$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/286ea08e-00cc-3c31-b0e1-d3705e506f6d.roa File: 286ea08e-00cc-3c31-b0e1-d3705e506f6d.roa (raw, json) Hash identifier: LbEk5/vyKuRQhh/UfaVSTRYPX9zuTDGJGYLXwWcfutw= Subject key identifier: 1D:C8:B4:0D:3E:AA:BB:44:4A:86:1F:91:EE:50:65:91:34:C6:A8:57 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B3557011B6F0A4632B37B4B80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/286ea08e-00cc-3c31-b0e1-d3705e506f6d.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 396595 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:57:01:1b:6f:0a:46:32:b3:7b:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=86599c2e-7847-4cef-bfe9-04bee9a0ab8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f0:f7:6f:86:89:78:e9:94:fc:89:4b:e6:b0: 38:12:fd:a6:0f:13:cf:0d:0f:93:93:45:5c:72:73: b7:6c:8a:1a:66:f7:7e:9a:3b:c2:0a:6d:40:6f:0a: 0a:f4:20:cb:86:0f:b8:8f:4f:72:56:97:ba:01:e5: ff:06:b8:ca:77:49:4b:82:f4:9a:76:5d:16:25:70: 69:1b:d3:1e:80:82:a7:c0:cb:05:1e:ff:d1:57:b4: 81:82:de:52:66:4d:fd:7d:1d:55:4b:61:6b:82:48: 25:64:69:d2:c8:60:8a:ea:c4:b3:fc:59:d6:18:d2: 78:13:42:23:2b:9c:8c:cc:1b:46:b9:58:1e:c2:49: b4:da:ee:d3:72:1d:33:43:c0:ed:2f:a6:26:5b:45: 2d:43:a1:71:e0:15:38:7f:96:dc:35:35:27:79:4b: f4:bb:1a:56:e0:04:32:9e:03:55:4c:97:22:86:2f: da:42:2e:fc:36:5d:f9:e4:d5:d9:49:5a:85:38:66: 4b:ab:72:4d:34:03:74:bb:7e:7a:43:fe:f1:37:64: 90:66:47:d3:39:fa:d8:41:63:27:67:50:3a:cb:a2: 30:7b:7f:46:86:ad:1c:39:65:bb:1f:9f:7f:30:20: a5:a3:f6:6e:af:9a:7e:a5:54:0a:4a:3d:36:35:56: 56:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C8:B4:0D:3E:AA:BB:44:4A:86:1F:91:EE:50:65:91:34:C6:A8:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/286ea08e-00cc-3c31-b0e1-d3705e506f6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:15:23:ec:82:13:9f:b8:fc:f4:b5:cf:aa:5d:f6:9e:c5:b0: bb:90:f7:69:8d:65:db:30:ab:99:1a:13:80:fa:5f:a6:8b:14: 1e:13:81:79:f4:99:2f:ca:c0:e1:9e:f1:42:3c:16:05:a8:54: 05:1b:8e:6d:69:76:1e:05:d5:d7:91:c5:95:a6:be:96:4c:bf: a7:03:21:0e:54:e7:7a:16:51:5a:1e:67:cb:cf:75:df:c8:7e: 2b:83:9d:55:48:e9:45:27:2c:18:06:93:6d:6f:f7:70:59:8a: 15:0a:a4:f1:4f:9b:f2:fa:1c:94:a3:89:96:d6:03:5f:31:d4: d8:df:ae:17:7d:80:72:6a:5b:0d:04:c7:19:1a:db:ee:e6:03: 3d:04:9b:46:17:69:1a:b5:bb:b9:1f:d1:6d:61:4d:a5:3c:85: 4e:ac:27:4d:d8:54:c9:d6:17:ff:1c:97:87:a0:ed:a8:8c:e6: ba:dc:a0:ef:27:7b:77:09:71:cb:fe:cc:f3:49:0a:60:e3:0a: 37:a0:77:b4:09:b2:b4:52:01:0b:06:56:bd:46:d6:94:50:86: 70:db:fd:0b:ce:59:4b:04:f1:36:b3:02:4c:ef:dc:9a:74:eb: 84:a4:ee:f9:ad:29:98:80:78:79:8d:53:9a:fc:2d:5b:44:27: 13:13:f0:62 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEs1VwEbbwpGMrN7S4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk ODY1OTljMmUtNzg0Ny00Y2VmLWJmZTktMDRiZWU5YTBhYjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/D3b4aJeOmU/IlL5rA4Ev2mDxPPDQ+Tk0Vc cnO3bIoaZvd+mjvCCm1AbwoK9CDLhg+4j09yVpe6AeX/BrjKd0lLgvSadl0WJXBp G9MegIKnwMsFHv/RV7SBgt5SZk39fR1VS2FrgkglZGnSyGCK6sSz/FnWGNJ4E0Ij K5yMzBtGuVgewkm02u7Tch0zQ8DtL6YmW0UtQ6Fx4BU4f5bcNTUneUv0uxpW4AQy ngNVTJcihi/aQi78Nl355NXZSVqFOGZLq3JNNAN0u356Q/7xN2SQZkfTOfrYQWMn Z1A6y6Iwe39Ghq0cOWW7H59/MCClo/Zur5p+pVQKSj02NVZWQQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFB3ItA0+qrtESoYfke5QZZE0xqhXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjg2ZWEwOGUtMDBjYy0z YzMxLWIwZTEtZDM3MDVlNTA2ZjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAzFSPsghOfuPz0tc+qXfaexbC7kPdpjWXbMKuZ GhOA+l+mixQeE4F59JkvysDhnvFCPBYFqFQFG45taXYeBdXXkcWVpr6WTL+nAyEO VOd6FlFaHmfLz3XfyH4rg51VSOlFJywYBpNtb/dwWYoVCqTxT5vy+hyUo4mW1gNf MdTY364XfYByalsNBMcZGtvu5gM9BJtGF2katbu5H9FtYU2lPIVOrCdN2FTJ1hf/ HJeHoO2ojOa63KDvJ3t3CXHL/szzSQpg4wo3oHe0CbK0UgELBla9RtaUUIZw2/0L zllLBPE2swJM79yadOuEpO75rSmYgHh5jVOa/C1bRCcTE/Bi -----END CERTIFICATE-----Generated at Mon Oct 20 08:12:30 2025 by rpki-client