$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/370e13f6-bde2-31cb-9f17-361a30229839.roa File: 370e13f6-bde2-31cb-9f17-361a30229839.roa (raw, json) Hash identifier: q/RyTBXanHt5DBBskGQa0gUQB/7McZwge4ann2/EQ/g= Subject key identifier: 92:EC:A0:E1:F7:65:D9:F8:57:C5:A2:16:F0:DF:3B:B1:98:D7:8D:A6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B3557012CC5FA4A6458F77580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/370e13f6-bde2-31cb-9f17-361a30229839.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 396583 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:57:01:2c:c5:fa:4a:64:58:f7:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=4212c2bd-5833-44f9-a4c6-934c51e2ba65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:24:37:5f:97:54:eb:12:b2:86:15:97:7b:0d: 05:f5:55:f7:ee:db:94:ad:47:3a:08:cd:66:62:de: a8:72:de:e5:74:45:01:b8:b9:c2:ab:97:f2:0a:7f: 08:c8:93:88:12:ef:fd:b1:bd:4f:70:66:15:00:0e: 5e:f7:95:71:e7:9c:2a:4d:00:11:00:07:32:e1:f9: 78:4e:39:ad:ec:25:b0:0b:3a:50:a0:9f:df:21:f9: 8a:40:a5:21:27:0f:60:58:96:c7:e4:ad:d5:1c:bc: d5:b4:36:d5:c3:7d:e0:95:3f:41:f7:72:5c:61:d7: 9e:88:f7:c1:5a:4a:01:58:46:9e:f4:b4:16:1f:40: b3:cf:43:df:f4:4f:fe:56:cf:e4:4d:dc:f2:03:c5: d0:62:3e:9e:8a:a5:41:bd:7e:38:c9:01:02:2b:ef: 5a:b9:86:dd:24:73:94:9e:2a:08:58:fa:e8:5f:9c: 79:fe:f9:25:ec:ec:a1:e6:b8:0b:4a:0f:36:83:26: 76:84:33:d1:2d:63:5c:7c:21:ef:61:d5:a4:76:4d: 20:3f:98:20:4c:f0:16:71:be:c1:71:36:db:d5:df: f1:9f:c5:20:23:e9:e1:2b:2d:be:80:43:d2:92:ed: 8c:4b:c1:8d:2b:7b:d7:23:23:d4:5d:50:94:d0:f8: 48:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:EC:A0:E1:F7:65:D9:F8:57:C5:A2:16:F0:DF:3B:B1:98:D7:8D:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/370e13f6-bde2-31cb-9f17-361a30229839.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:ef:6d:67:dc:22:4d:46:d8:8d:3c:cd:89:5a:2c:c3:77:e0: 1e:35:dc:1f:8b:8a:a2:85:2e:73:8f:84:e7:56:95:b9:bb:f6: f0:a1:35:20:2d:02:d6:af:6d:03:f6:11:f8:23:57:3c:cf:3b: 89:35:8a:23:01:8b:00:fb:87:e3:29:f2:a9:de:5b:08:81:21: e4:41:f5:d9:4a:00:a3:d8:75:1e:3c:73:2b:8d:f6:0e:34:93: 7b:5c:bd:57:ea:74:da:22:66:11:45:89:45:a7:30:ae:7c:19: 6c:85:9d:ba:d3:35:1f:25:e7:b5:9b:92:17:44:04:bf:5c:6d: 01:31:79:4b:ca:ef:94:59:f9:0a:75:16:af:60:c9:c6:b9:b2: ad:07:3a:a0:64:61:24:7c:d2:1b:2e:ec:da:fc:d2:9a:06:52: ed:cf:0d:8d:b2:58:c0:68:2d:77:f4:97:fc:18:84:46:05:64: b8:8e:f4:ae:63:d0:f0:d9:e9:12:37:4e:ed:d6:4a:35:1b:57: 2e:70:cb:9b:81:cf:f3:2f:4e:64:79:cb:4c:1c:53:38:d7:ae: 98:a0:c9:ac:d5:b5:b9:b7:7c:1e:66:b4:0b:39:1a:95:96:6f: 4b:8a:5b:d6:5a:5c:ec:77:eb:0a:2a:f0:1f:63:39:3a:29:f9: 39:b2:0b:09 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEs1VwEsxfpKZFj3dYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk NDIxMmMyYmQtNTgzMy00NGY5LWE0YzYtOTM0YzUxZTJiYTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiQ3X5dU6xKyhhWXew0F9VX37tuUrUc6CM1m Yt6oct7ldEUBuLnCq5fyCn8IyJOIEu/9sb1PcGYVAA5e95Vx55wqTQARAAcy4fl4 Tjmt7CWwCzpQoJ/fIfmKQKUhJw9gWJbH5K3VHLzVtDbVw33glT9B93JcYdeeiPfB WkoBWEae9LQWH0Czz0Pf9E/+Vs/kTdzyA8XQYj6eiqVBvX44yQECK+9auYbdJHOU nioIWProX5x5/vkl7Oyh5rgLSg82gyZ2hDPRLWNcfCHvYdWkdk0gP5ggTPAWcb7B cTbb1d/xn8UgI+nhKy2+gEPSku2MS8GNK3vXIyPUXVCU0PhIQQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJLsoOH3Zdn4V8WiFvDfO7GY142mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzcwZTEzZjYtYmRlMi0z MWNiLTlmMTctMzYxYTMwMjI5ODM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAm721n3CJNRtiNPM2JWizDd+AeNdwfi4qihS5z j4TnVpW5u/bwoTUgLQLWr20D9hH4I1c8zzuJNYojAYsA+4fjKfKp3lsIgSHkQfXZ SgCj2HUePHMrjfYONJN7XL1X6nTaImYRRYlFpzCufBlshZ260zUfJee1m5IXRAS/ XG0BMXlLyu+UWfkKdRavYMnGubKtBzqgZGEkfNIbLuza/NKaBlLtzw2NsljAaC13 9Jf8GIRGBWS4jvSuY9Dw2ekSN07t1ko1G1cucMubgc/zL05kectMHFM4166YoMms 1bW5t3weZrQLORqVlm9LilvWWlzsd+sKKvAfYzk6Kfk5sgsJ -----END CERTIFICATE-----Generated at Mon Oct 20 15:52:40 2025 by rpki-client