$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4490573f-486e-35bf-b04b-3652fa2d79b7.roa File: 4490573f-486e-35bf-b04b-3652fa2d79b7.roa (raw, json) Hash identifier: 39ZximfLiCD7fUlUgf+Bkm4+3HiX+JUSKTb9c0jcdW8= Subject key identifier: DF:5F:AE:FB:D7:49:BB:4B:2C:61:02:CD:D3:7A:96:AB:D8:51:C9:BD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584BBA10552146811CE4A1F64A70 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4490573f-486e-35bf-b04b-3652fa2d79b7.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 396543 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:55:21:46:81:1c:e4:a1:f6:4a:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=c3008401-a2ab-4af1-95e8-4e18a4a0705c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f0:5a:0c:a9:6c:bf:d1:b6:48:74:52:6c:65: bb:cc:cb:16:a9:b4:a1:7c:8f:b5:fe:98:65:9d:ae: 32:55:58:72:e1:57:52:e5:76:b9:ba:2e:9b:2a:9d: 14:48:b5:ee:0b:ff:05:91:6b:41:f6:d2:ef:7e:69: b5:78:25:33:60:5a:6d:1f:b5:ae:40:d8:0d:df:2e: c5:b3:d4:7c:1b:cb:33:46:43:46:53:5b:da:8e:66: dc:f2:b8:63:58:e8:e6:49:96:4d:cb:f0:66:8d:de: 83:80:8d:d9:4f:82:86:e6:f0:21:1d:eb:ed:2b:50: 91:fb:73:96:1c:53:81:5b:80:c7:67:1e:01:6b:c6: 23:0f:f4:c2:42:4d:a5:e2:78:90:f6:ae:e5:1e:07: 23:dd:aa:e9:9d:4b:af:82:92:d5:ff:33:91:bc:3a: 9b:77:23:d2:be:f8:d3:a8:d7:f2:93:49:a7:cf:ef: 4a:2a:af:0f:1f:5c:3d:1a:0c:ec:73:f9:4c:7d:f2: ab:74:5a:4a:99:b9:8b:56:af:9f:f6:7a:2d:bd:52: 45:a3:ae:55:b6:da:23:c2:57:b3:0e:d5:29:69:74: d0:a2:10:19:46:15:8d:10:fa:62:e0:0a:fc:63:35: f9:04:45:d9:4a:87:c0:5a:ce:ab:e6:d7:6d:de:c2: f4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:5F:AE:FB:D7:49:BB:4B:2C:61:02:CD:D3:7A:96:AB:D8:51:C9:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4490573f-486e-35bf-b04b-3652fa2d79b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:e8:bf:52:a0:ee:64:fd:f9:ae:64:bc:18:bd:ae:04:7c:f7: 34:87:83:c2:21:71:04:c6:81:39:3e:b0:3c:1c:30:bd:da:a4: 5f:52:0b:5b:1e:40:a8:e2:15:75:74:52:06:2b:bd:16:10:e2: f4:24:8c:73:28:38:a8:4a:93:7a:33:47:57:50:ea:cd:71:0a: c2:6d:e8:8b:b5:12:e5:ed:bb:07:e9:cf:fb:6e:f8:c5:70:19: 19:45:b1:21:e1:d5:92:bf:d8:3d:41:9c:3d:ec:b0:d9:4e:9c: 9b:39:73:bd:72:13:7d:68:81:fe:3b:45:2c:e5:85:74:71:a3: 53:c9:96:86:ad:f7:b1:67:87:ac:1e:c8:c5:17:8f:6c:72:26: 2c:bb:70:bf:3b:83:91:cf:48:99:36:25:6d:48:7a:81:d1:6f: 07:7f:66:b0:9e:1b:37:24:9f:ec:80:2e:4c:fd:ca:80:81:5e: 48:67:95:29:93:b6:93:4a:0f:10:fe:9e:95:81:67:6f:4c:84: a3:f7:5c:aa:df:4f:00:77:e1:f1:71:5a:f7:0f:dd:67:37:e6: ba:78:3d:4d:7f:ad:2b:aa:52:ba:72:bd:b1:f5:05:43:b7:18: 31:d3:78:82:af:ac:ca:8e:f1:37:a8:d7:04:a5:7c:b8:4f:99: 3d:ee:b3:44 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEu6EFUhRoEc5KH2SnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk YzMwMDg0MDEtYTJhYi00YWYxLTk1ZTgtNGUxOGE0YTA3MDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfBaDKlsv9G2SHRSbGW7zMsWqbShfI+1/phl na4yVVhy4VdS5Xa5ui6bKp0USLXuC/8FkWtB9tLvfmm1eCUzYFptH7WuQNgN3y7F s9R8G8szRkNGU1vajmbc8rhjWOjmSZZNy/Bmjd6DgI3ZT4KG5vAhHevtK1CR+3OW HFOBW4DHZx4Ba8YjD/TCQk2l4niQ9q7lHgcj3arpnUuvgpLV/zORvDqbdyPSvvjT qNfyk0mnz+9KKq8PH1w9Ggzsc/lMffKrdFpKmbmLVq+f9notvVJFo65Vttojwlez DtUpaXTQohAZRhWNEPpi4Ar8YzX5BEXZSofAWs6r5tdt3sL0OQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFN9frvvXSbtLLGECzdN6lqvYUcm9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDQ5MDU3M2YtNDg2ZS0z NWJmLWIwNGItMzY1MmZhMmQ3OWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBs6L9SoO5k/fmuZLwYva4EfPc0h4PCIXEExoE5 PrA8HDC92qRfUgtbHkCo4hV1dFIGK70WEOL0JIxzKDioSpN6M0dXUOrNcQrCbeiL tRLl7bsH6c/7bvjFcBkZRbEh4dWSv9g9QZw97LDZTpybOXO9chN9aIH+O0Us5YV0 caNTyZaGrfexZ4esHsjFF49sciYsu3C/O4ORz0iZNiVtSHqB0W8Hf2awnhs3JJ/s gC5M/cqAgV5IZ5Upk7aTSg8Q/p6VgWdvTISj91yq308Ad+HxcVr3D91nN+a6eD1N f60rqlK6cr2x9QVDtxgx03iCr6zKjvE3qNcEpXy4T5k97rNE -----END CERTIFICATE-----Generated at Wed Nov 5 04:15:45 2025 by rpki-client