$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/37861ca1-4df5-39ea-b5aa-eb463f26e772.roa File: 37861ca1-4df5-39ea-b5aa-eb463f26e772.roa (raw, json) Hash identifier: HnGOZx7ipLQn+1Qu32zoRrT8Jzn3ewrdmPhac/p5/J8= Subject key identifier: 14:25:6C:F1:B3:78:F1:02:82:96:89:49:AA:5E:84:77:33:D2:81:DC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584BBA10506CC39D36BBE2022080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/37861ca1-4df5-39ea-b5aa-eb463f26e772.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 396586 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:50:6c:c3:9d:36:bb:e2:02:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=2fecea77-38a9-411b-8ecf-0f920e3a1597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:af:9e:dc:85:d3:b2:91:ad:15:9d:cb:e7:67: 98:7a:7f:d7:8f:de:c4:c9:d5:9d:2b:b1:3a:05:7e: 88:ec:4b:b1:3f:bb:ec:99:a9:27:b8:42:c5:26:90: 94:d6:bc:0f:f5:0e:b7:1e:43:10:d6:54:84:ad:a3: bb:f5:7b:d6:e8:19:38:db:4d:63:b4:f7:7c:7d:90: d6:e7:2f:a0:f9:3f:9a:87:cf:4b:da:ab:95:44:89: ac:11:1a:a7:ce:50:a9:99:d6:ee:6c:92:e1:e9:df: 02:f6:d2:86:6a:99:d9:4d:92:8d:ff:8a:a4:0f:1b: fb:8d:2f:a9:4b:b8:1f:03:80:0e:14:9f:8b:b2:4b: 89:11:5d:10:a3:da:3c:a3:7a:83:70:84:8a:9e:f8: 28:1d:05:86:ae:4f:32:7a:c2:50:d2:7f:4b:a7:4a: 03:1d:55:77:48:30:10:08:c6:ec:2d:c2:89:6f:85: 76:a5:1f:60:9b:cf:39:fa:97:f8:8a:03:c1:dc:62: 49:59:72:bb:29:b4:93:d6:cd:cb:ac:82:ec:9f:63: 6b:5d:b4:df:1b:bd:5b:5a:0b:56:e9:82:ac:7f:8e: 8f:a9:9c:42:c3:6d:cb:9d:be:06:44:e8:e7:36:ae: 2d:d4:db:e8:c1:96:82:2b:8f:fe:1b:ad:a1:4d:d2: 90:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:25:6C:F1:B3:78:F1:02:82:96:89:49:AA:5E:84:77:33:D2:81:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/37861ca1-4df5-39ea-b5aa-eb463f26e772.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:79:f2:bc:41:3c:1e:b0:09:19:6d:cc:21:09:8d:8d:74:12: 7e:1b:52:84:43:8f:62:68:44:71:3b:cf:65:5e:1f:b5:d4:36: dd:04:18:36:d9:9e:e6:89:70:f1:88:63:e7:40:fc:21:0c:84: c9:df:a3:87:93:3a:11:a7:bf:d9:29:04:f3:06:bd:32:22:86: 75:1e:66:a6:52:1a:55:8e:81:07:5b:7e:6f:a0:66:49:83:fd: d8:0a:9a:56:d6:f1:8c:9a:ff:54:f1:53:9b:91:68:fc:60:4c: 07:ad:a0:92:e3:f5:0d:da:71:29:51:50:5f:9a:2d:2e:91:16: 18:37:de:7a:54:64:e6:52:30:c9:34:9b:d1:5b:cc:06:f9:e3: ec:6a:2e:e5:fb:3a:73:86:d2:ed:2b:e0:36:b6:07:a6:97:30: d3:ca:17:bb:17:9f:e5:2d:d2:a3:3a:a5:a9:ec:d7:22:99:b5: 3b:1e:68:11:f3:e0:49:27:08:56:59:7c:9f:1f:30:90:a6:05: a6:a3:ac:1f:79:60:54:5a:85:91:45:ba:d4:f9:3b:70:2f:11: c0:25:4b:e3:d9:c3:65:58:0c:f3:49:5c:64:9b:3e:3b:5d:2a: 5f:a5:34:79:af:97:fd:ed:1d:3d:1b:10:4b:7e:7a:22:e6:31: 2b:e2:3d:8b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEu6EFBsw502u+ICIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk MmZlY2VhNzctMzhhOS00MTFiLThlY2YtMGY5MjBlM2ExNTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAua+e3IXTspGtFZ3L52eYen/Xj97EydWdK7E6 BX6I7EuxP7vsmaknuELFJpCU1rwP9Q63HkMQ1lSEraO79XvW6Bk4201jtPd8fZDW 5y+g+T+ah89L2quVRImsERqnzlCpmdbubJLh6d8C9tKGapnZTZKN/4qkDxv7jS+p S7gfA4AOFJ+LskuJEV0Qo9o8o3qDcISKnvgoHQWGrk8yesJQ0n9Lp0oDHVV3SDAQ CMbsLcKJb4V2pR9gm885+pf4igPB3GJJWXK7KbST1s3LrILsn2NrXbTfG71bWgtW 6YKsf46PqZxCw23Lnb4GROjnNq4t1NvowZaCK4/+G62hTdKQUQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBQlbPGzePECgpaJSapehHcz0oHcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzc4NjFjYTEtNGRmNS0z OWVhLWI1YWEtZWI0NjNmMjZlNzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBZefK8QTwesAkZbcwhCY2NdBJ+G1KEQ49iaERx O89lXh+11DbdBBg22Z7miXDxiGPnQPwhDITJ36OHkzoRp7/ZKQTzBr0yIoZ1Hmam UhpVjoEHW35voGZJg/3YCppW1vGMmv9U8VObkWj8YEwHraCS4/UN2nEpUVBfmi0u kRYYN956VGTmUjDJNJvRW8wG+ePsai7l+zpzhtLtK+A2tgemlzDTyhe7F5/lLdKj OqWp7NcimbU7HmgR8+BJJwhWWXyfHzCQpgWmo6wfeWBUWoWRRbrU+TtwLxHAJUvj 2cNlWAzzSVxkmz47XSpfpTR5r5f97R09GxBLfnoi5jEr4j2L -----END CERTIFICATE-----Generated at Wed Nov 5 02:49:46 2025 by rpki-client