$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1003cec1-2b1e-3bcb-a082-74776022bde3.roa File: 1003cec1-2b1e-3bcb-a082-74776022bde3.roa (raw, json) Hash identifier: kuw6sE/9sJBjd8XfL2jy8N3AXNA0HsuqGkDRo90XTBs= Subject key identifier: AB:64:82:73:ED:DF:FA:74:56:54:A6:BC:21:AF:8F:75:C4:2F:AE:E5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B35570173C8EF833AF92187C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1003cec1-2b1e-3bcb-a082-74776022bde3.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 396616 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:57:01:73:c8:ef:83:3a:f9:21:87:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=77209dd3-2ba9-4a7c-8464-99bb1207daa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5c:a8:4f:11:d0:e4:52:e2:94:49:73:13:f7: 3f:88:1e:6a:fe:ad:ae:01:d2:aa:4e:b0:3a:02:03: 71:0c:57:0c:64:87:82:19:d6:2e:f5:8c:92:bc:08: 0b:48:64:7e:52:4c:19:1b:3b:23:93:16:ae:6b:42: 73:cb:5d:f9:8f:0f:a8:59:da:37:6a:ca:64:aa:e0: c2:25:0a:db:4c:50:d1:b3:5c:e1:3e:a8:4e:c0:56: 72:1a:5a:e4:e8:ec:b2:99:93:74:29:14:72:3c:60: 8f:ef:ba:c3:92:e1:e6:a9:86:e9:0f:c7:95:88:f0: 6f:6c:43:e7:98:9c:67:a7:72:65:66:1e:ff:e3:31: db:73:b5:86:69:c9:a0:17:06:01:c1:e9:07:94:40: 7d:cf:bd:9a:4f:e1:93:67:32:fa:25:a5:62:fe:a6: 8b:fe:8d:c5:a3:44:66:7e:57:ab:74:e3:58:69:73: 3a:a8:0d:ae:4a:ef:45:cc:3f:0f:62:47:b9:73:74: 4d:77:e0:67:64:da:a6:f2:db:b0:69:00:71:1e:c7: e4:5b:60:f1:0c:ae:e7:95:78:27:89:39:53:7f:75: 43:bf:23:3f:35:3a:63:cc:4f:11:3b:75:3e:43:40: a0:99:f6:7f:d7:5c:ca:78:94:bf:08:17:8a:57:09: d6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:64:82:73:ED:DF:FA:74:56:54:A6:BC:21:AF:8F:75:C4:2F:AE:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1003cec1-2b1e-3bcb-a082-74776022bde3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:09:48:49:e4:2c:69:7d:8f:2c:56:06:4c:c6:13:ff:cb:2b: 65:a2:88:70:6c:c2:0a:fc:f2:07:3e:db:f3:a7:59:33:6b:d9: ad:fb:63:a5:31:13:8b:79:78:48:a6:37:fe:31:55:be:7f:a0: 88:60:c0:f5:e9:47:1f:16:c9:37:6f:b2:9b:34:2e:04:4c:66: 24:57:e2:89:36:08:3b:9b:a2:fd:67:b7:b8:a4:a3:3c:f5:2f: 19:57:8a:d3:a2:8a:0a:d7:7c:5a:ab:09:74:c9:ec:56:92:38: 17:96:56:94:9f:8b:4c:2d:64:e8:28:43:cd:e5:0a:b7:cc:bf: 87:bf:79:f4:f8:67:c9:48:f5:05:d9:90:94:df:de:58:81:9a: 53:fd:b7:18:a3:f1:16:5b:c7:fd:5c:b2:78:fe:13:ca:4d:92: eb:80:38:9f:f1:5b:ac:7a:1e:44:40:65:6f:b6:62:32:cb:59: 00:92:c5:21:e5:dd:6a:b0:6c:c5:da:e8:c5:42:aa:37:f3:79: bb:a9:48:5d:60:82:3a:f2:d8:1d:85:cc:b8:b4:2c:f7:6d:e9: 17:cb:84:d5:c1:c5:79:10:85:54:e8:e4:ed:ec:12:a9:7c:4d: 35:a1:e3:3c:46:6d:e2:4c:50:d3:d5:9d:52:e5:af:b9:bb:24: 08:c7:96:c2 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEs1VwFzyO+DOvkhh8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk NzcyMDlkZDMtMmJhOS00YTdjLTg0NjQtOTliYjEyMDdkYWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1yoTxHQ5FLilElzE/c/iB5q/q2uAdKqTrA6 AgNxDFcMZIeCGdYu9YySvAgLSGR+UkwZGzsjkxaua0Jzy135jw+oWdo3aspkquDC JQrbTFDRs1zhPqhOwFZyGlrk6OyymZN0KRRyPGCP77rDkuHmqYbpD8eViPBvbEPn mJxnp3JlZh7/4zHbc7WGacmgFwYBwekHlEB9z72aT+GTZzL6JaVi/qaL/o3Fo0Rm flerdONYaXM6qA2uSu9FzD8PYke5c3RNd+BnZNqm8tuwaQBxHsfkW2DxDK7nlXgn iTlTf3VDvyM/NTpjzE8RO3U+Q0CgmfZ/11zKeJS/CBeKVwnWRwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKtkgnPt3/p0VlSmvCGvj3XEL67lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTAwM2NlYzEtMmIxZS0z YmNiLWEwODItNzQ3NzYwMjJiZGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB7CUhJ5CxpfY8sVgZMxhP/yytloohwbMIK/PIH Ptvzp1kza9mt+2OlMROLeXhIpjf+MVW+f6CIYMD16UcfFsk3b7KbNC4ETGYkV+KJ Ngg7m6L9Z7e4pKM89S8ZV4rToooK13xaqwl0yexWkjgXllaUn4tMLWToKEPN5Qq3 zL+Hv3n0+GfJSPUF2ZCU395YgZpT/bcYo/EWW8f9XLJ4/hPKTZLrgDif8Vuseh5E QGVvtmIyy1kAksUh5d1qsGzF2ujFQqo383m7qUhdYII68tgdhcy4tCz3bekXy4TV wcV5EIVU6OTt7BKpfE01oeM8Rm3iTFDT1Z1S5a+5uyQIx5bC -----END CERTIFICATE-----Generated at Mon Oct 20 15:54:55 2025 by rpki-client