$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ff1de01-aea8-3a39-9176-4d224ef8bf6f.roa File: 1ff1de01-aea8-3a39-9176-4d224ef8bf6f.roa (raw, json) Hash identifier: oKX4h+ETxGXaBvREWG/OPhptEO1ar5XpFvhOOlEoKjw= Subject key identifier: 21:68:05:25:AB:EB:A4:E7:4D:52:9D:90:71:86:17:83:7C:7B:60:25 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B3556FC11BFF9E59BD68D0A62 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ff1de01-aea8-3a39-9176-4d224ef8bf6f.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 36631 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:fc:11:bf:f9:e5:9b:d6:8d:0a:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=84c94f13-eb6c-4cd2-8a99-0fa27f859a3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:9f:a9:58:07:c9:bd:da:c9:95:8f:db:02:c5: d6:0d:57:f6:0e:8c:cc:19:55:1b:1f:d6:e2:0f:0a: 7c:b8:0d:f2:11:74:a4:b9:84:71:69:62:52:79:14: 91:1c:77:3d:f2:78:29:68:67:55:f2:b4:8e:04:87: 4f:91:92:b3:69:75:f0:ab:99:9c:b6:8c:8d:d5:f0: 81:bd:5b:8b:70:97:26:40:14:82:e1:87:ea:ab:d6: d5:2f:13:ae:75:72:0e:a8:0f:a8:85:cf:dd:a8:f8: 9e:cd:f0:e6:f0:d2:ee:65:e6:53:72:14:46:ed:fc: 3a:9e:7f:3a:8a:cf:7e:a0:75:cb:f4:be:2b:1c:94: 1b:0c:52:ea:a0:11:a3:e7:a5:c4:67:53:6d:17:d5: 1e:b4:0f:6f:43:32:dc:0f:60:8b:c0:ab:11:8f:e2: 30:d9:67:47:6d:75:d6:96:68:d4:0a:d3:92:13:bd: 13:05:cc:dc:76:4b:90:0e:6a:9f:8a:cf:36:5e:9b: 9d:23:06:b5:49:95:77:f4:d8:86:65:43:28:46:05: 7f:7c:15:e7:59:b3:b6:0f:7b:65:0e:ca:65:f2:b8: 13:58:af:2f:0e:1d:ba:93:58:40:0d:19:92:b5:36: 0b:4b:dd:58:d0:60:54:f6:c2:90:5d:a1:f7:c8:f3: b1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:68:05:25:AB:EB:A4:E7:4D:52:9D:90:71:86:17:83:7C:7B:60:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ff1de01-aea8-3a39-9176-4d224ef8bf6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:c0:fe:da:3b:aa:c3:95:4e:3f:ad:d6:a8:b8:94:89:00:02: 09:2e:da:8a:b7:eb:50:23:43:0f:ae:8e:38:fd:af:ce:e0:40: fc:3e:d8:c8:31:30:67:9d:ea:c7:9f:33:5a:0c:9e:48:a3:a4: 90:28:c3:d0:e3:59:e1:dd:24:36:02:88:50:d9:79:62:d8:60: ee:27:82:7c:28:e2:5f:65:52:02:7b:a6:f3:8b:9e:dc:05:15: c0:ec:80:bd:9a:cf:19:49:b3:15:1c:a1:77:87:d8:e9:6e:6c: 62:5e:ce:bb:73:68:5a:66:13:d0:d7:ec:f2:ea:8f:b7:80:bf: 7f:95:27:bd:fc:ab:8f:99:f1:71:b7:5b:17:7f:57:63:bb:5e: 02:ef:81:3e:16:e1:59:ea:2f:46:62:3b:97:6c:f8:b9:d6:ab: 67:0a:bf:55:a9:a6:4f:81:f5:de:6c:b2:2e:51:13:19:b9:6e: 5a:12:69:71:98:fd:38:47:2a:ce:e7:91:e8:f2:32:40:b8:73: cd:14:76:33:fc:0d:47:18:64:5a:f0:23:28:9d:d6:21:aa:8e: c8:0a:48:e9:7c:2a:ef:23:9c:de:58:04:1d:2d:9d:b0:13:6f: c1:ec:fd:af:02:dd:b7:e3:31:87:80:3a:dd:09:ed:8f:dd:96: 57:4a:1e:38 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEs1VvwRv/nlm9aNCmIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk ODRjOTRmMTMtZWI2Yy00Y2QyLThhOTktMGZhMjdmODU5YTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkp+pWAfJvdrJlY/bAsXWDVf2DozMGVUbH9bi Dwp8uA3yEXSkuYRxaWJSeRSRHHc98ngpaGdV8rSOBIdPkZKzaXXwq5mctoyN1fCB vVuLcJcmQBSC4Yfqq9bVLxOudXIOqA+ohc/dqPiezfDm8NLuZeZTchRG7fw6nn86 is9+oHXL9L4rHJQbDFLqoBGj56XEZ1NtF9UetA9vQzLcD2CLwKsRj+Iw2WdHbXXW lmjUCtOSE70TBczcdkuQDmqfis82XpudIwa1SZV39NiGZUMoRgV/fBXnWbO2D3tl Dspl8rgTWK8vDh26k1hADRmStTYLS91Y0GBU9sKQXaH3yPOxuwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCFoBSWr66TnTVKdkHGGF4N8e2AlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWZmMWRlMDEtYWVhOC0z YTM5LTkxNzYtNGQyMjRlZjhiZjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBUwP7aO6rDlU4/rdaouJSJAAIJLtqKt+tQI0MP ro44/a/O4ED8PtjIMTBnnerHnzNaDJ5Io6SQKMPQ41nh3SQ2AohQ2Xli2GDuJ4J8 KOJfZVICe6bzi57cBRXA7IC9ms8ZSbMVHKF3h9jpbmxiXs67c2haZhPQ1+zy6o+3 gL9/lSe9/KuPmfFxt1sXf1dju14C74E+FuFZ6i9GYjuXbPi51qtnCr9VqaZPgfXe bLIuURMZuW5aEmlxmP04RyrO55Ho8jJAuHPNFHYz/A1HGGRa8CMondYhqo7ICkjp fCrvI5zeWAQdLZ2wE2/B7P2vAt234zGHgDrdCe2P3ZZXSh44 -----END CERTIFICATE-----Generated at Mon Oct 20 08:15:24 2025 by rpki-client