$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec3058cb-cd81-3eba-9345-015fcf8034d8.roa File: ec3058cb-cd81-3eba-9345-015fcf8034d8.roa (raw, json) Hash identifier: 0RC+WY7XDjgAJhOnwymaUTzV5k9S0gMVjHS7z87gfvM= Subject key identifier: 03:08:BE:D8:DF:36:6F:5F:81:F2:DA:48:E6:30:3E:19:AF:9F:9C:2E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E79596D3E9230D66CFCD00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec3058cb-cd81-3eba-9345-015fcf8034d8.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 396594 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:95:96:d3:e9:23:0d:66:cf:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=23abdb91-466d-4b66-a232-50263662c6ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:59:b0:ad:2a:45:66:71:fc:36:bb:a5:ea:97: 40:4f:40:83:5a:71:0d:02:90:4c:52:40:3f:07:d1: 86:98:95:50:1f:f1:3c:e3:cf:76:31:74:dc:fc:8c: bb:f1:ba:33:83:54:13:77:c9:2c:d2:ae:15:1c:58: 3d:f1:ef:27:30:2b:ee:a5:34:33:8a:b4:5b:f2:44: 67:47:89:2e:72:c8:28:75:e2:1e:40:e4:8f:45:62: e6:0c:ae:95:a1:3c:26:94:5c:a5:85:b1:e0:f0:4c: be:af:f0:9a:33:72:ea:fb:68:18:41:58:7a:c1:8b: 71:48:9d:40:be:ee:8c:46:db:1a:8b:72:5d:90:1a: f8:61:81:23:82:14:87:47:b5:ed:02:f8:0a:75:7f: 25:8b:70:e3:7e:e5:34:bd:4c:2b:b1:d0:aa:06:f9: d4:c3:97:8c:f2:98:ab:a3:4c:da:bd:0b:62:4d:69: 96:aa:28:cb:39:e6:b7:a3:ed:d4:c3:c7:78:b8:32: e2:29:6e:81:bd:fc:ca:a7:ed:d1:40:e1:df:12:d0: d6:c8:8f:4f:d5:3c:d3:56:e1:12:df:02:c0:0f:8d: 86:82:6a:55:5b:96:f5:0b:fc:19:a5:98:34:a3:9c: c6:61:43:82:31:93:64:ba:ae:5a:22:e2:1e:61:93: d0:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:08:BE:D8:DF:36:6F:5F:81:F2:DA:48:E6:30:3E:19:AF:9F:9C:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec3058cb-cd81-3eba-9345-015fcf8034d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:b0:d8:cd:1f:25:f4:9c:0f:ee:f6:59:98:c7:b5:6b:97:e8: 9c:0b:39:b5:7b:6c:77:26:11:9d:06:ff:8e:1b:3b:0e:76:1c: a5:5e:53:14:49:3d:cf:71:e7:a3:5d:60:af:41:f2:53:6d:73: 1a:d0:34:2c:1f:59:f9:1a:e0:ce:fa:ea:c9:f9:a1:e1:ea:b5: 63:f2:dd:de:b3:48:d8:05:69:5d:5a:c7:dc:73:56:3a:b9:e0: 67:bd:d5:39:12:c6:06:b0:f4:2c:0b:b8:a6:26:c8:ca:9b:db: 3f:82:c8:e3:dd:1f:66:66:7a:bf:78:83:aa:bb:98:dc:80:3b: 0c:dc:fc:93:ee:9b:25:6f:3f:7b:40:f9:b4:87:86:8c:14:0b: 70:c6:e9:6d:9b:6e:2d:ff:44:03:95:fb:82:d2:1b:6d:85:84: 5e:44:f0:e7:ac:ba:34:e0:bf:42:a6:32:74:3f:db:c9:ba:2f: ee:97:f2:45:98:3f:f6:8c:91:63:e4:a3:7a:a4:57:bc:09:ab: 6c:28:ee:5d:ed:e6:b0:8a:bf:05:ac:ff:58:73:ff:6a:6b:d6: b7:7e:42:01:0b:2f:77:1b:51:11:b9:a7:20:3d:60:c5:ee:78: 82:88:cf:51:71:ef:54:16:fe:e9:8a:ac:d0:48:91:66:51:2b: aa:b3:f9:e3 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE55WW0+kjDWbPzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk MjNhYmRiOTEtNDY2ZC00YjY2LWEyMzItNTAyNjM2NjJjNmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVmwrSpFZnH8Nrul6pdAT0CDWnENApBMUkA/ B9GGmJVQH/E84892MXTc/Iy78bozg1QTd8ks0q4VHFg98e8nMCvupTQzirRb8kRn R4kucsgodeIeQOSPRWLmDK6VoTwmlFylhbHg8Ey+r/CaM3Lq+2gYQVh6wYtxSJ1A vu6MRtsai3JdkBr4YYEjghSHR7XtAvgKdX8li3DjfuU0vUwrsdCqBvnUw5eM8pir o0zavQtiTWmWqijLOea3o+3Uw8d4uDLiKW6BvfzKp+3RQOHfEtDWyI9P1TzTVuES 3wLAD42GgmpVW5b1C/wZpZg0o5zGYUOCMZNkuq5aIuIeYZPQhwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAMIvtjfNm9fgfLaSOYwPhmvn5wuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWMzMDU4Y2ItY2Q4MS0z ZWJhLTkzNDUtMDE1ZmNmODAzNGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBQsNjNHyX0nA/u9lmYx7Vrl+icCzm1e2x3JhGd Bv+OGzsOdhylXlMUST3PceejXWCvQfJTbXMa0DQsH1n5GuDO+urJ+aHh6rVj8t3e s0jYBWldWsfcc1Y6ueBnvdU5EsYGsPQsC7imJsjKm9s/gsjj3R9mZnq/eIOqu5jc gDsM3PyT7pslbz97QPm0h4aMFAtwxultm24t/0QDlfuC0htthYReRPDnrLo04L9C pjJ0P9vJui/ul/JFmD/2jJFj5KN6pFe8CatsKO5d7eawir8FrP9Yc/9qa9a3fkIB Cy93G1ERuacgPWDF7niCiM9Rce9UFv7piqzQSJFmUSuqs/nj -----END CERTIFICATE-----Generated at Wed Oct 29 22:44:33 2025 by rpki-client