$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/747607be-4420-3eaa-955d-22519d55950b.roa File: 747607be-4420-3eaa-955d-22519d55950b.roa (raw, json) Hash identifier: Tjrzr+5SsSi2ypIKQEnt6LVxESsoSdtSB9I8d2/HmYY= Subject key identifier: A5:2E:E9:BA:97:53:D7:A6:CC:BC:64:AA:D2:E3:BE:08:8E:72:D9:FB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E78BB4D02771EE3ECF7240 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/747607be-4420-3eaa-955d-22519d55950b.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 397198 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:8b:b4:d0:27:71:ee:3e:cf:72:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=93b8cdc2-4580-4d25-8a99-77d90c516e84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:31:46:80:89:33:06:8d:6a:78:e4:aa:d6:03: d7:d4:c1:e3:46:46:4a:c4:15:1d:3a:61:7f:ad:f5: 07:46:15:4b:f1:47:b0:82:6e:d4:48:10:a8:f6:f6: 7a:e3:3c:be:5b:c7:31:08:a7:ef:d0:a6:30:61:a3: 5d:69:fc:46:5c:06:d4:85:30:fd:91:35:af:28:a4: 54:a5:92:9a:78:50:80:a1:85:47:12:eb:c9:23:5e: 73:70:a5:8d:9f:bb:07:31:00:1e:e4:e5:99:da:65: 79:68:6d:83:e9:f9:0a:94:32:60:c1:c7:97:fa:fe: b7:70:08:6e:57:0e:f6:4a:2c:8c:a3:39:fb:cc:ca: 62:a1:80:1f:5c:8b:6d:67:9b:c3:ed:af:56:3c:c8: b6:1e:0a:4c:f4:dd:2a:43:84:f5:af:c5:e7:e1:0e: 1c:dc:2a:3d:5a:44:6c:94:fd:12:62:1a:2b:3c:ab: 99:c6:54:47:d7:24:2a:46:99:aa:6b:38:f1:7d:70: 3e:88:6c:92:73:ac:18:e1:8c:8a:07:cc:14:02:89: e8:53:e7:9e:f8:64:99:90:19:7a:d2:b8:e4:b4:d5: b3:fa:b7:e2:65:ac:da:f7:81:8e:b0:47:67:99:d6: 4b:ba:e6:62:bb:70:e8:b3:d0:7e:17:6f:80:33:22: 6c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:2E:E9:BA:97:53:D7:A6:CC:BC:64:AA:D2:E3:BE:08:8E:72:D9:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/747607be-4420-3eaa-955d-22519d55950b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:1a:9d:de:a4:c3:49:eb:77:c9:3a:02:42:16:ec:31:5d:b7: 54:e9:17:8b:b0:08:27:46:d7:87:fa:83:a0:ef:7b:5a:38:b6: b9:05:7d:71:6e:87:02:6a:f1:93:53:98:b1:f2:5e:8e:bc:f1: 33:c6:89:fa:55:4f:fd:f6:b5:64:ea:ad:62:d0:92:10:03:dd: df:40:7b:1c:4c:7e:1b:3e:69:82:ce:9b:02:1d:18:bd:60:61: 89:cc:d7:7c:4b:ff:5e:05:8d:f9:e4:38:94:ff:1b:57:1e:6d: 17:bf:06:80:40:33:fe:1f:f4:63:b9:d1:62:d3:57:0a:26:ed: be:fa:63:d8:79:40:24:da:5e:20:51:6a:80:59:91:09:fc:3f: 9f:39:69:e9:86:d0:77:ba:0f:93:52:63:ac:9d:d2:ad:21:73: e0:a3:1e:a2:8e:de:be:8d:d7:84:1b:bb:c8:75:38:bb:76:34: 06:55:74:1c:6d:fa:6d:0d:5a:83:b3:c2:db:c1:28:72:2f:9d: 23:f7:6e:a8:15:95:7f:52:d4:30:cf:c5:9b:d5:12:94:30:a8: 00:4b:6a:0d:df:13:b3:00:38:37:0e:7d:1f:7e:65:f9:2b:2c: 16:50:64:db:10:6e:75:68:47:3b:e9:d8:f3:f4:d4:b2:15:af: b2:ea:26:a3 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE54u00Cdx7j7PckAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk OTNiOGNkYzItNDU4MC00ZDI1LThhOTktNzdkOTBjNTE2ZTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzFGgIkzBo1qeOSq1gPX1MHjRkZKxBUdOmF/ rfUHRhVL8Uewgm7USBCo9vZ64zy+W8cxCKfv0KYwYaNdafxGXAbUhTD9kTWvKKRU pZKaeFCAoYVHEuvJI15zcKWNn7sHMQAe5OWZ2mV5aG2D6fkKlDJgwceX+v63cAhu Vw72SiyMozn7zMpioYAfXIttZ5vD7a9WPMi2HgpM9N0qQ4T1r8Xn4Q4c3Co9WkRs lP0SYhorPKuZxlRH1yQqRpmqazjxfXA+iGySc6wY4YyKB8wUAonoU+ee+GSZkBl6 0rjktNWz+rfiZaza94GOsEdnmdZLuuZiu3Dos9B+F2+AMyJsJwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKUu6bqXU9emzLxkqtLjvgiOctn7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzQ3NjA3YmUtNDQyMC0z ZWFhLTk1NWQtMjI1MTlkNTU5NTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBXGp3epMNJ63fJOgJCFuwxXbdU6ReLsAgnRteH +oOg73taOLa5BX1xbocCavGTU5ix8l6OvPEzxon6VU/99rVk6q1i0JIQA93fQHsc TH4bPmmCzpsCHRi9YGGJzNd8S/9eBY355DiU/xtXHm0XvwaAQDP+H/RjudFi01cK Ju2++mPYeUAk2l4gUWqAWZEJ/D+fOWnphtB3ug+TUmOsndKtIXPgox6ijt6+jdeE G7vIdTi7djQGVXQcbfptDVqDs8LbwShyL50j926oFZV/UtQwz8Wb1RKUMKgAS2oN 3xOzADg3Dn0ffmX5KywWUGTbEG51aEc76djz9NSyFa+y6iaj -----END CERTIFICATE-----Generated at Mon Oct 20 10:40:25 2025 by rpki-client