$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d2519e29-f925-335a-a916-17a381aff5b7.roa File: d2519e29-f925-335a-a916-17a381aff5b7.roa (raw, json) Hash identifier: YMn6C2bkODk9+ftiKPZJOIriz/fH9Yd/kKPrM0kVXCE= Subject key identifier: 9B:7A:4D:E3:5C:85:91:C4:F9:B3:4C:B6:F9:16:FA:23:2B:69:79:70 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E7969DBC57A0CA269AA880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d2519e29-f925-335a-a916-17a381aff5b7.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 396617 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:96:9d:bc:57:a0:ca:26:9a:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=d9f86f72-ec9e-4842-9659-38a2accec9d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:77:30:83:26:d8:28:90:3b:ca:07:99:86:30: 55:dc:90:94:d7:50:a8:ac:b4:74:72:1c:b6:2b:6d: 76:cf:58:2b:f3:5e:5a:50:42:3a:f5:06:a6:20:61: 66:83:01:09:ad:aa:e1:4b:16:e7:7e:09:75:61:63: 78:d0:14:c6:cc:c5:45:cd:2b:81:31:99:06:62:b0: 20:c1:1b:38:23:9c:d9:4d:cd:96:99:4b:3d:b8:cc: 03:37:fd:45:73:9b:79:5c:15:04:fd:3b:0b:2a:71: bd:d9:08:c9:f5:bf:ad:2d:a0:07:7b:3d:e0:a7:6c: 9e:1c:3f:63:8c:2f:fb:94:c7:9d:09:04:ec:7d:af: 08:24:b2:4b:57:5b:b4:27:c3:e1:07:53:db:9e:a9: 99:88:0a:5b:35:2f:cc:be:c5:1d:e0:7c:c6:ac:ed: 97:50:b9:83:39:56:bd:3e:24:6d:7e:7f:2a:98:7b: a2:be:f7:b0:4c:74:93:4e:6f:e8:dd:36:aa:4f:cf: bb:3a:40:d3:4a:b0:89:8d:3a:77:1c:da:e8:76:58: 42:d0:b0:dd:2f:29:b6:3f:15:91:ac:c1:62:6e:af: 78:f9:19:5a:f2:d1:16:69:59:77:c4:de:ad:27:14: f3:97:d9:72:03:ea:31:29:ff:04:66:96:f7:53:87: 7b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:7A:4D:E3:5C:85:91:C4:F9:B3:4C:B6:F9:16:FA:23:2B:69:79:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d2519e29-f925-335a-a916-17a381aff5b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:d3:1d:ce:a4:0e:cc:5e:2c:bc:98:ff:17:c4:e3:db:a5:27: ec:e9:68:9c:c3:75:c7:48:12:b1:78:ac:87:c2:ff:b1:1c:46: 70:79:78:21:ea:bf:2e:22:68:3a:0e:6d:9c:14:17:11:6a:3f: 5b:35:45:cf:2b:37:21:27:3a:f0:fe:5f:55:12:22:5b:a6:f3: ed:d9:b0:fc:08:5b:ae:7e:59:fe:6c:1b:45:d8:a5:f7:40:3c: 57:dd:63:b3:0c:6c:7e:62:8d:f9:aa:b3:18:05:bf:da:ee:f6: 10:31:36:3d:50:ae:85:9f:26:38:3a:56:f1:b9:c9:7a:7e:8f: bc:86:c7:d4:20:75:1b:67:fe:f0:da:66:fa:85:b3:8b:5a:19: 29:62:17:05:33:2b:b5:70:88:32:7c:bb:12:77:5e:a8:16:8f: 3c:6c:9f:cb:d0:f7:c3:ce:c9:ef:ea:9e:26:ed:38:74:17:85: 0d:6d:19:30:45:c0:ae:c2:28:7c:7f:a3:8b:02:7a:24:89:ad: 10:b9:9f:5f:2d:2c:91:95:55:42:b1:2a:eb:20:13:1b:ef:27: 58:ec:cf:bd:8c:79:d2:f2:8f:09:d1:71:fe:7a:62:9c:38:89: 3b:3c:97:85:11:15:d9:80:56:aa:cb:b9:9a:62:12:eb:9c:d7: 77:ef:11:53 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE55advFegyiaaqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk ZDlmODZmNzItZWM5ZS00ODQyLTk2NTktMzhhMmFjY2VjOWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuncwgybYKJA7ygeZhjBV3JCU11CorLR0chy2 K212z1gr815aUEI69QamIGFmgwEJrarhSxbnfgl1YWN40BTGzMVFzSuBMZkGYrAg wRs4I5zZTc2WmUs9uMwDN/1Fc5t5XBUE/TsLKnG92QjJ9b+tLaAHez3gp2yeHD9j jC/7lMedCQTsfa8IJLJLV1u0J8PhB1PbnqmZiApbNS/MvsUd4HzGrO2XULmDOVa9 PiRtfn8qmHuivvewTHSTTm/o3TaqT8+7OkDTSrCJjTp3HNrodlhC0LDdLym2PxWR rMFibq94+Rla8tEWaVl3xN6tJxTzl9lyA+oxKf8EZpb3U4d7tQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJt6TeNchZHE+bNMtvkW+iMraXlwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDI1MTllMjktZjkyNS0z MzVhLWE5MTYtMTdhMzgxYWZmNWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBJ0x3OpA7MXiy8mP8XxOPbpSfs6Wicw3XHSBKx eKyHwv+xHEZweXgh6r8uImg6Dm2cFBcRaj9bNUXPKzchJzrw/l9VEiJbpvPt2bD8 CFuufln+bBtF2KX3QDxX3WOzDGx+Yo35qrMYBb/a7vYQMTY9UK6FnyY4Olbxucl6 fo+8hsfUIHUbZ/7w2mb6hbOLWhkpYhcFMyu1cIgyfLsSd16oFo88bJ/L0PfDzsnv 6p4m7Th0F4UNbRkwRcCuwih8f6OLAnokia0QuZ9fLSyRlVVCsSrrIBMb7ydY7M+9 jHnS8o8J0XH+emKcOIk7PJeFERXZgFaqy7maYhLrnNd37xFT -----END CERTIFICATE-----Generated at Mon Oct 20 08:11:46 2025 by rpki-client