$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d814ede2-b2ca-33f3-b8c6-e8d205735d3d.roa File: d814ede2-b2ca-33f3-b8c6-e8d205735d3d.roa (raw, json) Hash identifier: xDZ50XEzNTZRKjm3UJeCYgb1aa63tzd8nd1SPvECBrM= Subject key identifier: A5:19:73:BD:95:FA:A8:C9:E2:7A:E1:C8:E6:68:72:97:83:1E:D0:96 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B99D7DE00DC6CAC9468F5F980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d814ede2-b2ca-33f3-b8c6-e8d205735d3d.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 397196 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:de:00:dc:6c:ac:94:68:f5:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=885203ea-b8dc-479b-a7f0-f7eaa9689f83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:04:56:1d:07:5b:67:38:22:f6:3d:0a:f3:5d: 65:f0:73:d9:a3:b5:38:91:7c:b5:e6:bd:b2:b9:4b: 49:6e:bb:a3:6f:e7:33:96:78:c6:5d:81:cd:41:b7: 84:e1:ae:5f:28:fd:e4:29:98:74:80:91:75:c6:9b: 1a:f0:3e:c6:40:fb:bc:ec:5c:b7:ee:42:18:8a:17: 58:cd:80:90:34:6c:c7:02:2d:b8:46:29:e7:12:55: a9:05:e5:e6:82:90:22:a7:64:84:7d:0d:7b:78:6d: 57:9c:9d:6a:9f:be:69:94:db:ed:9f:f5:11:e7:b7: ab:11:7f:e2:a8:c9:6d:5a:65:c1:15:20:f0:a9:4f: 58:9b:dc:be:ef:ae:c0:f7:df:e9:de:81:81:b2:47: f5:c1:1a:71:b3:31:cd:d2:81:50:1d:73:f9:96:04: d8:b1:97:bf:86:dc:55:e8:30:2e:d0:bc:fd:34:8f: ca:5c:1a:6d:d0:11:f9:c0:c6:de:f0:e5:89:30:b5: 92:a0:ac:bf:ba:09:55:63:32:d5:21:d4:62:96:b2: ab:81:43:17:6c:e7:70:ba:bb:ac:61:25:4d:b1:8e: bc:1d:2a:cf:e4:31:57:c6:af:ba:da:53:7a:c9:e5: 1a:c3:30:ca:e9:58:e9:6d:57:61:5f:c0:bb:46:ec: fb:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:19:73:BD:95:FA:A8:C9:E2:7A:E1:C8:E6:68:72:97:83:1E:D0:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d814ede2-b2ca-33f3-b8c6-e8d205735d3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:4c:24:b5:3b:f8:45:4a:da:50:c8:bd:39:4c:73:f8:f7:57: 66:c8:27:9d:90:2b:db:ad:2b:67:82:3e:1d:f9:41:21:d1:ed: 5f:80:79:ad:d5:d3:53:b6:f4:0f:9d:51:6d:41:b7:e5:35:57: 6b:0a:97:1b:89:2c:9c:1d:2e:67:d1:80:7e:39:6a:36:93:11: 9e:30:f6:19:07:09:c3:5f:25:59:4b:18:6f:9d:4d:89:55:52: cc:f7:69:f9:fc:33:6d:81:cb:2a:36:d6:51:29:9c:67:79:f2: f6:9d:b8:08:f8:7f:43:40:f6:24:46:56:f6:19:f2:f0:62:3a: a1:cf:86:44:26:86:73:6f:08:6e:c8:d0:a3:0b:50:da:c2:f0: 1a:74:2a:6b:bf:09:02:da:13:a7:6b:d9:6e:4b:d0:0f:0e:a7: fd:aa:36:8d:97:cb:65:70:88:50:a0:10:4f:b0:92:ad:47:b5: 87:63:a3:42:d9:ab:ef:15:2d:4c:c6:53:0b:7c:18:d9:4b:78: 9b:77:a9:c3:4f:f7:1e:44:2e:82:c4:96:84:cc:3c:c8:35:a9: 08:af:85:19:0d:ca:c4:d9:21:37:e7:a1:67:75:65:5a:16:f0: e0:1d:04:b3:7f:b0:a2:e4:12:af:a8:cb:6f:02:92:2e:81:3f: cd:cd:cf:3c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuZ194A3GyslGj1+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ODg1MjAzZWEtYjhkYy00NzliLWE3ZjAtZjdlYWE5Njg5ZjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngRWHQdbZzgi9j0K811l8HPZo7U4kXy15r2y uUtJbrujb+czlnjGXYHNQbeE4a5fKP3kKZh0gJF1xpsa8D7GQPu87Fy37kIYihdY zYCQNGzHAi24RinnElWpBeXmgpAip2SEfQ17eG1XnJ1qn75plNvtn/UR57erEX/i qMltWmXBFSDwqU9Ym9y+767A99/p3oGBskf1wRpxszHN0oFQHXP5lgTYsZe/htxV 6DAu0Lz9NI/KXBpt0BH5wMbe8OWJMLWSoKy/uglVYzLVIdRilrKrgUMXbOdwurus YSVNsY68HSrP5DFXxq+62lN6yeUawzDK6VjpbVdhX8C7Ruz7jwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKUZc72V+qjJ4nrhyOZocpeDHtCWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDgxNGVkZTItYjJjYS0z M2YzLWI4YzYtZThkMjA1NzM1ZDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA+TCS1O/hFStpQyL05THP491dmyCedkCvbrStn gj4d+UEh0e1fgHmt1dNTtvQPnVFtQbflNVdrCpcbiSycHS5n0YB+OWo2kxGeMPYZ BwnDXyVZSxhvnU2JVVLM92n5/DNtgcsqNtZRKZxnefL2nbgI+H9DQPYkRlb2GfLw Yjqhz4ZEJoZzbwhuyNCjC1DawvAadCprvwkC2hOna9luS9APDqf9qjaNl8tlcIhQ oBBPsJKtR7WHY6NC2avvFS1MxlMLfBjZS3ibd6nDT/ceRC6CxJaEzDzINakIr4UZ DcrE2SE356FndWVaFvDgHQSzf7Ci5BKvqMtvApIugT/Nzc88 -----END CERTIFICATE-----Generated at Wed Oct 29 20:38:18 2025 by rpki-client