$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2a0c956-30f8-3bf2-82e3-b0cb4d6f6086.roa File: a2a0c956-30f8-3bf2-82e3-b0cb4d6f6086.roa (raw, json) Hash identifier: 1uB48KrbqHWDvYtNPTuKDMqEDcdIlzJqPj3JJVqUyc8= Subject key identifier: 45:2F:DE:9A:72:C5:A5:1A:61:DA:7B:C0:F9:45:B3:F7:14:03:95:CB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E78FCB9D4132BD30938580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2a0c956-30f8-3bf2-82e3-b0cb4d6f6086.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 396581 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:8f:cb:9d:41:32:bd:30:93:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=1e7467ec-0221-4aa1-aba5-176164c7ba05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c9:10:9b:0a:b0:0e:91:7f:04:d0:83:27:10: 86:62:f2:91:3a:3a:65:9e:d6:1b:52:ad:c3:57:44: 9e:a1:04:09:ec:33:73:96:04:32:cc:0a:d4:d6:cc: 43:6c:de:99:c2:e8:99:9b:af:23:c0:4f:de:d3:53: 16:5a:42:5f:49:4c:08:cd:7a:15:65:84:3e:ad:cf: 63:b3:eb:a7:88:b1:09:2e:73:4f:aa:2b:3a:33:73: 66:71:46:4a:1f:00:db:ab:6b:f5:8a:26:77:02:8a: 7f:e3:fc:1e:46:56:ac:67:ae:f8:0e:ba:1f:91:30: f1:59:1b:8a:e0:5a:37:82:30:b5:9d:37:8a:07:45: 1b:23:84:b4:06:66:0a:79:00:99:f8:ef:00:8a:ff: 48:57:d6:b6:65:16:32:3c:5c:6d:ad:d9:0e:0f:42: f1:9d:fd:e5:48:38:ec:c8:3d:1b:4f:89:10:92:ee: 78:8d:50:17:e2:74:f9:56:d3:6d:e2:47:99:2a:7f: f6:a9:03:03:54:02:cb:52:1c:e3:41:e0:36:75:1b: 48:13:92:76:d8:f8:14:fc:6b:ba:14:18:38:ee:eb: 3c:19:b0:e2:17:94:0e:07:a5:b8:22:7a:48:bf:f1: 4f:48:6f:b3:a1:77:c2:06:b0:1e:cd:22:47:04:32: ef:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:2F:DE:9A:72:C5:A5:1A:61:DA:7B:C0:F9:45:B3:F7:14:03:95:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2a0c956-30f8-3bf2-82e3-b0cb4d6f6086.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:e6:61:63:b0:f0:3c:b6:9d:83:07:fd:83:78:81:5d:75:84: 1d:85:15:86:da:7f:ff:60:89:c1:d0:46:36:98:5c:fe:f2:2d: a4:fb:00:ee:8d:ac:c2:98:ea:50:83:24:a3:fb:ca:c3:29:72: 12:5e:d8:10:8f:2c:17:77:76:87:43:94:a0:f7:9d:9d:5e:d4: 69:ab:77:d7:fc:69:c8:3c:07:25:f5:9a:b8:ef:9a:e5:ea:a1: 87:e6:9b:3f:7b:60:b5:30:0a:15:c6:82:43:d6:99:63:33:d2: 74:79:da:c3:c4:bf:d8:ba:aa:7f:10:d1:23:ed:2f:48:1d:b4: fe:a3:78:12:0e:47:2a:d3:3a:6e:cd:d1:ec:e6:d6:f2:2d:70: 75:6d:65:fb:92:bd:b2:c8:f8:8b:f4:d9:82:6c:83:dc:cb:32: 2a:09:61:15:8a:66:0a:40:43:6a:99:33:f5:b8:58:25:13:e7: 65:8a:3f:94:08:3b:1f:ba:24:db:0e:58:f7:79:41:82:02:12: 01:79:78:bf:69:68:c4:b0:3b:d9:bf:0a:ce:8d:9c:40:36:ff: 29:f5:2f:d2:3e:2b:cb:f7:70:80:e7:0b:31:02:11:d8:3a:6b: 8d:5f:9b:33:7e:f9:e7:bf:4f:0f:ff:ef:4b:5f:4a:be:59:c9: 6c:d3:88:83 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE54/LnUEyvTCThYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk MWU3NDY3ZWMtMDIyMS00YWExLWFiYTUtMTc2MTY0YzdiYTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMkQmwqwDpF/BNCDJxCGYvKROjplntYbUq3D V0SeoQQJ7DNzlgQyzArU1sxDbN6ZwuiZm68jwE/e01MWWkJfSUwIzXoVZYQ+rc9j s+uniLEJLnNPqis6M3NmcUZKHwDbq2v1iiZ3Aop/4/weRlasZ674DrofkTDxWRuK 4Fo3gjC1nTeKB0UbI4S0BmYKeQCZ+O8Aiv9IV9a2ZRYyPFxtrdkOD0Lxnf3lSDjs yD0bT4kQku54jVAX4nT5VtNt4keZKn/2qQMDVALLUhzjQeA2dRtIE5J22PgU/Gu6 FBg47us8GbDiF5QOB6W4InpIv/FPSG+zoXfCBrAezSJHBDLv9wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEUv3ppyxaUaYdp7wPlFs/cUA5XLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTJhMGM5NTYtMzBmOC0z YmYyLTgyZTMtYjBjYjRkNmY2MDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBM5mFjsPA8tp2DB/2DeIFddYQdhRWG2n//YInB 0EY2mFz+8i2k+wDujazCmOpQgySj+8rDKXISXtgQjywXd3aHQ5Sg952dXtRpq3fX /GnIPAcl9Zq475rl6qGH5ps/e2C1MAoVxoJD1pljM9J0edrDxL/Yuqp/ENEj7S9I HbT+o3gSDkcq0zpuzdHs5tbyLXB1bWX7kr2yyPiL9NmCbIPcyzIqCWEVimYKQENq mTP1uFglE+dlij+UCDsfuiTbDlj3eUGCAhIBeXi/aWjEsDvZvwrOjZxANv8p9S/S PivL93CA5wsxAhHYOmuNX5szfvnnv08P/+9LX0q+Wcls04iD -----END CERTIFICATE-----Generated at Mon Oct 20 08:14:27 2025 by rpki-client