$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a0fb1c03-6f5f-3ad9-9339-bc10c7bf027b.roa File: a0fb1c03-6f5f-3ad9-9339-bc10c7bf027b.roa (raw, json) Hash identifier: p2NRIkA4d3nmy/iAhBMtSyYtxtiu2fB66yP8679euDU= Subject key identifier: 40:3C:4B:88:F3:BD:2B:95:14:3E:2D:81:B1:B4:20:75:13:3D:1E:96 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B3556FD9790F8336E324B5700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a0fb1c03-6f5f-3ad9-9339-bc10c7bf027b.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 396614 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:fd:97:90:f8:33:6e:32:4b:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=1d32a38e-0dda-49c1-ab49-dc83350cad26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cc:bf:43:88:8e:64:33:c7:29:3d:42:c9:75: 27:6c:00:d2:ce:da:b3:70:d4:f0:9e:af:d2:06:33: 69:04:57:51:0c:69:ea:d3:aa:cc:7e:8f:dd:07:cb: d5:f2:85:80:5c:76:2e:6f:23:ea:21:65:b4:30:c5: 75:4c:bd:42:23:73:e0:31:59:cc:bd:44:bf:9c:3d: 35:8a:a4:a6:1d:15:18:90:fb:40:43:70:64:33:69: 5d:9f:79:34:d5:45:62:4f:63:30:44:e0:52:3f:1d: b9:ab:ff:66:cc:9a:f7:ef:71:b5:f0:2a:9a:16:46: 73:3d:16:77:b2:21:08:27:d9:05:e3:c9:29:9f:52: 61:54:ee:73:4f:e9:ac:13:23:69:07:c9:1f:df:61: 6a:8a:34:cb:fa:37:ba:40:94:9f:e4:f3:79:cf:4c: cd:9a:25:8b:25:e5:88:5b:5d:b2:69:a1:8d:7c:a4: d0:34:8b:22:d7:69:66:29:33:e3:00:59:28:41:43: c1:eb:2d:23:06:0c:6b:a9:33:df:e7:f8:90:d6:36: 2f:14:d7:65:27:97:36:73:11:bc:e3:75:90:86:b0: 3b:21:8e:76:01:7f:24:4a:b2:9c:e0:2c:10:38:ba: e6:f4:aa:2c:3b:46:6e:51:09:03:01:1b:e8:21:b1: f2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:3C:4B:88:F3:BD:2B:95:14:3E:2D:81:B1:B4:20:75:13:3D:1E:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a0fb1c03-6f5f-3ad9-9339-bc10c7bf027b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:e0:06:8e:78:02:c9:8c:3c:27:a9:0c:1f:65:5a:d5:4e:55: c8:d6:7c:90:ef:04:f4:f4:4c:74:a1:8f:22:99:96:7b:27:46: 52:85:af:75:19:35:0b:c6:36:e0:a7:1e:43:5a:fa:9a:7b:17: 82:59:5e:ab:69:8e:3e:85:82:2c:ae:6b:41:da:d6:e5:91:0f: a3:5b:ad:ad:00:1a:9c:a8:8a:6e:fc:6b:83:19:59:6b:dd:b9: 3d:e4:96:55:da:7d:2c:6c:8d:fc:3f:92:c6:67:02:45:a1:c6: 6a:45:b3:21:8b:25:39:eb:d5:e3:6c:d8:22:39:5b:de:9a:6b: 6e:72:9c:30:8b:88:b9:8e:69:ff:ab:db:94:f7:5b:b5:bf:5b: ad:34:be:7c:6d:a7:f1:d8:52:3d:e4:a7:7e:45:e9:50:02:96: 58:93:7c:bd:a3:d3:dd:d2:da:0a:70:5e:10:96:00:00:c1:02: e7:1e:f8:81:6a:46:09:63:cd:1d:59:b3:2f:42:63:93:32:7f: b1:19:20:9a:4d:e9:e8:f5:93:9e:84:38:ea:2f:a7:ee:b6:ee: 29:d7:ee:f9:82:47:b0:60:d6:58:85:6d:37:1e:f3:5c:c9:65: eb:da:3d:b1:22:73:56:06:f1:23:b3:7f:fa:dd:0e:51:f3:c5: e3:9b:63:ad -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEs1Vv2XkPgzbjJLVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk MWQzMmEzOGUtMGRkYS00OWMxLWFiNDktZGM4MzM1MGNhZDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosy/Q4iOZDPHKT1CyXUnbADSztqzcNTwnq/S BjNpBFdRDGnq06rMfo/dB8vV8oWAXHYubyPqIWW0MMV1TL1CI3PgMVnMvUS/nD01 iqSmHRUYkPtAQ3BkM2ldn3k01UViT2MwROBSPx25q/9mzJr373G18CqaFkZzPRZ3 siEIJ9kF48kpn1JhVO5zT+msEyNpB8kf32FqijTL+je6QJSf5PN5z0zNmiWLJeWI W12yaaGNfKTQNIsi12lmKTPjAFkoQUPB6y0jBgxrqTPf5/iQ1jYvFNdlJ5c2cxG8 43WQhrA7IY52AX8kSrKc4CwQOLrm9KosO0ZuUQkDARvoIbHyVwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEA8S4jzvSuVFD4tgbG0IHUTPR6WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTBmYjFjMDMtNmY1Zi0z YWQ5LTkzMzktYmMxMGM3YmYwMjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBi4AaOeALJjDwnqQwfZVrVTlXI1nyQ7wT09Ex0 oY8imZZ7J0ZSha91GTULxjbgpx5DWvqaexeCWV6raY4+hYIsrmtB2tblkQ+jW62t ABqcqIpu/GuDGVlr3bk95JZV2n0sbI38P5LGZwJFocZqRbMhiyU569XjbNgiOVve mmtucpwwi4i5jmn/q9uU91u1v1utNL58bafx2FI95Kd+RelQApZYk3y9o9Pd0toK cF4QlgAAwQLnHviBakYJY80dWbMvQmOTMn+xGSCaTeno9ZOehDjqL6futu4p1+75 gkewYNZYhW03HvNcyWXr2j2xInNWBvEjs3/63Q5R88Xjm2Ot -----END CERTIFICATE-----Generated at Mon Oct 20 08:17:32 2025 by rpki-client