$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e33b4caa-8c21-3a76-a750-73b91a32b13b.roa File: e33b4caa-8c21-3a76-a750-73b91a32b13b.roa (raw, json) Hash identifier: WUYLDEnKaJHZHEI/UU1H/UTOC7cc9sR05n465FGalLg= Subject key identifier: B4:1A:85:9C:E4:B8:4A:A3:40:3B:E7:2C:29:4D:D3:2C:44:1B:4D:12 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B99D7DB49E9E685648578F200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e33b4caa-8c21-3a76-a750-73b91a32b13b.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 396615 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:db:49:e9:e6:85:64:85:78:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=fd871b19-ef74-4b1d-8298-685750c2c27a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a3:34:e5:3d:9f:65:a1:13:4a:49:87:61:06: 24:de:a9:49:37:ab:95:40:5f:04:23:97:01:53:91: d5:f7:ec:b4:23:db:27:4e:f0:5f:75:69:03:b9:c2: 4c:89:d1:2f:5d:a8:78:ba:d3:b9:a3:9f:73:89:b0: 53:34:c7:ff:17:64:52:29:31:d0:46:71:b9:54:c0: 4f:67:1d:e5:10:cd:ba:81:7a:3f:58:dd:8c:d3:ac: e4:9a:e4:95:ee:79:8e:4a:86:52:db:0e:b4:c1:7f: 49:9a:b6:c0:72:1f:ec:25:8d:32:3c:25:2e:e4:fc: 46:56:f6:39:36:2d:8f:88:47:03:f2:c7:f9:88:36: 35:58:b7:68:52:3b:c8:ac:a6:15:47:f4:6e:a7:1a: 83:af:7b:e7:79:7e:28:ba:bb:6c:52:58:d0:01:a0: 50:c0:8b:83:34:d2:32:e4:cc:e3:ac:aa:04:fd:bc: ff:4e:37:9b:0e:1c:a6:27:32:f8:80:36:88:f4:fc: 40:47:31:95:bc:1a:2d:20:61:7f:6e:4c:76:bc:7b: 26:d3:91:e7:b9:0b:77:ca:98:28:67:38:5f:ee:ea: 41:4c:4f:d4:c5:e0:40:c9:44:77:8f:96:9f:32:f6: d9:99:c6:6c:44:63:0c:b1:42:a5:5f:00:8c:ca:77: 2d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:1A:85:9C:E4:B8:4A:A3:40:3B:E7:2C:29:4D:D3:2C:44:1B:4D:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e33b4caa-8c21-3a76-a750-73b91a32b13b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:ca:e6:dd:52:53:f9:89:38:bb:0f:01:b3:6e:45:08:18:3d: 97:5a:2e:d5:38:01:ff:f3:03:d5:7c:aa:2f:3e:2e:06:f3:10: 10:64:5f:1f:bb:be:15:12:04:1f:6c:cd:8a:e8:fd:1f:eb:fe: a8:04:98:e0:1e:9b:8e:07:e2:42:ce:9f:70:d2:9b:00:53:4a: 54:d5:f1:61:51:2d:6c:18:cd:44:17:48:6c:fb:04:65:30:f4: 1f:40:11:24:52:92:d7:de:43:ed:06:a7:82:31:aa:9c:81:15: f9:48:99:c5:28:cf:5b:c8:07:f1:72:2d:b8:bb:de:fc:73:6c: 02:bf:04:59:16:7e:e0:4d:68:13:d9:ef:31:bb:ea:dc:53:51: d4:0d:d3:e0:c9:95:8a:63:fe:02:0a:e3:82:79:bb:d2:05:73: e8:75:68:13:1b:1e:bc:1f:e1:1e:5f:5d:62:0a:13:cb:90:9c: 70:c7:b9:3a:b1:30:c5:60:3c:5f:60:ab:90:d6:42:d6:ea:ed: d0:c1:99:fe:70:28:9c:c1:12:de:f0:8d:c5:97:83:a3:1b:00: 69:24:36:d4:46:85:cb:18:ff:41:ae:8c:72:4f:03:17:09:4b: e9:e4:3c:25:93:27:b8:3f:49:6f:91:f1:b0:a5:f5:91:79:b8: fe:aa:04:ed -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuZ19tJ6eaFZIV48gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZmQ4NzFiMTktZWY3NC00YjFkLTgyOTgtNjg1NzUwYzJjMjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaM05T2fZaETSkmHYQYk3qlJN6uVQF8EI5cB U5HV9+y0I9snTvBfdWkDucJMidEvXah4utO5o59zibBTNMf/F2RSKTHQRnG5VMBP Zx3lEM26gXo/WN2M06zkmuSV7nmOSoZS2w60wX9JmrbAch/sJY0yPCUu5PxGVvY5 Ni2PiEcD8sf5iDY1WLdoUjvIrKYVR/RupxqDr3vneX4ourtsUljQAaBQwIuDNNIy 5MzjrKoE/bz/TjebDhymJzL4gDaI9PxARzGVvBotIGF/bkx2vHsm05HnuQt3ypgo Zzhf7upBTE/UxeBAyUR3j5afMvbZmcZsRGMMsUKlXwCMynctIQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLQahZzkuEqjQDvnLClN0yxEG00SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTMzYjRjYWEtOGMyMS0z YTc2LWE3NTAtNzNiOTFhMzJiMTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBfyubdUlP5iTi7DwGzbkUIGD2XWi7VOAH/8wPV fKovPi4G8xAQZF8fu74VEgQfbM2K6P0f6/6oBJjgHpuOB+JCzp9w0psAU0pU1fFh US1sGM1EF0hs+wRlMPQfQBEkUpLX3kPtBqeCMaqcgRX5SJnFKM9byAfxci24u978 c2wCvwRZFn7gTWgT2e8xu+rcU1HUDdPgyZWKY/4CCuOCebvSBXPodWgTGx68H+Ee X11iChPLkJxwx7k6sTDFYDxfYKuQ1kLW6u3QwZn+cCicwRLe8I3Fl4OjGwBpJDbU RoXLGP9BroxyTwMXCUvp5Dwlkye4P0lvkfGwpfWRebj+qgTt -----END CERTIFICATE-----Generated at Wed Oct 29 20:42:23 2025 by rpki-client