$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e8afa36-0e0c-35a7-a7e9-1e0bf0a14c92.roa File: 2e8afa36-0e0c-35a7-a7e9-1e0bf0a14c92.roa (raw, json) Hash identifier: 5zzytvY4ykH08Dc9JIoiy7q8rkW0AJnq+ZeLkCIbNj0= Subject key identifier: 94:D9:BA:31:60:BA:A5:7E:95:5E:34:84:C6:4F:54:A6:CF:A5:F1:E8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B715CDAF76982BF9B0B882D00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e8afa36-0e0c-35a7-a7e9-1e0bf0a14c92.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 396572 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:da:f7:69:82:bf:9b:0b:88:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=2af43938-988e-4113-8255-a4237ee9ff05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b0:ac:00:0c:67:6c:5e:b0:1c:2a:b1:38:13: 00:d9:07:95:39:3c:47:64:fe:88:ce:71:7e:87:64: ea:15:79:17:3a:66:dd:17:d0:02:7c:f8:f4:11:aa: 7e:0c:21:b6:bb:ec:7a:fa:7a:d0:bf:03:db:9c:9e: 93:ee:a9:6c:65:06:be:ee:7b:4e:e3:2c:6f:f1:3e: 1b:99:a4:40:dd:9c:bf:e2:90:40:06:89:08:23:d7: a7:63:a0:1f:f6:91:dd:fa:3b:75:e7:9a:7f:66:4e: d4:7e:50:bb:43:ef:bb:46:48:8f:bc:74:00:b0:2e: 6c:38:bf:65:7c:a2:08:ce:21:00:76:32:99:9d:40: 66:04:82:ba:b4:35:8c:ad:af:aa:36:43:57:c6:83: 0f:3d:19:7b:87:3c:81:c7:9d:19:06:4e:d3:6c:c4: 96:72:b9:27:7c:9d:e3:fa:f7:1a:09:15:d8:63:2c: 23:92:14:0b:2a:a8:dc:ea:bf:d8:62:4c:be:36:29: fa:77:f3:8f:f9:57:7a:ee:73:14:a5:8f:c2:17:e1: 1d:33:56:7d:03:26:3c:84:7b:9e:3d:8f:38:23:df: bc:33:f8:4d:7d:bc:cb:69:c7:7f:a6:7f:de:ce:f9: f0:76:00:56:77:5b:f8:db:1e:bd:3e:a2:95:33:12: 0f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:D9:BA:31:60:BA:A5:7E:95:5E:34:84:C6:4F:54:A6:CF:A5:F1:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e8afa36-0e0c-35a7-a7e9-1e0bf0a14c92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:85:86:0f:34:f3:d5:6d:d0:87:9e:fb:3c:61:38:cf:58:5c: 19:56:92:7b:6b:01:a4:d9:12:fd:c9:08:15:b6:02:29:94:a2: 17:98:49:6b:aa:51:32:fb:0a:2e:27:30:00:a1:90:b9:db:7c: 83:ee:4d:fe:28:79:f5:c6:5e:73:06:32:89:60:1d:b7:92:3e: 48:cd:1d:29:00:a4:0a:52:99:2a:3e:1b:ce:bf:a6:c4:1a:83: 8a:3e:01:42:83:b0:e2:ed:02:3c:8d:ba:01:fa:e8:58:2d:1d: 0b:9a:ce:3b:62:94:a9:3c:64:a1:07:cd:94:d8:d0:ad:3d:e0: 6b:6a:77:16:b7:bc:4e:d1:32:f2:2f:17:64:30:fc:de:02:df: cb:e3:db:81:39:65:cb:52:18:50:ee:8d:48:9c:d9:f7:7c:49: a0:4a:99:5f:d9:8c:d6:f5:df:e1:29:80:d5:d7:01:e0:2e:44: cd:d7:6e:7a:b8:72:09:da:d6:4e:67:36:4a:be:37:87:16:be: 1f:f2:20:64:cd:ba:b8:c5:81:e0:f0:a9:3c:e0:28:88:27:e8: e2:74:7d:b3:c6:64:eb:07:a3:8c:f5:b3:02:f6:3d:f1:1c:b8: e3:3a:c0:4f:c6:f6:5e:58:bf:c2:59:37:b5:19:b0:2a:46:f1: 9f:70:3f:87 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtxXNr3aYK/mwuILQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MmFmNDM5MzgtOTg4ZS00MTEzLTgyNTUtYTQyMzdlZTlmZjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLCsAAxnbF6wHCqxOBMA2QeVOTxHZP6IznF+ h2TqFXkXOmbdF9ACfPj0Eap+DCG2u+x6+nrQvwPbnJ6T7qlsZQa+7ntO4yxv8T4b maRA3Zy/4pBABokII9enY6Af9pHd+jt155p/Zk7UflC7Q++7RkiPvHQAsC5sOL9l fKIIziEAdjKZnUBmBIK6tDWMra+qNkNXxoMPPRl7hzyBx50ZBk7TbMSWcrknfJ3j +vcaCRXYYywjkhQLKqjc6r/YYky+Nin6d/OP+Vd67nMUpY/CF+EdM1Z9AyY8hHue PY84I9+8M/hNfbzLacd/pn/ezvnwdgBWd1v42x69PqKVMxIP+QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJTZujFguqV+lV40hMZPVKbPpfHoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmU4YWZhMzYtMGUwYy0z NWE3LWE3ZTktMWUwYmYwYTE0YzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAThYYPNPPVbdCHnvs8YTjPWFwZVpJ7awGk2RL9 yQgVtgIplKIXmElrqlEy+wouJzAAoZC523yD7k3+KHn1xl5zBjKJYB23kj5IzR0p AKQKUpkqPhvOv6bEGoOKPgFCg7Di7QI8jboB+uhYLR0Lms47YpSpPGShB82U2NCt PeBrancWt7xO0TLyLxdkMPzeAt/L49uBOWXLUhhQ7o1InNn3fEmgSplf2YzW9d/h KYDV1wHgLkTN1256uHIJ2tZOZzZKvjeHFr4f8iBkzbq4xYHg8Kk84CiIJ+jidH2z xmTrB6OM9bMC9j3xHLjjOsBPxvZeWL/CWTe1GbAqRvGfcD+H -----END CERTIFICATE-----Generated at Mon Oct 20 08:15:58 2025 by rpki-client