$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/45071d1f-3e13-364e-ac74-8f0f1d4362e1.roa File: 45071d1f-3e13-364e-ac74-8f0f1d4362e1.roa (raw, json) Hash identifier: ofJWQl4/+CSPhdW3LQtiR4kJEsFpEAJ0xw3ShLiKqww= Subject key identifier: 19:38:85:64:46:D7:49:FC:B4:93:5E:BC:20:1C:31:A8:37:98:AA:5F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B715CE1A4AB3B4734B3C99500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/45071d1f-3e13-364e-ac74-8f0f1d4362e1.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 396553 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:e1:a4:ab:3b:47:34:b3:c9:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=129f2c12-a82c-4ffc-84d7-5e6380d4004e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:06:92:da:c5:71:ca:1a:77:f7:4b:78:4e:82: ee:1d:3c:c2:fe:db:a6:41:a6:71:74:dc:95:b9:04: 52:4f:1d:ee:5b:56:e1:0f:be:ec:b6:c6:4c:93:26: a2:00:ab:96:d5:10:a8:fc:40:de:3b:8f:fa:05:4d: f9:d0:31:45:38:c9:58:de:b5:9d:90:e0:91:5d:dc: 47:55:f9:71:2f:61:c7:20:31:c5:a3:61:df:3f:4d: 21:43:6b:b0:fb:27:14:94:09:78:a7:94:77:0e:bc: 9c:5c:a7:2c:1e:3a:d4:a5:ea:c7:e5:9f:2f:58:8f: 16:d1:35:43:0d:5a:68:e0:63:0a:21:ff:14:36:e8: 7e:0f:7e:6f:c9:7b:dc:ad:2a:5c:35:95:84:8d:89: 90:fa:24:0c:51:99:0c:63:dc:37:ca:78:01:ba:cc: b2:ee:8f:4b:d9:61:83:4b:e8:45:4f:36:db:3c:ef: 47:4b:67:5e:a6:80:03:87:8a:81:09:67:8d:83:25: 2c:18:de:26:29:ac:7a:86:85:35:09:37:e7:72:29: eb:09:e3:19:0f:e0:01:cc:4d:96:e3:3a:82:46:41: a4:97:56:58:35:bd:2d:dc:96:3b:ba:97:2b:b2:29: 17:04:40:da:be:32:3b:ba:5f:e9:95:69:b4:a3:28: 7e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:38:85:64:46:D7:49:FC:B4:93:5E:BC:20:1C:31:A8:37:98:AA:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/45071d1f-3e13-364e-ac74-8f0f1d4362e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:aa:ba:ed:68:b9:a5:61:dd:e0:1d:45:d0:8d:5f:36:12:33: 55:30:75:84:4d:52:85:fa:6d:da:e0:07:4a:12:26:f7:15:df: a1:8e:4d:fc:a3:10:b0:89:57:1e:c3:30:bb:b5:1b:3d:a7:e0: 8d:25:3e:77:fb:1e:4a:c6:cc:e3:57:0b:46:0a:2c:76:0c:c1: 3d:1b:6f:01:16:57:7d:03:0f:60:9f:f2:56:fd:dd:55:62:ed: 23:1b:31:2c:1c:57:b8:1f:73:ac:dd:e2:be:6e:5c:df:d5:de: 49:27:6b:89:c3:91:fb:e8:b6:99:2e:64:a4:71:a0:d8:87:57: 2a:53:28:0a:dc:91:a1:73:96:23:ad:13:ca:1a:aa:14:4a:bb: 27:d5:92:e9:e9:f9:61:96:99:50:5f:31:88:ed:bd:4f:e4:66: 05:8a:76:f2:c1:42:7f:f6:60:e8:7a:ae:5f:f3:73:15:f2:08: 33:cb:79:4e:7a:00:19:92:da:17:11:f2:fb:48:be:37:1c:59: be:03:32:13:19:a1:ce:ea:b7:26:6e:57:9b:0a:b4:b1:4a:d1: 4f:fd:b0:71:c6:38:4c:7b:36:39:b1:37:49:11:0e:55:f3:59: 55:2c:24:d2:bc:39:52:81:2f:2e:93:ee:ff:57:6b:85:9c:34: d8:2c:65:af -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtxXOGkqztHNLPJlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MTI5ZjJjMTItYTgyYy00ZmZjLTg0ZDctNWU2MzgwZDQwMDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwaS2sVxyhp390t4ToLuHTzC/tumQaZxdNyV uQRSTx3uW1bhD77stsZMkyaiAKuW1RCo/EDeO4/6BU350DFFOMlY3rWdkOCRXdxH VflxL2HHIDHFo2HfP00hQ2uw+ycUlAl4p5R3DrycXKcsHjrUperH5Z8vWI8W0TVD DVpo4GMKIf8UNuh+D35vyXvcrSpcNZWEjYmQ+iQMUZkMY9w3yngBusyy7o9L2WGD S+hFTzbbPO9HS2depoADh4qBCWeNgyUsGN4mKax6hoU1CTfncinrCeMZD+ABzE2W 4zqCRkGkl1ZYNb0t3JY7upcrsikXBEDavjI7ul/plWm0oyh+GQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBk4hWRG10n8tJNevCAcMag3mKpfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDUwNzFkMWYtM2UxMy0z NjRlLWFjNzQtOGYwZjFkNDM2MmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBKqrrtaLmlYd3gHUXQjV82EjNVMHWETVKF+m3a 4AdKEib3Fd+hjk38oxCwiVcewzC7tRs9p+CNJT53+x5KxszjVwtGCix2DME9G28B Fld9Aw9gn/JW/d1VYu0jGzEsHFe4H3Os3eK+blzf1d5JJ2uJw5H76LaZLmSkcaDY h1cqUygK3JGhc5YjrRPKGqoUSrsn1ZLp6flhlplQXzGI7b1P5GYFinbywUJ/9mDo eq5f83MV8ggzy3lOegAZktoXEfL7SL43HFm+AzITGaHO6rcmblebCrSxStFP/bBx xjhMezY5sTdJEQ5V81lVLCTSvDlSgS8uk+7/V2uFnDTYLGWv -----END CERTIFICATE-----Generated at Mon Oct 20 08:13:32 2025 by rpki-client