$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/11a3ab94-5d8b-3054-a04e-5359f29c7f40.roa File: 11a3ab94-5d8b-3054-a04e-5359f29c7f40.roa (raw, json) Hash identifier: pb/+qTdh3CwuSlPjvSqzGORA4YT+1K1N3U/QjdiPyRM= Subject key identifier: 57:56:88:28:DE:60:A0:38:44:5F:EF:2E:33:3A:DF:78:0B:1A:33:5E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B3556FEE8B782726D15ECC340 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/11a3ab94-5d8b-3054-a04e-5359f29c7f40.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 25485 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:fe:e8:b7:82:72:6d:15:ec:c3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=d2f73f12-a78a-40c9-8d7b-31e4b7711060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:af:45:72:57:a1:16:f1:18:95:c7:a8:47:1d: 84:5f:61:9d:fa:44:62:a5:4b:32:b8:4e:a5:32:b8: 56:67:4a:b4:04:d9:76:d5:3c:a1:f2:c5:4c:b2:91: 49:c0:6f:a1:40:5a:6c:6f:86:01:f7:68:43:e1:01: 93:56:9e:a3:68:3b:5c:45:92:db:7c:e7:79:59:29: dc:84:72:32:4a:99:37:78:91:b3:11:51:68:cd:9d: ce:1f:3e:12:e6:30:81:9c:8d:a6:29:5d:e3:09:9b: ef:f2:f1:08:24:44:eb:32:15:bb:5c:3e:aa:16:1e: 75:36:d9:68:c9:df:f6:92:1c:82:2b:d9:c3:31:d5: d8:c4:fe:da:d6:eb:21:3d:15:6f:1c:45:35:d5:63: c9:28:ba:36:c0:97:7a:f0:72:ea:fb:80:c3:1e:3b: 21:18:58:7b:6c:ca:7a:52:bc:6c:dc:ae:9c:57:c6: af:9e:2d:3b:1d:58:5e:b3:4e:d9:9d:7e:bd:59:8b: 43:c9:cd:bb:8a:bd:a0:32:b2:2a:eb:09:ca:66:ca: f7:75:38:2e:d2:4e:17:33:9d:82:52:7d:24:28:f6: 4a:70:4d:86:2d:3d:1e:55:0b:1c:6b:64:af:7a:65: 0d:66:7b:c3:17:20:0d:c1:94:f3:62:b2:78:22:b7: 6f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:56:88:28:DE:60:A0:38:44:5F:EF:2E:33:3A:DF:78:0B:1A:33:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/11a3ab94-5d8b-3054-a04e-5359f29c7f40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:bf:6b:3d:c4:95:9c:ed:41:37:59:b5:51:5a:16:79:bc:f5: 0d:88:0c:38:f2:d8:c8:2f:df:0c:5f:89:0b:d0:57:98:cb:de: b7:d8:36:1c:76:7b:21:82:64:f5:60:82:95:b3:e2:b4:ec:bd: ff:99:5c:9c:74:0c:93:0e:87:b2:db:69:52:d0:e8:2b:a5:c1: df:34:51:b3:34:3c:2f:71:7a:3a:dc:cd:42:ee:f0:79:fc:0c: b5:17:a5:f8:74:06:d3:10:89:83:3b:fb:d1:cd:8d:a4:d0:f8: 4f:ef:9c:29:b8:3e:88:1e:ca:fa:93:16:94:dd:47:81:1a:46: bb:a7:5a:a7:6b:44:25:15:e0:46:e6:4b:cb:06:c8:2e:3a:a6: 36:50:4a:48:2e:e1:2f:43:d3:2c:74:f3:7e:83:50:f4:36:38: c6:8c:74:5c:04:9e:45:4d:d4:d7:0f:84:92:06:49:01:a1:2c: 39:8b:44:4c:f0:ae:9b:37:60:99:11:74:0c:0f:bd:2e:5c:64: f7:bd:8f:25:77:d1:c8:21:11:b5:67:4b:7e:1e:25:fc:bb:57: 0e:8b:90:c7:66:17:57:c8:80:bc:72:14:43:c7:6d:2d:d9:48: de:41:6a:c6:1e:c6:06:34:73:25:80:09:ac:b1:dc:67:49:96: f7:cb:40:c2 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEs1Vv7ot4JybRXsw0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk ZDJmNzNmMTItYTc4YS00MGM5LThkN2ItMzFlNGI3NzExMDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA569FclehFvEYlceoRx2EX2Gd+kRipUsyuE6l MrhWZ0q0BNl21Tyh8sVMspFJwG+hQFpsb4YB92hD4QGTVp6jaDtcRZLbfOd5WSnc hHIySpk3eJGzEVFozZ3OHz4S5jCBnI2mKV3jCZvv8vEIJETrMhW7XD6qFh51Ntlo yd/2khyCK9nDMdXYxP7a1ushPRVvHEU11WPJKLo2wJd68HLq+4DDHjshGFh7bMp6 Urxs3K6cV8avni07HVhes07ZnX69WYtDyc27ir2gMrIq6wnKZsr3dTgu0k4XM52C Un0kKPZKcE2GLT0eVQsca2SvemUNZnvDFyANwZTzYrJ4Irdv/QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFdWiCjeYKA4RF/vLjM633gLGjNeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTFhM2FiOTQtNWQ4Yi0z MDU0LWEwNGUtNTM1OWYyOWM3ZjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAsv2s9xJWc7UE3WbVRWhZ5vPUNiAw48tjIL98M X4kL0FeYy9632DYcdnshgmT1YIKVs+K07L3/mVycdAyTDoey22lS0OgrpcHfNFGz NDwvcXo63M1C7vB5/Ay1F6X4dAbTEImDO/vRzY2k0PhP75wpuD6IHsr6kxaU3UeB Gka7p1qna0QlFeBG5kvLBsguOqY2UEpILuEvQ9MsdPN+g1D0NjjGjHRcBJ5FTdTX D4SSBkkBoSw5i0RM8K6bN2CZEXQMD70uXGT3vY8ld9HIIRG1Z0t+HiX8u1cOi5DH ZhdXyIC8chRDx20t2UjeQWrGHsYGNHMlgAmssdxnSZb3y0DC -----END CERTIFICATE-----Generated at Mon Oct 20 08:12:16 2025 by rpki-client