$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ead5c81f-8463-37cb-86bf-cb33e0212b4b.roa File: ead5c81f-8463-37cb-86bf-cb33e0212b4b.roa (raw, json) Hash identifier: 6RzcUA8QYAtIx7L75zDbD6xHwAq78hk2CY8o2FhvNjs= Subject key identifier: 28:F1:F6:C4:63:71:E9:C8:20:1C:F3:32:97:2A:ED:21:4C:A1:DD:E4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E78FEEDF6E39AA0A136180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ead5c81f-8463-37cb-86bf-cb33e0212b4b.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 396578 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:8f:ee:df:6e:39:aa:0a:13:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=98e4bd73-148e-4007-b12c-deccd90b87fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:34:97:74:3e:be:eb:94:d7:d3:5d:4f:64:36: 68:24:27:be:27:4a:0e:61:6c:76:ed:42:2c:fa:6f: ec:e1:45:32:2d:73:38:a7:74:d5:11:d6:3a:eb:4a: 2b:2d:a1:e0:91:a9:d4:a6:6c:e4:24:8b:a6:dc:91: 0c:c9:87:83:d2:71:02:49:e5:7c:6a:ef:6e:ca:f5: b4:8e:e0:4b:58:45:58:26:48:69:18:ea:d7:fc:6e: fe:d8:63:eb:35:8d:c1:b1:56:0b:88:2a:be:16:31: 39:12:8b:d2:02:10:e3:75:26:11:a9:0b:5f:50:cd: 0d:96:8e:12:ab:63:92:1a:35:77:93:ed:19:02:65: 05:da:52:1b:ec:14:9f:b7:ec:db:ee:6e:a7:5a:39: 16:63:11:13:09:6d:80:d1:5d:c5:0a:97:d3:2d:65: d5:55:85:04:ee:f4:1f:e6:b6:f0:ca:3c:a4:99:ce: ad:3f:25:25:9e:11:b2:37:65:a9:20:f4:34:e6:9c: 3e:54:89:11:0d:35:16:0b:31:64:fb:c9:05:ea:2c: 74:97:e4:60:f5:a8:f9:c7:75:bf:1f:0b:39:c5:00: 25:3a:c6:ef:1e:7f:bc:22:5a:17:1b:3c:26:f5:c1: 8b:b9:a5:b2:b7:da:db:b7:a0:7b:f8:5d:6d:bd:b5: e1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F1:F6:C4:63:71:E9:C8:20:1C:F3:32:97:2A:ED:21:4C:A1:DD:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ead5c81f-8463-37cb-86bf-cb33e0212b4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:71:2c:4c:85:83:8f:77:c2:33:69:d6:67:d4:cd:d8:58:50: fc:ef:72:b1:3d:84:fd:bd:4c:ce:f0:a9:45:46:dc:e8:4c:a4: 0d:37:6e:b1:5f:92:96:f4:4f:6a:83:84:0f:b5:7c:70:25:ef: ae:73:9e:ef:c3:fd:4f:56:3c:1f:5b:fe:72:36:0d:d1:f7:e1: ed:25:80:da:48:c4:9f:84:1b:2b:16:55:bc:e1:15:5a:66:2b: e0:a0:17:29:8b:2b:c9:a7:2d:bf:b3:8d:5b:0f:e1:85:45:9c: 86:d6:6c:aa:6b:7f:20:54:b9:63:b7:08:15:8a:dc:95:6f:d6: ee:d5:dc:6e:eb:91:38:29:02:72:76:b6:a4:57:86:34:8c:23: 3e:fe:0f:c4:c7:e3:f3:85:88:45:87:a9:f2:c4:4f:23:e5:08: e4:e5:66:0d:9d:1f:6f:8d:d6:96:0e:14:dd:ec:9c:00:42:dd: 01:55:2b:e8:62:db:e9:58:a1:11:6f:a5:0f:bb:3c:5d:3b:87: 51:ce:10:5c:aa:af:7a:96:ea:4f:26:6a:02:99:22:d4:30:92: 84:2b:53:80:f1:e0:4c:9e:99:44:9b:a5:45:bd:d4:9c:01:ee: 14:19:8d:3e:94:62:ec:eb:9c:23:56:8a:85:95:bd:be:99:6c: 82:12:c5:c7 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE54/u3245qgoTYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk OThlNGJkNzMtMTQ4ZS00MDA3LWIxMmMtZGVjY2Q5MGI4N2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zSXdD6+65TX011PZDZoJCe+J0oOYWx27UIs +m/s4UUyLXM4p3TVEdY660orLaHgkanUpmzkJIum3JEMyYeD0nECSeV8au9uyvW0 juBLWEVYJkhpGOrX/G7+2GPrNY3BsVYLiCq+FjE5EovSAhDjdSYRqQtfUM0Nlo4S q2OSGjV3k+0ZAmUF2lIb7BSft+zb7m6nWjkWYxETCW2A0V3FCpfTLWXVVYUE7vQf 5rbwyjykmc6tPyUlnhGyN2WpIPQ05pw+VIkRDTUWCzFk+8kF6ix0l+Rg9aj5x3W/ Hws5xQAlOsbvHn+8IloXGzwm9cGLuaWyt9rbt6B7+F1tvbXhjwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCjx9sRjcenIIBzzMpcq7SFMod3kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWFkNWM4MWYtODQ2My0z N2NiLTg2YmYtY2IzM2UwMjEyYjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCMcSxMhYOPd8IzadZn1M3YWFD873KxPYT9vUzO 8KlFRtzoTKQNN26xX5KW9E9qg4QPtXxwJe+uc57vw/1PVjwfW/5yNg3R9+HtJYDa SMSfhBsrFlW84RVaZivgoBcpiyvJpy2/s41bD+GFRZyG1myqa38gVLljtwgVityV b9bu1dxu65E4KQJydrakV4Y0jCM+/g/Ex+PzhYhFh6nyxE8j5Qjk5WYNnR9vjdaW DhTd7JwAQt0BVSvoYtvpWKERb6UPuzxdO4dRzhBcqq96lupPJmoCmSLUMJKEK1OA 8eBMnplEm6VFvdScAe4UGY0+lGLs65wjVoqFlb2+mWyCEsXH -----END CERTIFICATE-----Generated at Mon Oct 20 23:10:10 2025 by rpki-client