$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da0f0595-06b7-3459-9684-1e2ee51e6daa.roa File: da0f0595-06b7-3459-9684-1e2ee51e6daa.roa (raw, json) Hash identifier: vBsPxPsuWdpC5MFuvMt6nx5VJjO0JNDxe0dYzTKMzMo= Subject key identifier: 77:D6:4A:38:35:6F:AB:B3:F5:C8:59:71:28:00:F7:F7:8C:41:D1:E7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E78F6EE802A8ECBB6D4F20 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da0f0595-06b7-3459-9684-1e2ee51e6daa.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 396567 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:8f:6e:e8:02:a8:ec:bb:6d:4f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=abee10f3-475a-4199-bd67-a9b26d278cb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:8d:e8:87:85:d2:2d:82:15:a5:47:16:c6:85: 32:bf:0a:f0:94:2d:a3:bf:d5:0b:f5:c8:be:b1:82: f8:c1:4a:de:7e:b1:56:3a:f0:78:bb:ca:a9:76:21: a8:42:47:67:6c:03:cb:9f:51:6f:04:aa:82:86:b2: f3:7d:6b:cb:ae:94:f8:0c:26:63:e2:19:ce:a8:41: ad:60:86:8d:7f:01:5e:21:47:ab:3e:20:25:d0:33: f2:86:bd:29:e2:4f:af:04:3a:d3:89:d4:ed:80:ec: 22:f4:a0:b1:4d:fe:f4:37:6e:c0:99:ed:30:85:f8: a8:1c:1c:ca:8e:b0:0e:f7:99:99:95:5c:ba:f2:59: 21:ba:49:31:7f:ce:8a:f0:a0:ff:ef:17:e9:01:c8: 07:4d:0b:06:47:0a:fe:29:74:d4:a4:63:57:8e:fa: 96:80:5a:f4:46:0a:81:bb:a1:8d:93:1f:fa:72:3d: 1d:a7:eb:eb:a0:6b:24:e2:ec:79:79:d5:a8:6e:40: 71:d1:29:37:35:62:57:17:a0:69:7e:ea:ff:05:3b: 8e:d0:b3:f0:3e:d0:42:03:80:08:85:36:ad:2c:2c: bf:c7:89:89:21:31:97:59:2c:9e:f4:88:ca:35:7d: 2b:dd:49:7e:e3:07:ab:1e:27:2d:25:de:c3:52:22: b2:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:D6:4A:38:35:6F:AB:B3:F5:C8:59:71:28:00:F7:F7:8C:41:D1:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da0f0595-06b7-3459-9684-1e2ee51e6daa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:aa:41:a3:19:7c:72:b1:1f:47:21:9c:67:1c:1e:e7:99:33: 7e:94:43:58:14:c9:41:20:95:0e:3b:7a:ad:31:ee:89:a5:b9: 4e:fc:83:a9:2d:a5:5f:c7:1a:c6:02:ef:fd:b3:3b:2e:09:41: a4:3b:ea:19:16:ef:dd:b7:6b:dd:86:6c:52:1c:36:f5:1e:1e: 27:75:af:05:a2:ef:60:e8:f2:91:98:a7:73:40:c7:0d:65:4c: aa:82:96:97:c5:48:a4:96:1f:0f:4b:5a:34:1e:ef:21:ef:16: f8:74:e9:55:ef:5a:ea:8e:8d:d4:88:ae:15:05:08:1c:98:2f: 66:d6:c3:29:4f:fc:54:dc:77:3d:15:a9:05:a3:b9:9f:e3:89: 43:a1:85:3e:ed:96:e7:a3:ee:dc:8b:ee:b9:23:c0:64:13:c6: 07:69:72:82:5c:d2:fe:54:0e:65:4c:17:ca:a5:08:cb:a7:34: a7:3c:bd:7f:cb:ad:d9:e6:5d:24:f1:d6:77:65:a6:54:c9:3f: a3:55:35:7f:47:d1:32:33:3a:9d:6c:46:f6:f8:c5:66:b0:8f: 90:7b:cd:1d:92:9d:3c:34:f2:6f:a9:3c:f6:54:21:d8:fa:6d: 2a:80:1d:e3:d5:f4:7a:21:b9:42:6b:f6:71:af:cb:ba:f7:2c: 69:b1:30:54 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE549u6AKo7LttTyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk YWJlZTEwZjMtNDc1YS00MTk5LWJkNjctYTliMjZkMjc4Y2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmo3oh4XSLYIVpUcWxoUyvwrwlC2jv9UL9ci+ sYL4wUrefrFWOvB4u8qpdiGoQkdnbAPLn1FvBKqChrLzfWvLrpT4DCZj4hnOqEGt YIaNfwFeIUerPiAl0DPyhr0p4k+vBDrTidTtgOwi9KCxTf70N27Ame0whfioHBzK jrAO95mZlVy68lkhukkxf86K8KD/7xfpAcgHTQsGRwr+KXTUpGNXjvqWgFr0RgqB u6GNkx/6cj0dp+vroGsk4ux5edWobkBx0Sk3NWJXF6Bpfur/BTuO0LPwPtBCA4AI hTatLCy/x4mJITGXWSye9IjKNX0r3Ul+4werHictJd7DUiKyZQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHfWSjg1b6uz9chZcSgA9/eMQdHnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGEwZjA1OTUtMDZiNy0z NDU5LTk2ODQtMWUyZWU1MWU2ZGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAwqkGjGXxysR9HIZxnHB7nmTN+lENYFMlBIJUO O3qtMe6JpblO/IOpLaVfxxrGAu/9szsuCUGkO+oZFu/dt2vdhmxSHDb1Hh4nda8F ou9g6PKRmKdzQMcNZUyqgpaXxUiklh8PS1o0Hu8h7xb4dOlV71rqjo3UiK4VBQgc mC9m1sMpT/xU3Hc9FakFo7mf44lDoYU+7Zbno+7ci+65I8BkE8YHaXKCXNL+VA5l TBfKpQjLpzSnPL1/y63Z5l0k8dZ3ZaZUyT+jVTV/R9EyMzqdbEb2+MVmsI+Qe80d kp08NPJvqTz2VCHY+m0qgB3j1fR6IblCa/Zxr8u69yxpsTBU -----END CERTIFICATE-----Generated at Mon Oct 20 15:58:06 2025 by rpki-client