$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/30c97a7a-df06-3c9d-8337-4deb980ffa39.roa File: 30c97a7a-df06-3c9d-8337-4deb980ffa39.roa (raw, json) Hash identifier: 5ve/BC+SXVYy3BjEdXFuEYQJWRmzKmDtr7boDpfaLdA= Subject key identifier: AF:95:5F:73:61:2F:34:6C:09:8A:C8:6A:66:45:F3:48:60:28:DF:9E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E7926A379A157358AF6B00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/30c97a7a-df06-3c9d-8337-4deb980ffa39.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 396595 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:92:6a:37:9a:15:73:58:af:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=d296399b-9043-4d37-b934-014b2131dc4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8b:b4:3f:a3:95:4e:bc:fb:ea:22:4b:cd:09: e2:f8:e9:85:e5:3f:8c:58:47:6a:1c:52:14:46:dc: e9:ad:44:1c:f8:70:ea:f4:e2:1a:96:5e:3f:87:ff: f5:67:46:fb:c3:b2:fb:27:58:84:bf:5b:76:3f:43: 87:4f:f6:ab:e7:da:c6:18:b0:40:3c:e5:c8:c4:0d: 43:3b:29:49:88:6e:7a:3c:65:e5:f4:b8:6b:2c:f8: 5d:37:48:3a:65:24:02:9a:0d:56:03:87:57:52:6b: 67:ef:16:5a:a7:56:1b:1f:ec:b8:f4:e5:44:28:46: 8c:0f:6c:a4:33:fe:e9:72:87:e1:23:32:99:65:75: 0e:de:a2:6f:42:bb:b2:71:cf:d9:0d:65:84:22:93: d4:23:e1:49:0c:3c:ec:22:49:17:98:15:7e:ba:51: 0e:54:c5:ba:61:a8:ab:8e:e2:4d:61:97:ab:13:6b: 50:57:ad:f0:50:a3:db:45:00:1a:1d:1d:3d:db:74: 6c:16:ea:d2:5c:e1:25:9f:76:fd:96:8d:20:3e:f1: ee:41:13:61:7f:fd:b5:a5:a4:ee:72:03:a4:e0:49: 3e:62:73:38:7f:c0:bc:20:d3:c8:43:c4:f1:8d:06: 39:88:e5:51:2e:9f:2b:cc:e9:a4:80:87:b8:4d:30: 72:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:95:5F:73:61:2F:34:6C:09:8A:C8:6A:66:45:F3:48:60:28:DF:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/30c97a7a-df06-3c9d-8337-4deb980ffa39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:ef:88:a3:0c:95:ea:df:a8:29:32:4f:2d:2f:b6:1f:71:0d: f0:81:7c:90:ff:e1:cd:bf:86:44:4f:c8:a3:08:5e:36:f7:94: a0:84:a6:b2:32:ce:d0:e8:79:39:63:6b:b2:f9:97:71:41:46: e0:2b:7f:e7:8c:e7:64:72:5b:27:04:c7:2d:f6:00:bc:e8:ce: 78:75:a7:6f:00:0c:28:71:4f:66:b1:b6:3a:c1:48:98:ce:1e: 4d:29:ed:c9:52:b7:21:02:42:e7:9e:04:a7:92:62:31:8b:d6: 3f:15:7d:69:89:f2:55:e7:2d:ea:a3:5c:29:a5:cd:e7:c2:2e: 52:d8:72:a9:1b:cf:70:53:69:aa:3b:b4:39:c8:a5:3e:f3:d5: 06:6c:7e:32:ed:d6:4d:95:d1:4f:bf:0c:38:fe:7c:c6:7e:bb: 49:15:7f:19:d7:c3:b4:32:8d:fd:f0:f4:0f:7d:c4:fe:30:3e: 42:e9:04:3d:55:ba:18:ab:26:62:1b:d9:90:a2:ac:59:85:6b: cf:4e:61:6d:74:4e:1d:bf:a0:3b:82:84:99:0f:97:11:bc:9b: bf:e3:64:da:60:74:1b:82:eb:6e:91:89:f4:ec:6a:7f:a7:c6: 32:a3:34:35:fd:31:4c:42:98:fc:e7:1b:24:04:d4:ed:43:ce: 78:4f:cd:21 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE55JqN5oVc1ivawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk ZDI5NjM5OWItOTA0My00ZDM3LWI5MzQtMDE0YjIxMzFkYzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYu0P6OVTrz76iJLzQni+OmF5T+MWEdqHFIU RtzprUQc+HDq9OIall4/h//1Z0b7w7L7J1iEv1t2P0OHT/ar59rGGLBAPOXIxA1D OylJiG56PGXl9LhrLPhdN0g6ZSQCmg1WA4dXUmtn7xZap1YbH+y49OVEKEaMD2yk M/7pcofhIzKZZXUO3qJvQruycc/ZDWWEIpPUI+FJDDzsIkkXmBV+ulEOVMW6Yair juJNYZerE2tQV63wUKPbRQAaHR0923RsFurSXOEln3b9lo0gPvHuQRNhf/21paTu cgOk4Ek+YnM4f8C8INPIQ8TxjQY5iOVRLp8rzOmkgIe4TTByfQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFK+VX3NhLzRsCYrIamZF80hgKN+eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzBjOTdhN2EtZGYwNi0z YzlkLTgzMzctNGRlYjk4MGZmYTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBt74ijDJXq36gpMk8tL7YfcQ3wgXyQ/+HNv4ZE T8ijCF4295SghKayMs7Q6Hk5Y2uy+ZdxQUbgK3/njOdkclsnBMct9gC86M54dadv AAwocU9msbY6wUiYzh5NKe3JUrchAkLnngSnkmIxi9Y/FX1pifJV5y3qo1wppc3n wi5S2HKpG89wU2mqO7Q5yKU+89UGbH4y7dZNldFPvww4/nzGfrtJFX8Z18O0Mo39 8PQPfcT+MD5C6QQ9VboYqyZiG9mQoqxZhWvPTmFtdE4dv6A7goSZD5cRvJu/42Ta YHQbgutukYn07Gp/p8YyozQ1/TFMQpj85xskBNTtQ854T80h -----END CERTIFICATE-----Generated at Mon Oct 20 08:15:16 2025 by rpki-client