$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ca7d36e9-73f3-3705-8cc2-9d280515a661.roa File: ca7d36e9-73f3-3705-8cc2-9d280515a661.roa (raw, json) Hash identifier: HGO+KUckGq7DdQCptxtxQqie3tp4RsicSkGSqZ4GvSk= Subject key identifier: 1D:AC:91:8E:34:1E:76:22:A3:EA:E9:2C:28:BF:6F:88:EA:B6:4F:28 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B715CDC221A46EE2F733AA320 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ca7d36e9-73f3-3705-8cc2-9d280515a661.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 396587 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:dc:22:1a:46:ee:2f:73:3a:a3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=590b0f2d-220b-4dc8-856d-a251ec83cf83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f8:56:e1:db:8e:6a:a1:7c:b3:b8:c2:5e:39: a9:8c:53:cd:b2:69:37:9a:50:14:0e:c1:5e:f0:9b: f3:33:6d:c3:b8:48:21:35:fc:b4:24:43:41:10:41: e8:48:3c:de:46:1c:d1:b4:6b:66:d6:ca:b8:a6:0b: 60:49:13:29:76:94:31:78:2c:ec:db:89:15:07:eb: 26:c8:a4:ac:83:c6:7e:f5:6f:4f:bf:61:82:c2:61: 9b:ed:9e:50:38:9d:60:24:ee:4f:2e:09:72:1c:d4: 3e:ad:07:c7:15:83:82:e3:ed:08:96:93:c0:df:32: 84:a4:14:a7:7b:be:e0:4e:f9:37:cf:ee:9c:55:1f: 31:fc:1d:90:e1:7c:5b:92:9c:65:25:75:15:d6:8b: 87:d4:5e:7f:db:0b:7e:52:a4:92:f1:11:cb:0a:92: 92:56:b6:9d:a6:fe:44:41:06:66:33:37:57:51:e3: b1:44:89:ca:03:45:91:4d:56:b9:d4:6d:c0:62:8b: d3:d3:b2:ee:dc:40:f8:eb:63:0d:c4:7e:39:e6:86: 32:7d:f0:0e:fe:90:ae:7d:3f:e7:e3:07:a5:82:b4: 76:28:17:97:86:5a:5f:ad:dd:97:21:4e:17:a9:1c: ad:1c:35:f6:8b:ab:cd:50:7b:86:bb:9b:54:0d:fc: 86:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:AC:91:8E:34:1E:76:22:A3:EA:E9:2C:28:BF:6F:88:EA:B6:4F:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ca7d36e9-73f3-3705-8cc2-9d280515a661.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:7b:4e:2c:f4:a2:47:a9:a4:fb:d8:7c:7b:86:46:21:bc:60: 98:87:8c:e6:73:06:f8:6d:9f:a4:2f:92:73:30:25:fb:5f:d4: 04:37:60:2f:48:67:0c:2b:3b:8f:e7:96:74:ac:04:79:10:f0: 16:2e:38:db:e0:94:c3:41:ce:72:fa:d0:70:f6:04:58:a0:9c: d6:56:53:f4:fa:ed:54:8f:14:47:25:23:fc:9e:c3:f6:63:82: 7d:ea:8a:0e:2d:b1:bc:b5:e7:eb:59:79:12:4a:c1:77:d9:49: f2:d1:67:fa:54:15:e1:a5:19:fe:b4:9a:54:f3:3e:6a:9e:37: f7:1a:bf:67:ae:37:42:7d:6f:b2:87:3a:e9:ad:4c:61:cd:87: 0f:1e:29:e4:10:e2:28:a7:71:60:7f:02:20:3d:41:37:db:9f: ef:87:2b:e1:57:8e:e9:3a:35:fe:3f:4a:6a:0f:5e:30:ef:7f: 7b:93:f3:ec:84:f1:4e:1a:49:21:b3:ad:1d:8c:d0:5f:67:84: e8:c3:9f:58:41:31:b8:22:69:f5:28:22:4a:fb:a0:03:c3:fd: d7:14:9d:c8:cc:a8:54:c4:66:8f:af:2b:67:03:a0:3b:ca:e3: 3e:cc:0e:a9:b8:07:36:62:74:fb:34:ae:85:13:ca:8d:9a:3a: 66:31:4a:69 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtxXNwiGkbuL3M6oyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NTkwYjBmMmQtMjIwYi00ZGM4LTg1NmQtYTI1MWVjODNjZjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/hW4duOaqF8s7jCXjmpjFPNsmk3mlAUDsFe 8JvzM23DuEghNfy0JENBEEHoSDzeRhzRtGtm1sq4pgtgSRMpdpQxeCzs24kVB+sm yKSsg8Z+9W9Pv2GCwmGb7Z5QOJ1gJO5PLglyHNQ+rQfHFYOC4+0IlpPA3zKEpBSn e77gTvk3z+6cVR8x/B2Q4XxbkpxlJXUV1ouH1F5/2wt+UqSS8RHLCpKSVradpv5E QQZmMzdXUeOxRInKA0WRTVa51G3AYovT07Lu3ED462MNxH455oYyffAO/pCufT/n 4welgrR2KBeXhlpfrd2XIU4XqRytHDX2i6vNUHuGu5tUDfyG5QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFB2skY40HnYio+rpLCi/b4jqtk8oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2E3ZDM2ZTktNzNmMy0z NzA1LThjYzItOWQyODA1MTVhNjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAPe04s9KJHqaT72Hx7hkYhvGCYh4zmcwb4bZ+k L5JzMCX7X9QEN2AvSGcMKzuP55Z0rAR5EPAWLjjb4JTDQc5y+tBw9gRYoJzWVlP0 +u1UjxRHJSP8nsP2Y4J96ooOLbG8tefrWXkSSsF32Uny0Wf6VBXhpRn+tJpU8z5q njf3Gr9nrjdCfW+yhzrprUxhzYcPHinkEOIop3FgfwIgPUE325/vhyvhV47pOjX+ P0pqD14w7397k/PshPFOGkkhs60djNBfZ4Tow59YQTG4Imn1KCJK+6ADw/3XFJ3I zKhUxGaPrytnA6A7yuM+zA6puAc2YnT7NK6FE8qNmjpmMUpp -----END CERTIFICATE-----Generated at Mon Oct 20 13:23:03 2025 by rpki-client