$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/759ef420-0a4b-3890-bb6c-974aa06adabd.roa File: 759ef420-0a4b-3890-bb6c-974aa06adabd.roa (raw, json) Hash identifier: wm6FcE5dtnVvMcFh3NnzkhVEMP1om90AfcC7LIaSIDs= Subject key identifier: 53:FF:F7:72:D3:FC:9D:FE:13:34:D1:A0:A6:E1:DB:15:48:FC:44:41 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E7910B720C9FA5AF3D7A80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/759ef420-0a4b-3890-bb6c-974aa06adabd.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 397194 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:91:0b:72:0c:9f:a5:af:3d:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=c0b56f2e-2603-48ab-8600-57704825fc98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f7:81:90:9b:6a:4c:b8:51:ed:f5:d2:95:f2: fe:d8:85:b1:ca:30:65:06:7a:d1:b8:c1:d9:a3:81: 6a:4a:ec:3a:dc:ce:d6:19:33:06:a9:77:ab:dd:a9: eb:57:dc:21:29:11:73:b8:b3:29:a2:f3:99:d6:da: 24:fc:b8:c1:dd:25:ef:68:7b:07:56:2d:c8:b4:79: bb:58:8b:35:1a:dc:11:59:ff:7f:dd:ee:e9:68:c1: 16:50:f1:42:88:83:31:e0:65:e1:e7:5d:f3:f3:22: 78:df:79:01:6e:12:a9:d1:40:be:ec:d9:53:45:fb: 70:23:a5:11:16:16:05:7a:c1:1f:8e:26:17:8b:77: ce:58:6c:ef:55:a8:72:e7:cf:9a:ed:fa:f2:5d:9c: eb:10:13:d4:76:19:aa:6f:57:5e:2c:55:78:c1:6a: 84:c2:53:27:8c:a8:4c:c4:ca:f2:27:d0:34:d1:f4: b9:9f:d7:53:3c:2f:71:9b:9f:0f:4c:33:ea:c0:47: 2b:c2:34:95:a6:9c:e9:8b:fc:a2:a8:12:a7:74:01: ac:a1:a1:80:8f:49:ec:af:2c:0e:fb:bd:f8:e6:a2: 17:e1:1f:19:87:f8:9b:9c:55:8c:88:b4:74:32:75: 5b:bf:65:db:76:bc:e0:90:10:73:5c:2d:be:b5:a5: 9a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:FF:F7:72:D3:FC:9D:FE:13:34:D1:A0:A6:E1:DB:15:48:FC:44:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/759ef420-0a4b-3890-bb6c-974aa06adabd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:c1:da:85:6c:d6:50:1c:4c:3e:04:7c:97:2c:5f:09:2f:cc: 15:6f:3a:fd:c5:2c:24:87:b1:e3:44:f4:1b:9a:65:e2:7a:64: 78:9a:3f:4b:de:66:ca:e3:eb:5c:79:9d:93:ec:6b:51:18:83: d6:2b:29:6d:46:a9:b3:df:09:cd:9a:b9:33:7d:e7:cf:68:c0: 60:59:cc:fe:57:53:d3:40:df:e4:20:03:e8:55:03:8f:c0:9b: c3:98:80:c8:07:a7:55:60:f2:0f:11:a3:6e:9c:46:e6:3c:1a: 58:df:83:1f:2d:55:09:1d:22:86:75:7b:23:6a:78:6a:f7:21: 21:66:a6:d1:a1:1a:8a:a6:22:14:ff:ce:16:a5:02:c4:c0:83: 53:ca:0f:ee:fa:d8:4e:fc:fb:a9:04:55:ab:58:06:4f:f9:f0: f7:78:af:03:7e:a3:d3:f4:0c:10:99:a6:15:56:7c:31:cf:d2: 99:eb:eb:f5:ae:92:bb:30:67:1a:40:a5:f1:75:ca:ec:93:8f: c8:40:b5:50:2d:cb:9a:e2:db:47:65:3d:6b:e5:4e:44:23:db: 1b:34:d9:19:9b:56:e0:9f:d3:6a:da:b2:13:78:af:a2:50:cd: 7e:37:c7:38:2e:0f:54:a2:51:b0:f2:9d:26:4f:a3:8d:96:cc: 06:30:67:a6 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE55ELcgyfpa89eoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk YzBiNTZmMmUtMjYwMy00OGFiLTg2MDAtNTc3MDQ4MjVmYzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/eBkJtqTLhR7fXSlfL+2IWxyjBlBnrRuMHZ o4FqSuw63M7WGTMGqXer3anrV9whKRFzuLMpovOZ1tok/LjB3SXvaHsHVi3ItHm7 WIs1GtwRWf9/3e7paMEWUPFCiIMx4GXh513z8yJ433kBbhKp0UC+7NlTRftwI6UR FhYFesEfjiYXi3fOWGzvVahy58+a7fryXZzrEBPUdhmqb1deLFV4wWqEwlMnjKhM xMryJ9A00fS5n9dTPC9xm58PTDPqwEcrwjSVppzpi/yiqBKndAGsoaGAj0nsrywO +7345qIX4R8Zh/ibnFWMiLR0MnVbv2XbdrzgkBBzXC2+taWaowIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFP/93LT/J3+EzTRoKbh2xVI/ERBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzU5ZWY0MjAtMGE0Yi0z ODkwLWJiNmMtOTc0YWEwNmFkYWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA+wdqFbNZQHEw+BHyXLF8JL8wVbzr9xSwkh7Hj RPQbmmXiemR4mj9L3mbK4+tceZ2T7GtRGIPWKyltRqmz3wnNmrkzfefPaMBgWcz+ V1PTQN/kIAPoVQOPwJvDmIDIB6dVYPIPEaNunEbmPBpY34MfLVUJHSKGdXsjanhq 9yEhZqbRoRqKpiIU/84WpQLEwINTyg/u+thO/PupBFWrWAZP+fD3eK8DfqPT9AwQ maYVVnwxz9KZ6+v1rpK7MGcaQKXxdcrsk4/IQLVQLcua4ttHZT1r5U5EI9sbNNkZ m1bgn9Nq2rITeK+iUM1+N8c4Lg9UolGw8p0mT6ONlswGMGem -----END CERTIFICATE-----Generated at Mon Oct 20 10:32:44 2025 by rpki-client