$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/67a05e70-e633-381a-b8e2-b5e6e9e22526.roa File: 67a05e70-e633-381a-b8e2-b5e6e9e22526.roa (raw, json) Hash identifier: jeWKVcb3XMc4tv7aqY45G/38L50PYi3xjRyueopeVr0= Subject key identifier: A1:3D:66:61:9F:36:17:DF:55:85:89:95:BA:01:9E:3A:A9:04:3A:FF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B715CE655680ED318A63BBBC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/67a05e70-e633-381a-b8e2-b5e6e9e22526.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 36625 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:e6:55:68:0e:d3:18:a6:3b:bb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=eac2cb9c-735a-4c43-90b1-3c3a903f72f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:86:0e:09:f3:2b:65:95:8b:c8:9a:b3:5a:4e: 59:bf:82:d7:06:99:8f:88:18:fd:6a:b4:57:1d:12: 3c:9a:1b:df:99:2c:66:cf:82:56:a8:89:97:f5:cc: dd:11:f4:b8:aa:cb:fb:47:7a:51:8e:14:53:69:e1: 90:a8:fe:a8:27:ec:c8:8e:34:cd:38:b2:5c:9e:99: dd:8d:2b:74:79:1b:70:02:5f:a2:68:48:2b:f4:fe: 10:4b:d7:c4:7a:6b:74:6f:8c:b2:37:39:f2:a9:b4: 3b:24:cb:be:9a:7a:87:62:62:67:ea:ff:e3:e6:19: d0:44:cc:96:48:3e:b0:83:a0:01:73:99:ac:50:f0: 60:7b:6a:cf:32:32:18:b2:4b:16:3d:95:df:72:1f: e3:93:ac:b7:aa:f7:47:d1:3b:c8:93:e7:c9:62:88: 39:4c:34:24:3d:74:07:42:3f:81:c3:a5:9d:e7:d2: 7b:ac:65:b7:06:cc:84:5b:3e:66:fe:12:17:f6:74: 02:35:29:e2:8a:a3:68:7e:ee:66:77:3d:98:7e:1c: 44:6d:51:10:9b:c4:11:cd:f5:64:47:be:be:67:7d: 53:b3:2a:40:9f:78:68:71:7c:6f:95:49:a0:d8:1c: 06:f7:75:93:f4:19:94:ef:d0:24:35:15:86:fb:db: bf:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:3D:66:61:9F:36:17:DF:55:85:89:95:BA:01:9E:3A:A9:04:3A:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/67a05e70-e633-381a-b8e2-b5e6e9e22526.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:07:4b:ac:c0:9f:c4:8e:bb:90:df:0f:3c:1e:6c:1e:dd:d0: ed:92:22:8d:7f:9a:0b:83:e7:0a:bc:ee:f7:90:b1:db:8b:56: 75:24:cc:62:5e:5d:a5:b9:ee:a2:6a:97:a8:fe:95:6a:75:c8: 8b:14:76:b4:5c:96:1a:26:85:e1:26:12:93:1b:31:cc:32:0b: 13:33:b1:a7:64:18:f2:d0:dd:ce:ab:37:f3:05:f9:69:64:4d: cd:e5:81:ee:f8:05:97:7b:5c:5d:b0:49:43:53:75:9b:d7:c6: 0e:a5:64:51:ec:02:cf:a4:e9:00:61:aa:83:3c:40:8a:c6:21: d0:b3:c1:82:34:02:5a:ca:c6:c6:34:06:83:84:c1:5d:1e:a1: c0:5e:b4:54:01:91:80:17:4c:d1:b8:61:bc:0c:e8:05:dc:29: e0:04:f5:48:d1:fe:7f:b6:74:f3:e4:5b:5d:3d:0f:c1:78:04: 5f:6f:d3:66:55:b8:67:55:17:a3:eb:c0:33:7e:e4:f8:84:14: 34:1d:68:09:a6:d2:ae:2f:c7:a5:01:69:49:22:eb:f8:3d:73: 56:4d:94:d6:f6:c7:48:4a:f9:f2:62:b9:b1:99:9b:c0:79:27: d1:3c:02:f6:1a:38:45:a3:cc:c0:36:00:8d:2f:aa:80:8f:19: d7:2f:ad:10 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtxXOZVaA7TGKY7u8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ZWFjMmNiOWMtNzM1YS00YzQzLTkwYjEtM2MzYTkwM2Y3MmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4YOCfMrZZWLyJqzWk5Zv4LXBpmPiBj9arRX HRI8mhvfmSxmz4JWqImX9czdEfS4qsv7R3pRjhRTaeGQqP6oJ+zIjjTNOLJcnpnd jSt0eRtwAl+iaEgr9P4QS9fEemt0b4yyNznyqbQ7JMu+mnqHYmJn6v/j5hnQRMyW SD6wg6ABc5msUPBge2rPMjIYsksWPZXfch/jk6y3qvdH0TvIk+fJYog5TDQkPXQH Qj+Bw6Wd59J7rGW3BsyEWz5m/hIX9nQCNSniiqNofu5mdz2YfhxEbVEQm8QRzfVk R76+Z31TsypAn3hocXxvlUmg2BwG93WT9BmU79AkNRWG+9u/AwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKE9ZmGfNhffVYWJlboBnjqpBDr/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjdhMDVlNzAtZTYzMy0z ODFhLWI4ZTItYjVlNmU5ZTIyNTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAbB0uswJ/EjruQ3w88Hmwe3dDtkiKNf5oLg+cK vO73kLHbi1Z1JMxiXl2lue6iapeo/pVqdciLFHa0XJYaJoXhJhKTGzHMMgsTM7Gn ZBjy0N3OqzfzBflpZE3N5YHu+AWXe1xdsElDU3Wb18YOpWRR7ALPpOkAYaqDPECK xiHQs8GCNAJaysbGNAaDhMFdHqHAXrRUAZGAF0zRuGG8DOgF3CngBPVI0f5/tnTz 5FtdPQ/BeARfb9NmVbhnVRej68AzfuT4hBQ0HWgJptKuL8elAWlJIuv4PXNWTZTW 9sdISvnyYrmxmZvAeSfRPAL2GjhFo8zANgCNL6qAjxnXL60Q -----END CERTIFICATE-----Generated at Mon Oct 20 08:14:41 2025 by rpki-client