$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f11448a6-a06a-3ba1-854f-63ab44df87ab.roa File: f11448a6-a06a-3ba1-854f-63ab44df87ab.roa (raw, json) Hash identifier: L48+dYM9j3dcY5W58QeJrqHm4Vobip8MSgwAx5stwTw= Subject key identifier: EF:1C:FD:91:F9:33:46:58:C9:AF:45:FD:28:6A:14:98:C5:3B:BF:E0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B99D7DF76E6E11F1E0FB328C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f11448a6-a06a-3ba1-854f-63ab44df87ab.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 397198 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:df:76:e6:e1:1f:1e:0f:b3:28:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=cc80299e-75ef-4238-b171-1f719ee65e29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ae:d3:ea:0f:30:f7:dd:2f:c5:de:e8:76:a8: b3:d0:e1:8d:6d:a7:86:27:90:00:6a:85:66:44:9c: 4a:24:17:b4:36:ce:bd:6f:92:89:58:93:60:15:40: 2e:55:d9:60:bb:ce:69:2e:89:01:64:5a:04:2e:d3: ae:73:0e:45:68:f2:5d:ed:93:12:91:30:d9:21:96: c2:53:04:ae:c1:11:17:bc:7c:1a:58:22:01:2e:c6: c3:75:fa:bc:6b:42:f1:88:25:02:55:cb:bd:27:98: cd:23:fe:be:c1:c6:c3:d3:b6:e3:81:33:34:90:18: 69:58:3a:9b:b0:ac:8b:81:48:5f:7c:56:62:da:e8: cf:03:cd:d0:bb:94:9c:ea:0d:2a:28:5f:aa:13:d7: d3:84:96:91:84:18:42:07:c3:cc:41:7d:ee:d1:12: e5:e9:95:20:e9:b6:34:ca:0e:3d:ce:1d:9c:59:b1: e7:a2:7e:e6:be:38:de:eb:bc:15:06:cb:2f:66:18: b9:42:36:46:91:6e:d0:56:08:68:61:f2:d7:ab:e1: 7f:8d:45:40:e2:cd:8d:43:ea:38:61:f9:9c:eb:8c: be:d3:8b:b1:b9:99:b7:66:05:96:b0:1b:58:d2:22: d4:19:f9:94:52:25:88:c8:be:bc:fa:36:74:4b:ca: 8e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:1C:FD:91:F9:33:46:58:C9:AF:45:FD:28:6A:14:98:C5:3B:BF:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f11448a6-a06a-3ba1-854f-63ab44df87ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:66:4b:06:86:61:9b:32:50:10:21:6a:cb:9e:1e:d0:7d:45: 2b:89:46:49:e1:1d:41:67:0a:f2:ca:f1:ab:df:08:99:cc:44: 34:4d:51:ea:e3:58:2b:d0:99:20:33:e4:17:43:a1:c2:fd:2f: 0e:96:2e:8d:96:29:ae:ac:fa:1d:83:8e:de:fb:cd:f1:f7:8f: 62:80:96:31:3a:eb:c8:21:5b:74:4f:ca:56:36:2d:0c:58:ff: 8b:02:0b:df:d1:56:c4:65:88:a5:d2:b4:9b:ef:e9:11:03:5e: e0:20:b3:87:e6:e8:46:f1:b0:b2:6c:dd:c9:1a:53:5b:75:1c: 56:57:38:02:03:8c:69:cb:c3:32:1f:e1:3c:7e:95:5b:ce:28: 9f:bd:ef:cc:39:4c:8c:8d:22:c5:7a:e2:39:c4:7e:36:ec:ae: 10:ca:0f:26:b5:a1:d6:e2:a6:72:e9:d6:38:ec:c0:2c:a9:f7: d3:ed:ae:be:b9:e0:af:f1:e4:76:16:14:ec:1d:16:68:02:fc: 18:e4:b0:f9:2e:99:43:cd:d4:a5:f1:ff:34:38:ea:ee:af:0b: 93:8f:2e:ed:c4:38:d9:dc:59:b6:c3:34:53:25:5e:ed:0d:e8: fa:de:71:aa:83:27:10:08:21:27:25:b0:ee:20:0a:d8:02:fd: 76:35:38:db -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuZ19925uEfHg+zKMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk Y2M4MDI5OWUtNzVlZi00MjM4LWIxNzEtMWY3MTllZTY1ZTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl67T6g8w990vxd7odqiz0OGNbaeGJ5AAaoVm RJxKJBe0Ns69b5KJWJNgFUAuVdlgu85pLokBZFoELtOucw5FaPJd7ZMSkTDZIZbC UwSuwREXvHwaWCIBLsbDdfq8a0LxiCUCVcu9J5jNI/6+wcbD07bjgTM0kBhpWDqb sKyLgUhffFZi2ujPA83Qu5Sc6g0qKF+qE9fThJaRhBhCB8PMQX3u0RLl6ZUg6bY0 yg49zh2cWbHnon7mvjje67wVBssvZhi5QjZGkW7QVghoYfLXq+F/jUVA4s2NQ+o4 Yfmc64y+04uxuZm3ZgWWsBtY0iLUGfmUUiWIyL68+jZ0S8qOiwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFO8c/ZH5M0ZYya9F/ShqFJjFO7/gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjExNDQ4YTYtYTA2YS0z YmExLTg1NGYtNjNhYjQ0ZGY4N2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBBZksGhmGbMlAQIWrLnh7QfUUriUZJ4R1BZwry yvGr3wiZzEQ0TVHq41gr0JkgM+QXQ6HC/S8Oli6NlimurPodg47e+83x949igJYx OuvIIVt0T8pWNi0MWP+LAgvf0VbEZYil0rSb7+kRA17gILOH5uhG8bCybN3JGlNb dRxWVzgCA4xpy8MyH+E8fpVbziifve/MOUyMjSLFeuI5xH427K4Qyg8mtaHW4qZy 6dY47MAsqffT7a6+ueCv8eR2FhTsHRZoAvwY5LD5LplDzdSl8f80OOrurwuTjy7t xDjZ3Fm2wzRTJV7tDej63nGqgycQCCEnJbDuIArYAv12NTjb -----END CERTIFICATE-----Generated at Wed Oct 29 20:23:51 2025 by rpki-client