$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/afc7b04a-df73-3dc8-a65c-5b41ee7a1852.roa File: afc7b04a-df73-3dc8-a65c-5b41ee7a1852.roa (raw, json) Hash identifier: Y8XVM7Zz0usbvwJMOuU1VhNZhrSdrfaNdZuynzA4EPA= Subject key identifier: CB:F2:46:02:43:13:DF:D1:61:BB:0F:1B:01:7B:B3:39:1B:65:88:03 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B715CE0DD2AF083C5D2B60580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/afc7b04a-df73-3dc8-a65c-5b41ee7a1852.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 396591 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:e0:dd:2a:f0:83:c5:d2:b6:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=34e8a40c-dbb8-4e0d-a3a9-5b7f7d070015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:74:c4:a0:75:90:69:54:20:9d:3c:f9:b7:5b: 1a:ca:9e:bc:9e:c3:3e:56:d6:b1:69:93:b7:47:0c: 0d:6a:18:db:7e:03:05:17:37:29:60:b1:b6:69:39: 29:c3:20:5c:b3:e2:7c:00:08:db:ff:0f:46:ca:c5: 25:f4:8b:a1:dd:c9:cf:9f:e2:0a:03:79:7d:2e:19: 59:6f:e8:39:40:c7:b1:33:d0:c5:9a:67:ca:c2:af: 72:5c:1d:9c:f1:5e:df:cd:c1:af:cf:71:9d:b4:85: c3:9c:67:06:62:4c:fa:e8:64:5c:4b:e4:d4:7b:10: 8e:90:82:cb:03:a4:02:ee:1e:a5:f1:dd:36:5e:3a: ed:35:bd:5e:03:6c:1f:e0:86:85:34:ff:7c:02:67: 28:83:10:2f:06:f9:29:d3:99:68:36:2e:dd:e0:3e: 51:f8:7a:84:c6:3f:14:5b:e6:c1:4d:d2:c2:1d:e4: 05:af:cb:44:11:91:6e:8a:0d:9d:c0:4e:38:1c:d1: 33:e3:ca:90:6f:2c:dd:94:b4:d3:02:20:96:79:56: 7d:49:19:46:39:9a:4f:42:36:2a:6c:27:69:ad:29: ab:0b:17:a3:30:15:42:20:58:b1:27:0e:d9:4e:6e: a4:cc:b5:dd:8c:c5:b8:57:db:e4:70:7b:75:15:e8: df:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F2:46:02:43:13:DF:D1:61:BB:0F:1B:01:7B:B3:39:1B:65:88:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/afc7b04a-df73-3dc8-a65c-5b41ee7a1852.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:3c:86:f5:d4:df:c8:72:00:30:06:37:89:3a:f3:58:0c:c8: c4:40:eb:a7:70:71:ba:7e:a7:a5:d9:41:b9:bf:7a:70:18:20: 09:14:ed:ff:1b:b8:9f:70:71:97:d6:70:19:88:a2:24:07:49: e6:52:4c:41:8d:d4:fc:7f:7d:ea:e0:ac:48:d5:f5:1f:fe:65: 49:9b:d2:be:bf:09:22:b4:e7:6a:0e:33:96:96:60:45:af:1d: f4:43:e5:88:d3:ca:ef:4c:7c:dc:54:98:93:f9:49:fa:c1:17: c6:ca:cf:b5:0a:7e:b0:cd:3d:0b:f4:7b:7b:51:a4:ef:3e:44: 00:a4:d4:c9:fc:da:8c:30:36:c6:73:de:bc:0a:73:46:03:f4: 31:3e:f2:83:19:1a:59:b6:29:b8:8a:84:be:a9:0a:5f:35:9e: 40:4c:40:13:57:d3:aa:fe:d1:7e:38:e0:c0:b8:39:f2:3f:46: b9:d0:f3:47:17:46:ea:65:e5:16:22:07:3c:2c:b7:ca:53:59: 6d:06:b6:69:3f:ef:59:4a:67:82:e2:8e:50:6b:f9:43:8a:c6: a2:24:d4:41:c3:0a:fd:46:e2:c6:88:ab:2b:9e:9c:ed:6a:66: 88:63:63:89:91:49:cb:6e:d4:10:67:0d:6a:79:4f:f0:43:73: ec:95:8f:49 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtxXODdKvCDxdK2BYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MzRlOGE0MGMtZGJiOC00ZTBkLWEzYTktNWI3ZjdkMDcwMDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXTEoHWQaVQgnTz5t1sayp68nsM+VtaxaZO3 RwwNahjbfgMFFzcpYLG2aTkpwyBcs+J8AAjb/w9GysUl9Iuh3cnPn+IKA3l9LhlZ b+g5QMexM9DFmmfKwq9yXB2c8V7fzcGvz3GdtIXDnGcGYkz66GRcS+TUexCOkILL A6QC7h6l8d02XjrtNb1eA2wf4IaFNP98AmcogxAvBvkp05loNi7d4D5R+HqExj8U W+bBTdLCHeQFr8tEEZFuig2dwE44HNEz48qQbyzdlLTTAiCWeVZ9SRlGOZpPQjYq bCdprSmrCxejMBVCIFixJw7ZTm6kzLXdjMW4V9vkcHt1FejfoQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMvyRgJDE9/RYbsPGwF7szkbZYgDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWZjN2IwNGEtZGY3My0z ZGM4LWE2NWMtNWI0MWVlN2ExODUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQATPIb11N/IcgAwBjeJOvNYDMjEQOuncHG6fqel 2UG5v3pwGCAJFO3/G7ifcHGX1nAZiKIkB0nmUkxBjdT8f33q4KxI1fUf/mVJm9K+ vwkitOdqDjOWlmBFrx30Q+WI08rvTHzcVJiT+Un6wRfGys+1Cn6wzT0L9Ht7UaTv PkQApNTJ/NqMMDbGc968CnNGA/QxPvKDGRpZtim4ioS+qQpfNZ5ATEATV9Oq/tF+ OODAuDnyP0a50PNHF0bqZeUWIgc8LLfKU1ltBrZpP+9ZSmeC4o5Qa/lDisaiJNRB wwr9RuLGiKsrnpztamaIY2OJkUnLbtQQZw1qeU/wQ3PslY9J -----END CERTIFICATE-----Generated at Mon Oct 20 08:16:19 2025 by rpki-client