$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/436a1d15-6f74-3f87-b79e-821778eec721.roa File: 436a1d15-6f74-3f87-b79e-821778eec721.roa (raw, json) Hash identifier: x9VEiPk/1VAvUgf506UPvqGNbuTAkkmu0kmf6jO0+FI= Subject key identifier: 44:A4:34:E0:D3:DB:AC:4A:67:E5:70:FA:27:D1:57:88:98:1C:54:D1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584BBA104ED5132E65156966F640 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/436a1d15-6f74-3f87-b79e-821778eec721.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 36624 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:4e:d5:13:2e:65:15:69:66:f6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=de3e1931-c846-43d3-97ba-efd837261857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c6:b1:b9:46:8e:62:f6:27:78:48:70:00:34: b5:f1:78:2d:33:6d:8b:05:49:fe:81:a8:58:1c:69: 92:cf:d7:b7:1f:44:14:6e:e9:e2:d2:92:93:b6:f2: 84:99:da:09:01:fc:8a:51:f5:d4:43:e8:f9:50:fe: 4a:a0:16:b3:c4:fc:2b:f7:4f:d3:b9:ef:77:28:5d: 8f:5c:b6:c2:20:48:f9:7d:c0:ef:89:18:bb:9c:0d: 62:64:89:33:2c:b0:9c:1b:a0:52:71:91:ee:97:67: d4:53:93:f2:ed:7b:42:5d:c4:17:f7:0b:ff:fc:39: 88:76:96:a1:ea:61:b0:8b:9d:6b:2f:db:fb:98:21: 64:09:d1:9b:c8:9d:1b:e4:4a:60:da:d5:13:9d:86: c5:83:b6:d5:0a:8e:2e:af:10:1f:cd:bd:ec:03:8b: a0:ba:71:9c:27:13:51:8b:f3:c9:2b:c8:8f:ca:fb: ea:d6:84:d3:ce:fa:78:b8:94:21:09:53:8d:d1:24: e2:66:f7:58:0c:a9:36:56:a8:f1:c6:cd:3d:48:55: da:89:55:da:9f:6a:01:96:d3:04:44:f9:4f:ce:93: 40:05:f7:e6:2e:47:fc:e0:df:57:6c:b8:f6:c4:14: 33:11:70:c4:78:19:c2:ef:33:a8:90:2e:05:b0:1e: d2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:A4:34:E0:D3:DB:AC:4A:67:E5:70:FA:27:D1:57:88:98:1C:54:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/436a1d15-6f74-3f87-b79e-821778eec721.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:3d:3e:9f:10:63:1b:ae:f1:4b:38:16:86:fe:e8:87:97:85: 36:41:b3:05:e1:1b:a5:43:9b:e3:ac:bd:bd:7d:53:43:45:16: b1:3b:bf:a1:c4:52:df:2e:d6:c0:1d:86:50:36:b5:7b:4e:cf: 90:8a:35:30:ff:93:fc:7e:0d:8f:31:d7:28:6a:ff:b6:b4:72: 27:4d:8d:f7:97:e2:d0:b4:1d:88:c4:c2:7e:fd:aa:10:2f:5a: e8:a3:48:cb:b7:bf:cb:6e:b9:44:58:6a:81:af:1b:6b:7a:ae: bf:d9:e9:26:75:fe:36:a5:c1:5d:b3:4e:fa:3a:05:ca:66:dc: cf:20:11:82:a6:91:30:21:13:39:bb:61:32:a3:cb:62:ec:fc: af:96:f6:9d:3e:4d:0d:65:74:de:dc:f7:ed:27:bd:41:85:37: d6:89:01:78:ef:fb:47:9c:6c:19:2e:7f:a8:19:f6:98:f8:2d: 84:39:2f:f8:ac:a4:ae:1e:39:a0:af:30:22:98:c1:80:d3:75: 21:c1:26:13:f2:49:03:e6:2d:0e:5a:7b:f8:63:4c:f0:4e:f4: 9d:97:fa:7f:e7:ff:97:c4:39:16:9e:96:53:bf:a6:97:85:8e: 43:a0:e7:52:ca:b3:70:9e:0b:29:cc:a2:de:05:b5:0c:b9:fd: 6e:67:d8:43 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEu6EE7VEy5lFWlm9kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk ZGUzZTE5MzEtYzg0Ni00M2QzLTk3YmEtZWZkODM3MjYxODU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncaxuUaOYvYneEhwADS18XgtM22LBUn+gahY HGmSz9e3H0QUbuni0pKTtvKEmdoJAfyKUfXUQ+j5UP5KoBazxPwr90/Tue93KF2P XLbCIEj5fcDviRi7nA1iZIkzLLCcG6BScZHul2fUU5Py7XtCXcQX9wv//DmIdpah 6mGwi51rL9v7mCFkCdGbyJ0b5Epg2tUTnYbFg7bVCo4urxAfzb3sA4ugunGcJxNR i/PJK8iPyvvq1oTTzvp4uJQhCVON0STiZvdYDKk2Vqjxxs09SFXaiVXan2oBltME RPlPzpNABffmLkf84N9XbLj2xBQzEXDEeBnC7zOokC4FsB7SGQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFESkNODT26xKZ+Vw+ifRV4iYHFTRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDM2YTFkMTUtNmY3NC0z Zjg3LWI3OWUtODIxNzc4ZWVjNzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBzPT6fEGMbrvFLOBaG/uiHl4U2QbMF4RulQ5vj rL29fVNDRRaxO7+hxFLfLtbAHYZQNrV7Ts+QijUw/5P8fg2PMdcoav+2tHInTY33 l+LQtB2IxMJ+/aoQL1roo0jLt7/LbrlEWGqBrxtreq6/2ekmdf42pcFds076OgXK ZtzPIBGCppEwIRM5u2Eyo8ti7PyvlvadPk0NZXTe3PftJ71BhTfWiQF47/tHnGwZ Ln+oGfaY+C2EOS/4rKSuHjmgrzAimMGA03UhwSYT8kkD5i0OWnv4Y0zwTvSdl/p/ 5/+XxDkWnpZTv6aXhY5DoOdSyrNwngspzKLeBbUMuf1uZ9hD -----END CERTIFICATE-----Generated at Wed Nov 5 06:10:59 2025 by rpki-client