$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f3e95a17-56b7-3a4a-82b2-4c85eda70d58.roa File: f3e95a17-56b7-3a4a-82b2-4c85eda70d58.roa (raw, json) Hash identifier: tAZnNevMwLFhLLwZcoXyJRxUrMBMZjgpyc5nWlC51ic= Subject key identifier: 59:55:04:C4:73:19:8E:5A:BD:B2:FC:A2:D7:FE:69:8E:39:06:A0:17 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B715CE5F2C7C0034C3B6E6780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f3e95a17-56b7-3a4a-82b2-4c85eda70d58.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 396610 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:e5:f2:c7:c0:03:4c:3b:6e:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=28516475-2a15-4fac-80b1-32e962c575fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:43:f9:69:60:92:0d:3f:59:85:03:ff:30:5c: 9c:2d:2b:86:da:d6:8d:2c:6e:50:18:af:f2:7e:69: 5e:a4:a8:06:dc:11:54:76:ae:82:4d:01:fd:a3:55: 11:bd:3e:17:18:db:12:3a:90:69:6b:e0:fb:4d:7c: da:20:7c:d1:26:00:f4:57:d4:bf:b8:23:31:0e:bf: a0:24:b7:5d:a2:f8:99:0f:d3:a4:8a:11:f5:9d:a1: 21:04:38:50:6b:c1:c2:bd:0b:37:41:07:95:74:aa: 74:5f:76:dd:57:5f:24:8b:7b:4c:a6:fd:ed:ab:be: 8b:bd:89:c4:31:c7:3b:ac:03:84:f4:1f:8a:aa:3c: 64:57:81:ac:bb:48:ed:f5:29:00:35:9f:4a:85:c4: d5:3c:6d:2c:e5:98:46:07:6b:3e:13:d2:95:c2:44: 5b:3e:44:69:2f:1c:75:c0:2a:df:5e:e8:05:94:da: 9c:56:42:b9:2f:25:6c:08:f5:e6:f7:43:e7:c5:86: 9b:e2:1e:14:79:11:16:f3:66:4e:ae:d8:39:94:43: 2f:1e:6b:ac:74:00:cf:b2:85:ff:5d:80:4a:1d:44: dd:ef:a6:57:4a:88:55:81:13:0a:08:04:ac:42:b2: fe:75:63:08:94:0e:1b:7b:7f:2a:a4:3e:80:75:46: e6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:55:04:C4:73:19:8E:5A:BD:B2:FC:A2:D7:FE:69:8E:39:06:A0:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f3e95a17-56b7-3a4a-82b2-4c85eda70d58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:46:66:d6:84:bf:3b:77:ba:8b:2d:03:8e:5a:81:d0:25:9b: 7c:48:26:3d:69:30:5e:1c:90:80:d3:06:41:a2:99:7e:bf:d6: f4:8c:9b:96:35:5f:c1:4f:50:5e:12:9a:71:bb:af:48:01:98: 0d:58:51:8e:fd:c6:04:d2:30:3d:36:92:48:0f:40:80:7b:ba: 14:f0:ef:1d:3c:2c:fe:72:4a:84:51:a5:f5:2d:01:d7:b6:eb: e2:51:d7:c1:2a:ee:a6:6e:13:cd:34:f7:20:d4:81:a7:07:8a: 6c:2f:3b:80:44:f4:f4:34:a3:51:66:2b:14:ab:db:bb:fd:0b: 39:cd:25:cf:88:d8:8f:ae:69:c6:22:28:ee:d1:e6:9a:4c:ba: f7:b1:bc:4a:81:8d:52:80:af:14:68:58:20:97:74:64:d7:a3: 2f:e5:49:5c:51:12:7e:23:aa:f7:22:02:ea:d6:90:89:c7:6c: 5b:4d:e1:e2:a7:fe:71:57:e7:8e:a6:b1:8f:32:4b:7a:bb:02: 11:3b:88:6c:bb:3a:cf:2b:78:12:ad:58:c4:5c:51:38:1f:dc: 80:dd:e2:7f:91:32:32:1f:37:0a:fb:f0:0f:3d:fb:4f:ff:47: 41:51:db:ed:fa:7b:ac:e1:a8:c8:6f:5b:46:ff:64:f7:ed:cd: 78:3a:c0:aa -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtxXOXyx8ADTDtuZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk Mjg1MTY0NzUtMmExNS00ZmFjLTgwYjEtMzJlOTYyYzU3NWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokP5aWCSDT9ZhQP/MFycLSuG2taNLG5QGK/y fmlepKgG3BFUdq6CTQH9o1URvT4XGNsSOpBpa+D7TXzaIHzRJgD0V9S/uCMxDr+g JLddoviZD9OkihH1naEhBDhQa8HCvQs3QQeVdKp0X3bdV18ki3tMpv3tq76LvYnE Mcc7rAOE9B+KqjxkV4Gsu0jt9SkANZ9KhcTVPG0s5ZhGB2s+E9KVwkRbPkRpLxx1 wCrfXugFlNqcVkK5LyVsCPXm90PnxYab4h4UeREW82ZOrtg5lEMvHmusdADPsoX/ XYBKHUTd76ZXSohVgRMKCASsQrL+dWMIlA4be38qpD6AdUbmFwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFlVBMRzGY5avbL8otf+aY45BqAXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjNlOTVhMTctNTZiNy0z YTRhLTgyYjItNGM4NWVkYTcwZDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAQRmbWhL87d7qLLQOOWoHQJZt8SCY9aTBeHJCA 0wZBopl+v9b0jJuWNV/BT1BeEppxu69IAZgNWFGO/cYE0jA9NpJID0CAe7oU8O8d PCz+ckqEUaX1LQHXtuviUdfBKu6mbhPNNPcg1IGnB4psLzuARPT0NKNRZisUq9u7 /Qs5zSXPiNiPrmnGIiju0eaaTLr3sbxKgY1SgK8UaFggl3Rk16Mv5UlcURJ+I6r3 IgLq1pCJx2xbTeHip/5xV+eOprGPMkt6uwIRO4hsuzrPK3gSrVjEXFE4H9yA3eJ/ kTIyHzcK+/APPftP/0dBUdvt+nus4ajIb1tG/2T37c14OsCq -----END CERTIFICATE-----Generated at Tue Oct 21 02:06:35 2025 by rpki-client