$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/226b52cd-bfd8-3e2e-8a53-898c02b76f0d.roa File: 226b52cd-bfd8-3e2e-8a53-898c02b76f0d.roa (raw, json) Hash identifier: LgI9fTeypWnxEISnRHVjGDsJsn/MIb03swgHu64ThWw= Subject key identifier: 85:0F:95:07:EE:1E:94:14:90:9E:D6:E7:24:7C:6E:A6:55:2A:3A:41 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B715CE4B62BBA74ACA220B840 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/226b52cd-bfd8-3e2e-8a53-898c02b76f0d.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 396583 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:e4:b6:2b:ba:74:ac:a2:20:b8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=b00fcd36-7382-4b5e-97e9-e4c90feffac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:13:87:02:ec:c3:76:39:e8:d9:89:f1:24:98: 96:0b:1f:09:87:7c:c8:d5:2b:9c:a1:0a:84:e6:d3: 32:d0:47:23:17:a5:2a:8d:f2:93:1f:41:c3:81:bd: ea:5a:28:73:40:0f:5b:c5:e5:0c:d3:58:5c:5f:92: 03:be:0a:f0:e6:19:92:25:43:ac:50:60:dc:58:8d: f7:1c:78:7c:fc:71:7b:07:0c:89:cd:1e:18:a7:2f: f1:e4:31:20:8a:1a:f0:9a:e5:f0:3e:30:f7:98:3b: 4c:f9:a8:01:38:74:16:e5:34:7c:58:2a:bb:da:eb: 17:0b:bc:06:bb:43:92:27:d0:cd:b9:10:97:0d:f4: 3a:35:a3:01:43:71:b3:03:ea:7c:e1:3f:f9:54:72: 49:1a:3d:b8:8c:25:5f:7d:cb:c4:f1:60:92:02:2b: cc:f8:dd:14:90:7f:0d:bc:6d:ad:ce:ab:91:70:9d: 01:f3:85:b9:26:79:82:56:84:b9:5f:14:e4:82:3f: b2:f1:01:06:48:52:08:ea:81:c7:a3:1a:49:85:92: f7:c5:e0:06:cf:41:0a:8a:26:19:08:d5:1f:82:67: d5:22:fc:38:1c:83:28:72:33:37:cd:1a:75:34:78: f7:aa:0b:f9:c7:e7:38:68:59:16:27:88:75:8c:b4: 6f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:0F:95:07:EE:1E:94:14:90:9E:D6:E7:24:7C:6E:A6:55:2A:3A:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/226b52cd-bfd8-3e2e-8a53-898c02b76f0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:b2:11:31:e6:9b:3c:39:66:c4:d9:08:2d:8c:94:58:5d:0f: d4:4d:a2:6d:0f:15:cd:39:00:11:ec:d0:21:33:15:69:b8:5b: c1:a2:85:52:b1:4d:78:99:88:b5:0f:a1:a9:41:cc:84:91:53: ea:5f:ac:6c:3d:f6:aa:68:b5:71:8b:25:96:9b:d0:5c:49:a7: 9c:72:cd:c1:25:84:a0:19:ba:00:ff:52:78:d2:80:4b:be:a0: 41:c1:0b:de:c9:53:b8:3f:64:6b:e5:7f:42:77:f6:e4:50:24: 85:1a:55:9c:f5:f0:bb:32:63:c3:c6:d2:52:65:82:b1:2b:98: 32:6a:1b:63:a0:a9:57:49:c3:76:e8:ef:ca:39:c8:df:53:2a: e0:16:09:09:49:24:06:87:35:0b:b7:c0:29:0f:b7:4c:da:ce: 43:c8:bc:73:43:3a:36:c1:8d:13:27:a7:02:9e:c2:fc:4f:a6: 56:37:ea:b0:3a:72:6d:5f:a9:69:bb:55:f2:7f:26:b6:48:aa: af:76:d0:86:d4:02:b0:82:b8:5a:0f:b2:ab:5a:f2:02:96:d3: 89:18:d1:57:6f:84:b4:e7:3c:aa:75:8a:57:22:be:41:9f:14: 00:83:3d:71:35:c9:97:b7:0e:3b:e5:88:df:c0:7b:4e:4a:b6: 08:67:70:d3 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtxXOS2K7p0rKIguEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YjAwZmNkMzYtNzM4Mi00YjVlLTk3ZTktZTRjOTBmZWZmYWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxOHAuzDdjno2YnxJJiWCx8Jh3zI1SucoQqE 5tMy0EcjF6UqjfKTH0HDgb3qWihzQA9bxeUM01hcX5IDvgrw5hmSJUOsUGDcWI33 HHh8/HF7BwyJzR4Ypy/x5DEgihrwmuXwPjD3mDtM+agBOHQW5TR8WCq72usXC7wG u0OSJ9DNuRCXDfQ6NaMBQ3GzA+p84T/5VHJJGj24jCVffcvE8WCSAivM+N0UkH8N vG2tzquRcJ0B84W5JnmCVoS5XxTkgj+y8QEGSFII6oHHoxpJhZL3xeAGz0EKiiYZ CNUfgmfVIvw4HIMocjM3zRp1NHj3qgv5x+c4aFkWJ4h1jLRvTwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIUPlQfuHpQUkJ7W5yR8bqZVKjpBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjI2YjUyY2QtYmZkOC0z ZTJlLThhNTMtODk4YzAyYjc2ZjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAMshEx5ps8OWbE2QgtjJRYXQ/UTaJtDxXNOQAR 7NAhMxVpuFvBooVSsU14mYi1D6GpQcyEkVPqX6xsPfaqaLVxiyWWm9BcSaeccs3B JYSgGboA/1J40oBLvqBBwQveyVO4P2Rr5X9Cd/bkUCSFGlWc9fC7MmPDxtJSZYKx K5gyahtjoKlXScN26O/KOcjfUyrgFgkJSSQGhzULt8ApD7dM2s5DyLxzQzo2wY0T J6cCnsL8T6ZWN+qwOnJtX6lpu1Xyfya2SKqvdtCG1AKwgrhaD7KrWvICltOJGNFX b4S05zyqdYpXIr5BnxQAgz1xNcmXtw475YjfwHtOSrYIZ3DT -----END CERTIFICATE-----Generated at Mon Oct 20 10:25:05 2025 by rpki-client