$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c4ab9c91-5278-3fcd-9b6f-6b2c9b5db42a.roa File: c4ab9c91-5278-3fcd-9b6f-6b2c9b5db42a.roa (raw, json) Hash identifier: qSO1r81J65H6yJdL+IhyFY2NkzWM5jD3Yas/KzllicE= Subject key identifier: 2D:DD:B9:B6:7F:21:DB:8A:5E:EC:73:94:A5:E6:B5:EE:67:80:73:E1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E79A5CADABBA92AFC12F34 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c4ab9c91-5278-3fcd-9b6f-6b2c9b5db42a.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 396602 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:9a:5c:ad:ab:ba:92:af:c1:2f:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=57ea4ce1-9ac6-40f8-ad2c-28306e95f3ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:49:9b:84:54:db:3c:4a:ca:0b:02:a1:12:61: ad:54:7b:9b:54:3b:b2:d6:d9:26:9f:7d:4d:0f:ac: c6:b2:09:65:17:61:12:ab:d6:e9:06:9e:52:75:ad: 55:b9:df:c2:63:cb:f5:db:0b:e7:62:d3:71:3e:87: a0:98:43:ef:92:92:20:04:0a:17:e2:cb:63:6f:a6: 3d:a2:b9:a5:03:4b:29:71:aa:2f:de:dd:bc:ea:21: 12:ae:8b:6d:ba:59:35:53:54:84:71:ea:4d:ee:0d: 5a:90:61:53:52:29:f4:c4:4f:62:5a:4e:37:08:4e: 67:27:8b:44:ff:b1:e4:f3:20:d7:0f:a6:b7:26:28: 95:a6:ca:82:9a:23:23:d2:11:e0:48:dd:e3:34:bc: 1e:36:47:7e:1d:38:4e:a8:b8:43:c1:95:f6:10:c7: 08:36:e3:14:5b:29:24:73:55:f5:fc:91:0c:37:78: 2d:70:28:38:e3:c2:da:91:01:1b:34:28:9d:3a:d1: 25:09:07:1d:0a:04:71:97:b8:b9:7b:e2:19:b8:ff: 8d:9d:f9:c7:e7:95:fc:88:72:1f:d5:2f:4b:5c:16: fe:15:0d:c5:9e:d3:78:fe:a6:22:8f:e9:e1:ef:8b: c5:63:62:0a:67:bc:c7:5e:5d:92:9d:b3:bb:7f:92: 24:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:DD:B9:B6:7F:21:DB:8A:5E:EC:73:94:A5:E6:B5:EE:67:80:73:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c4ab9c91-5278-3fcd-9b6f-6b2c9b5db42a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:e9:b9:e5:57:eb:e6:df:a3:f2:52:04:4d:9a:fd:eb:f3:5b: 0b:4c:ef:7d:98:6c:dd:bd:8e:e1:28:cf:20:41:11:39:e6:f1: 52:89:fe:63:74:7f:aa:67:f4:da:ea:7f:df:e4:da:40:95:85: 3c:88:ff:f8:8a:75:29:3d:56:33:4e:c1:63:db:39:cc:a3:91: a5:94:7c:ff:85:65:63:89:97:a5:bf:b3:59:88:d1:1a:12:f8: 1c:05:c2:4a:40:a0:61:f4:40:30:af:41:b9:95:9e:09:8f:13: 61:ae:85:a8:be:71:4a:70:2e:c0:c4:77:fc:7b:be:e6:80:f8: c0:93:f3:bc:93:4e:d2:5d:5e:bb:f7:54:8e:3b:d6:b9:39:df: 73:56:46:23:eb:35:39:4b:1b:83:5d:02:70:aa:57:61:de:c5: 42:04:98:ce:28:2f:58:d0:67:6e:74:86:aa:15:67:c2:8b:3b: a7:fb:30:4c:fd:2e:5c:50:39:0e:53:8a:71:a1:87:8e:a0:eb: 12:38:d8:e1:ef:a3:6b:c5:2e:d1:c9:42:eb:84:a1:43:13:a8: 69:9b:56:bd:f5:a1:a9:03:37:b1:d9:8e:bd:c6:35:ff:34:9e: a2:6a:d0:29:5c:43:7b:74:42:92:7f:97:47:f4:fd:fe:07:f0: a8:6a:cb:79 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE55pcrau6kq/BLzQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk NTdlYTRjZTEtOWFjNi00MGY4LWFkMmMtMjgzMDZlOTVmM2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0mbhFTbPErKCwKhEmGtVHubVDuy1tkmn31N D6zGsgllF2ESq9bpBp5Sda1Vud/CY8v12wvnYtNxPoegmEPvkpIgBAoX4stjb6Y9 ormlA0spcaov3t286iESrottulk1U1SEcepN7g1akGFTUin0xE9iWk43CE5nJ4tE /7Hk8yDXD6a3JiiVpsqCmiMj0hHgSN3jNLweNkd+HThOqLhDwZX2EMcINuMUWykk c1X1/JEMN3gtcCg448LakQEbNCidOtElCQcdCgRxl7i5e+IZuP+NnfnH55X8iHIf 1S9LXBb+FQ3FntN4/qYij+nh74vFY2IKZ7zHXl2SnbO7f5IkZQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFC3dubZ/IduKXuxzlKXmte5ngHPhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzRhYjljOTEtNTI3OC0z ZmNkLTliNmYtNmIyYzliNWRiNDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA06bnlV+vm36PyUgRNmv3r81sLTO99mGzdvY7h KM8gQRE55vFSif5jdH+qZ/Ta6n/f5NpAlYU8iP/4inUpPVYzTsFj2znMo5GllHz/ hWVjiZelv7NZiNEaEvgcBcJKQKBh9EAwr0G5lZ4JjxNhroWovnFKcC7AxHf8e77m gPjAk/O8k07SXV6791SOO9a5Od9zVkYj6zU5SxuDXQJwqldh3sVCBJjOKC9Y0Gdu dIaqFWfCizun+zBM/S5cUDkOU4pxoYeOoOsSONjh76NrxS7RyULrhKFDE6hpm1a9 9aGpAzex2Y69xjX/NJ6iatApXEN7dEKSf5dH9P3+B/Coast5 -----END CERTIFICATE-----Generated at Wed Oct 29 20:36:36 2025 by rpki-client