$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2db029a6-0be4-3031-9101-61423a146c68.roa File: 2db029a6-0be4-3031-9101-61423a146c68.roa (raw, json) Hash identifier: ENOeKVtcb7PY+pDOIilf9sPxXHUazu1FpHJnw4tmpso= Subject key identifier: 72:12:F7:9D:75:4B:49:6D:8E:0E:D3:AB:3E:08:62:A0:F1:12:B5:53 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B3556FDAB0943ADE40C8A8880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2db029a6-0be4-3031-9101-61423a146c68.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 396602 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:fd:ab:09:43:ad:e4:0c:8a:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=b4d537a6-866f-4f46-a599-cb92c6ba2591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:7d:90:3e:be:a4:18:df:d7:1a:df:b2:76:b4: 6e:0c:5a:bd:5a:34:52:1e:1d:76:33:24:8a:e3:28: 5b:09:9a:8a:39:05:e1:86:ec:5c:c2:96:0d:e7:a7: ec:26:eb:ac:90:95:67:e1:d8:97:cb:01:60:5b:cd: 85:38:d5:d3:cd:c5:0a:6c:f4:5b:74:41:b3:82:dc: 36:13:9e:4e:ed:8b:f6:6c:df:37:38:a5:d2:9d:9a: 35:ee:d9:d4:27:bb:50:41:13:ce:6d:7f:f4:41:4d: eb:95:ef:f5:7c:98:92:13:9a:7c:2f:31:7a:42:fd: 84:13:9c:55:7e:6e:2f:a1:69:bd:20:32:78:4d:8a: 5f:bf:39:24:34:cc:7c:7e:5f:d1:b8:f9:25:dd:a5: e1:fb:7b:87:5b:a0:7a:a3:45:57:0c:ef:cd:00:9b: 7b:ce:35:ec:e8:7a:85:70:08:42:b7:74:7b:3c:0f: 28:e3:22:ec:71:1a:3b:a8:81:e1:06:a5:47:21:5b: a3:33:bb:8b:7e:f2:0c:d6:53:ea:29:17:8f:47:2e: 50:09:83:d5:d8:c5:96:95:1f:fb:d9:1d:e0:c4:3b: 1b:1e:c4:2a:91:75:a5:3d:71:00:05:b0:f9:65:43: 56:c6:b6:49:07:84:91:6b:fa:a3:39:25:51:d8:db: ec:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:12:F7:9D:75:4B:49:6D:8E:0E:D3:AB:3E:08:62:A0:F1:12:B5:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2db029a6-0be4-3031-9101-61423a146c68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:36:75:c9:4b:8f:f5:44:1c:84:75:55:d6:59:6f:67:14:6b: 70:b8:f4:c7:7e:91:99:58:2a:9d:ec:f5:c3:5a:73:24:f5:78: af:83:f1:e9:87:f1:5d:83:c0:ee:4a:bd:d7:69:f9:99:4e:ec: 6e:52:e5:25:84:a3:8d:04:ba:c1:e7:1d:38:35:c7:bf:aa:b1: 5c:5f:6e:e3:cf:83:67:d4:f6:df:07:4c:2b:cf:1d:7d:ae:de: 14:c4:c2:66:f6:e5:60:e9:03:5c:52:4e:95:f9:d6:94:2d:10: d8:d3:2e:e9:b2:53:10:75:26:b8:70:f2:93:e3:0a:03:6c:98: 9c:62:25:8b:e3:5c:1b:ba:9e:fb:e6:b1:b7:6f:33:4e:0e:30: 63:46:d0:2e:4d:52:b9:2e:f8:6b:df:4a:d6:04:ff:43:7f:df: fc:09:93:96:15:26:84:0b:02:3e:4b:c8:65:74:34:9b:5c:0f: 00:45:98:e6:00:1a:e7:ec:5b:76:c0:8e:62:3e:db:d2:61:f7: 4a:b8:bb:bc:0f:7c:c6:ee:2c:57:4d:f6:08:44:4f:86:55:b9: 75:e3:7f:91:35:a9:b0:34:ae:12:23:d8:50:26:0a:5e:85:06: 19:ae:97:72:81:b5:55:dc:a6:48:d9:a1:13:52:56:0c:5a:99: 60:a7:30:63 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEs1Vv2rCUOt5AyKiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk YjRkNTM3YTYtODY2Zi00ZjQ2LWE1OTktY2I5MmM2YmEyNTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkX2QPr6kGN/XGt+ydrRuDFq9WjRSHh12MySK 4yhbCZqKOQXhhuxcwpYN56fsJuuskJVn4diXywFgW82FONXTzcUKbPRbdEGzgtw2 E55O7Yv2bN83OKXSnZo17tnUJ7tQQRPObX/0QU3rle/1fJiSE5p8LzF6Qv2EE5xV fm4voWm9IDJ4TYpfvzkkNMx8fl/RuPkl3aXh+3uHW6B6o0VXDO/NAJt7zjXs6HqF cAhCt3R7PA8o4yLscRo7qIHhBqVHIVujM7uLfvIM1lPqKRePRy5QCYPV2MWWlR/7 2R3gxDsbHsQqkXWlPXEABbD5ZUNWxrZJB4SRa/qjOSVR2Nvs6QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHIS9511S0ltjg7Tqz4IYqDxErVTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmRiMDI5YTYtMGJlNC0z MDMxLTkxMDEtNjE0MjNhMTQ2YzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBzNnXJS4/1RByEdVXWWW9nFGtwuPTHfpGZWCqd 7PXDWnMk9Xivg/Hph/Fdg8DuSr3XafmZTuxuUuUlhKONBLrB5x04Nce/qrFcX27j z4Nn1PbfB0wrzx19rt4UxMJm9uVg6QNcUk6V+daULRDY0y7pslMQdSa4cPKT4woD bJicYiWL41wbup775rG3bzNODjBjRtAuTVK5Lvhr30rWBP9Df9/8CZOWFSaECwI+ S8hldDSbXA8ARZjmABrn7Ft2wI5iPtvSYfdKuLu8D3zG7ixXTfYIRE+GVbl143+R NamwNK4SI9hQJgpehQYZrpdygbVV3KZI2aETUlYMWplgpzBj -----END CERTIFICATE-----Generated at Mon Oct 20 08:20:29 2025 by rpki-client