$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e445d91-8e5e-351b-ac7b-cf9c6a42b4eb.roa File: 2e445d91-8e5e-351b-ac7b-cf9c6a42b4eb.roa (raw, json) Hash identifier: ONjgh8OJEm4hb97dkg3piTmr3FRh25gm4pKc3qbnpfQ= Subject key identifier: 78:60:68:ED:63:2C:D3:B7:81:AB:CD:D9:D7:C9:4F:4B:6F:15:01:0E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E7996F47D5D6F52B70A600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e445d91-8e5e-351b-ac7b-cf9c6a42b4eb.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 396596 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:99:6f:47:d5:d6:f5:2b:70:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=3f2cbbe5-c1de-4477-a644-7fa3904c7320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:04:7f:93:24:3b:62:8e:4c:f8:95:7c:eb:56: 83:3b:b9:00:92:19:a5:b7:af:9d:a1:73:74:f6:98: 58:a6:fe:ad:55:b0:84:7d:0c:1f:7c:3d:cb:5c:73: 36:39:58:33:d0:17:37:3a:f9:b8:c8:56:2b:b4:9d: eb:c5:8a:81:7d:d7:e6:7b:a5:94:ed:a0:52:73:79: b7:42:f5:0f:37:2f:20:15:0e:3f:19:d4:a4:b5:17: 2a:09:e3:32:3b:a5:0a:1d:9c:e7:35:d5:0b:a1:97: a7:0c:71:e1:82:ce:92:da:f1:18:22:2f:2c:07:4c: 94:a7:b6:51:54:ce:a4:a6:b4:af:2f:51:43:87:f2: 30:df:46:a9:da:86:80:cf:a1:b1:4c:60:7c:71:75: 11:64:db:a5:36:5e:20:d1:e8:ab:4a:46:df:68:63: 0e:fa:fc:4f:dc:bc:99:13:9c:b4:be:d3:bf:59:a3: fa:25:0d:66:b5:00:7d:b2:de:aa:8f:9f:bd:f2:01: 02:4d:41:be:70:c4:cc:7a:43:86:8e:90:49:64:1a: d6:74:e1:17:fb:28:f6:17:a3:5a:af:27:84:e0:2b: ef:14:3f:af:91:1c:9e:dd:7d:da:8f:db:7e:7c:81: 49:7c:a4:4a:02:f7:22:fd:bc:50:2b:78:67:fa:8d: ac:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:60:68:ED:63:2C:D3:B7:81:AB:CD:D9:D7:C9:4F:4B:6F:15:01:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e445d91-8e5e-351b-ac7b-cf9c6a42b4eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:3c:a2:e2:ae:bf:08:90:7e:97:43:26:a6:33:f7:a0:6b:41: 1f:fd:20:12:d7:a8:fa:de:87:82:f8:90:69:7a:d0:61:3e:46: b7:ec:c6:27:01:e5:ab:e4:b2:cc:33:cc:ed:24:6c:99:55:52: f3:8d:a6:37:af:12:55:d8:0f:23:1d:4a:ba:27:4d:d1:e1:ab: 05:bd:87:e3:09:87:29:bc:5d:d3:be:69:1d:80:42:86:46:93: 26:1c:9b:6e:a6:42:bf:1b:c7:0d:b7:b5:1a:34:21:bd:01:fa: 01:cf:09:91:2d:69:45:ed:48:1c:03:47:c3:2b:d3:11:42:6e: 87:5b:0a:29:4b:a6:12:85:4c:b1:15:be:7a:e3:0a:00:ac:e2: f1:b0:bd:a6:af:65:ef:9d:84:89:f1:ef:72:e5:70:24:21:1b: 99:f8:a2:34:2e:a8:b6:c4:7a:0f:26:c4:b6:66:6d:21:2a:c2: 5e:c4:5b:4b:21:67:79:f2:42:66:86:8d:38:0e:1d:37:4d:23: 3a:3c:dd:64:5b:88:33:79:4c:2c:1a:45:cd:27:09:1b:96:18: b1:5e:aa:83:14:9c:42:b9:08:45:2c:1f:65:2d:28:72:aa:2f: 61:ee:b8:29:3f:b6:bf:49:4c:ff:a1:4b:02:95:a9:b4:f7:f3: b2:77:49:f3 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE55lvR9XW9StwpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk M2YyY2JiZTUtYzFkZS00NDc3LWE2NDQtN2ZhMzkwNGM3MzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQR/kyQ7Yo5M+JV861aDO7kAkhmlt6+doXN0 9phYpv6tVbCEfQwffD3LXHM2OVgz0Bc3Ovm4yFYrtJ3rxYqBfdfme6WU7aBSc3m3 QvUPNy8gFQ4/GdSktRcqCeMyO6UKHZznNdULoZenDHHhgs6S2vEYIi8sB0yUp7ZR VM6kprSvL1FDh/Iw30ap2oaAz6GxTGB8cXURZNulNl4g0eirSkbfaGMO+vxP3LyZ E5y0vtO/WaP6JQ1mtQB9st6qj5+98gECTUG+cMTMekOGjpBJZBrWdOEX+yj2F6Na ryeE4CvvFD+vkRye3X3aj9t+fIFJfKRKAvci/bxQK3hn+o2sTwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHhgaO1jLNO3gavN2dfJT0tvFQEOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmU0NDVkOTEtOGU1ZS0z NTFiLWFjN2ItY2Y5YzZhNDJiNGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBmPKLirr8IkH6XQyamM/ega0Ef/SAS16j63oeC +JBpetBhPka37MYnAeWr5LLMM8ztJGyZVVLzjaY3rxJV2A8jHUq6J03R4asFvYfj CYcpvF3TvmkdgEKGRpMmHJtupkK/G8cNt7UaNCG9AfoBzwmRLWlF7UgcA0fDK9MR Qm6HWwopS6YShUyxFb564woArOLxsL2mr2XvnYSJ8e9y5XAkIRuZ+KI0Lqi2xHoP JsS2Zm0hKsJexFtLIWd58kJmho04Dh03TSM6PN1kW4gzeUwsGkXNJwkblhixXqqD FJxCuQhFLB9lLShyqi9h7rgpP7a/SUz/oUsClam09/Oyd0nz -----END CERTIFICATE-----Generated at Mon Oct 20 08:17:44 2025 by rpki-client