$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/19c9c592-59fb-3320-8350-0573f714f80c.roa File: 19c9c592-59fb-3320-8350-0573f714f80c.roa (raw, json) Hash identifier: 0K7WpMrBrsc1HWVIcmBTTB+julBHvLsFNe2nEms1/wI= Subject key identifier: D3:C3:F3:E5:D6:98:39:FA:DC:60:00:C0:DE:F0:D6:10:A9:7E:D0:DB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E798C8DACB73F5613FCD00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/19c9c592-59fb-3320-8350-0573f714f80c.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 396600 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:98:c8:da:cb:73:f5:61:3f:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=3e12768e-7d04-49ae-9a09-cd3e96b08248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4c:2f:77:40:e6:75:ac:18:11:9d:aa:e0:9c: 7c:b5:26:6d:fc:b8:60:6a:77:1f:47:cb:3f:e4:57: 03:01:21:34:9b:37:2c:37:1a:af:9b:8f:82:db:68: c6:32:5f:bb:65:55:62:02:bc:0b:3d:ab:95:0a:68: cf:50:82:89:f7:36:e8:22:8e:0f:cd:48:bb:04:e3: 2e:c7:bf:90:d8:b3:b7:9f:ed:b4:1f:80:d0:76:6b: f3:d2:40:60:1e:9e:11:bf:b1:74:df:d8:ec:61:54: da:00:b2:26:1e:6c:5b:87:ac:23:fd:5e:51:c0:b6: 24:d8:15:b0:70:7d:6a:4f:3a:bb:5f:fe:1a:6f:37: a8:44:9f:59:93:dc:62:bd:54:ec:34:f6:c5:79:7a: d2:bf:c4:db:53:01:0e:b5:23:50:31:94:3b:ea:8e: 89:fd:ca:39:ef:a4:c1:59:50:40:38:bf:a3:f4:b9: e4:f7:12:f1:cb:2b:d1:55:68:56:ce:c6:e6:f2:1a: 4a:92:74:1c:ec:e2:54:de:f8:91:04:0a:2f:50:49: 34:94:23:8c:d1:48:94:13:e9:38:81:cd:c1:bd:31: 13:92:c0:79:8c:48:1e:3e:dc:94:23:b8:a0:06:dd: 7f:e5:ef:2f:7b:88:1c:df:c5:9f:8d:68:97:a6:4f: 4e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C3:F3:E5:D6:98:39:FA:DC:60:00:C0:DE:F0:D6:10:A9:7E:D0:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/19c9c592-59fb-3320-8350-0573f714f80c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:56:62:3a:53:cc:6b:13:1a:ce:1a:7f:44:0f:f5:63:eb:dd: 0f:8e:61:ad:a4:25:15:fe:1a:35:bb:f2:65:d1:fd:f0:77:62: f9:53:9c:d8:09:58:c3:4a:4f:dd:0a:83:3d:be:a3:64:4b:b0: dd:91:21:c3:c4:bf:4f:63:a0:18:c4:b2:53:02:33:48:82:1e: 96:de:91:43:ad:57:5a:24:83:22:ce:55:c7:12:86:6d:e2:f2: 05:15:85:55:cf:fe:23:47:22:dc:09:0c:50:5b:f3:4f:08:5d: 01:f0:f3:ef:4e:36:d3:58:be:af:f3:07:bd:fd:3f:06:9a:43: bf:0e:a0:23:91:2c:b5:05:a6:22:55:45:db:0d:b8:6d:2f:07: b2:78:d6:ca:1c:26:bd:22:f2:1c:fb:09:e0:6e:62:53:8e:64: cc:92:4d:33:4c:02:d8:47:c0:e1:f2:33:1c:66:bb:f6:09:0b: 8a:b2:aa:57:3f:c4:b7:f0:03:ec:76:4f:fa:1f:09:74:c4:62: ca:a5:db:23:eb:19:ee:5c:a1:83:b1:84:3b:2f:1d:dc:b5:45: 26:84:f7:be:ab:69:43:90:a3:ae:7a:a1:d7:35:73:a3:34:21: 19:ac:d6:60:0a:d2:69:aa:4d:57:87:94:0c:9b:7d:53:df:4a: 13:d6:49:6c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE55jI2stz9WE/zQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk M2UxMjc2OGUtN2QwNC00OWFlLTlhMDktY2QzZTk2YjA4MjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUwvd0DmdawYEZ2q4Jx8tSZt/LhgancfR8s/ 5FcDASE0mzcsNxqvm4+C22jGMl+7ZVViArwLPauVCmjPUIKJ9zboIo4PzUi7BOMu x7+Q2LO3n+20H4DQdmvz0kBgHp4Rv7F039jsYVTaALImHmxbh6wj/V5RwLYk2BWw cH1qTzq7X/4abzeoRJ9Zk9xivVTsNPbFeXrSv8TbUwEOtSNQMZQ76o6J/co576TB WVBAOL+j9Lnk9xLxyyvRVWhWzsbm8hpKknQc7OJU3viRBAovUEk0lCOM0UiUE+k4 gc3BvTETksB5jEgePtyUI7igBt1/5e8ve4gc38WfjWiXpk9O4QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNPD8+XWmDn63GAAwN7w1hCpftDbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTljOWM1OTItNTlmYi0z MzIwLTgzNTAtMDU3M2Y3MTRmODBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB1VmI6U8xrExrOGn9ED/Vj690PjmGtpCUV/ho1 u/Jl0f3wd2L5U5zYCVjDSk/dCoM9vqNkS7DdkSHDxL9PY6AYxLJTAjNIgh6W3pFD rVdaJIMizlXHEoZt4vIFFYVVz/4jRyLcCQxQW/NPCF0B8PPvTjbTWL6v8we9/T8G mkO/DqAjkSy1BaYiVUXbDbhtLweyeNbKHCa9IvIc+wngbmJTjmTMkk0zTALYR8Dh 8jMcZrv2CQuKsqpXP8S38APsdk/6Hwl0xGLKpdsj6xnuXKGDsYQ7Lx3ctUUmhPe+ q2lDkKOueqHXNXOjNCEZrNZgCtJpqk1Xh5QMm31T30oT1kls -----END CERTIFICATE-----Generated at Mon Oct 20 08:15:15 2025 by rpki-client