$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/97e7fe72-c812-3e89-857d-cba10fa54a1c.roa File: 97e7fe72-c812-3e89-857d-cba10fa54a1c.roa (raw, json) Hash identifier: mbU8dQNqKOU9EwTf6PuEKW6I9tZFerRNbnaTNr0puSI= Subject key identifier: 68:56:3E:BF:BC:E8:8A:C5:83:D1:0D:92:88:5A:52:C1:5F:26:1E:86 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E78FA7514955148E3DEC00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/97e7fe72-c812-3e89-857d-cba10fa54a1c.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 396583 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:8f:a7:51:49:55:14:8e:3d:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=71fd6d83-f9cf-4e79-9bc5-3dd42bdcd26f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ee:85:c5:2a:da:ff:2a:aa:6c:8e:ee:e3:59: b2:ec:b5:24:ce:4b:02:9e:ab:30:10:ce:39:b0:aa: 00:67:98:62:c3:ab:a2:f4:92:c3:53:3a:61:34:2c: 79:e3:fa:09:a1:55:73:ab:e0:dd:a7:16:6a:39:27: 1e:44:3b:43:85:f4:9a:a3:d8:93:d0:1c:da:2e:4a: 34:02:44:84:e6:f7:80:b6:0c:54:2f:97:e3:24:cd: df:5e:9d:2a:4b:a5:8a:94:2b:33:e7:6d:5f:72:f3: 32:1c:2f:46:72:cc:7f:4e:d2:b1:f5:a9:19:49:1d: 0e:9b:94:72:fc:ed:f2:f0:2c:1e:45:c5:03:bc:37: 21:90:30:f7:cc:df:8f:2d:c5:9e:8e:26:62:79:47: c9:aa:c7:b6:52:a6:99:15:0e:ab:49:92:ae:12:b3: 90:f5:43:22:7d:03:22:f5:3c:c1:37:58:1d:61:b6: 20:15:3a:15:1f:6c:41:e0:20:e4:f6:1e:3a:f6:f0: 95:e3:11:87:19:78:26:a9:07:c5:3e:b1:a7:31:57: dd:4a:a9:46:bc:83:77:06:c9:84:38:6c:de:6d:33: bf:39:07:56:ef:3d:c6:3c:0d:0e:6e:e3:da:f7:3b: e3:65:cf:15:f2:5e:2e:e0:4a:d0:f8:f9:5c:9d:d6: e4:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:56:3E:BF:BC:E8:8A:C5:83:D1:0D:92:88:5A:52:C1:5F:26:1E:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/97e7fe72-c812-3e89-857d-cba10fa54a1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:f5:dd:b3:fc:34:e2:b5:f5:1f:f1:01:ad:58:ae:a8:e5:8a: b0:7b:39:df:3c:3b:a3:4c:db:75:b0:51:96:a2:47:3c:15:3d: 0a:8d:e8:44:3d:61:fe:7c:54:92:4f:9f:60:7c:c7:d7:18:81: 90:04:21:6b:0f:52:ce:8b:65:86:71:0c:d5:e4:c3:5f:b8:45: b9:6f:21:a4:d3:27:62:fa:38:c5:36:6e:2d:b3:df:51:be:c6: b8:d0:27:07:51:f5:fe:78:f9:4e:01:d0:33:d4:fe:aa:b8:6a: a1:3f:af:5a:8e:0b:7a:3b:60:df:f7:2d:f8:0e:fd:56:27:dc: a8:0c:6f:68:50:ae:a8:8c:18:6a:98:70:fd:59:40:6a:0d:a7: 28:66:4e:ad:5c:d6:ec:89:ee:64:65:ab:0a:b2:0b:61:f2:62: 1a:6e:96:fb:32:8a:13:43:ea:b5:75:5a:2c:fb:fb:23:32:fd: e3:c3:81:49:1e:44:e7:f3:e2:a1:cb:2f:13:57:ad:e5:4a:d8: f8:61:cc:7e:33:84:a2:41:d9:e4:99:51:17:50:2d:15:e7:e0: cf:2a:7a:d6:46:9f:ec:1a:c6:0d:95:9d:1f:71:de:5b:9b:18: f5:fc:09:59:8b:e3:94:33:a5:d3:4e:a5:94:84:92:6a:55:53: f2:f4:74:03 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE54+nUUlVFI497AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk NzFmZDZkODMtZjljZi00ZTc5LTliYzUtM2RkNDJiZGNkMjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqu6FxSra/yqqbI7u41my7LUkzksCnqswEM45 sKoAZ5hiw6ui9JLDUzphNCx54/oJoVVzq+DdpxZqOSceRDtDhfSao9iT0BzaLko0 AkSE5veAtgxUL5fjJM3fXp0qS6WKlCsz521fcvMyHC9Gcsx/TtKx9akZSR0Om5Ry /O3y8CweRcUDvDchkDD3zN+PLcWejiZieUfJqse2UqaZFQ6rSZKuErOQ9UMifQMi 9TzBN1gdYbYgFToVH2xB4CDk9h469vCV4xGHGXgmqQfFPrGnMVfdSqlGvIN3BsmE OGzebTO/OQdW7z3GPA0ObuPa9zvjZc8V8l4u4ErQ+PlcndbkQwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGhWPr+86IrFg9ENkohaUsFfJh6GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTdlN2ZlNzItYzgxMi0z ZTg5LTg1N2QtY2JhMTBmYTU0YTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBq9d2z/DTitfUf8QGtWK6o5YqweznfPDujTNt1 sFGWokc8FT0KjehEPWH+fFSST59gfMfXGIGQBCFrD1LOi2WGcQzV5MNfuEW5byGk 0ydi+jjFNm4ts99Rvsa40CcHUfX+ePlOAdAz1P6quGqhP69ajgt6O2Df9y34Dv1W J9yoDG9oUK6ojBhqmHD9WUBqDacoZk6tXNbsie5kZasKsgth8mIabpb7MooTQ+q1 dVos+/sjMv3jw4FJHkTn8+Khyy8TV63lStj4Ycx+M4SiQdnkmVEXUC0V5+DPKnrW Rp/sGsYNlZ0fcd5bmxj1/AlZi+OUM6XTTqWUhJJqVVPy9HQD -----END CERTIFICATE-----Generated at Mon Oct 20 08:15:49 2025 by rpki-client