$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ce5a6a02-432e-3006-bded-a3dfe359890f.roa File: ce5a6a02-432e-3006-bded-a3dfe359890f.roa (raw, json) Hash identifier: iwOJaSdOu8yl/Q51LUwsBSAjXrNAoI4WAzqeHOBMnwA= Subject key identifier: AB:8B:7E:58:CC:81:BB:C0:B6:A7:0A:14:A9:EA:CB:04:68:86:2A:69 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B715CE0FB0372BEC7E0193800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ce5a6a02-432e-3006-bded-a3dfe359890f.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 32651 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:e0:fb:03:72:be:c7:e0:19:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=ca68ec6e-aa6e-4da5-8e31-fb278cae8ff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2e:d7:d9:61:47:39:b3:80:a3:be:92:52:6a: 17:0a:92:cd:2f:f6:a2:72:f4:41:3a:43:7e:68:30: b4:2c:65:32:31:df:bd:2b:91:ab:7f:b7:ab:4f:4b: e8:80:fe:ff:a0:51:c7:e4:25:db:87:fc:6a:48:2c: 44:63:82:e3:1b:71:e1:61:47:a1:e4:d7:b8:7f:5f: 56:86:60:2f:64:14:5a:36:41:54:72:39:e7:67:52: 78:fe:ae:5d:6d:8a:fb:cf:3a:35:6b:41:39:ae:3c: 48:95:06:8f:1d:8f:cf:d0:c0:60:25:a4:cb:d0:52: 1b:7e:97:9f:02:dc:f5:84:05:8c:3a:a6:e7:78:a7: 7c:2d:69:9e:4a:fc:e0:7a:49:4d:58:71:24:61:6a: 1c:ff:19:d4:52:e3:7c:11:56:5d:38:49:fc:d3:47: d1:1c:78:f2:43:7a:9f:a5:75:c8:bf:a9:93:4d:e9: 81:b1:41:76:b7:da:a5:67:1d:a9:90:5c:f1:f9:49: b2:56:25:b3:df:67:13:cd:6b:95:32:bb:4e:17:77: e6:64:9b:cc:a0:2b:0e:65:2a:86:db:95:cc:dd:ae: 86:db:05:0c:50:e5:45:09:74:bb:b0:2f:ee:d6:e3: 57:c0:c8:12:30:3b:1a:9c:1d:37:ad:71:16:7b:f3: 59:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:8B:7E:58:CC:81:BB:C0:B6:A7:0A:14:A9:EA:CB:04:68:86:2A:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ce5a6a02-432e-3006-bded-a3dfe359890f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:56:e3:eb:e9:81:83:2d:3f:f5:1e:00:be:72:36:3d:9d:6a: 6c:aa:37:65:28:05:3e:6c:7c:60:ad:d6:39:94:be:8d:56:63: 8a:ad:59:f4:84:11:26:78:0a:5e:6c:21:52:86:33:55:c5:58: 28:65:77:28:7a:7a:d0:02:bc:0c:c5:4d:0e:99:e6:1d:72:87: 98:73:7e:df:d3:84:11:67:1b:14:84:97:c4:c0:8e:37:31:49: 06:01:0c:56:49:5b:3a:17:3d:08:24:78:27:ff:2e:87:64:fa: 5f:2d:55:80:ec:59:8b:3a:38:9a:53:0b:7e:44:d8:97:8b:4d: 6c:5f:6f:fe:d7:16:f6:38:d3:18:3a:9e:f5:43:12:d9:24:85: 79:0b:b1:7c:3a:1b:61:44:b3:51:ca:dc:4b:1d:40:67:97:03: a5:e5:51:10:51:7f:53:af:9a:9c:7f:9e:4b:3f:63:3d:f6:43: b9:5b:4d:5f:73:a2:2a:4c:69:b3:9c:03:ce:2d:d0:5f:8d:66: 42:2b:77:36:05:75:3f:0a:4e:d8:e2:c1:50:c2:7c:91:dd:4c: ef:d3:b3:dc:2f:42:86:6d:13:f5:46:88:07:70:4f:95:68:59: 0a:46:3e:27:85:4b:7d:da:e9:07:79:77:c0:21:a5:3d:99:9f: d4:ed:c3:44 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtxXOD7A3K+x+AZOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk Y2E2OGVjNmUtYWE2ZS00ZGE1LThlMzEtZmIyNzhjYWU4ZmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhy7X2WFHObOAo76SUmoXCpLNL/aicvRBOkN+ aDC0LGUyMd+9K5Grf7erT0vogP7/oFHH5CXbh/xqSCxEY4LjG3HhYUeh5Ne4f19W hmAvZBRaNkFUcjnnZ1J4/q5dbYr7zzo1a0E5rjxIlQaPHY/P0MBgJaTL0FIbfpef Atz1hAWMOqbneKd8LWmeSvzgeklNWHEkYWoc/xnUUuN8EVZdOEn800fRHHjyQ3qf pXXIv6mTTemBsUF2t9qlZx2pkFzx+UmyViWz32cTzWuVMrtOF3fmZJvMoCsOZSqG 25XM3a6G2wUMUOVFCXS7sC/u1uNXwMgSMDsanB03rXEWe/NZ2QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKuLfljMgbvAtqcKFKnqywRohippMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2U1YTZhMDItNDMyZS0z MDA2LWJkZWQtYTNkZmUzNTk4OTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBLVuPr6YGDLT/1HgC+cjY9nWpsqjdlKAU+bHxg rdY5lL6NVmOKrVn0hBEmeApebCFShjNVxVgoZXcoenrQArwMxU0OmeYdcoeYc37f 04QRZxsUhJfEwI43MUkGAQxWSVs6Fz0IJHgn/y6HZPpfLVWA7FmLOjiaUwt+RNiX i01sX2/+1xb2ONMYOp71QxLZJIV5C7F8OhthRLNRytxLHUBnlwOl5VEQUX9Tr5qc f55LP2M99kO5W01fc6IqTGmznAPOLdBfjWZCK3c2BXU/Ck7Y4sFQwnyR3Uzv07Pc L0KGbRP1RogHcE+VaFkKRj4nhUt92ukHeXfAIaU9mZ/U7cNE -----END CERTIFICATE-----Generated at Wed Oct 29 22:29:35 2025 by rpki-client