$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f30990ec-db44-3f17-ad47-6a3df43a0baa.roa File: f30990ec-db44-3f17-ad47-6a3df43a0baa.roa (raw, json) Hash identifier: ZnFUPvXdI5jp1D1mD5DqjDs9Qw/whRoKcbK6TRXUr+A= Subject key identifier: 78:25:A0:DB:2A:AD:36:F2:B5:82:2D:90:3F:47:85:2A:A5:77:62:F9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B8EACFA86E37863FA77917800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f30990ec-db44-3f17-ad47-6a3df43a0baa.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 7342 IP address blocks: 2620:74:ac::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:fa:86:e3:78:63:fa:77:91:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=99910541-5bbf-4503-a124-89aabc8e088f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:02:09:38:82:11:0e:c5:49:03:05:61:3a:0e: 33:7a:69:ea:2f:a7:19:5b:25:a0:03:06:40:ae:ee: c5:18:13:19:65:a3:99:24:df:e6:60:33:b6:15:4e: 80:fc:85:32:f5:f2:b6:f2:e8:19:ad:bf:a8:99:19: dc:ea:93:95:8e:a3:03:85:f0:4e:6c:37:a0:d8:89: 76:8a:81:e2:8d:82:08:36:a6:6c:36:4a:6b:02:10: b1:ba:40:c2:d1:af:59:96:07:3a:8e:5a:a2:44:16: ef:30:b7:0b:8b:65:c1:af:ce:23:4f:03:7f:30:75: 1d:4a:d4:e2:ee:36:77:a7:f2:17:eb:f2:d0:bd:eb: a9:b9:c3:33:25:42:db:c9:5a:6a:17:4e:d7:03:b5: fe:b7:b5:c9:85:79:59:24:cf:5e:c9:53:00:31:7a: a2:d6:9c:03:c3:08:fe:fb:12:1b:84:26:2b:9c:ea: be:19:ba:4d:92:6f:79:50:23:2b:c2:15:49:29:c4: 36:a9:4c:4e:1a:88:5d:53:19:f5:64:20:e8:95:83: 4d:fb:e5:6d:03:10:4d:b2:53:bd:af:86:1e:41:af: 68:c6:b8:94:ad:72:9a:08:d9:19:80:92:14:af:b2: ef:e1:e9:39:f4:33:ce:b5:09:6a:68:ee:ee:b0:e0: f6:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:25:A0:DB:2A:AD:36:F2:B5:82:2D:90:3F:47:85:2A:A5:77:62:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f30990ec-db44-3f17-ad47-6a3df43a0baa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:ac::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:9a:d9:63:e2:ab:90:8b:32:91:49:a0:e9:45:14:77:b9:ee: e1:27:37:35:5b:28:d5:84:a1:6a:3f:41:97:c5:3c:48:d1:ce: 40:3e:69:fb:a6:fa:eb:29:9f:b1:50:37:42:8f:54:f9:37:d9: 83:c3:b7:64:05:b1:af:09:99:6a:b6:69:bc:dd:89:8a:7e:4e: a7:a6:6c:5c:61:cf:65:fc:6b:2a:7b:22:8c:f0:84:23:09:50: 08:31:85:cd:34:1f:ec:0a:20:f4:3f:2b:86:4d:ea:3b:c3:79: da:3a:40:f4:8c:9f:5a:61:ae:b0:fb:fa:f9:cf:05:79:11:e8: 77:7e:b7:c8:4f:dc:19:03:fe:6f:12:a4:7e:a9:c4:fe:d2:2b: 94:2d:9a:be:76:f4:b0:f5:d5:af:8e:e5:6e:60:88:8e:c5:b7: 41:b8:06:f5:20:16:de:62:0b:9e:64:ed:86:8f:33:37:ed:90: b3:0f:5c:51:62:62:89:c5:af:66:7a:bf:b9:3e:f9:1f:5d:fd: 91:ba:fb:4e:d8:85:50:1e:35:ea:40:e6:8c:87:1c:49:a0:6f: 46:4a:d1:42:c0:3e:a8:05:26:14:a0:16:13:fa:13:3d:b2:cf: 8a:fa:b6:06:1e:48:44:3f:a7:e6:9f:fe:1c:16:32:db:66:a5: c2:01:ff:78 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuOrPqG43hj+neReAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk OTk5MTA1NDEtNWJiZi00NTAzLWExMjQtODlhYWJjOGUwODhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQIJOIIRDsVJAwVhOg4zemnqL6cZWyWgAwZA ru7FGBMZZaOZJN/mYDO2FU6A/IUy9fK28ugZrb+omRnc6pOVjqMDhfBObDeg2Il2 ioHijYIINqZsNkprAhCxukDC0a9Zlgc6jlqiRBbvMLcLi2XBr84jTwN/MHUdStTi 7jZ3p/IX6/LQveupucMzJULbyVpqF07XA7X+t7XJhXlZJM9eyVMAMXqi1pwDwwj+ +xIbhCYrnOq+GbpNkm95UCMrwhVJKcQ2qUxOGohdUxn1ZCDolYNN++VtAxBNslO9 r4YeQa9oxriUrXKaCNkZgJIUr7Lv4ek59DPOtQlqaO7usOD2MQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHgloNsqrTbytYItkD9HhSqld2L5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjMwOTkwZWMtZGI0NC0z ZjE3LWFkNDctNmEzZGY0M2EwYmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdACs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAICa2WPiq5CLMpFJoOlFFHe57uEnNzVbKNWEoWo/QZfFPEjRzkA+ afum+uspn7FQN0KPVPk32YPDt2QFsa8JmWq2abzdiYp+TqembFxhz2X8ayp7Iozw hCMJUAgxhc00H+wKIPQ/K4ZN6jvDedo6QPSMn1phrrD7+vnPBXkR6Hd+t8hP3BkD /m8SpH6pxP7SK5Qtmr529LD11a+O5W5giI7Ft0G4BvUgFt5iC55k7YaPMzftkLMP XFFiYonFr2Z6v7k++R9d/ZG6+07YhVAeNepA5oyHHEmgb0ZK0ULAPqgFJhSgFhP6 Ez2yz4r6tgYeSEQ/p+af/hwWMttmpcIB/3g= -----END CERTIFICATE-----Generated at Wed Oct 29 20:23:49 2025 by rpki-client