$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b73777ea-7430-3497-90c0-6ab4dc7cd0ec.roa File: b73777ea-7430-3497-90c0-6ab4dc7cd0ec.roa (raw, json) Hash identifier: mFmoOTCp1+j6/+JEgNmufvzGYp+RGEMv365FGnEFlWA= Subject key identifier: 47:5C:21:4C:D0:1E:8F:02:4F:E6:E5:E4:D9:F2:F4:CA:3C:85:C0:57 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E7911DDE2A7E6B5751E278 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b73777ea-7430-3497-90c0-6ab4dc7cd0ec.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 396588 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:91:1d:de:2a:7e:6b:57:51:e2:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=5678860a-49dc-4018-965f-da8b2bfdb039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e3:23:be:04:b7:f2:cd:37:f1:0b:e6:22:19: a1:27:17:eb:07:e6:5f:ce:57:25:c3:7e:a3:9f:5f: b1:d5:9c:6b:0e:01:65:c8:be:e3:fa:b8:87:17:a7: 81:c4:de:9f:71:07:53:43:ac:30:19:62:10:e7:74: 06:b7:42:a8:29:2b:ae:47:12:0b:a0:4b:ec:25:a4: 74:13:f8:36:a5:e4:6c:fa:3f:ff:06:52:f2:a8:da: a7:ce:aa:f3:44:4f:e9:2e:24:9a:45:7a:3d:da:02: 31:52:73:21:53:65:43:1a:40:94:14:34:10:f5:44: 5f:cb:26:9c:b4:f1:d8:ec:64:ab:96:ac:e8:ed:ba: 99:36:c9:5d:97:2a:8d:99:c9:a5:e9:ee:1c:97:5d: 75:11:30:e7:dc:0f:d1:19:81:63:35:53:e5:1a:ac: c7:01:7f:57:32:f3:28:68:0f:a5:92:86:50:8e:e1: cd:53:81:31:0b:7b:7b:21:6b:c4:07:68:81:a3:b5: a8:90:17:27:1a:65:72:cf:04:14:c3:73:a3:81:2f: e3:4b:1c:aa:03:1d:48:d2:e1:a2:c6:2c:93:3d:ab: 2e:1a:a3:11:a9:f7:3d:2e:35:74:cb:a8:e0:1d:34: e5:f1:28:27:fd:5e:62:90:07:ca:a9:16:db:d7:8c: df:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:5C:21:4C:D0:1E:8F:02:4F:E6:E5:E4:D9:F2:F4:CA:3C:85:C0:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b73777ea-7430-3497-90c0-6ab4dc7cd0ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:76:45:3f:d3:e4:44:91:7e:0d:61:53:8a:0e:68:4b:03:69: ba:bc:73:f5:44:9f:12:61:2b:5c:68:d3:da:29:55:28:67:83: cd:43:b9:fd:40:15:43:9b:1a:9d:08:71:53:18:53:c5:61:d6: fc:4b:c3:ab:62:0a:08:26:b1:d0:e1:7e:b9:d1:38:84:b8:f4: 47:0a:55:8e:b8:d3:40:cf:d7:2e:4d:0d:06:d4:4b:ce:04:9a: 95:27:88:42:4a:eb:ea:04:0f:49:d7:48:8f:91:68:da:86:31: c0:a1:02:36:58:7a:d7:2b:ce:e5:e9:ac:c2:93:78:97:53:33: 07:86:ff:12:82:29:bd:50:04:ce:d0:0c:3a:7e:6b:73:bf:1b: b2:ac:29:73:1f:ad:a5:fa:7a:07:4d:9e:ae:80:6d:db:7a:03: e1:62:1e:ba:83:51:7a:b9:89:20:e5:98:76:47:49:39:fb:10: 56:98:3d:fa:9c:61:f1:a1:60:f5:12:cc:69:c6:9e:ea:58:8f: 20:78:ea:f6:10:b9:15:50:1f:41:6b:ed:1a:bd:c4:d6:e1:d2: 1d:b9:ae:2a:ae:ab:57:80:6a:85:54:24:96:c2:21:1f:62:63: f6:62:c2:4e:fd:a2:d9:a8:c8:b9:39:31:7d:65:44:7b:3e:5e: 80:72:06:82 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE55Ed3ip+a1dR4ngwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk NTY3ODg2MGEtNDlkYy00MDE4LTk2NWYtZGE4YjJiZmRiMDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguMjvgS38s038QvmIhmhJxfrB+Zfzlclw36j n1+x1ZxrDgFlyL7j+riHF6eBxN6fcQdTQ6wwGWIQ53QGt0KoKSuuRxILoEvsJaR0 E/g2peRs+j//BlLyqNqnzqrzRE/pLiSaRXo92gIxUnMhU2VDGkCUFDQQ9URfyyac tPHY7GSrlqzo7bqZNsldlyqNmcml6e4cl111ETDn3A/RGYFjNVPlGqzHAX9XMvMo aA+lkoZQjuHNU4ExC3t7IWvEB2iBo7WokBcnGmVyzwQUw3OjgS/jSxyqAx1I0uGi xiyTPasuGqMRqfc9LjV0y6jgHTTl8Sgn/V5ikAfKqRbb14zfEQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEdcIUzQHo8CT+bl5Nny9Mo8hcBXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjczNzc3ZWEtNzQzMC0z NDk3LTkwYzAtNmFiNGRjN2NkMGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAodkU/0+REkX4NYVOKDmhLA2m6vHP1RJ8SYStc aNPaKVUoZ4PNQ7n9QBVDmxqdCHFTGFPFYdb8S8OrYgoIJrHQ4X650TiEuPRHClWO uNNAz9cuTQ0G1EvOBJqVJ4hCSuvqBA9J10iPkWjahjHAoQI2WHrXK87l6azCk3iX UzMHhv8Sgim9UATO0Aw6fmtzvxuyrClzH62l+noHTZ6ugG3begPhYh66g1F6uYkg 5Zh2R0k5+xBWmD36nGHxoWD1Esxpxp7qWI8geOr2ELkVUB9Ba+0avcTW4dIdua4q rqtXgGqFVCSWwiEfYmP2YsJO/aLZqMi5OTF9ZUR7Pl6AcgaC -----END CERTIFICATE-----Generated at Mon Oct 20 08:11:50 2025 by rpki-client