$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f3b3ee01-11d0-36b7-9108-0326e2379669.roa File: f3b3ee01-11d0-36b7-9108-0326e2379669.roa (raw, json) Hash identifier: NV5irCEChh9YMxWFmo8FsgRoos/6djVnjeOMAGjlP/s= Subject key identifier: D5:33:78:46:83:5F:CE:0D:EF:D4:01:EB:17:E4:E2:69:21:5D:2A:42 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E799328EC85D41569AB400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f3b3ee01-11d0-36b7-9108-0326e2379669.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 396613 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:99:32:8e:c8:5d:41:56:9a:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=a1820ab1-7f33-4814-832c-4382a8b9bcf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5d:31:85:81:5b:b3:14:f2:4a:51:9c:3a:e0: 76:1a:37:45:b9:7a:04:9f:6d:b8:b4:96:3d:cc:05: fe:2d:0a:a0:bd:4e:9e:62:d0:d2:b6:c0:26:11:ed: a5:40:ab:e6:32:53:74:fb:2c:d1:b5:73:5e:d0:35: 01:d0:da:1a:9c:25:1d:f5:ab:b9:00:ef:e0:ad:75: 24:65:d3:2e:4d:94:d8:52:7f:24:43:4a:dc:ca:9d: a6:42:bb:4b:5d:36:65:b5:26:30:e8:cb:ad:4a:b9: 00:f6:47:45:bb:d4:24:bd:65:e6:92:4f:c0:f5:4c: 4d:4b:29:6d:30:f2:c6:ac:21:05:43:be:3e:de:96: d0:0d:f8:1b:d4:7d:7f:0c:25:6f:6e:ce:22:a2:71: 2e:41:db:4c:07:91:aa:3d:79:e8:bf:70:d7:4f:54: b4:7b:1e:33:cc:b1:d0:be:68:98:f8:7e:43:71:f7: aa:77:3c:02:ef:0d:44:e8:78:78:07:7d:a3:ed:b1: 54:14:8a:df:b9:18:c8:da:b7:78:7f:bb:81:70:73: 3c:df:1a:e5:c8:bd:47:c5:d4:3e:62:cb:59:5d:7b: 0d:56:a7:9e:a9:d9:c6:28:a4:4e:5d:df:3b:c2:f0: e9:ab:85:d9:3d:99:de:ea:77:61:39:93:73:a1:5e: 87:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:33:78:46:83:5F:CE:0D:EF:D4:01:EB:17:E4:E2:69:21:5D:2A:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f3b3ee01-11d0-36b7-9108-0326e2379669.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:ee:3b:ce:58:e6:32:52:f3:13:bc:5c:75:ab:55:3d:c3:b3: 60:32:3d:b3:3e:fe:16:81:01:d1:20:d8:14:1f:70:60:c2:69: 0d:da:9e:8f:9f:88:a6:fa:cb:f4:46:ea:ee:1b:19:ba:bc:79: 8d:58:f3:17:c4:5d:f1:57:36:a4:55:a0:58:58:fa:c3:b3:93: bc:4a:80:62:4d:ee:3a:bc:23:a5:e5:42:8b:65:e1:20:c4:70: 5f:a0:fa:3d:b1:63:4d:7d:1a:91:ea:73:dd:7a:b7:a2:ee:0f: b7:7c:6d:3d:7c:44:6c:11:5d:38:3b:a1:bd:8b:49:98:84:28: a8:f0:72:3a:d3:7e:b0:95:c4:c4:a4:5c:1c:3a:80:24:c9:6c: fe:1f:26:90:dc:79:80:b9:85:a0:8e:f5:09:99:df:e6:5f:f1: 3d:a3:b8:0a:57:ba:d7:d4:8c:d6:68:b1:0c:13:ab:04:39:98: 45:ec:08:3a:d6:3d:b9:a6:9e:e3:b8:51:16:62:e6:4f:37:2f: 76:d9:d5:4c:96:aa:f0:57:e3:91:4b:5b:b2:7c:fb:1b:d3:f1: 45:44:10:64:65:83:9e:a0:98:d5:dd:48:80:eb:6f:76:e7:f4: dd:58:10:da:a7:c4:0c:75:2a:66:d4:0e:1f:ae:28:ee:d4:7b: b7:3a:a8:1e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE55kyjshdQVaatAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk YTE4MjBhYjEtN2YzMy00ODE0LTgzMmMtNDM4MmE4YjliY2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAol0xhYFbsxTySlGcOuB2GjdFuXoEn224tJY9 zAX+LQqgvU6eYtDStsAmEe2lQKvmMlN0+yzRtXNe0DUB0NoanCUd9au5AO/grXUk ZdMuTZTYUn8kQ0rcyp2mQrtLXTZltSYw6MutSrkA9kdFu9QkvWXmkk/A9UxNSylt MPLGrCEFQ74+3pbQDfgb1H1/DCVvbs4ionEuQdtMB5GqPXnov3DXT1S0ex4zzLHQ vmiY+H5DcfeqdzwC7w1E6Hh4B32j7bFUFIrfuRjI2rd4f7uBcHM83xrlyL1HxdQ+ YstZXXsNVqeeqdnGKKROXd87wvDpq4XZPZne6ndhOZNzoV6H3QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNUzeEaDX84N79QB6xfk4mkhXSpCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjNiM2VlMDEtMTFkMC0z NmI3LTkxMDgtMDMyNmUyMzc5NjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBk7jvOWOYyUvMTvFx1q1U9w7NgMj2zPv4WgQHR INgUH3BgwmkN2p6Pn4im+sv0RuruGxm6vHmNWPMXxF3xVzakVaBYWPrDs5O8SoBi Te46vCOl5UKLZeEgxHBfoPo9sWNNfRqR6nPderei7g+3fG09fERsEV04O6G9i0mY hCio8HI6036wlcTEpFwcOoAkyWz+HyaQ3HmAuYWgjvUJmd/mX/E9o7gKV7rX1IzW aLEME6sEOZhF7Ag61j25pp7juFEWYuZPNy922dVMlqrwV+ORS1uyfPsb0/FFRBBk ZYOeoJjV3UiA62925/TdWBDap8QMdSpm1A4friju1Hu3Oqge -----END CERTIFICATE-----Generated at Mon Oct 20 15:58:24 2025 by rpki-client