$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8578d5d1-f6c6-3beb-b09b-fe8b5ed9f673.roa File: 8578d5d1-f6c6-3beb-b09b-fe8b5ed9f673.roa (raw, json) Hash identifier: aGgKXZ1Hgur0YMvbxXuwXwoNVRrd2cBqj9ucgmdmlMI= Subject key identifier: 99:35:25:C9:9B:F3:27:CA:14:A4:03:5C:CD:FB:F5:56:37:F0:F8:3B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E78BA4055BBC1904C07900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8578d5d1-f6c6-3beb-b09b-fe8b5ed9f673.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 36616 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:8b:a4:05:5b:bc:19:04:c0:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=2a249559-8b57-4919-9a64-31fbd15b9601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a2:db:67:64:2f:c4:2e:37:ef:dd:33:33:5c: a4:3a:5a:59:51:e1:a3:2a:b2:87:44:6d:a6:aa:d1: 63:8f:dc:f2:d9:84:9b:8f:4a:08:be:5c:ab:4f:67: 7a:f2:af:e1:18:8c:4f:83:bc:2d:95:5c:11:02:55: 4e:84:e1:d8:0a:3e:a7:90:b0:43:40:3f:be:90:82: 44:4d:8a:c5:07:f9:ed:23:2e:0c:81:2a:d9:24:d2: c3:37:36:01:9a:32:88:5a:4b:2a:7a:f2:a5:6b:21: 20:fb:bb:7c:14:54:e3:ad:7b:ed:90:7a:1d:45:1b: 20:68:24:30:bb:c5:bb:7b:de:9c:b6:9f:ca:1f:f9: 81:b3:11:6d:85:54:4d:d3:6f:3c:8a:6e:b5:80:8e: bd:e4:44:12:b5:ee:90:0e:38:fb:bc:27:1c:16:e3: f5:c3:bc:79:e0:c0:35:8b:4b:d4:be:01:de:0b:8f: 26:bc:2b:7c:a8:bd:b7:a2:c5:ac:c2:26:71:43:f4: 90:e6:b2:60:ee:ad:7e:dc:11:66:d3:41:50:08:20: fb:22:23:e5:e9:bd:5b:2c:9d:26:64:54:ba:22:2f: fe:6f:03:9a:87:94:ed:2b:a7:ee:0e:80:03:fd:b5: 7b:e4:31:30:17:65:17:ee:e1:1d:1d:78:77:14:ae: 6a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:35:25:C9:9B:F3:27:CA:14:A4:03:5C:CD:FB:F5:56:37:F0:F8:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8578d5d1-f6c6-3beb-b09b-fe8b5ed9f673.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:e6:14:59:eb:9e:df:ee:04:b2:eb:30:8a:d9:b1:fc:fc:ff: 76:b0:20:0f:ed:d4:2a:cb:8c:da:f7:65:74:9a:dd:7a:97:81: 09:c2:b9:6c:f9:1d:87:48:c6:21:3d:c1:7f:8a:33:cf:66:57: 03:e7:ee:f4:3d:79:c8:4c:33:fb:da:5d:4c:38:fa:c2:88:68: 6d:90:14:1f:1f:fa:37:a1:94:fa:83:c4:c4:03:e1:14:59:07: 65:b5:74:cd:6d:e6:d0:7c:e1:be:e1:39:91:55:75:22:75:0d: cd:e8:47:2f:a3:5a:99:89:2e:84:55:a2:db:90:d8:8d:5a:b0: cd:14:02:b9:44:e2:35:82:4a:3d:0c:e5:3e:d6:ed:50:21:d7: 50:84:77:02:68:59:0d:fc:fa:ac:a5:b8:bc:5a:b6:23:56:a1: fe:10:33:6a:89:7a:6f:98:ab:9c:4e:aa:0d:1f:c9:51:e4:ae: 2b:67:a0:ad:5e:07:d0:30:04:6e:72:c8:1b:f8:40:d2:c4:f8: 47:aa:da:e6:38:58:7f:ae:43:03:b4:8f:aa:d9:db:50:2a:df: 04:c4:c4:68:56:6a:1e:16:67:f6:e9:df:b3:f1:e9:27:42:c6: b4:2a:1a:68:c9:64:0f:2e:9c:85:c0:2f:83:84:b2:b0:42:bd: 98:84:68:8b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE54ukBVu8GQTAeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk MmEyNDk1NTktOGI1Ny00OTE5LTlhNjQtMzFmYmQxNWI5NjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36LbZ2QvxC43790zM1ykOlpZUeGjKrKHRG2m qtFjj9zy2YSbj0oIvlyrT2d68q/hGIxPg7wtlVwRAlVOhOHYCj6nkLBDQD++kIJE TYrFB/ntIy4MgSrZJNLDNzYBmjKIWksqevKlayEg+7t8FFTjrXvtkHodRRsgaCQw u8W7e96ctp/KH/mBsxFthVRN0288im61gI695EQSte6QDjj7vCccFuP1w7x54MA1 i0vUvgHeC48mvCt8qL23osWswiZxQ/SQ5rJg7q1+3BFm00FQCCD7IiPl6b1bLJ0m ZFS6Ii/+bwOah5TtK6fuDoAD/bV75DEwF2UX7uEdHXh3FK5qeQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJk1Jcmb8yfKFKQDXM379VY38Pg7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODU3OGQ1ZDEtZjZjNi0z YmViLWIwOWItZmU4YjVlZDlmNjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB85hRZ657f7gSy6zCK2bH8/P92sCAP7dQqy4za 92V0mt16l4EJwrls+R2HSMYhPcF/ijPPZlcD5+70PXnITDP72l1MOPrCiGhtkBQf H/o3oZT6g8TEA+EUWQdltXTNbebQfOG+4TmRVXUidQ3N6Ecvo1qZiS6EVaLbkNiN WrDNFAK5ROI1gko9DOU+1u1QIddQhHcCaFkN/Pqspbi8WrYjVqH+EDNqiXpvmKuc TqoNH8lR5K4rZ6CtXgfQMARucsgb+EDSxPhHqtrmOFh/rkMDtI+q2dtQKt8ExMRo VmoeFmf26d+z8eknQsa0KhpoyWQPLpyFwC+DhLKwQr2YhGiL -----END CERTIFICATE-----Generated at Mon Oct 20 08:15:14 2025 by rpki-client