$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/19f747e8-b96d-39d6-92b9-93990d87db23.roa File: 19f747e8-b96d-39d6-92b9-93990d87db23.roa (raw, json) Hash identifier: KPItfbywTdh3rnP/oBoyPWEmEdYJ46Y8RgCzVtwZAME= Subject key identifier: F8:94:69:67:A6:17:AC:AA:57:AD:A1:72:E6:E3:DE:CC:24:B2:8C:FE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B715CD9957040FC0D618AA400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/19f747e8-b96d-39d6-92b9-93990d87db23.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 396600 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:d9:95:70:40:fc:0d:61:8a:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=2e03b8af-8b07-4024-969b-7c3dd96c21bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4d:cd:7a:84:13:a8:68:37:48:19:01:8b:b3: 83:83:15:5e:78:f6:8e:69:70:db:80:72:96:95:d6: f1:76:8c:05:30:89:da:e7:3e:c9:08:88:9f:36:cf: 89:5c:39:2c:b6:16:2d:4f:18:06:32:1f:99:f6:88: 33:ea:bd:0b:21:e5:58:8e:f9:e1:fb:3d:53:96:02: 9a:e9:c0:9a:5a:8a:29:f1:7d:6d:1a:57:2f:9a:7c: fc:65:26:6d:ea:ca:48:22:10:68:45:29:b5:ad:26: ae:12:df:7e:3b:cc:c6:14:c1:a7:1a:f3:a5:8c:48: 7c:c1:6f:34:e8:12:bf:4e:47:15:b5:79:26:2a:ee: 97:54:1f:05:89:67:0f:01:a9:02:09:dc:23:09:93: 67:17:4d:d2:b7:40:2d:93:78:a5:03:a1:57:9b:9c: fe:5c:c5:c8:2f:19:05:29:fa:9b:c9:12:6e:89:80: 74:8b:7f:df:4e:d1:71:f8:5c:ec:a9:df:fe:e7:24: ec:2b:6e:c3:94:31:16:58:46:00:86:b5:87:eb:04: 76:18:8e:bf:c3:4a:1b:fb:84:69:c0:4e:9a:bc:d5: 00:be:72:76:f2:5d:c8:b9:04:93:67:66:19:e2:be: c8:89:8a:3d:e2:fb:a0:0b:7a:98:d0:c0:2c:2e:4b: 7f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:94:69:67:A6:17:AC:AA:57:AD:A1:72:E6:E3:DE:CC:24:B2:8C:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/19f747e8-b96d-39d6-92b9-93990d87db23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:75:58:6c:ff:28:d3:66:a8:dd:97:d4:cd:32:eb:db:6b:b5: 08:3b:ba:43:61:79:6c:c6:2e:0a:cb:fa:aa:ec:3c:58:ba:c1: d5:ee:79:75:79:48:40:b7:89:dc:83:83:45:ea:30:1a:7f:c7: 5f:96:c1:ca:66:df:28:1e:98:2c:44:67:0c:e9:9e:39:01:1c: a3:15:1c:2b:33:62:6b:c5:cd:f3:b2:fc:31:1d:c5:4d:62:69: cb:b0:bf:75:48:29:b4:b0:7d:00:5c:a2:1f:79:43:04:a1:5c: 97:76:0f:8b:29:11:34:13:1d:93:6b:1b:74:bf:92:98:a2:7f: 8f:19:56:d2:e6:69:65:2d:03:0b:5a:4c:fa:89:80:5f:a1:5e: 39:7a:45:70:0a:65:55:ab:b1:13:34:7f:01:93:7e:92:c2:e8: b7:55:9e:1d:c4:44:4a:25:e1:7c:1e:37:d6:c7:76:69:bc:60: a5:f9:ac:2a:f2:55:60:92:46:5d:8f:b3:4a:40:2c:0a:23:f8: eb:a2:6c:80:fb:5b:02:eb:64:20:7b:97:bd:75:b3:40:e3:cb: 13:e3:cb:3f:f1:43:e4:b6:f6:21:67:1d:2a:79:64:82:80:ef: 69:e4:52:8e:3e:34:bf:47:18:ea:e5:4c:71:cd:10:b6:94:f9: 85:eb:60:b1 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtxXNmVcED8DWGKpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MmUwM2I4YWYtOGIwNy00MDI0LTk2OWItN2MzZGQ5NmMyMWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoU3NeoQTqGg3SBkBi7ODgxVeePaOaXDbgHKW ldbxdowFMIna5z7JCIifNs+JXDksthYtTxgGMh+Z9ogz6r0LIeVYjvnh+z1TlgKa 6cCaWoop8X1tGlcvmnz8ZSZt6spIIhBoRSm1rSauEt9+O8zGFMGnGvOljEh8wW80 6BK/TkcVtXkmKu6XVB8FiWcPAakCCdwjCZNnF03St0Atk3ilA6FXm5z+XMXILxkF KfqbyRJuiYB0i3/fTtFx+Fzsqd/+5yTsK27DlDEWWEYAhrWH6wR2GI6/w0ob+4Rp wE6avNUAvnJ28l3IuQSTZ2YZ4r7IiYo94vugC3qY0MAsLkt/2wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPiUaWemF6yqV62hcubj3swksoz+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTlmNzQ3ZTgtYjk2ZC0z OWQ2LTkyYjktOTM5OTBkODdkYjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCLdVhs/yjTZqjdl9TNMuvba7UIO7pDYXlsxi4K y/qq7DxYusHV7nl1eUhAt4ncg4NF6jAaf8dflsHKZt8oHpgsRGcM6Z45ARyjFRwr M2Jrxc3zsvwxHcVNYmnLsL91SCm0sH0AXKIfeUMEoVyXdg+LKRE0Ex2Taxt0v5KY on+PGVbS5mllLQMLWkz6iYBfoV45ekVwCmVVq7ETNH8Bk36Swui3VZ4dxERKJeF8 HjfWx3ZpvGCl+awq8lVgkkZdj7NKQCwKI/jromyA+1sC62Qge5e9dbNA48sT48s/ 8UPktvYhZx0qeWSCgO9p5FKOPjS/Rxjq5UxxzRC2lPmF62Cx -----END CERTIFICATE-----Generated at Mon Oct 20 15:57:31 2025 by rpki-client