$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6936d0d6-308a-3fbc-b8f0-6d26a2a83b6c.roa File: 6936d0d6-308a-3fbc-b8f0-6d26a2a83b6c.roa (raw, json) Hash identifier: nGejiJefL1TIulfi2tbbgYn1n6RFNgCNrA+cBTOP4Dg= Subject key identifier: 67:6B:E0:80:75:3F:E8:22:07:09:33:77:B8:6A:40:0F:20:D5:0D:78 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B715CE21C78F0A848CCB6BC00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6936d0d6-308a-3fbc-b8f0-6d26a2a83b6c.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 20362 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:e2:1c:78:f0:a8:48:cc:b6:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=042b092b-c6ef-4405-b413-03a15639fdaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:1f:cb:b5:27:b2:cf:7c:67:52:49:06:e9:d5: d8:3e:c7:e7:f1:d2:80:52:77:8a:4a:bc:a7:07:e6: 99:5f:d4:a0:8f:97:0e:5f:69:06:11:19:98:14:59: d3:88:fb:3c:a4:66:01:f5:a7:b9:9c:f6:0c:a4:6f: 70:58:89:78:19:9b:09:45:c4:6e:07:1f:d3:dd:90: 0d:e7:0b:50:1b:25:65:ee:30:0f:0d:b2:c6:fd:92: 56:52:af:ef:05:82:71:3f:54:02:3b:a7:70:85:e1: 20:2e:65:eb:4b:99:d6:fd:27:d0:67:e3:3b:af:0c: 88:2d:86:f8:7c:05:19:0e:6a:72:40:0f:61:68:e4: 22:1e:49:b7:24:4e:76:ed:26:79:b0:b9:38:98:9f: 6f:a9:1a:a7:07:a4:71:40:48:11:d7:5a:54:85:df: f3:f0:2c:42:21:76:ce:bf:ba:53:fa:e3:d1:41:e4: a3:6b:87:a2:33:f4:a4:02:7c:00:31:d4:29:5f:41: b9:c4:60:d3:c2:c2:13:e4:b9:3f:25:08:85:47:a6: d4:77:6d:f5:7c:bf:e8:68:e3:72:42:c1:bc:fe:b3: 23:1f:9e:94:1f:00:d0:ed:73:0e:f1:bf:59:7b:23: 08:17:b6:d9:90:c4:9b:71:a3:02:66:04:80:b5:7f: 54:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:6B:E0:80:75:3F:E8:22:07:09:33:77:B8:6A:40:0F:20:D5:0D:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6936d0d6-308a-3fbc-b8f0-6d26a2a83b6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:ff:62:f4:13:ef:d3:35:3f:c6:40:ea:fc:66:7e:ec:00:39: 51:be:9d:40:47:a8:51:68:c6:52:fe:d4:ba:32:6b:64:b6:28: 79:f3:13:38:7f:a2:97:79:9e:58:60:ef:e1:ac:dc:ae:ef:41: 7d:3e:8b:10:53:c1:6a:d2:d5:eb:9b:0f:86:23:87:95:a4:7f: 5d:23:be:a5:ab:55:be:9d:1b:d3:08:ec:f1:a9:ec:97:02:2f: bc:9c:01:fe:30:0b:f3:1b:d8:14:55:70:83:6e:84:61:07:45: 00:67:3a:52:c1:ff:32:e7:a0:d8:4a:d5:e6:5e:3b:8b:82:91: a8:55:4f:f1:6e:e9:1d:29:b6:2b:5b:24:6e:18:b6:d3:65:fb: 2e:fb:c5:10:97:0c:c6:4e:1a:ae:4a:1c:97:69:ac:c4:4d:b9: 9c:1b:b1:e3:e1:23:6e:d3:24:c9:14:ff:68:c1:e4:97:72:bb: f5:ee:21:53:9c:b0:91:ab:79:da:27:90:f8:3d:49:d9:45:f7: 0a:ff:a3:30:3c:ba:a0:4f:cd:28:15:ef:8f:05:da:36:24:78: 73:52:0e:c3:f6:1b:42:ba:6a:1c:40:e3:0b:d0:42:ba:9f:1e: a4:ac:9f:6c:b9:aa:58:2a:82:45:a1:91:c2:11:12:04:e8:e1: c3:f7:eb:d5 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtxXOIcePCoSMy2vAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MDQyYjA5MmItYzZlZi00NDA1LWI0MTMtMDNhMTU2MzlmZGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhB/LtSeyz3xnUkkG6dXYPsfn8dKAUneKSryn B+aZX9Sgj5cOX2kGERmYFFnTiPs8pGYB9ae5nPYMpG9wWIl4GZsJRcRuBx/T3ZAN 5wtQGyVl7jAPDbLG/ZJWUq/vBYJxP1QCO6dwheEgLmXrS5nW/SfQZ+M7rwyILYb4 fAUZDmpyQA9haOQiHkm3JE527SZ5sLk4mJ9vqRqnB6RxQEgR11pUhd/z8CxCIXbO v7pT+uPRQeSja4eiM/SkAnwAMdQpX0G5xGDTwsIT5Lk/JQiFR6bUd231fL/oaONy QsG8/rMjH56UHwDQ7XMO8b9ZeyMIF7bZkMSbcaMCZgSAtX9U+wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGdr4IB1P+giBwkzd7hqQA8g1Q14MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjkzNmQwZDYtMzA4YS0z ZmJjLWI4ZjAtNmQyNmEyYTgzYjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAR/2L0E+/TNT/GQOr8Zn7sADlRvp1AR6hRaMZS /tS6Mmtktih58xM4f6KXeZ5YYO/hrNyu70F9PosQU8Fq0tXrmw+GI4eVpH9dI76l q1W+nRvTCOzxqeyXAi+8nAH+MAvzG9gUVXCDboRhB0UAZzpSwf8y56DYStXmXjuL gpGoVU/xbukdKbYrWyRuGLbTZfsu+8UQlwzGThquShyXaazETbmcG7Hj4SNu0yTJ FP9oweSXcrv17iFTnLCRq3naJ5D4PUnZRfcK/6MwPLqgT80oFe+PBdo2JHhzUg7D 9htCumocQOML0EK6nx6krJ9suapYKoJFoZHCERIE6OHD9+vV -----END CERTIFICATE-----Generated at Mon Oct 20 20:57:21 2025 by rpki-client