$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c6fcb95a-2f7e-31fb-8c24-5344238efbcd.roa File: c6fcb95a-2f7e-31fb-8c24-5344238efbcd.roa (raw, json) Hash identifier: z8GZ0ahbjReYKJfpK6NXjQpI0lVxt5NUGhrHwbpG/zk= Subject key identifier: 35:D8:34:98:EA:EC:AF:1A:9B:0B:61:05:95:10:52:78:95:40:07:B7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E78C2D284E3693F15B7A80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c6fcb95a-2f7e-31fb-8c24-5344238efbcd.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 36626 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:8c:2d:28:4e:36:93:f1:5b:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=3587f268-ed81-4fd4-a277-b52f1dbdc817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:41:51:b9:44:ac:b3:6d:12:9d:c7:88:e9:9b: e1:2d:a0:1a:30:53:56:8a:b8:07:53:dc:53:32:c0: 66:28:2d:ce:68:5f:89:4a:a5:85:11:ef:b9:8f:70: ea:99:95:cf:df:45:70:59:71:0f:ff:bd:d4:71:4f: c9:ff:28:34:bf:94:07:e4:3d:92:02:d0:7e:2c:a3: 36:63:ad:84:1e:0a:f6:2e:37:a7:11:89:dd:8e:b8: 59:98:12:1a:75:71:5e:d8:e2:95:59:4f:fc:17:c0: 54:49:31:a6:01:25:1d:12:39:b3:88:57:f4:20:63: be:f8:9e:5c:78:ad:a6:76:e5:6e:51:6a:f7:e8:7e: 11:1b:08:25:92:4a:c3:d6:bb:3e:86:81:53:77:50: 8a:04:a8:ff:35:99:a0:2e:ec:3e:8d:03:96:2e:56: b9:aa:20:0a:c0:ac:b5:5f:24:02:c6:fe:05:2b:73: f9:d3:d0:44:96:ef:c7:fa:3f:e9:c2:bc:17:76:34: 82:3e:d1:2b:45:b6:99:ba:f0:30:9a:d7:15:51:32: c4:14:ba:3d:50:5a:ae:82:db:af:fa:b3:61:78:74: 35:aa:68:87:31:8d:37:c7:c6:e5:22:7b:ba:45:e4: b1:62:77:2c:a6:51:6f:16:13:a9:5c:a6:50:26:ab: f5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D8:34:98:EA:EC:AF:1A:9B:0B:61:05:95:10:52:78:95:40:07:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c6fcb95a-2f7e-31fb-8c24-5344238efbcd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:80:a4:7c:4f:be:4f:d1:e9:48:b3:23:d4:17:e4:64:a8:4b: 1e:dc:51:af:d0:1b:15:9e:14:ae:6a:38:7d:6b:40:19:20:13: 4f:c9:ab:a1:84:51:da:25:99:5e:3d:1f:ab:ee:5f:ba:6b:97: 20:c1:4d:8f:5e:9e:05:39:9c:16:c4:a9:3e:0e:e9:2c:a7:5f: 84:a4:cd:0c:c3:63:10:b7:ce:19:74:d7:08:f1:dc:f3:2a:9e: 73:01:ec:1f:10:c6:02:54:36:5a:7c:75:c4:27:6c:02:e5:70: 91:70:ba:d5:46:0a:ca:79:d6:74:9f:04:bb:d2:3f:49:6e:7d: 03:f5:d0:7f:d9:df:3a:35:5b:62:8f:f8:ba:af:c4:60:1e:c2: b1:ed:20:2f:a4:03:50:8d:7a:2f:27:cd:83:7c:c4:f5:da:30: fb:d2:60:f6:5c:73:a4:a6:4f:db:0d:e3:33:76:36:0b:34:49: 3c:d0:0d:02:3d:39:ea:c6:13:af:03:c1:0f:68:bd:12:78:a2: c3:70:36:7f:8a:b0:58:e5:be:b7:aa:83:5a:6a:a6:69:37:22: 56:d3:b4:68:55:82:9f:14:bb:0a:7b:8f:e9:b4:ed:0b:1a:7e: 7f:2f:97:75:32:f4:f9:9b:ce:83:61:e2:60:21:d1:f2:c7:5c: 9c:fc:cc:d7 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE54wtKE42k/FbeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk MzU4N2YyNjgtZWQ4MS00ZmQ0LWEyNzctYjUyZjFkYmRjODE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEFRuUSss20SnceI6ZvhLaAaMFNWirgHU9xT MsBmKC3OaF+JSqWFEe+5j3DqmZXP30VwWXEP/73UcU/J/yg0v5QH5D2SAtB+LKM2 Y62EHgr2LjenEYndjrhZmBIadXFe2OKVWU/8F8BUSTGmASUdEjmziFf0IGO++J5c eK2mduVuUWr36H4RGwglkkrD1rs+hoFTd1CKBKj/NZmgLuw+jQOWLla5qiAKwKy1 XyQCxv4FK3P509BElu/H+j/pwrwXdjSCPtErRbaZuvAwmtcVUTLEFLo9UFqugtuv +rNheHQ1qmiHMY03x8blInu6ReSxYncsplFvFhOpXKZQJqv1bQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDXYNJjq7K8amwthBZUQUniVQAe3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzZmY2I5NWEtMmY3ZS0z MWZiLThjMjQtNTM0NDIzOGVmYmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAngKR8T75P0elIsyPUF+RkqEse3FGv0BsVnhSu ajh9a0AZIBNPyauhhFHaJZlePR+r7l+6a5cgwU2PXp4FOZwWxKk+Duksp1+EpM0M w2MQt84ZdNcI8dzzKp5zAewfEMYCVDZafHXEJ2wC5XCRcLrVRgrKedZ0nwS70j9J bn0D9dB/2d86NVtij/i6r8RgHsKx7SAvpANQjXovJ82DfMT12jD70mD2XHOkpk/b DeMzdjYLNEk80A0CPTnqxhOvA8EPaL0SeKLDcDZ/irBY5b63qoNaaqZpNyJW07Ro VYKfFLsKe4/ptO0LGn5/L5d1MvT5m86DYeJgIdHyx1yc/MzX -----END CERTIFICATE-----Generated at Mon Oct 20 08:16:15 2025 by rpki-client