$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d23b6cbe-a932-33dc-82e0-dc55ec697715.roa File: d23b6cbe-a932-33dc-82e0-dc55ec697715.roa (raw, json) Hash identifier: +pwRHu/vRweO8FLqK53ImywjpZ/azaZt8gOg1rtbdYs= Subject key identifier: BE:56:E2:A3:0B:1B:94:0A:41:56:F1:4D:8D:76:5E:A1:2F:FC:04:AD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B355702FAA586FA8322618540 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d23b6cbe-a932-33dc-82e0-dc55ec697715.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 396610 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:57:02:fa:a5:86:fa:83:22:61:85:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=8d88824c-bb32-4435-b1a9-9926d596e79c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:71:dd:a6:83:6e:a6:46:d9:b0:95:66:34:db: ab:03:ef:bb:aa:c6:25:8e:50:4d:f5:fb:22:f8:ea: 67:df:20:55:97:a1:b0:ca:aa:8d:54:2f:64:22:35: 66:cb:b1:3f:83:75:11:e7:1d:d7:36:f5:e8:fa:12: 43:ae:0b:a1:80:37:51:c5:77:27:64:d2:0d:cb:47: 0e:aa:c2:30:7b:3a:e6:16:ae:cb:b4:d1:f7:a4:ba: ee:af:69:fa:dc:f0:0e:50:bd:61:94:36:6c:6d:ce: 3c:9b:24:c2:60:aa:b3:78:ae:2d:39:61:44:69:7b: 3e:e1:1d:09:db:71:2d:0d:8e:8c:b0:39:da:a5:86: 1f:8d:e9:a6:cd:fd:21:36:08:4a:85:19:aa:e6:c9: 9b:b5:a0:8c:2d:4d:38:48:20:17:ab:7c:24:5b:48: d6:30:dc:c6:a7:b6:a0:75:9b:7c:60:67:8e:88:f2: d8:bc:b8:a3:96:a7:d4:1e:5c:62:13:3b:3b:92:28: cf:b7:19:ba:a9:aa:31:10:50:89:dd:ed:ff:3e:91: f9:4f:83:ae:d6:46:03:68:f0:74:7b:3f:64:a1:9b: 17:8f:a4:39:a3:db:72:37:ea:be:e5:54:75:b0:19: a3:72:63:91:e9:34:e1:76:4e:2f:81:4d:c0:56:73: 5c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:56:E2:A3:0B:1B:94:0A:41:56:F1:4D:8D:76:5E:A1:2F:FC:04:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d23b6cbe-a932-33dc-82e0-dc55ec697715.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:bf:02:aa:ad:b8:4e:b1:68:34:7a:0b:d5:63:3d:ab:22:f8: b8:6b:73:28:4a:71:13:a7:ee:44:39:ab:03:b8:99:82:fd:8c: 94:ec:23:e1:1d:40:34:0e:47:be:60:d7:b3:d0:c9:a7:55:7f: 47:17:47:26:02:05:91:e9:ee:16:ed:e8:c4:64:c4:a3:c8:30: d5:26:bc:20:95:38:7f:f5:8e:c9:0d:44:ec:6f:2c:88:31:f8: b9:8c:f4:95:5d:9f:8e:fb:6e:64:07:4a:b4:36:57:3d:82:d7: 2f:d7:0e:20:17:ba:fc:d1:3a:48:71:d9:63:4d:32:a2:f2:d6: be:a7:16:1b:9f:36:40:02:26:07:1a:49:f6:1c:4e:b9:15:be: 82:c5:95:35:eb:d0:79:1f:f6:d3:25:8d:0f:43:7b:88:83:a4: 65:65:7c:b5:3b:41:87:92:cf:c7:8a:91:5f:fb:f0:c1:03:65: c1:70:87:e0:89:fd:b5:40:b0:7f:0b:80:3f:48:9f:cb:64:6f: 50:94:05:96:db:ee:fd:59:06:f9:d3:ae:e8:77:20:f1:64:e9: 38:10:45:c4:b6:1f:14:4b:2d:1e:23:7d:ce:53:e7:49:b2:a1: 03:44:59:47:7d:bb:83:41:db:be:76:fd:1c:ec:67:20:43:d6: 28:a9:04:65 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEs1VwL6pYb6gyJhhUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk OGQ4ODgyNGMtYmIzMi00NDM1LWIxYTktOTkyNmQ1OTZlNzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXHdpoNupkbZsJVmNNurA++7qsYljlBN9fsi +Opn3yBVl6GwyqqNVC9kIjVmy7E/g3UR5x3XNvXo+hJDrguhgDdRxXcnZNINy0cO qsIwezrmFq7LtNH3pLrur2n63PAOUL1hlDZsbc48myTCYKqzeK4tOWFEaXs+4R0J 23EtDY6MsDnapYYfjemmzf0hNghKhRmq5smbtaCMLU04SCAXq3wkW0jWMNzGp7ag dZt8YGeOiPLYvLijlqfUHlxiEzs7kijPtxm6qaoxEFCJ3e3/PpH5T4Ou1kYDaPB0 ez9koZsXj6Q5o9tyN+q+5VR1sBmjcmOR6TThdk4vgU3AVnNcMwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFL5W4qMLG5QKQVbxTY12XqEv/AStMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDIzYjZjYmUtYTkzMi0z M2RjLTgyZTAtZGM1NWVjNjk3NzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBmvwKqrbhOsWg0egvVYz2rIvi4a3MoSnETp+5E OasDuJmC/YyU7CPhHUA0Dke+YNez0MmnVX9HF0cmAgWR6e4W7ejEZMSjyDDVJrwg lTh/9Y7JDUTsbyyIMfi5jPSVXZ+O+25kB0q0Nlc9gtcv1w4gF7r80TpIcdljTTKi 8ta+pxYbnzZAAiYHGkn2HE65Fb6CxZU169B5H/bTJY0PQ3uIg6RlZXy1O0GHks/H ipFf+/DBA2XBcIfgif21QLB/C4A/SJ/LZG9QlAWW2+79WQb5067odyDxZOk4EEXE th8USy0eI33OU+dJsqEDRFlHfbuDQdu+dv0c7GcgQ9YoqQRl -----END CERTIFICATE-----Generated at Mon Oct 20 13:22:50 2025 by rpki-client