$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5def59c5-37b7-3c90-bfa1-36532b4634f2.roa File: 5def59c5-37b7-3c90-bfa1-36532b4634f2.roa (raw, json) Hash identifier: voL85CmdD4SEcs6s6zQM0OC2uHiJe447udnoaBQAaPE= Subject key identifier: B1:CC:8C:A4:18:A8:48:E4:DB:B9:83:03:FF:F5:BE:00:48:50:3E:34 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584BBA105297D9B58EA7EC5882C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5def59c5-37b7-3c90-bfa1-36532b4634f2.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 36618 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:52:97:d9:b5:8e:a7:ec:58:82:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=717a60c2-6bbc-4aee-b6fe-6799d4c269ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:91:f0:84:73:97:e6:f9:0c:93:11:64:fa:73: fe:ec:dc:69:9a:5d:db:83:8e:dc:0b:3a:75:b5:96: 2d:de:35:cd:6a:32:ad:5f:28:c9:fd:5b:b5:92:21: 96:9e:9f:e2:a9:ca:2c:51:dd:50:fc:3d:5b:f1:08: e8:25:3a:1e:18:bd:0d:5b:a6:f3:ac:b6:bf:6d:0a: 34:88:93:c9:d3:50:de:83:69:a8:3c:36:56:6c:d0: 62:3b:12:ed:b4:83:ac:0f:92:f6:ae:9f:00:33:0b: 3c:15:4e:a2:8a:67:64:d4:0c:59:a0:8d:c6:8e:20: 2b:07:f2:50:50:38:ad:1b:7a:98:89:ea:89:1f:67: 46:f0:c7:09:83:fc:5c:57:13:bf:ec:ce:d7:7c:52: e3:3d:88:d0:66:bf:9d:20:51:a1:89:34:45:97:8b: e6:25:0e:7a:e6:75:d1:4b:a6:9c:fb:0c:4f:d3:d5: 5b:eb:fe:5d:ae:9f:ae:e4:5f:fd:b0:33:cd:8e:91: e1:70:2c:db:13:54:b8:0b:54:d7:0e:50:9f:e4:c1: 17:96:6c:ad:ed:fc:c2:6f:eb:24:e9:13:75:dc:5c: 12:d9:29:22:f9:3a:70:aa:11:58:78:95:e4:6f:19: 05:02:52:4f:11:65:8e:6c:e2:eb:c1:a4:24:88:0b: ce:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:CC:8C:A4:18:A8:48:E4:DB:B9:83:03:FF:F5:BE:00:48:50:3E:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5def59c5-37b7-3c90-bfa1-36532b4634f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:84:98:5a:00:17:69:e9:8a:f6:e3:75:de:78:1c:d7:7c:e3: c4:17:d6:d9:3f:bb:92:4e:0c:c9:3f:a4:05:f7:64:2c:24:b5: 4d:39:61:a3:b8:0b:7a:52:bf:f8:30:fe:85:47:76:a5:ed:34: 1a:f2:96:ba:ce:6b:50:53:d2:85:cb:9f:3e:f2:15:73:03:bf: 6c:68:9b:d2:02:b2:9e:9e:f4:ed:e5:0c:3d:03:62:b5:1a:98: 99:8e:2f:9f:d9:1d:bb:e4:37:a8:5d:c4:46:0c:2b:09:c5:ad: 2a:58:ba:8e:1c:5d:3d:8c:3e:df:83:86:0b:15:ef:cf:06:34: ea:d4:7b:38:31:e5:38:8b:cd:41:1d:ab:ab:75:10:64:98:42: 2f:dc:32:64:6e:71:69:e5:47:b0:8a:9b:5a:d8:5b:1b:ea:7a: b5:5d:16:64:82:d6:ab:b0:42:d4:f0:74:a3:59:a2:99:5b:22: 9a:6d:1a:c3:32:e3:20:b7:c8:58:ed:a7:fb:2e:2a:be:59:f4: 03:be:8a:ca:75:d1:a9:9d:aa:80:e3:30:d4:66:83:81:62:26: f0:6c:a5:58:f3:83:81:50:c5:c8:70:b6:46:ef:e4:64:bf:83: 4f:e1:d9:59:49:33:65:4e:81:a7:7e:ec:60:1c:87:8d:f0:e0: a0:2f:16:d1 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEu6EFKX2bWOp+xYgsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk NzE3YTYwYzItNmJiYy00YWVlLWI2ZmUtNjc5OWQ0YzI2OWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZHwhHOX5vkMkxFk+nP+7Nxpml3bg47cCzp1 tZYt3jXNajKtXyjJ/Vu1kiGWnp/iqcosUd1Q/D1b8QjoJToeGL0NW6bzrLa/bQo0 iJPJ01Deg2moPDZWbNBiOxLttIOsD5L2rp8AMws8FU6iimdk1AxZoI3GjiArB/JQ UDitG3qYieqJH2dG8McJg/xcVxO/7M7XfFLjPYjQZr+dIFGhiTRFl4vmJQ565nXR S6ac+wxP09Vb6/5drp+u5F/9sDPNjpHhcCzbE1S4C1TXDlCf5MEXlmyt7fzCb+sk 6RN13FwS2Ski+TpwqhFYeJXkbxkFAlJPEWWObOLrwaQkiAvOpwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLHMjKQYqEjk27mDA//1vgBIUD40MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWRlZjU5YzUtMzdiNy0z YzkwLWJmYTEtMzY1MzJiNDYzNGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBxhJhaABdp6Yr243XeeBzXfOPEF9bZP7uSTgzJ P6QF92QsJLVNOWGjuAt6Ur/4MP6FR3al7TQa8pa6zmtQU9KFy58+8hVzA79saJvS ArKenvTt5Qw9A2K1GpiZji+f2R275DeoXcRGDCsJxa0qWLqOHF09jD7fg4YLFe/P BjTq1Hs4MeU4i81BHaurdRBkmEIv3DJkbnFp5Uewipta2Fsb6nq1XRZkgtarsELU 8HSjWaKZWyKabRrDMuMgt8hY7af7Liq+WfQDvorKddGpnaqA4zDUZoOBYibwbKVY 84OBUMXIcLZG7+Rkv4NP4dlZSTNlToGnfuxgHIeN8OCgLxbR -----END CERTIFICATE-----Generated at Wed Nov 5 04:18:31 2025 by rpki-client