$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/97ed43b8-0e7e-3f1d-9544-ff2053e5f159.roa File: 97ed43b8-0e7e-3f1d-9544-ff2053e5f159.roa (raw, json) Hash identifier: gQ+sREtHMZfp/MIIpeWmrQGpYNY328WK4OGW2Edcsmc= Subject key identifier: B6:C4:C3:CF:B7:B5:6F:5A:D2:F9:BE:83:47:48:EA:1B:09:3E:30:02 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E78F4A1162FC9C6082BD80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/97ed43b8-0e7e-3f1d-9544-ff2053e5f159.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 36621 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:8f:4a:11:62:fc:9c:60:82:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=51acbd1c-06af-45f4-882b-a248d5de25d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c6:ee:7f:15:75:43:f8:18:a7:82:7a:87:17: cf:54:5e:16:71:66:a3:80:51:16:88:bf:e2:1a:b6: 6a:cd:be:4c:90:2d:d9:53:a2:14:c8:a2:47:4d:ef: 25:ff:d2:08:28:31:b6:c9:c9:6d:5b:a5:1b:f4:ef: 6c:f9:c1:ce:34:f1:e2:8a:c3:41:ad:44:a9:26:f5: b8:7e:1a:fc:92:b0:bb:8c:fa:7e:45:31:aa:7f:e6: ab:06:e6:d3:0d:cc:92:b5:60:0f:51:44:f4:1b:fc: b9:6b:ad:43:8f:a1:d4:97:be:82:3d:ea:6b:a2:c7: 13:a7:8b:2e:66:96:56:b4:38:5b:f4:db:cd:70:c2: 3d:85:11:40:06:82:21:f6:b8:8e:c3:00:84:34:48: 5f:9b:4f:a6:d0:ed:69:09:1a:54:06:c3:b5:32:c4: 1b:b7:35:27:38:7f:0a:6b:52:aa:94:4f:5c:80:de: 11:fe:76:f5:73:65:34:78:2a:96:ef:4c:49:62:94: 3a:e4:4c:1a:21:5e:bc:d7:fe:ce:44:60:1f:1c:e0: 90:91:22:08:a6:09:42:61:82:ad:46:f8:4b:76:0b: ed:ed:ff:b7:af:e0:d8:c3:fc:50:08:61:79:7c:b8: b1:ae:b4:a2:b9:ee:3c:ab:1b:8f:14:dd:26:ed:f1: 53:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:C4:C3:CF:B7:B5:6F:5A:D2:F9:BE:83:47:48:EA:1B:09:3E:30:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/97ed43b8-0e7e-3f1d-9544-ff2053e5f159.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:2c:64:8b:59:34:2f:88:c7:9f:35:73:3b:62:60:a9:0d:e0: 42:c1:cb:92:57:7f:21:c7:76:17:b8:b3:f2:7a:a7:17:41:1a: a4:42:e8:b3:a6:b5:b4:ba:88:b5:58:09:08:61:91:82:6b:26: 9d:2d:9e:a0:46:a6:7b:9b:09:11:fc:94:00:c3:17:7b:d1:be: 0d:e9:f0:3f:52:64:e7:fe:58:b5:7c:14:d3:07:51:28:e5:75: 48:77:02:70:19:0f:35:ef:6c:27:69:99:60:a2:d8:9e:b7:37: f6:31:85:1f:7e:90:1f:09:5b:3a:aa:18:28:94:82:19:b0:fc: 4d:3c:18:8d:d3:b2:17:f2:89:6e:9d:bc:f6:07:00:a7:16:2e: a2:ad:e9:00:cb:37:44:75:b9:73:cb:00:71:40:fc:67:e0:e4: f5:14:fd:1e:f2:55:c5:0e:72:7c:b1:7c:2c:8d:4c:79:ac:ee: 83:dd:bf:1e:98:09:2f:42:c3:58:3e:a7:0f:f4:38:3e:d2:4d: 76:4d:14:6a:c2:ee:36:f4:24:55:44:5d:7d:ab:fe:6c:58:19: b9:65:e3:b1:c8:8c:4d:47:d0:4f:44:88:53:19:e0:53:fd:0c: 1e:96:e9:d4:f9:e8:87:17:f5:14:ca:6a:13:d3:ec:a4:21:58: 8f:6b:e8:e5 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE549KEWL8nGCCvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk NTFhY2JkMWMtMDZhZi00NWY0LTg4MmItYTI0OGQ1ZGUyNWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsbufxV1Q/gYp4J6hxfPVF4WcWajgFEWiL/i GrZqzb5MkC3ZU6IUyKJHTe8l/9IIKDG2ycltW6Ub9O9s+cHONPHiisNBrUSpJvW4 fhr8krC7jPp+RTGqf+arBubTDcyStWAPUUT0G/y5a61Dj6HUl76CPeproscTp4su ZpZWtDhb9NvNcMI9hRFABoIh9riOwwCENEhfm0+m0O1pCRpUBsO1MsQbtzUnOH8K a1KqlE9cgN4R/nb1c2U0eCqW70xJYpQ65EwaIV681/7ORGAfHOCQkSIIpglCYYKt RvhLdgvt7f+3r+DYw/xQCGF5fLixrrSiue48qxuPFN0m7fFTgQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLbEw8+3tW9a0vm+g0dI6hsJPjACMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTdlZDQzYjgtMGU3ZS0z ZjFkLTk1NDQtZmYyMDUzZTVmMTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB0LGSLWTQviMefNXM7YmCpDeBCwcuSV38hx3YX uLPyeqcXQRqkQuizprW0uoi1WAkIYZGCayadLZ6gRqZ7mwkR/JQAwxd70b4N6fA/ UmTn/li1fBTTB1Eo5XVIdwJwGQ8172wnaZlgotietzf2MYUffpAfCVs6qhgolIIZ sPxNPBiN07IX8olunbz2BwCnFi6irekAyzdEdblzywBxQPxn4OT1FP0e8lXFDnJ8 sXwsjUx5rO6D3b8emAkvQsNYPqcP9Dg+0k12TRRqwu429CRVRF19q/5sWBm5ZeOx yIxNR9BPRIhTGeBT/QwelunU+eiHF/UUymoT0+ykIViPa+jl -----END CERTIFICATE-----Generated at Mon Oct 20 08:15:59 2025 by rpki-client