$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2d3c952d-52b5-3ac0-943c-87eb106ef029.roa File: 2d3c952d-52b5-3ac0-943c-87eb106ef029.roa (raw, json) Hash identifier: sxATi3GM93CUNMmXdNvn7Fe7CiAfKt2HD2XVVT6OZgA= Subject key identifier: D4:F4:7D:70:DA:19:87:80:38:2B:F8:71:78:3A:FA:0F:9B:2D:B0:53 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B715CE6A7D3BBBD7DE0EFC180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2d3c952d-52b5-3ac0-943c-87eb106ef029.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 36630 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:e6:a7:d3:bb:bd:7d:e0:ef:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=e8a89863-823d-40d9-841b-2cfac2ed8755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ca:e0:3a:82:de:58:71:dc:5c:bc:5c:f8:29: b7:e2:4c:c7:c7:34:16:4e:f9:da:93:71:81:e9:10: 33:53:d8:03:21:94:90:00:d5:f5:c3:fb:83:30:87: 46:7d:06:aa:0f:2c:36:42:f7:7d:6b:b1:31:18:36: 97:3f:63:64:ea:bf:6e:a0:a5:86:36:de:ae:7d:7d: 63:ba:55:85:17:ae:c5:11:c6:65:bc:ae:42:74:c1: e2:46:a5:ed:80:da:3f:38:30:52:b8:59:6f:ae:62: db:d4:c4:9b:e6:af:e5:c0:f0:68:41:2d:ca:f3:00: 1e:96:c4:0d:97:70:88:aa:a8:45:7b:7b:8c:c4:0c: 17:18:56:0a:13:d0:f2:a8:64:e1:b1:b1:d3:90:2c: f7:d9:ff:6d:ee:23:19:86:13:37:5f:78:f0:cc:68: d8:ea:b4:86:ea:5f:08:52:e1:31:1f:73:9c:9a:9b: 1f:60:17:eb:24:c6:72:a2:a2:b2:fc:30:ec:07:17: ff:47:1e:bb:04:45:08:44:02:7d:95:7a:5c:9b:b9: 92:65:85:a6:19:6f:b2:99:28:d8:c7:d7:fc:d5:0d: 94:ef:b9:d3:20:61:1a:4a:37:c0:3f:93:51:ca:9d: b1:fd:36:bd:98:02:62:1d:14:ef:c7:cb:99:37:bf: 19:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:F4:7D:70:DA:19:87:80:38:2B:F8:71:78:3A:FA:0F:9B:2D:B0:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2d3c952d-52b5-3ac0-943c-87eb106ef029.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:d3:55:ee:74:b6:d7:1d:4e:a8:88:24:e6:87:b9:8d:da:ab: db:62:82:7b:f7:b1:c9:9b:00:73:86:fb:48:5c:74:23:3b:25: 7b:e8:27:9e:c8:14:73:5d:b3:db:ad:b4:6a:02:fc:d4:f1:2f: 22:32:58:c8:9c:c0:55:a8:23:1d:02:9e:09:1e:90:62:2a:70: 74:78:cc:0f:98:23:3b:97:e2:d9:f6:5c:c4:6e:00:38:a7:69: 98:af:65:9e:78:33:3e:ae:c5:8b:46:36:0e:42:64:13:cc:09: b8:15:f9:a4:d7:3f:8f:59:53:e2:ef:45:0f:92:14:28:e7:3a: b0:02:73:15:c6:69:fe:18:eb:1a:81:2b:09:9e:58:d6:d2:1c: e7:b2:6a:27:67:21:b2:4b:eb:ed:b4:50:6f:3c:a8:85:b9:34: 73:31:bd:9b:0b:5f:03:a7:af:6a:a5:89:b0:90:dd:06:9e:44: 59:81:02:bd:c1:b9:30:f9:c3:35:31:41:ac:0f:7e:71:6e:1b: 9e:74:be:08:54:91:8a:97:48:08:8b:0a:c0:24:7a:7f:9e:4f: ac:b9:e7:f4:b4:69:a3:08:ff:da:3f:70:d2:10:0c:fe:34:1f: 43:0b:44:2d:28:8a:cf:c3:e8:d3:bb:f2:24:d9:c8:9c:c8:07: 54:87:07:e4 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtxXOan07u9feDvwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ZThhODk4NjMtODIzZC00MGQ5LTg0MWItMmNmYWMyZWQ4NzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscrgOoLeWHHcXLxc+Cm34kzHxzQWTvnak3GB 6RAzU9gDIZSQANX1w/uDMIdGfQaqDyw2Qvd9a7ExGDaXP2Nk6r9uoKWGNt6ufX1j ulWFF67FEcZlvK5CdMHiRqXtgNo/ODBSuFlvrmLb1MSb5q/lwPBoQS3K8wAelsQN l3CIqqhFe3uMxAwXGFYKE9DyqGThsbHTkCz32f9t7iMZhhM3X3jwzGjY6rSG6l8I UuExH3OcmpsfYBfrJMZyoqKy/DDsBxf/Rx67BEUIRAJ9lXpcm7mSZYWmGW+ymSjY x9f81Q2U77nTIGEaSjfAP5NRyp2x/Ta9mAJiHRTvx8uZN78ZfQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNT0fXDaGYeAOCv4cXg6+g+bLbBTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmQzYzk1MmQtNTJiNS0z YWMwLTk0M2MtODdlYjEwNmVmMDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAH01XudLbXHU6oiCTmh7mN2qvbYoJ797HJmwBz hvtIXHQjOyV76CeeyBRzXbPbrbRqAvzU8S8iMljInMBVqCMdAp4JHpBiKnB0eMwP mCM7l+LZ9lzEbgA4p2mYr2WeeDM+rsWLRjYOQmQTzAm4Ffmk1z+PWVPi70UPkhQo 5zqwAnMVxmn+GOsagSsJnljW0hznsmonZyGyS+vttFBvPKiFuTRzMb2bC18Dp69q pYmwkN0GnkRZgQK9wbkw+cM1MUGsD35xbhuedL4IVJGKl0gIiwrAJHp/nk+suef0 tGmjCP/aP3DSEAz+NB9DC0QtKIrPw+jTu/Ik2cicyAdUhwfk -----END CERTIFICATE-----Generated at Mon Oct 20 08:14:41 2025 by rpki-client