$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef9f8254-08ae-3bc5-ab1e-532fcf0268d0.roa File: ef9f8254-08ae-3bc5-ab1e-532fcf0268d0.roa (raw, json) Hash identifier: wPYBkOhY3kSxOXRyZEars8tK1icZAd7zwox+skgYl60= Subject key identifier: C1:FC:17:13:AA:71:57:BB:EE:FB:15:10:38:E8:EE:84:8D:8D:BF:37 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E78E4DF798100AEAFFDA60 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef9f8254-08ae-3bc5-ab1e-532fcf0268d0.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 397203 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:8e:4d:f7:98:10:0a:ea:ff:da:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=a40b6020-ffd7-4cd2-9373-d3d8a8c76a90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fb:73:57:76:03:b4:34:35:21:13:4c:40:32: 04:02:2e:87:af:03:a7:b2:65:d3:44:ba:9b:e1:22: 0d:2f:db:ca:1b:e6:34:e9:d4:9d:c9:95:e1:24:96: be:30:18:33:9a:3a:49:d7:10:84:4b:b7:53:3a:96: 87:2b:dc:94:83:27:da:68:fd:79:98:ee:43:13:fd: cd:11:f5:c3:79:e8:74:06:bc:0b:4e:28:70:0c:cf: 85:da:22:48:cc:5c:73:0d:ee:a1:91:c0:cf:e2:9e: e4:52:94:67:7d:08:35:54:3a:65:01:96:e8:48:04: e8:4f:2a:c2:a8:b2:7d:61:5d:c2:49:48:5a:34:07: af:93:fe:45:b0:ab:92:9c:bd:30:13:03:76:64:a3: 27:a1:32:e9:c0:60:a7:a6:97:dd:d2:0f:35:b6:1d: fe:5d:14:95:e4:6a:05:95:f1:d3:6c:a7:b9:13:68: bb:95:bc:be:5f:c8:cd:4b:ee:c6:b7:7c:68:56:b7: fc:46:41:24:64:42:a0:06:66:17:53:12:97:f9:13: 32:a9:87:a6:4a:1a:7d:36:b9:08:e0:f8:4f:a7:70: 53:c7:4e:d5:c7:fd:1d:f3:ea:01:fd:25:4b:b2:0f: 1d:34:79:60:93:68:11:be:17:32:fe:b9:c6:d9:d7: 38:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:FC:17:13:AA:71:57:BB:EE:FB:15:10:38:E8:EE:84:8D:8D:BF:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef9f8254-08ae-3bc5-ab1e-532fcf0268d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:13:89:61:03:92:9b:0b:25:5f:78:d6:76:07:26:cf:fe:3d: 89:b8:78:35:be:d4:32:4d:72:37:79:17:8c:af:26:a7:e4:5e: 81:9d:de:09:f5:37:06:83:62:9c:a4:49:76:23:59:3b:c4:f9: 89:8c:26:f8:b5:fb:d2:52:7b:44:05:b0:8d:97:48:8e:2d:b6: 16:c9:0a:a6:3b:24:72:9d:e0:42:d4:f9:c5:20:eb:89:49:e8: d2:d6:fa:c7:ac:2a:43:bf:64:00:09:6b:b6:8c:b8:d7:af:9a: 43:2b:7d:50:25:f3:cb:4a:24:38:a0:38:65:3b:c4:46:89:1b: e1:6c:e2:04:c5:a4:52:cb:13:db:bd:2a:f7:39:17:7d:77:1c: eb:e3:b9:83:cc:c4:69:17:f7:dc:0b:25:a5:e0:69:92:23:f3: af:01:39:40:45:84:1c:33:3c:1c:d7:1a:f8:13:4e:12:15:99: 01:80:cc:fe:fc:1b:42:4b:ab:a5:16:ad:de:60:be:08:23:c0: e1:2c:cc:32:75:66:8f:27:cf:1b:f7:dc:a6:87:7c:b5:3d:80: 8f:f9:ab:bc:b0:e2:08:3f:d1:55:6c:f0:e6:b3:06:6d:e9:ee: 5e:fe:1a:d7:79:1c:a4:92:cf:2d:01:16:47:18:cf:0a:cf:5e: 6a:05:f2:ae -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE545N95gQCur/2mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk YTQwYjYwMjAtZmZkNy00Y2QyLTkzNzMtZDNkOGE4Yzc2YTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArftzV3YDtDQ1IRNMQDIEAi6HrwOnsmXTRLqb 4SINL9vKG+Y06dSdyZXhJJa+MBgzmjpJ1xCES7dTOpaHK9yUgyfaaP15mO5DE/3N EfXDeeh0BrwLTihwDM+F2iJIzFxzDe6hkcDP4p7kUpRnfQg1VDplAZboSAToTyrC qLJ9YV3CSUhaNAevk/5FsKuSnL0wEwN2ZKMnoTLpwGCnppfd0g81th3+XRSV5GoF lfHTbKe5E2i7lby+X8jNS+7Gt3xoVrf8RkEkZEKgBmYXUxKX+RMyqYemShp9NrkI 4PhPp3BTx07Vx/0d8+oB/SVLsg8dNHlgk2gRvhcy/rnG2dc4swIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMH8FxOqcVe77vsVEDjo7oSNjb83MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWY5ZjgyNTQtMDhhZS0z YmM1LWFiMWUtNTMyZmNmMDI2OGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBNE4lhA5KbCyVfeNZ2BybP/j2JuHg1vtQyTXI3 eReMryan5F6Bnd4J9TcGg2KcpEl2I1k7xPmJjCb4tfvSUntEBbCNl0iOLbYWyQqm OyRyneBC1PnFIOuJSejS1vrHrCpDv2QACWu2jLjXr5pDK31QJfPLSiQ4oDhlO8RG iRvhbOIExaRSyxPbvSr3ORd9dxzr47mDzMRpF/fcCyWl4GmSI/OvATlARYQcMzwc 1xr4E04SFZkBgMz+/BtCS6ulFq3eYL4II8DhLMwydWaPJ88b99ymh3y1PYCP+au8 sOIIP9FVbPDmswZt6e5e/hrXeRykks8tARZHGM8Kz15qBfKu -----END CERTIFICATE-----Generated at Wed Oct 29 20:36:34 2025 by rpki-client