$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/696c5d09-cffc-320b-8378-730affdd5075.roa File: 696c5d09-cffc-320b-8378-730affdd5075.roa (raw, json) Hash identifier: pKbqUJmAagSzZZcYCuzC/FAHoUCPEhxLualXQK9Bt6Y= Subject key identifier: D6:F4:9E:29:71:00:41:E7:92:B6:04:9D:7A:36:E8:2C:91:98:01:AF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B3557013BFA11DE415E984D00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/696c5d09-cffc-320b-8378-730affdd5075.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 36628 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:57:01:3b:fa:11:de:41:5e:98:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=39403f62-9d74-48e7-935d-9b940776add1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b0:06:7a:57:81:5c:dd:b3:da:31:bf:ca:e2: 4e:a5:3c:21:f7:0d:bc:d0:7a:87:9a:d6:2d:f3:08: dc:d4:a3:17:89:69:b9:c0:c8:9a:5d:f9:84:a2:53: 49:7b:a3:9a:84:6b:69:65:70:fd:d2:b8:1d:9f:4f: 8d:26:63:50:b9:ae:b3:70:f5:d5:d8:aa:d9:61:6d: 27:25:d7:f2:4e:79:11:25:f6:94:8f:97:3d:87:d8: 3d:ba:f7:7b:cf:e2:54:a5:54:4c:bd:c8:c3:e5:c9: a6:a8:39:42:a6:d7:8c:21:dc:2c:37:e2:35:54:08: 16:d2:39:76:1d:f5:97:73:2b:5b:b4:16:ed:0c:a9: ba:28:73:0d:19:07:d2:51:7f:74:24:49:95:be:03: 73:90:3c:8f:f2:bf:7f:53:6a:6f:f4:4e:f9:6b:e1: 69:ae:6e:e2:6d:04:ab:03:84:f9:6d:a8:c6:05:b1: 40:65:3a:ec:48:0f:6e:e2:db:54:d5:41:52:27:e2: 99:c6:3e:18:b8:92:a4:d3:13:30:8f:60:9e:db:6a: d6:1c:48:b7:7b:10:0a:af:96:5a:01:28:a1:27:d4: b3:b5:c3:7a:4e:3d:3a:2f:6d:96:a9:d1:97:03:ef: 28:f0:a6:82:5c:2e:1c:a0:8f:12:63:3c:cd:99:d8: 6b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:F4:9E:29:71:00:41:E7:92:B6:04:9D:7A:36:E8:2C:91:98:01:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/696c5d09-cffc-320b-8378-730affdd5075.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:f0:bc:ae:86:ef:ae:36:84:ac:9a:d0:be:b7:47:19:f7:bb: 6f:9a:6d:d7:bd:b7:8d:a7:4a:94:6e:53:e2:51:34:18:db:72: 11:69:0f:8b:11:de:9e:ab:d7:7f:0c:e8:85:c2:9b:cc:e7:9b: 9b:16:31:8b:0b:e8:05:b4:8c:fc:d7:cc:ba:60:ea:ef:8a:ad: a3:40:58:34:24:35:4a:cd:6c:e9:cb:f1:06:3a:14:c8:6d:fb: 13:0a:9c:75:5e:d9:bd:58:e3:4a:25:7e:1d:06:b7:66:4a:af: 1a:bc:02:85:8d:55:d1:60:6a:e4:4a:88:0c:4b:48:00:0a:38: 1d:f4:12:c7:ae:00:36:04:38:8c:ad:7c:c6:75:ba:9f:60:a1: 17:7d:1f:7d:cd:c2:43:4a:1d:84:56:44:4b:f8:80:ad:1c:d9: f0:b9:92:6a:ac:70:30:c1:27:a7:1b:b9:5c:44:59:66:88:5c: 29:a2:73:63:b2:8f:47:d9:f2:8f:6a:cb:63:f2:17:39:de:61: cb:a1:7c:b5:16:e6:41:64:55:7d:f6:57:2f:b7:f2:e5:77:06: d4:57:e1:2b:a2:f9:72:73:bd:cb:ff:81:97:21:1a:44:bc:0f: a2:5d:91:9c:26:2e:b9:69:b9:8d:f6:64:12:a8:5c:71:fc:8f: 27:70:e1:99 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEs1VwE7+hHeQV6YTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk Mzk0MDNmNjItOWQ3NC00OGU3LTkzNWQtOWI5NDA3NzZhZGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbAGeleBXN2z2jG/yuJOpTwh9w280HqHmtYt 8wjc1KMXiWm5wMiaXfmEolNJe6OahGtpZXD90rgdn0+NJmNQua6zcPXV2KrZYW0n JdfyTnkRJfaUj5c9h9g9uvd7z+JUpVRMvcjD5cmmqDlCpteMIdwsN+I1VAgW0jl2 HfWXcytbtBbtDKm6KHMNGQfSUX90JEmVvgNzkDyP8r9/U2pv9E75a+Fprm7ibQSr A4T5bajGBbFAZTrsSA9u4ttU1UFSJ+KZxj4YuJKk0xMwj2Ce22rWHEi3exAKr5Za ASihJ9SztcN6Tj06L22WqdGXA+8o8KaCXC4coI8SYzzNmdhrkQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNb0nilxAEHnkrYEnXo26CyRmAGvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjk2YzVkMDktY2ZmYy0z MjBiLTgzNzgtNzMwYWZmZGQ1MDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBh8Lyuhu+uNoSsmtC+t0cZ97tvmm3XvbeNp0qU blPiUTQY23IRaQ+LEd6eq9d/DOiFwpvM55ubFjGLC+gFtIz818y6YOrviq2jQFg0 JDVKzWzpy/EGOhTIbfsTCpx1Xtm9WONKJX4dBrdmSq8avAKFjVXRYGrkSogMS0gA Cjgd9BLHrgA2BDiMrXzGdbqfYKEXfR99zcJDSh2EVkRL+ICtHNnwuZJqrHAwwSen G7lcRFlmiFwponNjso9H2fKPastj8hc53mHLoXy1FuZBZFV99lcvt/LldwbUV+Er ovlyc73L/4GXIRpEvA+iXZGcJi65abmN9mQSqFxx/I8ncOGZ -----END CERTIFICATE-----Generated at Mon Oct 20 10:31:00 2025 by rpki-client