$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5f8c9260-8b6d-3a10-a2bd-9fee063de9ab.roa File: 5f8c9260-8b6d-3a10-a2bd-9fee063de9ab.roa (raw, json) Hash identifier: I570HhdnVlYzGxcjZMHwaqAprYKqBgldZ0P8MPC2y0E= Subject key identifier: D9:55:6B:5D:9E:D8:04:D5:B9:9C:77:42:FF:22:27:B3:ED:D2:16:3D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584BBA104F7C155E31452619ED80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5f8c9260-8b6d-3a10-a2bd-9fee063de9ab.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 396603 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:4f:7c:15:5e:31:45:26:19:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=02e2a459-85f1-4a39-8a7d-2eb3e35932e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c9:80:06:74:5a:cb:6d:64:81:50:c8:00:5a: 29:17:85:57:55:bc:13:95:8d:cd:db:20:b7:f2:94: 98:72:af:da:1b:65:b8:e8:9b:4f:da:4c:82:29:0f: 5d:99:0b:85:7a:15:f6:aa:b1:bc:bf:ad:e2:15:49: 8a:dd:12:df:c1:ae:45:f8:d8:ca:0d:2f:71:4e:ac: 06:cc:ad:92:04:d8:33:a4:33:a0:e5:8a:5c:3d:a3: 66:af:50:ed:a5:0b:5f:6d:ec:aa:9f:ac:71:06:c3: 58:32:5a:09:e2:f0:85:f6:6d:fc:cd:e2:9f:88:cc: da:b3:7f:ce:e5:d1:90:19:03:16:33:72:e4:ff:f7: f5:ec:31:bd:da:2c:c5:92:f2:0c:ac:13:48:90:60: 61:a0:b0:56:0d:1f:47:c7:8a:94:e4:7e:05:8a:45: d0:f8:11:c8:f3:b6:87:b0:7b:68:ec:a0:f8:49:19: ed:15:55:90:2b:4a:69:10:82:f0:f6:60:ae:f2:50: e6:c5:5d:44:3a:d6:9b:cb:00:b4:b3:ee:c5:1f:35: 52:94:d5:44:24:98:33:00:bf:8f:f5:f4:2c:86:0f: c9:59:a8:2e:7c:47:da:d7:0b:91:31:bc:3f:dc:38: 3f:b7:45:81:33:45:3e:0f:db:23:ac:6f:e2:8e:d7: 22:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:55:6B:5D:9E:D8:04:D5:B9:9C:77:42:FF:22:27:B3:ED:D2:16:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5f8c9260-8b6d-3a10-a2bd-9fee063de9ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:5b:2d:41:3f:a4:05:31:ca:49:da:4e:74:2a:21:0d:7c:58: fa:8e:a5:c7:a3:a2:51:ef:cc:58:f2:53:14:52:67:f6:9a:27: ff:ec:10:01:23:72:b2:0f:60:e8:a7:35:be:bf:be:cb:ed:2f: 98:f6:5b:33:0a:6d:5b:10:e1:8c:5b:45:6e:27:0a:68:a8:a9: 8e:b3:3e:d8:2c:7f:20:25:8c:e5:a6:69:14:c9:0c:75:51:4c: e4:ce:b0:6a:63:8d:f1:c5:9b:d0:ff:e1:e0:c1:ae:fe:f1:b7: 2e:f0:d5:9a:3c:be:8a:a8:af:07:c0:a8:f6:42:7a:e2:37:dd: 1a:74:f5:b9:9f:65:88:85:67:4a:f0:cc:f4:84:37:a0:69:bf: b5:c5:36:02:b9:1f:2f:88:2a:e3:7a:03:48:d9:76:46:5e:28: ef:57:3c:ab:4b:83:da:ae:61:e1:16:1d:48:97:e5:cf:c9:dd: 76:9f:01:c4:73:8c:da:ca:20:4e:be:75:d8:5b:49:6a:42:89: 71:5f:35:51:e4:1b:f1:80:50:3c:68:ba:25:58:8a:77:08:d4: a6:78:06:ce:0b:b5:7b:f9:3d:33:1f:95:fc:7a:8d:35:5a:45: 7c:d0:c0:f5:43:4f:d1:92:11:2b:1b:fd:b5:06:c3:44:8c:43: d6:4d:1f:76 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEu6EE98FV4xRSYZ7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk MDJlMmE0NTktODVmMS00YTM5LThhN2QtMmViM2UzNTkzMmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8mABnRay21kgVDIAFopF4VXVbwTlY3N2yC3 8pSYcq/aG2W46JtP2kyCKQ9dmQuFehX2qrG8v63iFUmK3RLfwa5F+NjKDS9xTqwG zK2SBNgzpDOg5YpcPaNmr1DtpQtfbeyqn6xxBsNYMloJ4vCF9m38zeKfiMzas3/O 5dGQGQMWM3Lk//f17DG92izFkvIMrBNIkGBhoLBWDR9Hx4qU5H4FikXQ+BHI87aH sHto7KD4SRntFVWQK0ppEILw9mCu8lDmxV1EOtabywC0s+7FHzVSlNVEJJgzAL+P 9fQshg/JWagufEfa1wuRMbw/3Dg/t0WBM0U+D9sjrG/ijtcixQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNlVa12e2ATVuZx3Qv8iJ7Pt0hY9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWY4YzkyNjAtOGI2ZC0z YTEwLWEyYmQtOWZlZTA2M2RlOWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBjWy1BP6QFMcpJ2k50KiENfFj6jqXHo6JR78xY 8lMUUmf2mif/7BABI3KyD2DopzW+v77L7S+Y9lszCm1bEOGMW0VuJwpoqKmOsz7Y LH8gJYzlpmkUyQx1UUzkzrBqY43xxZvQ/+Hgwa7+8bcu8NWaPL6KqK8HwKj2Qnri N90adPW5n2WIhWdK8Mz0hDegab+1xTYCuR8viCrjegNI2XZGXijvVzyrS4ParmHh Fh1Il+XPyd12nwHEc4zayiBOvnXYW0lqQolxXzVR5BvxgFA8aLolWIp3CNSmeAbO C7V7+T0zH5X8eo01WkV80MD1Q0/RkhErG/21BsNEjEPWTR92 -----END CERTIFICATE-----Generated at Wed Nov 5 00:52:46 2025 by rpki-client