$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf1e64ed-f8f8-3418-912f-fafdd05f2139.roa File: cf1e64ed-f8f8-3418-912f-fafdd05f2139.roa (raw, json) Hash identifier: k2ERKVmeMrDprLD7jPGAY5FOBJXKHqyTlSkeHnvmrp8= Subject key identifier: AA:D0:D2:D5:7F:50:E2:2D:CB:F6:0E:8E:41:32:80:A5:5C:DB:04:B2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B99D7D9347762543E22CB7980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf1e64ed-f8f8-3418-912f-fafdd05f2139.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 396579 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:d9:34:77:62:54:3e:22:cb:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=303b98c0-46be-4517-b633-9c002e33f6a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:1b:74:fd:4f:ea:3d:07:ed:dc:c8:ff:25:9b: 05:04:eb:25:b4:45:21:4f:c1:56:a0:4f:c5:0f:42: 33:4f:49:f7:34:40:c3:47:73:30:32:7f:83:6b:f1: 65:d7:34:31:d6:da:7b:be:ec:5a:ce:cc:7d:c4:d5: 12:ca:8e:ac:51:bf:b0:06:15:93:21:8b:a6:bd:64: 9d:55:5b:9c:61:98:17:64:83:85:0c:bc:88:e5:bb: 48:1d:7a:63:4e:72:ba:bb:6a:b1:4f:f7:69:fa:0d: d0:01:93:42:0e:cb:a3:ab:fe:dc:3f:3d:28:c5:ef: 89:a5:d1:0f:01:a4:b3:25:7e:68:82:8c:82:36:69: 2a:ad:f0:34:9f:8b:e8:8b:3a:9d:36:91:7e:c8:a9: a2:e9:9f:56:49:9a:b0:27:64:47:59:6c:c8:72:29: 4f:1e:d1:a4:ea:d2:a0:45:35:c8:e6:bf:0b:31:e3: 10:88:20:ee:fd:e1:4e:7f:c2:01:7f:a1:78:80:36: 0d:78:38:36:85:fb:76:8a:48:f5:36:bd:7b:8c:b5: 8f:ce:54:03:51:81:64:ab:a2:f3:82:eb:32:37:20: b6:ec:0a:cf:4c:c0:6f:84:00:bb:b7:0e:99:a0:49: fa:66:03:86:ce:40:e7:a1:62:8c:da:7e:6b:70:25: 55:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D0:D2:D5:7F:50:E2:2D:CB:F6:0E:8E:41:32:80:A5:5C:DB:04:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf1e64ed-f8f8-3418-912f-fafdd05f2139.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:db:44:d7:14:51:59:7c:fe:1b:bb:78:70:70:cd:b3:63:67: 8e:42:87:07:23:51:cf:7e:ea:01:54:73:5f:fa:27:77:27:b3: fd:a7:9b:ba:52:5f:2d:af:b9:11:0f:f8:f3:62:ee:47:78:56: ce:fc:32:67:f1:fe:68:81:70:0d:61:ae:06:9a:c9:60:7b:ac: 35:44:ae:41:eb:c7:c4:e3:1c:26:0c:90:4d:be:7d:2f:bc:46: 3a:ec:b2:12:c7:37:92:8e:d2:3e:25:29:8c:43:01:59:75:64: ec:6f:83:d2:0a:89:63:03:76:e8:76:67:96:7b:d1:a6:1d:3a: 24:7c:d6:87:d5:e0:bd:e6:ef:ba:1f:83:30:4f:a9:64:f0:93: d5:db:de:21:bf:eb:9c:55:68:f2:fa:96:d1:8f:f1:5c:7e:99: 9c:b3:73:a1:ae:83:e5:0b:c0:8e:c4:78:b5:eb:ce:6b:17:1f: 90:00:1f:7b:57:18:70:e8:58:24:18:a5:84:44:cb:ce:cd:3e: 49:65:da:c1:81:1b:c9:a8:cf:2e:9b:1b:54:84:25:fd:52:91: 46:c7:c8:3c:2d:9a:d9:b7:9d:55:30:dd:53:e4:3c:f0:d0:04: be:f6:75:84:8e:a5:b0:3f:b0:37:60:61:e0:a6:17:8d:e5:31: dd:47:f5:05 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuZ19k0d2JUPiLLeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MzAzYjk4YzAtNDZiZS00NTE3LWI2MzMtOWMwMDJlMzNmNmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBt0/U/qPQft3Mj/JZsFBOsltEUhT8FWoE/F D0IzT0n3NEDDR3MwMn+Da/Fl1zQx1tp7vuxazsx9xNUSyo6sUb+wBhWTIYumvWSd VVucYZgXZIOFDLyI5btIHXpjTnK6u2qxT/dp+g3QAZNCDsujq/7cPz0oxe+JpdEP AaSzJX5ogoyCNmkqrfA0n4voizqdNpF+yKmi6Z9WSZqwJ2RHWWzIcilPHtGk6tKg RTXI5r8LMeMQiCDu/eFOf8IBf6F4gDYNeDg2hft2ikj1Nr17jLWPzlQDUYFkq6Lz gusyNyC27ArPTMBvhAC7tw6ZoEn6ZgOGzkDnoWKM2n5rcCVVtwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKrQ0tV/UOIty/YOjkEygKVc2wSyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2YxZTY0ZWQtZjhmOC0z NDE4LTkxMmYtZmFmZGQwNWYyMTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAk20TXFFFZfP4bu3hwcM2zY2eOQocHI1HPfuoB VHNf+id3J7P9p5u6Ul8tr7kRD/jzYu5HeFbO/DJn8f5ogXANYa4Gmslge6w1RK5B 68fE4xwmDJBNvn0vvEY67LISxzeSjtI+JSmMQwFZdWTsb4PSColjA3bodmeWe9Gm HTokfNaH1eC95u+6H4MwT6lk8JPV294hv+ucVWjy+pbRj/Fcfpmcs3OhroPlC8CO xHi1685rFx+QAB97Vxhw6FgkGKWERMvOzT5JZdrBgRvJqM8umxtUhCX9UpFGx8g8 LZrZt51VMN1T5Dzw0AS+9nWEjqWwP7A3YGHgpheN5THdR/UF -----END CERTIFICATE-----Generated at Wed Oct 29 20:45:17 2025 by rpki-client