$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c492599b-993d-3d5e-a0a9-f0b1bb1ea3c4.roa File: c492599b-993d-3d5e-a0a9-f0b1bb1ea3c4.roa (raw, json) Hash identifier: m14UxL180whq1JL8rv8qgejR/AvZ9hhzUxrpiSXcquw= Subject key identifier: 33:B0:38:9D:C2:74:1F:4B:D2:2D:B8:57:67:AA:6B:07:72:35:24:46 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B3556FCF5704497F82CF92830 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c492599b-993d-3d5e-a0a9-f0b1bb1ea3c4.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 397198 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:fc:f5:70:44:97:f8:2c:f9:28:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=05b7aabf-fc40-4865-83d5-c51a5eb7f0e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:11:c0:90:1e:37:18:ee:7a:1f:f3:12:49:bc: 36:e5:de:34:8c:e9:3d:ed:2f:9c:6b:00:31:ca:a1: 33:91:86:14:0f:4c:5e:d2:84:13:8c:1a:09:7c:a6: b4:b2:d7:23:58:d7:50:fc:93:75:40:2e:8a:b7:f4: cf:a0:ed:39:71:9a:9d:37:88:f9:64:22:93:ff:00: a8:be:a1:b0:5d:75:7a:f5:21:8d:98:25:76:f8:e5: a9:ae:3d:4c:5b:a6:cf:56:ca:d0:20:98:2c:52:f6: b5:25:c1:90:e6:e8:e9:94:e2:85:aa:bb:63:3e:29: 0b:93:01:ff:c3:df:dc:5d:ca:e8:68:b0:2c:5c:32: b0:38:d2:d0:6a:14:c0:c8:fb:91:3d:02:e9:52:86: 84:8d:8c:58:a7:23:84:59:f0:0a:02:7e:51:fe:0c: b3:77:b4:8b:53:36:65:dc:86:28:33:25:6f:b1:3a: 6f:56:ad:89:18:b3:4c:8b:72:4b:1e:57:5c:b7:a6: 40:b8:59:18:69:9a:f5:4d:4e:ac:5a:35:3f:86:ee: 45:9c:bd:b0:2e:06:84:4d:65:6e:f2:69:d3:da:b6: 5f:5a:3b:c9:fe:86:5c:ad:ab:db:43:a7:a4:53:3e: f3:60:3b:94:c1:cb:15:a1:07:39:8e:83:19:59:fe: df:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B0:38:9D:C2:74:1F:4B:D2:2D:B8:57:67:AA:6B:07:72:35:24:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c492599b-993d-3d5e-a0a9-f0b1bb1ea3c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:67:eb:d9:35:fd:44:73:d5:63:be:6c:6f:b5:06:7e:e6:98: e9:a5:a3:f5:9a:08:52:15:f7:ed:5f:52:4b:f8:17:38:d7:5e: 50:f4:2d:09:4a:b0:ac:72:99:46:d9:50:14:60:ba:3d:f5:e2: ce:c7:9b:a6:1e:da:2b:55:12:70:a4:86:52:95:be:ad:99:56: 1c:90:ac:2a:cf:6b:25:89:8b:50:5f:a4:db:fb:79:27:d9:5d: 8b:24:d9:fd:e5:cf:65:f5:23:72:a4:ab:29:d3:ef:a0:4a:d0: 35:7d:da:9d:98:11:48:a7:d3:24:6a:6c:7a:6c:70:0c:21:da: ce:9f:c6:d3:76:9a:f9:f1:bf:1b:d1:ee:6c:9c:ad:32:e3:33: a9:d9:74:48:3d:34:42:e5:05:7b:c5:6c:cc:bb:29:7e:fb:5f: f3:85:66:25:41:b3:ac:70:d7:1b:67:3d:2f:35:7d:68:fd:3b: 4e:ec:e1:ac:53:55:a8:35:97:1a:05:1b:3c:b5:8f:cf:fb:4e: 6e:55:00:8c:6b:3f:67:76:ab:c9:64:4b:b6:92:9e:6a:f0:d8: d4:b7:77:55:ef:ba:dd:57:a9:c2:bf:71:3a:30:f2:f5:55:02: 4d:c4:ee:5d:a9:c0:82:8f:33:67:35:4e:ed:99:02:0b:52:a0: b0:89:d9:4b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEs1Vvz1cESX+Cz5KDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk MDViN2FhYmYtZmM0MC00ODY1LTgzZDUtYzUxYTVlYjdmMGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxHAkB43GO56H/MSSbw25d40jOk97S+cawAx yqEzkYYUD0xe0oQTjBoJfKa0stcjWNdQ/JN1QC6Kt/TPoO05cZqdN4j5ZCKT/wCo vqGwXXV69SGNmCV2+OWprj1MW6bPVsrQIJgsUva1JcGQ5ujplOKFqrtjPikLkwH/ w9/cXcroaLAsXDKwONLQahTAyPuRPQLpUoaEjYxYpyOEWfAKAn5R/gyzd7SLUzZl 3IYoMyVvsTpvVq2JGLNMi3JLHldct6ZAuFkYaZr1TU6sWjU/hu5FnL2wLgaETWVu 8mnT2rZfWjvJ/oZcravbQ6ekUz7zYDuUwcsVoQc5joMZWf7fcQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDOwOJ3CdB9L0i24V2eqawdyNSRGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzQ5MjU5OWItOTkzZC0z ZDVlLWEwYTktZjBiMWJiMWVhM2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB5Z+vZNf1Ec9VjvmxvtQZ+5pjppaP1mghSFfft X1JL+Bc4115Q9C0JSrCscplG2VAUYLo99eLOx5umHtorVRJwpIZSlb6tmVYckKwq z2sliYtQX6Tb+3kn2V2LJNn95c9l9SNypKsp0++gStA1fdqdmBFIp9Mkamx6bHAM IdrOn8bTdpr58b8b0e5snK0y4zOp2XRIPTRC5QV7xWzMuyl++1/zhWYlQbOscNcb Zz0vNX1o/TtO7OGsU1WoNZcaBRs8tY/P+05uVQCMaz9ndqvJZEu2kp5q8NjUt3dV 77rdV6nCv3E6MPL1VQJNxO5dqcCCjzNnNU7tmQILUqCwidlL -----END CERTIFICATE-----Generated at Wed Oct 29 20:23:51 2025 by rpki-client