$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e35475da-2649-3c6e-bb91-4a2795a1be68.roa File: e35475da-2649-3c6e-bb91-4a2795a1be68.roa (raw, json) Hash identifier: fPO7/llhE6quEXEq2l4sbbDTY5zgidTTL37z2caP/1A= Subject key identifier: AF:28:91:36:36:FD:C4:86:81:C7:D2:7A:A7:ED:81:1D:B6:8A:07:1E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E78F94544AF8AE10D6E440 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e35475da-2649-3c6e-bb91-4a2795a1be68.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 396562 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:8f:94:54:4a:f8:ae:10:d6:e4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=443bf77e-9be3-463e-860d-020b9c4e2428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:bf:12:58:20:b2:86:fd:6f:16:0a:2f:79:2b: b3:73:7c:83:23:10:c3:65:ac:96:f7:b7:c0:fb:b2: 1b:e2:81:eb:ea:bc:10:5b:60:96:6a:43:4d:cc:53: 08:dd:3b:ff:6c:1d:37:ce:1e:55:ee:79:d9:c4:1f: e5:60:48:d1:83:6d:91:7a:92:2b:c0:3c:15:9e:07: 46:a5:44:d7:0a:45:a6:d2:8e:96:de:c5:d5:17:25: 89:d2:ff:2e:21:8c:18:b0:50:9b:70:55:da:70:5b: 8f:99:cb:d0:eb:46:f9:31:c0:90:22:fa:03:93:30: 3e:5b:44:a3:47:e5:76:77:a1:32:0a:32:8a:08:0c: 1a:0f:85:a3:3b:0f:41:32:c3:24:dd:f6:36:d8:85: 44:69:3b:93:7c:3f:1b:eb:04:43:db:2c:ea:7a:3a: a7:4e:28:e6:72:65:cb:4b:60:46:50:e6:9f:f2:96: a7:13:9c:db:8e:a1:5f:17:fb:f4:dd:c6:e2:8d:34: f5:ed:43:d5:09:e9:2e:02:f7:28:52:8a:cf:e0:cb: bd:d7:e7:41:53:6d:78:cb:d3:07:a8:1b:d6:f3:ad: 98:6a:ba:30:7e:13:cc:26:87:be:80:6b:6c:96:ab: 35:23:60:ce:df:7c:16:74:10:8e:a0:f9:61:b4:f8: 60:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:28:91:36:36:FD:C4:86:81:C7:D2:7A:A7:ED:81:1D:B6:8A:07:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e35475da-2649-3c6e-bb91-4a2795a1be68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:11:d6:e3:66:9f:9f:0b:20:00:c4:c1:c7:bd:5d:08:22:15: d5:e5:98:b8:9b:17:8a:87:ee:27:85:2d:1b:17:15:6b:71:be: a2:a9:ff:23:5d:06:87:e2:f9:0e:8f:bd:19:b6:ef:a0:1e:52: b1:47:00:71:f0:60:55:d3:79:dd:f9:cb:9b:00:6f:50:ba:ab: a0:fb:93:52:1f:7c:b5:93:08:7b:84:a7:19:5e:8e:64:b8:03: fc:49:57:2d:06:18:dc:69:e7:83:d7:3b:2d:61:e5:5b:bc:d6: a4:6f:35:55:e2:e2:fe:ad:b9:0f:ed:7d:ef:a7:b0:91:8e:3b: f4:40:37:bd:ed:7a:80:73:1c:62:95:91:15:ed:d4:45:19:2f: ca:c5:8d:4b:34:6f:59:8a:e7:49:ee:c5:09:60:f6:b3:8b:e1: d8:4e:71:2b:ef:f1:42:58:6c:94:db:b2:93:3a:b8:8b:da:40: 4e:a5:99:d1:c4:be:04:26:b2:40:38:0b:fe:82:d3:16:f0:75: eb:34:a8:ec:b1:dd:3b:9c:50:67:4f:6e:5d:c2:65:e9:23:f1: 1f:ea:46:1e:6f:65:37:55:93:ad:a3:fd:cd:99:3e:71:f1:99: a7:57:9e:cd:8a:0f:16:83:0e:89:03:d7:78:be:a1:d6:02:f5: 70:90:77:45 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE54+UVEr4rhDW5EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk NDQzYmY3N2UtOWJlMy00NjNlLTg2MGQtMDIwYjljNGUyNDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjL8SWCCyhv1vFgoveSuzc3yDIxDDZayW97fA +7Ib4oHr6rwQW2CWakNNzFMI3Tv/bB03zh5V7nnZxB/lYEjRg22RepIrwDwVngdG pUTXCkWm0o6W3sXVFyWJ0v8uIYwYsFCbcFXacFuPmcvQ60b5McCQIvoDkzA+W0Sj R+V2d6EyCjKKCAwaD4WjOw9BMsMk3fY22IVEaTuTfD8b6wRD2yzqejqnTijmcmXL S2BGUOaf8panE5zbjqFfF/v03cbijTT17UPVCekuAvcoUorP4Mu91+dBU214y9MH qBvW862YarowfhPMJoe+gGtslqs1I2DO33wWdBCOoPlhtPhgDwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFK8okTY2/cSGgcfSeqftgR22igceMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTM1NDc1ZGEtMjY0OS0z YzZlLWJiOTEtNGEyNzk1YTFiZTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAKEdbjZp+fCyAAxMHHvV0IIhXV5Zi4mxeKh+4n hS0bFxVrcb6iqf8jXQaH4vkOj70Ztu+gHlKxRwBx8GBV03nd+cubAG9Ququg+5NS H3y1kwh7hKcZXo5kuAP8SVctBhjcaeeD1zstYeVbvNakbzVV4uL+rbkP7X3vp7CR jjv0QDe97XqAcxxilZEV7dRFGS/KxY1LNG9ZiudJ7sUJYPazi+HYTnEr7/FCWGyU 27KTOriL2kBOpZnRxL4EJrJAOAv+gtMW8HXrNKjssd07nFBnT25dwmXpI/Ef6kYe b2U3VZOto/3NmT5x8ZmnV57Nig8Wgw6JA9d4vqHWAvVwkHdF -----END CERTIFICATE-----Generated at Mon Oct 20 15:53:22 2025 by rpki-client