$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1fce2299-c2a3-3eca-9d22-8a73919abcd1.roa File: 1fce2299-c2a3-3eca-9d22-8a73919abcd1.roa (raw, json) Hash identifier: mZ7464M1dZZQtR4al03HfXk112XvlDqhJx8+z/RktZI= Subject key identifier: 0A:51:50:2F:87:30:4B:C2:88:AB:5F:A1:28:63:15:01:4C:9D:EA:E1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B355702CF41D5E2A1DA5AF3D9 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1fce2299-c2a3-3eca-9d22-8a73919abcd1.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 396587 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:57:02:cf:41:d5:e2:a1:da:5a:f3:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=003fb335-80bf-421b-b6d4-403033f5488a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d6:e2:b2:cb:0c:29:fe:8b:d3:39:5b:c3:ef: 54:49:94:4b:cc:20:7d:c9:81:48:71:31:33:02:9d: 50:09:47:48:c5:f4:cd:bf:ee:64:bf:4a:a5:d8:83: 05:dc:b8:a6:d4:0d:b1:f6:c5:35:ed:c2:88:56:61: 48:6e:d0:08:cd:64:e0:c1:09:73:dc:0f:51:3c:bc: e4:47:bb:5e:7f:cb:25:7d:d9:4c:3c:a5:2b:dd:e1: 48:8a:cf:a4:54:76:66:76:1d:f6:6a:01:52:6a:32: 1a:cb:13:97:7f:08:9d:81:74:47:d0:ce:30:67:72: c1:3f:d7:e5:8c:4a:48:ad:e3:29:a2:35:db:6d:d6: 03:f8:20:ba:98:cd:48:69:c0:47:38:0d:d7:ba:0f: b1:3c:f3:87:ef:57:e4:ff:e3:a2:89:a9:62:24:30: 7a:0a:86:ee:10:7d:32:e5:30:c8:35:16:b0:1b:5a: 60:fe:66:19:72:a1:c4:5d:0b:1c:f5:60:b7:ae:cf: b7:5d:d4:54:64:16:c1:77:58:6d:7c:56:04:5c:1d: 8e:f9:7e:ee:49:84:6d:d9:b7:8e:d0:5b:37:c5:7a: 09:94:65:1b:01:e3:fd:4c:fd:8b:39:dc:d4:f7:79: eb:a3:d9:ab:ec:59:6b:36:cf:70:db:4e:d4:ee:1e: b7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:51:50:2F:87:30:4B:C2:88:AB:5F:A1:28:63:15:01:4C:9D:EA:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1fce2299-c2a3-3eca-9d22-8a73919abcd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:c4:fd:02:d1:6c:66:a5:d7:18:95:71:eb:a2:db:e6:54:b6: 15:7c:b0:c4:61:b1:87:bd:99:31:ad:00:0e:f4:17:c5:f3:8f: 78:5c:44:3f:d9:7e:fe:80:82:7a:a6:f5:90:38:82:0d:7c:c1: 34:1f:b4:fb:1d:70:02:33:e9:29:b8:bb:51:24:58:50:5f:66: fd:75:d1:ef:29:b6:ba:86:3d:34:bb:f0:40:91:6a:b8:bd:de: 1a:f9:b4:e4:c2:61:86:b0:75:7c:8e:1c:b0:e0:ba:ba:ab:a3: 74:9c:85:a7:7f:27:f4:f8:87:b2:59:93:d8:76:fb:4b:22:f3: 50:d5:0c:b0:6f:9a:65:de:d4:6c:76:51:09:b3:5a:91:5b:a2: 52:64:2f:a7:6c:d6:51:35:86:63:92:63:f6:9c:2e:94:f6:07: 18:0e:5c:0d:33:b6:cb:56:6a:5f:00:e9:63:60:ab:c7:c0:0b: 22:bc:f4:82:73:cf:07:30:59:d7:81:5a:e3:58:6f:6d:e9:64: 64:d2:05:bd:ab:4e:21:80:a7:a6:9d:04:1f:cd:d5:b9:66:98: 22:28:9e:73:fc:fd:3a:c3:4a:70:bd:7c:64:2f:0b:2b:f1:e5: 13:f9:1f:62:6b:bf:ca:52:65:b9:02:05:ad:ae:a7:56:ab:16: 20:5e:12:e7 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEs1VwLPQdXiodpa89kwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk MDAzZmIzMzUtODBiZi00MjFiLWI2ZDQtNDAzMDMzZjU0ODhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdbisssMKf6L0zlbw+9USZRLzCB9yYFIcTEz Ap1QCUdIxfTNv+5kv0ql2IMF3Lim1A2x9sU17cKIVmFIbtAIzWTgwQlz3A9RPLzk R7tef8slfdlMPKUr3eFIis+kVHZmdh32agFSajIayxOXfwidgXRH0M4wZ3LBP9fl jEpIreMpojXbbdYD+CC6mM1IacBHOA3Xug+xPPOH71fk/+OiialiJDB6CobuEH0y 5TDINRawG1pg/mYZcqHEXQsc9WC3rs+3XdRUZBbBd1htfFYEXB2O+X7uSYRt2beO 0Fs3xXoJlGUbAeP9TP2LOdzU93nro9mr7FlrNs9w207U7h63VQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFApRUC+HMEvCiKtfoShjFQFMnerhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWZjZTIyOTktYzJhMy0z ZWNhLTlkMjItOGE3MzkxOWFiY2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA5xP0C0WxmpdcYlXHrotvmVLYVfLDEYbGHvZkx rQAO9BfF8494XEQ/2X7+gIJ6pvWQOIINfME0H7T7HXACM+kpuLtRJFhQX2b9ddHv Kba6hj00u/BAkWq4vd4a+bTkwmGGsHV8jhyw4Lq6q6N0nIWnfyf0+IeyWZPYdvtL IvNQ1Qywb5pl3tRsdlEJs1qRW6JSZC+nbNZRNYZjkmP2nC6U9gcYDlwNM7bLVmpf AOljYKvHwAsivPSCc88HMFnXgVrjWG9t6WRk0gW9q04hgKemnQQfzdW5ZpgiKJ5z /P06w0pwvXxkLwsr8eUT+R9ia7/KUmW5AgWtrqdWqxYgXhLn -----END CERTIFICATE-----Generated at Mon Oct 20 08:12:51 2025 by rpki-client