$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/396a69fa-b146-38c5-8d03-f7dd0fb98f0e.roa File: 396a69fa-b146-38c5-8d03-f7dd0fb98f0e.roa (raw, json) Hash identifier: afqKnfa9h2QHH9DC1OaQSxRs5xj909aQJSSvSTiaylU= Subject key identifier: 87:B7:C8:02:6B:47:D3:CD:51:1E:54:1F:8A:99:2A:EE:08:71:B0:02 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B3556FDF8075DB5AAEF9FA4A0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/396a69fa-b146-38c5-8d03-f7dd0fb98f0e.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 40647 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:fd:f8:07:5d:b5:aa:ef:9f:a4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=65c04978-e7e5-4b13-b108-dadd6d9a6dbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:45:86:7e:3b:80:5c:d1:11:4e:e0:d1:20:2a: 80:6d:84:29:7c:1c:db:21:0c:63:c8:f4:43:d5:17: 05:3e:ce:bb:d6:90:15:21:88:20:a2:ae:7f:c8:9b: c6:83:10:33:ff:ee:a4:b3:66:65:d5:8a:0e:3c:a4: a4:1f:dc:c9:d5:c8:4f:0a:6c:4b:ca:61:1b:65:2c: 07:b7:c5:2d:39:79:17:30:4a:47:9f:df:ed:8c:ab: 04:4c:c1:39:56:4a:01:e2:3c:0b:7f:a6:09:28:a5: 39:a4:e4:e6:d3:72:74:44:47:95:f8:b4:83:df:0b: e6:50:0a:9c:4c:c0:66:5a:27:0b:02:d6:9e:8e:f4: 9c:35:8d:f4:ee:70:b5:2f:35:57:79:78:02:95:32: 86:d3:12:99:20:c1:31:9e:73:2a:d6:b8:9c:57:a8: 64:59:18:98:48:0a:c1:ef:bb:5d:ec:6d:dc:56:c5: 42:8e:3d:d4:eb:d9:89:1b:84:6a:fb:a2:cb:3e:38: 50:a3:cb:74:6f:ed:95:2e:91:54:2a:38:28:de:28: 47:4b:67:7b:38:65:d5:65:1f:eb:5e:7c:e6:98:e0: 93:00:05:55:d8:b1:bb:ab:b4:b6:60:c5:28:37:39: a1:87:ae:c8:a1:07:56:16:7c:05:19:c7:3b:84:bb: 10:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:B7:C8:02:6B:47:D3:CD:51:1E:54:1F:8A:99:2A:EE:08:71:B0:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/396a69fa-b146-38c5-8d03-f7dd0fb98f0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:d2:98:f7:a8:22:d2:35:61:df:c9:64:09:61:3c:0f:b7:e1: 20:e0:55:50:b3:18:f2:84:2a:7b:cd:b5:c4:67:01:bb:74:04: fb:ae:11:b5:1d:df:ac:d6:07:ef:19:f4:8b:9c:17:0e:94:fd: 81:2a:96:f7:db:76:a2:00:26:8d:0c:28:3f:d6:69:5d:6c:76: 97:e0:e8:4e:da:96:16:47:da:ad:e5:86:46:ec:fa:ab:98:38: a4:c2:72:59:29:c6:a3:74:80:ec:d5:dc:cf:26:42:4c:ba:ed: 85:45:45:18:ac:ed:62:ff:4e:20:51:a2:62:f8:1a:d2:58:07: c2:ee:0e:13:a2:48:b1:d4:ef:c2:dd:3c:fc:a6:a8:95:92:37: 03:87:4e:bf:2e:5a:3d:5f:31:f9:a8:c0:af:c8:50:f1:a9:47: 4e:00:7e:b4:e4:5f:97:fd:39:f0:f0:2d:17:2e:6f:12:55:1f: 76:7e:a3:68:fa:75:56:c1:4b:b6:92:a8:45:d1:32:b9:09:f0: e8:07:d4:2d:50:b1:75:f0:4a:62:d2:29:ca:33:c9:0e:7f:1b: 3a:7e:87:cf:71:77:7e:d4:b4:7c:77:fb:4a:74:d7:f6:96:d4: ec:2d:92:5c:94:3e:fe:3c:7b:ba:c5:b9:68:7e:a5:5f:0b:c6: 50:3d:94:6d -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEs1Vv34B121qu+fpKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk NjVjMDQ5NzgtZTdlNS00YjEzLWIxMDgtZGFkZDZkOWE2ZGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UWGfjuAXNERTuDRICqAbYQpfBzbIQxjyPRD 1RcFPs671pAVIYggoq5/yJvGgxAz/+6ks2Zl1YoOPKSkH9zJ1chPCmxLymEbZSwH t8UtOXkXMEpHn9/tjKsETME5VkoB4jwLf6YJKKU5pOTm03J0REeV+LSD3wvmUAqc TMBmWicLAtaejvScNY307nC1LzVXeXgClTKG0xKZIMExnnMq1ricV6hkWRiYSArB 77td7G3cVsVCjj3U69mJG4Rq+6LLPjhQo8t0b+2VLpFUKjgo3ihHS2d7OGXVZR/r XnzmmOCTAAVV2LG7q7S2YMUoNzmhh67IoQdWFnwFGcc7hLsQZwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIe3yAJrR9PNUR5UH4qZKu4IcbACMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzk2YTY5ZmEtYjE0Ni0z OGM1LThkMDMtZjdkZDBmYjk4ZjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAl0pj3qCLSNWHfyWQJYTwPt+Eg4FVQsxjyhCp7 zbXEZwG7dAT7rhG1Hd+s1gfvGfSLnBcOlP2BKpb323aiACaNDCg/1mldbHaX4OhO 2pYWR9qt5YZG7PqrmDikwnJZKcajdIDs1dzPJkJMuu2FRUUYrO1i/04gUaJi+BrS WAfC7g4Tokix1O/C3Tz8pqiVkjcDh06/Llo9XzH5qMCvyFDxqUdOAH605F+X/Tnw 8C0XLm8SVR92fqNo+nVWwUu2kqhF0TK5CfDoB9QtULF18Epi0inKM8kOfxs6fofP cXd+1LR8d/tKdNf2ltTsLZJclD7+PHu6xblofqVfC8ZQPZRt -----END CERTIFICATE-----Generated at Mon Oct 20 08:15:38 2025 by rpki-client