$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9d37f10f-4774-36ce-aad2-fc9f42d923b1.roa File: 9d37f10f-4774-36ce-aad2-fc9f42d923b1.roa (raw, json) Hash identifier: 2kIksVHhxVzM+KSxGzE0L0uKzUAzGL+8QvIgU18LnuI= Subject key identifier: D3:26:F9:08:00:99:89:25:99:3D:D4:B5:AF:92:C5:9B:75:E3:15:25 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E793EE543CB322CE390BE0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9d37f10f-4774-36ce-aad2-fc9f42d923b1.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 36624 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:93:ee:54:3c:b3:22:ce:39:0b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=5bc29593-55fd-476a-94f9-7b75f8fea51e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:4d:14:14:18:33:ce:c5:09:9f:04:49:67:4c: ed:fb:7d:5d:e2:30:ab:e8:6a:5d:cf:06:83:3b:47: 24:7c:b7:f0:b2:d4:02:1f:c5:a4:72:ad:c9:43:e4: 95:0b:07:67:34:47:6a:c5:6d:2e:9e:a8:6a:1e:d0: d3:cc:79:c4:ac:18:42:37:84:e9:d7:a5:63:2d:75: 70:21:c5:1a:fa:7a:02:cd:67:94:ae:53:e9:27:08: fa:a4:7a:74:e2:04:4d:56:c2:c8:a4:4c:87:ef:16: f2:09:16:d7:81:87:c1:2a:24:2f:f4:f5:ea:98:e6: c8:c8:7c:07:1d:bb:d7:0a:8d:79:87:6a:24:80:6c: 05:45:b4:99:35:49:74:68:27:30:0b:a2:78:22:20: 84:f5:de:10:88:b5:ea:f3:c0:56:bc:0b:0a:69:8d: 1e:c2:bc:65:b9:f6:b1:83:b7:5d:71:aa:cc:3a:6b: e6:f9:d4:4d:c7:f3:c8:89:1d:6a:22:d2:c8:3e:c2: 56:cb:a7:90:ff:2d:9d:c4:e5:2d:f7:cf:f7:50:0b: e3:c9:2c:78:00:e3:ee:11:c6:0d:c1:1d:e2:ca:e3: 78:62:24:16:3c:9c:e1:ba:d7:c8:16:9c:15:b5:8e: 0a:9c:a7:99:48:c6:90:c8:8a:e5:3f:89:91:05:24: 77:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:26:F9:08:00:99:89:25:99:3D:D4:B5:AF:92:C5:9B:75:E3:15:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9d37f10f-4774-36ce-aad2-fc9f42d923b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:fd:ea:78:87:d1:ca:73:1b:25:46:94:87:a6:5b:23:3d:81: 58:c5:0f:c4:87:45:59:41:e3:4c:a1:33:df:21:9c:d0:92:09: 55:da:af:2a:bc:1b:df:0e:bc:c3:20:ea:d7:1c:7f:64:c9:82: bb:7d:72:da:e8:14:a7:7b:92:c1:8c:09:e3:6c:e1:04:82:d0: 90:de:b3:cd:9a:71:6f:ca:28:82:56:72:c0:8c:d2:aa:f1:95: 9a:2a:ab:7b:9a:12:71:9d:65:64:0e:f6:cb:8f:be:96:f8:87: 49:95:96:19:48:67:1e:d4:09:16:17:ae:41:64:d8:7e:c9:04: 93:12:5a:5d:cc:f2:49:c2:b5:50:f7:95:bb:e8:37:36:3f:0b: 17:f1:72:90:a8:41:cd:a6:22:f1:b8:8a:4f:fe:7d:81:7d:d3: a9:1d:4a:bf:40:f8:86:fb:d9:6f:9a:ec:ef:bf:50:22:12:0c: b3:b5:e8:32:20:20:e5:6f:a0:2f:df:a4:fd:89:e5:89:f6:e4: a7:48:f3:56:49:96:86:e9:90:94:d2:8d:7e:f4:70:97:17:15: ca:5c:96:8e:f2:57:ff:e3:84:bc:3c:53:b3:cc:8a:5e:d2:63: b4:21:05:d7:66:cb:4c:ba:21:14:40:e4:0f:ff:a4:b5:c4:5d: c0:a0:30:aa -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE55PuVDyzIs45C+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk NWJjMjk1OTMtNTVmZC00NzZhLTk0ZjktN2I3NWY4ZmVhNTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkE0UFBgzzsUJnwRJZ0zt+31d4jCr6GpdzwaD O0ckfLfwstQCH8Wkcq3JQ+SVCwdnNEdqxW0unqhqHtDTzHnErBhCN4Tp16VjLXVw IcUa+noCzWeUrlPpJwj6pHp04gRNVsLIpEyH7xbyCRbXgYfBKiQv9PXqmObIyHwH HbvXCo15h2okgGwFRbSZNUl0aCcwC6J4IiCE9d4QiLXq88BWvAsKaY0ewrxlufax g7ddcarMOmvm+dRNx/PIiR1qItLIPsJWy6eQ/y2dxOUt98/3UAvjySx4AOPuEcYN wR3iyuN4YiQWPJzhutfIFpwVtY4KnKeZSMaQyIrlP4mRBSR3+QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNMm+QgAmYklmT3Uta+SxZt14xUlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWQzN2YxMGYtNDc3NC0z NmNlLWFhZDItZmM5ZjQyZDkyM2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAR/ep4h9HKcxslRpSHplsjPYFYxQ/Eh0VZQeNM oTPfIZzQkglV2q8qvBvfDrzDIOrXHH9kyYK7fXLa6BSne5LBjAnjbOEEgtCQ3rPN mnFvyiiCVnLAjNKq8ZWaKqt7mhJxnWVkDvbLj76W+IdJlZYZSGce1AkWF65BZNh+ yQSTElpdzPJJwrVQ95W76Dc2PwsX8XKQqEHNpiLxuIpP/n2BfdOpHUq/QPiG+9lv muzvv1AiEgyztegyICDlb6Av36T9ieWJ9uSnSPNWSZaG6ZCU0o1+9HCXFxXKXJaO 8lf/44S8PFOzzIpe0mO0IQXXZstMuiEUQOQP/6S1xF3AoDCq -----END CERTIFICATE-----Generated at Mon Oct 20 10:22:41 2025 by rpki-client