$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4d2c1c75-03a0-30c8-b119-f24d2374f2e9.roa File: 4d2c1c75-03a0-30c8-b119-f24d2374f2e9.roa (raw, json) Hash identifier: tlVaYw44UOO4lgs1dghWB/6t5gFGIO2xRlJjDzSsUOI= Subject key identifier: 86:22:3B:C2:9F:11:DD:CB:85:F2:13:DF:6D:E0:A2:9C:E4:86:0C:DB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E78AF579F41719BCBA2900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4d2c1c75-03a0-30c8-b119-f24d2374f2e9.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 22547 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:8a:f5:79:f4:17:19:bc:ba:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=cbe42e6f-1520-49e2-a6a8-1c8442e94b2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1e:ed:f2:bb:28:ad:ed:86:cf:26:5c:78:84: a9:99:8b:ed:c5:d4:2b:5a:d8:85:eb:9c:15:05:45: 87:e2:f3:2b:9f:44:f5:6d:9a:d1:3d:c8:04:46:fa: c2:5d:31:89:58:08:f8:22:15:f6:39:d3:69:75:d0: 97:96:2f:84:98:e8:d5:79:02:08:03:a5:82:9e:b2: cb:aa:19:df:99:7e:b7:1f:9c:e5:99:95:58:e9:75: 66:46:a7:f6:d1:c3:f3:33:3e:08:66:70:8e:07:80: b3:25:55:e2:ca:d4:40:a6:a5:6b:a2:fd:79:bf:d8: dd:af:4b:e3:8d:81:8f:7c:e8:23:4b:72:21:84:ea: e6:3e:86:b7:ca:0a:f4:b6:36:8a:1c:f0:c5:20:e3: 54:f1:19:a6:6d:fd:c4:89:95:b5:73:15:6d:86:51: c2:78:c3:2a:94:fa:f9:d9:29:8f:3b:29:20:57:61: 74:65:62:13:24:7f:00:8d:91:fc:c2:22:0d:e7:53: b7:a9:28:68:a4:cc:5b:92:82:9f:c7:eb:c7:a6:bd: 7d:bf:65:73:b9:ac:17:4d:d6:a3:ad:b5:7d:5f:da: b5:f5:c8:da:a6:7d:af:54:0b:75:78:72:c5:30:50: 9e:4e:f3:cf:9a:65:e3:3a:5b:58:9a:85:b7:3c:8d: 9e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:22:3B:C2:9F:11:DD:CB:85:F2:13:DF:6D:E0:A2:9C:E4:86:0C:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4d2c1c75-03a0-30c8-b119-f24d2374f2e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:41:16:98:7f:6d:9d:84:5a:3e:fb:b6:67:4e:49:a4:25:33: 97:41:a7:5c:44:25:95:b5:40:e0:62:18:bb:64:72:c3:f1:d8: 66:a0:51:87:46:46:10:4e:0e:c9:92:e2:91:9a:d6:60:69:0e: c8:6b:7e:dd:07:ad:9d:9d:8c:be:85:93:ca:68:25:2b:2c:ec: 27:dc:30:98:d5:f4:83:79:7e:74:79:f9:5f:98:0a:db:99:ac: a2:95:7e:8b:93:34:0e:90:a8:87:dd:9f:36:80:c4:46:6f:70: d6:3d:64:d6:08:77:bf:ef:e6:35:96:50:04:8d:e4:10:69:b8: 4f:6f:42:1e:89:2c:14:84:00:e5:b3:7d:cd:ec:fc:9b:77:b7: cb:0e:10:fa:6f:b5:87:b4:f0:9c:f5:11:7a:3d:f2:d4:6b:60: 31:92:6a:24:c3:a5:b7:4a:69:0c:88:11:05:84:6c:3e:a1:86: 6f:eb:ed:3d:f2:c2:8d:e8:cd:d1:ca:c2:ff:78:f6:97:c2:ed: 9e:e3:fb:45:99:4e:ff:cc:b4:34:71:db:ea:62:09:42:62:67: 16:a2:89:84:e1:2c:dc:44:55:89:f6:d4:d3:1f:2a:13:91:9e: fb:84:b6:57:ad:e9:87:f1:eb:4d:13:52:f7:b1:dd:37:93:d3: 61:ab:05:cb -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE54r1efQXGby6KQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk Y2JlNDJlNmYtMTUyMC00OWUyLWE2YTgtMWM4NDQyZTk0YjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvx7t8rsore2GzyZceISpmYvtxdQrWtiF65wV BUWH4vMrn0T1bZrRPcgERvrCXTGJWAj4IhX2OdNpddCXli+EmOjVeQIIA6WCnrLL qhnfmX63H5zlmZVY6XVmRqf20cPzMz4IZnCOB4CzJVXiytRApqVrov15v9jdr0vj jYGPfOgjS3IhhOrmPoa3ygr0tjaKHPDFIONU8Rmmbf3EiZW1cxVthlHCeMMqlPr5 2SmPOykgV2F0ZWITJH8AjZH8wiIN51O3qShopMxbkoKfx+vHpr19v2VzuawXTdaj rbV9X9q19cjapn2vVAt1eHLFMFCeTvPPmmXjOltYmoW3PI2eWQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIYiO8KfEd3LhfIT323gopzkhgzbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGQyYzFjNzUtMDNhMC0z MGM4LWIxMTktZjI0ZDIzNzRmMmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBmQRaYf22dhFo++7ZnTkmkJTOXQadcRCWVtUDg Yhi7ZHLD8dhmoFGHRkYQTg7JkuKRmtZgaQ7Ia37dB62dnYy+hZPKaCUrLOwn3DCY 1fSDeX50eflfmArbmayilX6LkzQOkKiH3Z82gMRGb3DWPWTWCHe/7+Y1llAEjeQQ abhPb0IeiSwUhADls33N7Pybd7fLDhD6b7WHtPCc9RF6PfLUa2Axkmokw6W3SmkM iBEFhGw+oYZv6+098sKN6M3RysL/ePaXwu2e4/tFmU7/zLQ0cdvqYglCYmcWoomE 4SzcRFWJ9tTTHyoTkZ77hLZXremH8etNE1L3sd03k9NhqwXL -----END CERTIFICATE-----Generated at Mon Oct 20 20:57:26 2025 by rpki-client