$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/29d3f06c-490b-3100-8cb2-1f58adaa91a5.roa File: 29d3f06c-490b-3100-8cb2-1f58adaa91a5.roa (raw, json) Hash identifier: O07hxOzfbHmb0XBdA5EUM6/8vtlQ18NAZvCaNVHKzLI= Subject key identifier: 25:18:03:2B:72:BE:BC:A1:D3:8F:8F:7A:06:02:FB:91:66:68:5B:58 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6201E5A032B56CC371644600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/29d3f06c-490b-3100-8cb2-1f58adaa91a5.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 396562 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:e5:a0:32:b5:6c:c3:71:64:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=1d971251-ba95-4914-a8c9-0165d8c6dd99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:0e:42:1d:a2:ff:83:a4:06:f3:ef:d8:9a:b1: a6:01:a4:ef:0e:f8:a4:12:96:10:91:d7:58:0f:cd: 4b:02:df:b0:08:ee:51:60:f8:5c:e1:d5:f7:76:be: a4:7e:88:80:ac:f2:63:6a:84:c5:4c:10:60:21:5a: b9:60:8c:79:b2:a6:c6:35:4d:de:c4:e2:b9:10:03: 22:0b:3d:3b:3a:e2:3e:a5:43:9f:52:51:43:f7:ad: a8:10:4e:03:a6:26:19:3f:48:b5:fe:56:02:2e:ee: ea:30:be:10:6c:29:5c:61:92:2c:bc:87:b8:02:4f: df:4d:14:35:e3:a9:41:4b:0a:4a:01:04:30:aa:95: 00:66:09:51:b0:ff:ca:c7:fc:ac:33:a0:a0:e5:4c: 3e:52:65:7a:c6:0a:62:2a:e7:b8:30:4e:2a:9c:72: 9a:02:e3:e5:c2:23:ea:fa:72:8d:cf:3f:3c:d5:3b: 32:66:c2:b3:6d:21:73:99:d8:29:75:90:eb:1f:0a: d3:c3:42:fd:5d:b0:0a:f4:be:49:4d:23:91:97:21: e4:68:1d:56:1d:ae:6a:72:22:f1:60:db:db:06:93: 91:56:a4:7d:96:96:0e:35:c4:c8:97:1b:6d:f0:b8: c5:f3:ab:89:b1:29:be:fb:3d:38:f9:69:45:a7:49: 7e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:18:03:2B:72:BE:BC:A1:D3:8F:8F:7A:06:02:FB:91:66:68:5B:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/29d3f06c-490b-3100-8cb2-1f58adaa91a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:df:c3:27:b2:5e:29:14:15:e1:45:a9:06:e7:0c:31:30:d4: d8:7d:65:30:d1:34:4b:3e:b9:db:cd:78:74:50:83:85:17:ab: 80:0d:b0:88:83:f0:20:a7:92:18:05:ae:1c:f1:8c:b1:a9:a0: 7c:60:ac:d2:05:48:84:53:9b:41:5b:51:0f:db:84:56:62:19: 13:2a:10:d0:09:3a:6d:29:2f:ef:02:a6:7c:c5:e2:0f:cd:83: 53:a1:7e:ab:37:9b:fb:86:b4:57:ce:53:b2:61:74:a3:38:8d: 5e:08:05:54:ab:33:a3:c1:e6:59:b0:b7:c9:3c:64:45:17:be: 6b:d5:d3:25:ee:3f:ff:a0:04:7f:f8:ee:09:71:2e:76:25:35: bd:9f:b9:ce:06:44:0c:7a:df:8f:bd:db:2b:ce:0a:dd:06:e5: 93:15:44:e8:86:77:da:09:17:5a:a0:5b:bc:09:38:c7:b1:b8: ec:fe:af:81:46:9b:4c:f9:2d:fc:bc:12:72:ef:2d:33:6f:ca: bd:53:f0:58:2c:f0:75:a3:92:0f:b5:4f:7d:cc:81:f2:f6:f5: ce:cf:33:76:9a:45:5e:68:ef:d9:cc:89:29:4e:b0:69:ce:f3: d4:a5:65:9e:54:dc:94:00:98:6c:55:49:0c:59:f3:a1:f4:cc: 85:fb:29:fb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAeWgMrVsw3FkRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk MWQ5NzEyNTEtYmE5NS00OTE0LWE4YzktMDE2NWQ4YzZkZDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQ5CHaL/g6QG8+/YmrGmAaTvDvikEpYQkddY D81LAt+wCO5RYPhc4dX3dr6kfoiArPJjaoTFTBBgIVq5YIx5sqbGNU3exOK5EAMi Cz07OuI+pUOfUlFD962oEE4DpiYZP0i1/lYCLu7qML4QbClcYZIsvIe4Ak/fTRQ1 46lBSwpKAQQwqpUAZglRsP/Kx/ysM6Cg5Uw+UmV6xgpiKue4ME4qnHKaAuPlwiPq +nKNzz881TsyZsKzbSFzmdgpdZDrHwrTw0L9XbAK9L5JTSORlyHkaB1WHa5qciLx YNvbBpORVqR9lpYONcTIlxtt8LjF86uJsSm++z04+WlFp0l+bwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCUYAytyvryh04+PegYC+5FmaFtYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjlkM2YwNmMtNDkwYi0z MTAwLThjYjItMWY1OGFkYWE5MWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEjfwyeyXikUFeFFqQbnDDEw1Nh9ZTDRNEs+udvNeHRQg4UXq4AN sIiD8CCnkhgFrhzxjLGpoHxgrNIFSIRTm0FbUQ/bhFZiGRMqENAJOm0pL+8CpnzF 4g/Ng1Ohfqs3m/uGtFfOU7JhdKM4jV4IBVSrM6PB5lmwt8k8ZEUXvmvV0yXuP/+g BH/47glxLnYlNb2fuc4GRAx634+92yvOCt0G5ZMVROiGd9oJF1qgW7wJOMexuOz+ r4FGm0z5Lfy8EnLvLTNvyr1T8Fgs8HWjkg+1T33MgfL29c7PM3aaRV5o79nMiSlO sGnO89SlZZ5U3JQAmGxVSQxZ86H0zIX7Kfs= -----END CERTIFICATE-----Generated at Mon Oct 20 08:16:24 2025 by rpki-client