$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cafd18e4-756a-3743-bb03-ea11c8166322.roa File: cafd18e4-756a-3743-bb03-ea11c8166322.roa (raw, json) Hash identifier: zlU2DmwRloUz/gfqY2G3S1Ww1FzVhOWm1MYhDdK9o9w= Subject key identifier: 14:76:2E:60:A4:EF:D8:2F:31:AC:01:87:F7:5F:B2:C2:E0:4B:1A:11 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B35570395200C210D902F8DCC Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cafd18e4-756a-3743-bb03-ea11c8166322.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 396597 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:57:03:95:20:0c:21:0d:90:2f:8d:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=60629a6a-6d3c-4a96-8bd8-627ac9a108c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8b:97:3c:b9:ed:6f:4f:06:d1:8b:9b:5f:32: 9c:de:b0:a4:86:0d:29:51:b4:71:bf:25:77:71:fd: 5c:f2:87:c7:9e:a7:34:87:47:03:4d:9f:50:14:78: 4e:29:29:af:e3:5d:84:01:fa:1b:71:2b:89:00:0d: bd:8a:de:60:f3:83:fd:7a:32:87:c9:8f:09:33:bc: b5:4b:74:6b:05:b8:6b:ae:b1:2a:2a:77:64:b5:f2: e2:61:6f:81:b6:12:c5:93:a9:59:00:75:fd:a4:4a: f5:03:f7:8c:87:d5:0c:e5:5f:f3:a1:e7:ce:18:60: 7a:55:28:cd:bd:5c:ad:8c:8c:5b:fa:8b:d2:63:ea: 28:47:49:83:49:40:b0:a0:47:51:19:2b:9f:10:2a: f6:c1:6e:29:f7:0b:d4:b2:2c:42:1f:85:d9:88:7f: 71:ab:9e:09:a4:46:dc:48:e9:94:e4:66:4a:9d:24: 30:80:3a:8e:ce:db:fe:7f:a2:11:2f:f5:47:e6:15: 6e:7e:c9:f0:e6:f7:d9:0e:f3:07:c7:e3:e8:9c:70: 32:45:c3:b6:18:23:81:2b:c9:93:4b:b6:3b:ff:47: 12:b7:83:31:1f:aa:bc:eb:54:4e:e9:78:3d:e4:18: de:8a:0e:f0:df:5a:bc:bc:3c:e0:8e:f4:67:6b:50: d3:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:76:2E:60:A4:EF:D8:2F:31:AC:01:87:F7:5F:B2:C2:E0:4B:1A:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cafd18e4-756a-3743-bb03-ea11c8166322.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:d3:1a:73:00:db:01:ea:a5:80:d9:3e:c5:9d:de:4c:52:39: 79:dc:2a:21:f7:ab:99:42:c1:21:3c:09:3e:4c:25:ec:57:e7: 7f:78:dd:0e:a1:f3:7d:d9:f2:40:45:b9:c4:5b:c4:ee:77:fd: 15:cd:e1:38:50:89:af:7e:19:f1:c3:0c:6b:8d:88:f9:85:48: 98:21:98:a1:35:c7:79:7e:fa:a5:51:41:c6:74:1f:5b:02:24: 0b:df:3a:c5:22:4f:e2:a6:0d:0d:0c:0a:17:07:67:6d:2d:f9: 29:88:34:13:30:27:7e:49:a7:8d:46:58:27:54:33:e0:35:5c: d3:63:24:d3:b9:02:8a:b2:b2:f8:bd:71:ca:40:ab:34:51:5f: 1c:77:01:5e:e6:79:41:8a:a5:e4:93:05:43:0b:f0:ed:51:ea: 5d:5b:9c:5b:53:21:f0:b9:97:31:fc:61:cd:72:a0:57:7d:a7: 72:08:30:7b:63:0d:71:c0:9e:72:61:be:d1:50:89:6a:d6:f5: 82:a6:4e:83:c8:2b:21:e7:0c:f3:5a:28:83:6a:1e:07:a6:ba: d8:8d:5a:eb:08:ac:f1:b9:73:9f:53:92:55:ea:cc:3c:ab:d0: 29:ee:f1:74:81:c7:b7:97:dd:ff:38:4c:c6:b6:93:e6:59:a2: 8b:be:38:8c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEs1VwOVIAwhDZAvjcwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk NjA2MjlhNmEtNmQzYy00YTk2LThiZDgtNjI3YWM5YTEwOGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYuXPLntb08G0YubXzKc3rCkhg0pUbRxvyV3 cf1c8ofHnqc0h0cDTZ9QFHhOKSmv412EAfobcSuJAA29it5g84P9ejKHyY8JM7y1 S3RrBbhrrrEqKndktfLiYW+BthLFk6lZAHX9pEr1A/eMh9UM5V/zoefOGGB6VSjN vVytjIxb+ovSY+ooR0mDSUCwoEdRGSufECr2wW4p9wvUsixCH4XZiH9xq54JpEbc SOmU5GZKnSQwgDqOztv+f6IRL/VH5hVufsnw5vfZDvMHx+PonHAyRcO2GCOBK8mT S7Y7/0cSt4MxH6q861RO6Xg95Bjeig7w31q8vDzgjvRna1DThwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBR2LmCk79gvMawBh/dfssLgSxoRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2FmZDE4ZTQtNzU2YS0z NzQzLWJiMDMtZWExMWM4MTY2MzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBf0xpzANsB6qWA2T7Fnd5MUjl53Coh96uZQsEh PAk+TCXsV+d/eN0OofN92fJARbnEW8Tud/0VzeE4UImvfhnxwwxrjYj5hUiYIZih Ncd5fvqlUUHGdB9bAiQL3zrFIk/ipg0NDAoXB2dtLfkpiDQTMCd+SaeNRlgnVDPg NVzTYyTTuQKKsrL4vXHKQKs0UV8cdwFe5nlBiqXkkwVDC/DtUepdW5xbUyHwuZcx /GHNcqBXfadyCDB7Yw1xwJ5yYb7RUIlq1vWCpk6DyCsh5wzzWiiDah4HprrYjVrr CKzxuXOfU5JV6sw8q9Ap7vF0gce3l93/OEzGtpPmWaKLvjiM -----END CERTIFICATE-----Generated at Mon Oct 20 10:32:20 2025 by rpki-client