$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c1ed2970-2690-38aa-b433-78dfcb1be478.roa File: c1ed2970-2690-38aa-b433-78dfcb1be478.roa (raw, json) Hash identifier: ZOvXrKAdh1XaNxFdWG10+mf5F9CW9KCWhyTX8EajuAw= Subject key identifier: 47:A6:27:59:E4:53:5F:B1:26:EC:98:18:DD:44:07:B2:0E:3A:E9:E4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AD9366D31A900F36D87E8A5C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c1ed2970-2690-38aa-b433-78dfcb1be478.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 396546 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:6d:31:a9:00:f3:6d:87:e8:a5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=86d36e75-76b0-40db-9b12-b8af997f51f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9d:64:90:6e:b2:c9:b8:c0:a4:a6:3c:b5:df: 04:d3:9d:2d:8c:b2:9f:17:9a:70:06:d7:f0:6a:b4: 9c:98:9f:c9:7e:09:63:89:7f:22:e7:35:ac:f0:20: 10:fb:97:d0:32:51:c1:27:e1:45:64:b2:04:bb:20: 23:26:7b:30:1c:cc:52:be:b9:39:1b:6a:a4:25:96: 4f:77:5c:9a:e5:cb:9e:66:de:03:1d:7e:df:f3:f5: 5d:6c:ad:8e:85:df:46:38:bf:e7:60:58:e1:24:ad: be:d4:c7:a9:ab:91:21:fd:30:ed:36:ea:ec:1f:25: 09:bc:2b:2e:0c:08:3c:7f:7f:92:e5:e0:16:69:44: 78:f1:ad:56:2e:2f:ef:73:c9:38:04:6f:12:ee:7e: 33:c7:5f:56:2b:18:51:25:67:8b:5d:2c:1f:0b:82: d6:57:6d:d6:16:61:be:2c:be:cc:6d:c5:ed:ec:07: b4:50:30:ab:29:29:9c:d7:ad:48:f0:40:ca:c4:ca: 9c:70:ae:f3:28:ab:1e:fc:95:e1:0d:16:9b:8e:93: 9d:8f:b9:74:9f:11:23:b5:38:9c:10:43:94:73:55: 66:17:02:02:6d:2d:3a:71:df:dc:4c:fd:d1:c6:c1: 78:3c:cc:bf:eb:e1:03:e3:48:8c:29:e5:08:80:ac: 3a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A6:27:59:E4:53:5F:B1:26:EC:98:18:DD:44:07:B2:0E:3A:E9:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c1ed2970-2690-38aa-b433-78dfcb1be478.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:07:49:b9:a6:ba:84:31:3b:39:f3:9c:2e:69:dc:d2:89:ca: f0:05:a5:72:37:20:db:4d:d8:f7:7f:4e:f6:04:3b:9f:37:f4: d7:2f:9f:8e:a6:84:97:45:53:ed:8d:11:a2:e5:58:ce:cc:a4: 40:eb:e8:9d:1e:5f:bc:f9:d0:2c:7e:b3:8f:28:45:58:85:a4: be:d2:16:a9:ed:dd:a1:fa:53:b9:88:04:a6:7b:2a:32:09:d1: 61:9c:d7:f2:79:6e:3b:4e:c4:a0:72:c3:51:a5:26:9a:2f:09: 2f:8e:3e:af:d9:85:bc:32:07:27:21:57:3b:a7:75:2a:5d:9b: 33:dc:b0:84:82:63:f1:96:48:93:13:3b:b8:37:e6:ea:03:55: 9d:0b:df:bd:fa:b6:a5:10:d2:19:1a:fd:f2:a1:ea:07:b1:a6: 57:e2:bb:20:5a:c4:2c:1e:30:87:38:d8:0c:27:98:a8:33:be: f9:20:ed:aa:56:f5:fd:b4:7d:a2:b7:b6:56:93:ac:fc:f8:da: 8d:a2:5d:ae:cd:72:3f:82:83:83:ec:b4:f5:7e:88:27:44:1d: 54:6d:e6:d1:1e:c1:9f:93:a8:0e:b0:f0:39:00:5c:6d:61:0c: 76:5f:2b:b9:ae:26:39:02:15:14:c0:56:24:61:47:b8:6f:f2: 44:c1:e0:e1 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErZNm0xqQDzbYfopcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk ODZkMzZlNzUtNzZiMC00MGRiLTliMTItYjhhZjk5N2Y1MWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp51kkG6yybjApKY8td8E050tjLKfF5pwBtfw arScmJ/JfgljiX8i5zWs8CAQ+5fQMlHBJ+FFZLIEuyAjJnswHMxSvrk5G2qkJZZP d1ya5cueZt4DHX7f8/VdbK2Ohd9GOL/nYFjhJK2+1Mepq5Eh/TDtNursHyUJvCsu DAg8f3+S5eAWaUR48a1WLi/vc8k4BG8S7n4zx19WKxhRJWeLXSwfC4LWV23WFmG+ LL7MbcXt7Ae0UDCrKSmc161I8EDKxMqccK7zKKse/JXhDRabjpOdj7l0nxEjtTic EEOUc1VmFwICbS06cd/cTP3RxsF4PMy/6+ED40iMKeUIgKw6jwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEemJ1nkU1+xJuyYGN1EB7IOOunkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzFlZDI5NzAtMjY5MC0z OGFhLWI0MzMtNzhkZmNiMWJlNDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAeB0m5prqEMTs585wuadzSicrwBaVyNyDbTdj3 f072BDufN/TXL5+OpoSXRVPtjRGi5VjOzKRA6+idHl+8+dAsfrOPKEVYhaS+0hap 7d2h+lO5iASmeyoyCdFhnNfyeW47TsSgcsNRpSaaLwkvjj6v2YW8MgcnIVc7p3Uq XZsz3LCEgmPxlkiTEzu4N+bqA1WdC9+9+ralENIZGv3yoeoHsaZX4rsgWsQsHjCH ONgMJ5ioM775IO2qVvX9tH2it7ZWk6z8+NqNol2uzXI/goOD7LT1fognRB1UbebR HsGfk6gOsPA5AFxtYQx2Xyu5riY5AhUUwFYkYUe4b/JEweDh -----END CERTIFICATE-----Generated at Wed Oct 29 20:07:20 2025 by rpki-client