$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/477ab1a8-eace-3dae-a4e2-06c1ed852cca.roa File: 477ab1a8-eace-3dae-a4e2-06c1ed852cca.roa (raw, json) Hash identifier: I/gk4iKITKC3p+nlDTvSBYND0TauVY+DQG53a/D4sxs= Subject key identifier: C9:63:94:4C:37:B7:F6:38:BB:74:82:1A:CA:76:7D:2E:8C:9F:C4:C4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B715CE617994D96FE7BE082A0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/477ab1a8-eace-3dae-a4e2-06c1ed852cca.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 396593 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:e6:17:99:4d:96:fe:7b:e0:82:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=3c284ca4-af00-48d3-9985-e10d8d44fb2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:37:14:a7:12:df:8c:ef:05:db:2c:a9:de:c0: 0d:cf:53:19:34:fc:90:89:fa:db:d6:d6:af:ac:42: 86:76:a6:51:a2:77:24:69:71:dd:95:83:d3:17:bb: 32:e8:b1:f5:5b:b6:66:52:b1:3a:46:8a:8e:fa:b9: 79:25:47:38:a7:e9:09:b7:3f:c9:54:57:ff:6e:74: 87:1a:ec:de:a6:20:ad:fb:86:47:3d:e4:5f:91:59: b0:a3:59:57:7d:57:11:08:31:ad:7d:b3:64:b0:2e: 7d:a3:85:86:39:72:22:c0:56:ae:41:a9:50:e3:93: 0a:b5:4d:10:c2:ec:b5:06:00:9a:92:b8:32:28:d8: 7a:36:3e:ff:cd:11:21:e3:45:36:7d:c7:f8:55:39: 65:57:c6:ac:1b:6e:15:7b:6b:81:f5:ca:54:b1:1d: bb:67:6b:78:34:87:5e:c9:64:ad:86:4b:0c:d1:56: fe:b7:40:9c:d6:18:d6:09:bc:27:8f:87:b5:b0:b5: fb:a3:11:30:c2:99:7b:81:ab:d7:e1:0c:6d:bd:17: c2:d6:1e:93:fe:97:88:15:4c:af:c7:1d:5f:d5:e9: d5:7d:46:b6:23:d2:e8:1c:9c:c9:dc:c7:e2:e8:99: 48:1b:81:ee:91:da:6b:2c:20:9f:b7:72:77:15:e3: df:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:63:94:4C:37:B7:F6:38:BB:74:82:1A:CA:76:7D:2E:8C:9F:C4:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/477ab1a8-eace-3dae-a4e2-06c1ed852cca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:db:f6:54:ba:ef:2b:f4:a9:0c:31:f9:71:f8:d6:40:43:b2: c2:38:23:9b:b2:1e:c5:a0:6f:da:b2:f4:a5:b9:5d:e9:90:a4: ba:27:c1:e8:cb:f8:c8:ae:80:23:8f:fb:15:69:34:29:db:d3: bb:aa:e3:fd:9d:65:c3:cd:7c:65:48:23:63:47:46:d0:ce:6c: ff:e6:74:92:d8:d3:c1:78:09:1f:05:e0:5a:cf:89:d4:55:63: ce:79:e4:db:9a:63:e1:80:0c:91:15:5e:df:a1:6e:37:40:0a: 6d:b9:cf:31:e4:f1:63:c8:ce:1d:dc:a3:2d:47:72:5c:92:b8: c7:48:59:13:5e:92:27:bb:55:19:a3:0d:17:d3:ff:6f:69:a4: 94:e4:cd:33:ca:59:2e:c8:2e:16:23:dc:97:d2:4f:79:49:1a: e4:82:7d:0d:2c:45:9e:b8:22:73:b3:ab:cd:46:1a:b2:6e:da: 11:50:cc:b5:9f:71:6e:94:24:ee:03:2b:d5:3b:e7:92:f5:c5: b8:9e:24:82:1c:f5:f5:ed:8a:64:0d:6f:84:f1:fe:31:58:48: 7b:4c:6c:ee:9f:49:28:12:ab:65:7d:a8:63:9b:31:f7:61:1b: 49:46:36:c1:df:5b:85:26:0e:93:6a:9a:06:f8:93:ff:f4:4b: f0:71:bf:de -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtxXOYXmU2W/nvggqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk M2MyODRjYTQtYWYwMC00OGQzLTk5ODUtZTEwZDhkNDRmYjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjcUpxLfjO8F2yyp3sANz1MZNPyQifrb1tav rEKGdqZRonckaXHdlYPTF7sy6LH1W7ZmUrE6RoqO+rl5JUc4p+kJtz/JVFf/bnSH GuzepiCt+4ZHPeRfkVmwo1lXfVcRCDGtfbNksC59o4WGOXIiwFauQalQ45MKtU0Q wuy1BgCakrgyKNh6Nj7/zREh40U2fcf4VTllV8asG24Ve2uB9cpUsR27Z2t4NIde yWSthksM0Vb+t0Cc1hjWCbwnj4e1sLX7oxEwwpl7gavX4QxtvRfC1h6T/peIFUyv xx1f1enVfUa2I9LoHJzJ3Mfi6JlIG4HukdprLCCft3J3FePfcwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMljlEw3t/Y4u3SCGsp2fS6Mn8TEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDc3YWIxYTgtZWFjZS0z ZGFlLWE0ZTItMDZjMWVkODUyY2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBp2/ZUuu8r9KkMMflx+NZAQ7LCOCObsh7FoG/a svSluV3pkKS6J8Hoy/jIroAjj/sVaTQp29O7quP9nWXDzXxlSCNjR0bQzmz/5nSS 2NPBeAkfBeBaz4nUVWPOeeTbmmPhgAyRFV7foW43QAptuc8x5PFjyM4d3KMtR3Jc krjHSFkTXpInu1UZow0X0/9vaaSU5M0zylkuyC4WI9yX0k95SRrkgn0NLEWeuCJz s6vNRhqybtoRUMy1n3FulCTuAyvVO+eS9cW4niSCHPX17YpkDW+E8f4xWEh7TGzu n0koEqtlfahjmzH3YRtJRjbB31uFJg6TapoG+JP/9Evwcb/e -----END CERTIFICATE-----Generated at Mon Oct 20 10:24:05 2025 by rpki-client