYnHJ1QFajpgRGwkuOwIUz22 +aUJ/d172gMuUI05EZK726gOyxwgt/mXmcJ9xufgO8RVU2d3FJppk/mkzV2mYYZB VGCxp0XFqG51lNEsrhM5cCgH7eJoba9ir2zBYZNoTHksLhGmuawz1LxIuzrcILNk PCatHKpG1g0jqlSC61cDYfGfFLa8c3BVGGcVny7u9WV1gnnXlQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPnxP37g+4f+0t2EzoOK15NM0faTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTRhN2RhMDQtMGQzNS0z Mjk5LTgxYzUtNzhlM2I5OGU3N2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAaTP1QRnjV+UjjRBxn8OiF1TxVI06Jv0Sra7KI gjEjss8UC4zlxkx0hllxYD71L/XtDUj5K9pi07ESTnnQGD/TvbTzb/Sy9z1INxIG qMWHhwUaCDOdpUhSpWIhfoAvlKLa+11z3/hmtIgf81VHCgJ3X5rNhQ/yOfmn5NaO bn6aGGH8/0SF45jhFjyvYgIJECBJZNc8WlT3tYccyUs1dbV1NRTsd8pIqsJEJHKP pfKXa5FAVrMuisGRs7klOpbWpOWLcFIzskVCgKnsDFmonVABDzNPDl+YHNCXc1lv vfvfRc/u8kf/C4OcR5ksrSXnQZyrf93yoSCzcQ/MUv6TJi8A -----END CERTIFICATE-----Generated at Wed Oct 29 11:48:51 2025 by rpki-client