$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0d68cfd3-c54c-3990-95a2-2a5c7c21f385.roa File: 0d68cfd3-c54c-3990-95a2-2a5c7c21f385.roa (raw, json) Hash identifier: vkCJF4f255OZf6Ipri2PLEcr921Y9+MzDPUKZ6bL+ZA= Subject key identifier: E2:6F:88:68:43:06:94:84:CC:37:74:90:A7:27:36:C5:D9:88:69:0B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B715CDC76AF236F1D8F7B4EC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0d68cfd3-c54c-3990-95a2-2a5c7c21f385.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 36622 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:dc:76:af:23:6f:1d:8f:7b:4e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=cd4e532d-3dfd-446d-97fa-150ce1647447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7b:95:2b:95:ba:cf:83:da:8b:88:41:1b:61: 4d:44:ae:a7:8a:cb:a2:b4:d4:c1:e2:c6:f3:51:e0: 70:ba:56:ac:55:46:65:c1:27:b6:81:22:95:d9:33: 5e:bf:f4:1a:85:cd:43:02:eb:ac:1b:68:47:b5:16: a2:41:a8:ee:ea:08:bf:d2:38:ae:0c:4c:86:59:9f: a8:73:59:dd:c1:d8:27:1b:98:c2:9f:63:8b:c4:7b: d7:15:86:a7:ec:03:93:19:ca:c8:8d:6b:60:fd:a3: d2:7e:60:e7:b8:7b:b7:03:6d:75:49:31:96:89:48: a0:f7:90:9f:f7:55:1e:8c:f8:ea:6d:05:d8:a1:59: 70:f5:44:30:a8:e6:a1:70:a4:f4:db:66:64:98:9b: 84:90:2e:5f:0e:eb:18:78:50:9b:1e:d7:82:8d:b1: 69:f9:8a:f7:57:bb:a4:2b:9b:ec:51:a6:d6:3e:34: c4:e7:75:b1:4a:93:b3:e2:29:08:28:1e:93:70:3a: cf:1a:35:d5:22:4b:77:57:63:b8:3a:cb:5c:ae:40: 58:a0:99:c7:78:22:69:c7:ff:e3:1d:6f:2a:73:11: 3b:bf:72:b9:8d:09:48:1f:39:a6:80:4c:c9:2b:01: a9:71:fa:c7:52:e1:c9:93:d6:ad:1e:e7:97:5f:ad: ad:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:6F:88:68:43:06:94:84:CC:37:74:90:A7:27:36:C5:D9:88:69:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0d68cfd3-c54c-3990-95a2-2a5c7c21f385.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:fa:dc:9a:43:c8:5e:f4:05:0f:bf:cc:10:e4:38:78:1d:b1: 1c:d7:d7:ee:e7:21:64:7f:9d:7d:d4:97:75:e7:87:ca:c7:3d: 03:92:5e:58:54:cd:70:85:5b:ff:db:5c:bb:2e:e1:d4:85:01: 23:e8:79:ae:4b:02:47:17:6a:1e:f2:15:9f:da:56:2b:80:d7: 89:f9:a8:9f:24:3b:a6:0e:30:a9:90:15:02:b8:6f:64:8f:25: de:85:ba:89:9b:58:2e:2b:78:43:8a:2c:dd:00:2c:f7:32:49: 89:aa:77:2f:6d:60:0b:ec:d1:e6:b7:c9:67:78:e2:2e:14:6a: 88:00:76:74:4d:1c:8e:10:17:bc:85:5e:0b:ac:b0:95:d9:5b: 08:6a:07:a3:53:1a:6f:46:fd:2c:72:1f:de:bc:b0:fc:c4:a9: fb:6f:69:f8:5d:ed:84:17:01:71:9d:81:59:e5:7e:a7:19:da: cc:2b:60:f4:bc:36:64:a6:fa:99:0e:39:d5:d8:ed:dc:2f:c1: df:34:fa:39:a8:84:d3:b2:23:02:8b:62:bf:c4:d8:7c:be:2a: 82:fb:4f:73:4a:b9:7e:06:d4:86:2d:3e:39:b5:a9:a8:00:0e: d9:68:b9:30:f4:2f:7d:92:86:69:e6:2f:3f:33:2d:a3:3f:83: ae:f0:c1:e2 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtxXNx2ryNvHY97TsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk Y2Q0ZTUzMmQtM2RmZC00NDZkLTk3ZmEtMTUwY2UxNjQ3NDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HuVK5W6z4Pai4hBG2FNRK6nisuitNTB4sbz UeBwulasVUZlwSe2gSKV2TNev/Qahc1DAuusG2hHtRaiQaju6gi/0jiuDEyGWZ+o c1ndwdgnG5jCn2OLxHvXFYan7AOTGcrIjWtg/aPSfmDnuHu3A211STGWiUig95Cf 91UejPjqbQXYoVlw9UQwqOahcKT022ZkmJuEkC5fDusYeFCbHteCjbFp+Yr3V7uk K5vsUabWPjTE53WxSpOz4ikIKB6TcDrPGjXVIkt3V2O4OstcrkBYoJnHeCJpx//j HW8qcxE7v3K5jQlIHzmmgEzJKwGpcfrHUuHJk9atHueXX62txwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOJviGhDBpSEzDd0kKcnNsXZiGkLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGQ2OGNmZDMtYzU0Yy0z OTkwLTk1YTItMmE1YzdjMjFmMzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAy+tyaQ8he9AUPv8wQ5Dh4HbEc19fu5yFkf519 1Jd154fKxz0Dkl5YVM1whVv/21y7LuHUhQEj6HmuSwJHF2oe8hWf2lYrgNeJ+aif JDumDjCpkBUCuG9kjyXehbqJm1guK3hDiizdACz3MkmJqncvbWAL7NHmt8lneOIu FGqIAHZ0TRyOEBe8hV4LrLCV2VsIagejUxpvRv0sch/evLD8xKn7b2n4Xe2EFwFx nYFZ5X6nGdrMK2D0vDZkpvqZDjnV2O3cL8HfNPo5qITTsiMCi2K/xNh8viqC+09z Srl+BtSGLT45tamoAA7ZaLkw9C99koZp5i8/My2jP4Ou8MHi -----END CERTIFICATE-----Generated at Mon Oct 20 10:24:49 2025 by rpki-client