$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4fa6e15d-2079-3a3a-a896-c22dace535cf.roa File: 4fa6e15d-2079-3a3a-a896-c22dace535cf.roa (raw, json) Hash identifier: b1LnwerxhkCP9ruCqBe2Hl40dfQxZTu8gyJDu/v7HUg= Subject key identifier: B0:59:5D:E5:A3:EC:FE:EE:7B:92:49:70:69:35:7C:BF:14:23:18:31 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E798B89143B83D84BC4900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4fa6e15d-2079-3a3a-a896-c22dace535cf.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 397193 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:98:b8:91:43:b8:3d:84:bc:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=ebadcd24-ba68-407c-b490-69413b74b1e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d6:d3:94:ab:24:fa:33:81:0f:f5:74:3b:42: 71:ff:3b:97:62:b0:e6:4a:e8:a1:f9:f5:84:48:35: 74:65:a8:cd:5e:f4:5a:a3:6d:c5:fd:48:f3:3b:d5: d7:2f:43:eb:90:05:4b:ea:c1:db:77:f3:22:0a:dc: 6c:19:d5:41:a7:8a:93:5a:a8:c5:f4:73:d4:87:84: 77:97:90:c5:b4:0a:5a:7c:6e:a4:e1:06:f0:b1:56: cb:93:b4:ce:63:7b:61:82:a8:1e:cd:12:33:20:5b: cb:9a:98:14:64:1e:01:e0:04:ac:16:d1:97:ec:6a: 39:b8:55:af:4d:04:82:44:0f:41:19:b3:57:4f:bc: 3a:0c:2c:c0:17:c7:c9:02:bc:fa:12:b8:f7:9e:b9: ff:5a:6c:48:2c:5a:33:bc:fc:c7:1a:43:78:30:9e: 5c:82:87:a8:76:92:6f:d5:41:9e:31:5a:56:b8:21: 60:d1:86:20:37:e8:24:a5:d2:30:da:45:06:93:3b: 86:6c:bd:cd:5e:11:d7:fd:27:d5:6d:89:cd:01:b4: be:19:13:1f:1a:da:1c:d2:88:72:1e:7a:d8:b6:b4: 5c:0d:4a:d0:2f:d5:b1:85:9f:99:83:4d:3c:1e:d5: c1:29:3b:9c:16:85:c3:53:59:3f:93:5f:0a:83:eb: 7b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:59:5D:E5:A3:EC:FE:EE:7B:92:49:70:69:35:7C:BF:14:23:18:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4fa6e15d-2079-3a3a-a896-c22dace535cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:7a:94:fd:28:0b:6c:b4:93:f5:94:be:a5:7f:16:15:d4:e7: 8a:41:15:a9:c5:88:68:8c:b7:f2:8a:ab:c3:85:7a:04:09:f7: 9e:b6:d6:26:04:70:aa:e5:bb:9b:d1:42:f9:fb:f8:23:0f:7c: f1:3e:5d:e3:ed:36:dd:4a:23:4f:c2:45:cd:4a:75:6d:3b:15: 54:7c:e4:a1:5f:d6:e5:6a:f4:b9:d9:c6:6c:79:c2:eb:60:cf: 75:10:42:a7:67:17:a1:28:c3:0a:7c:8b:07:eb:67:bd:c3:1c: a7:25:3e:f7:b1:2f:1d:58:66:9a:0b:e8:81:20:2f:70:a1:48: 76:ce:a5:7d:c4:30:2a:5f:1f:dd:de:6b:0f:30:bb:b2:d8:cc: ca:58:d1:52:f6:71:b7:10:6a:3a:90:b7:64:6d:31:d2:76:73: e8:d6:9a:ba:c4:ed:37:20:e3:54:38:be:33:e4:07:6b:a2:28: b5:68:06:77:e1:b9:35:16:fe:46:17:4d:cf:bb:cc:69:cc:ae: ee:97:8b:9e:d7:ee:52:f4:36:14:ee:b8:a3:01:d9:ea:ae:55: ac:89:d8:92:5b:42:e5:32:77:39:b0:4b:28:3b:a6:91:c7:23: 59:3c:9f:da:cf:0e:02:9a:f6:cd:d6:f4:c6:ce:02:d3:02:e2: 87:14:93:04 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE55i4kUO4PYS8SQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk ZWJhZGNkMjQtYmE2OC00MDdjLWI0OTAtNjk0MTNiNzRiMWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtbTlKsk+jOBD/V0O0Jx/zuXYrDmSuih+fWE SDV0ZajNXvRao23F/UjzO9XXL0PrkAVL6sHbd/MiCtxsGdVBp4qTWqjF9HPUh4R3 l5DFtApafG6k4QbwsVbLk7TOY3thgqgezRIzIFvLmpgUZB4B4ASsFtGX7Go5uFWv TQSCRA9BGbNXT7w6DCzAF8fJArz6Erj3nrn/WmxILFozvPzHGkN4MJ5cgoeodpJv 1UGeMVpWuCFg0YYgN+gkpdIw2kUGkzuGbL3NXhHX/SfVbYnNAbS+GRMfGtoc0ohy HnrYtrRcDUrQL9WxhZ+Zg008HtXBKTucFoXDU1k/k18Kg+t7bQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLBZXeWj7P7ue5JJcGk1fL8UIxgxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGZhNmUxNWQtMjA3OS0z YTNhLWE4OTYtYzIyZGFjZTUzNWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQABepT9KAtstJP1lL6lfxYV1OeKQRWpxYhojLfy iqvDhXoECfeettYmBHCq5bub0UL5+/gjD3zxPl3j7TbdSiNPwkXNSnVtOxVUfOSh X9blavS52cZsecLrYM91EEKnZxehKMMKfIsH62e9wxynJT73sS8dWGaaC+iBIC9w oUh2zqV9xDAqXx/d3msPMLuy2MzKWNFS9nG3EGo6kLdkbTHSdnPo1pq6xO03IONU OL4z5Adroii1aAZ34bk1Fv5GF03Pu8xpzK7ul4ue1+5S9DYU7rijAdnqrlWsidiS W0LlMnc5sEsoO6aRxyNZPJ/azw4CmvbN1vTGzgLTAuKHFJME -----END CERTIFICATE-----Generated at Mon Oct 20 08:15:41 2025 by rpki-client