$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/67e08d6e-f75c-3464-ac2b-6dfca65b2a9e.roa File: 67e08d6e-f75c-3464-ac2b-6dfca65b2a9e.roa (raw, json) Hash identifier: 0eY+dnsm6MXksYZVEqOAHpnnRD+VMHvTVV45gJuzygU= Subject key identifier: DF:A2:A7:3A:F4:30:6E:56:2B:6A:2C:B6:B9:3E:AC:44:E5:5A:24:DD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584BBA10515ABDBE4EF1BBBEE800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/67e08d6e-f75c-3464-ac2b-6dfca65b2a9e.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 396584 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:51:5a:bd:be:4e:f1:bb:be:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=772b1583-69c8-4f4f-a3a9-749117a935da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ea:4b:f5:c0:25:c2:48:8a:3b:f2:68:67:dc: c4:43:14:a9:91:6e:e6:a2:12:23:02:d4:a2:dd:f5: 74:81:82:fd:26:fa:c6:06:24:1e:e5:ec:b2:f1:65: 58:27:60:78:f5:67:87:b7:de:7b:67:2a:3f:bd:22: ad:de:ed:bf:fb:25:65:c7:78:0c:15:31:bb:d0:27: 5e:8c:45:85:1b:22:e7:83:97:32:93:72:ce:9b:44: 87:d0:23:4b:d1:3e:45:10:72:60:5b:b3:2c:cf:36: 72:e1:f1:d4:cf:0f:2d:ba:fc:3f:c1:2b:eb:f3:ae: 79:3a:8b:6d:60:96:4b:79:3b:05:53:a8:69:21:ee: 5c:a3:94:36:bd:48:e7:e7:29:a3:31:2e:e9:8b:88: c5:35:d8:71:c4:3f:fd:41:ce:7b:b8:fe:ae:d0:e2: c1:d6:c6:10:44:21:3a:e4:b9:d0:47:bc:09:06:b1: 33:7e:23:9b:c4:b4:af:c3:0d:8d:6f:42:b3:e7:63: 8e:9d:2e:2f:e3:7b:f9:8e:c2:91:78:ef:50:ce:2a: cf:bc:78:d3:12:64:d0:85:e4:46:f0:da:91:b4:72: 81:4c:b7:48:cd:f7:22:c5:86:d5:1c:3f:bb:1f:ab: ef:a9:2c:72:e7:5f:45:55:f0:28:50:16:75:5b:5a: b5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:A2:A7:3A:F4:30:6E:56:2B:6A:2C:B6:B9:3E:AC:44:E5:5A:24:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/67e08d6e-f75c-3464-ac2b-6dfca65b2a9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:2a:a4:02:4b:bf:4a:c6:f1:0d:ab:11:be:21:22:61:d8:03: d8:97:e0:7a:8f:ad:55:36:ba:96:f3:54:b5:83:3c:d9:42:b9: 2e:3c:4b:e2:7d:de:b4:f3:9d:0c:91:a2:9a:0c:84:db:4f:15: d7:21:4e:b5:62:84:82:3c:1c:f6:63:8b:45:e6:40:d6:f7:32: 2c:00:ee:a5:76:b7:c2:7b:76:99:43:d6:38:1f:d1:96:5f:48: 86:aa:75:19:1d:dc:10:cf:62:82:1e:71:7d:52:c7:c3:bd:d8: c5:7c:e0:58:71:97:9b:6a:50:c3:0a:87:7f:58:c9:ea:0d:a8: d4:9a:3b:33:53:f5:ee:3c:28:f8:8d:3d:77:2e:c6:3f:c0:6c: 7b:bd:f8:86:98:4a:13:a7:9a:f1:90:ee:41:c5:79:a8:c5:63: f3:40:57:15:96:12:25:eb:94:d6:e0:81:01:17:a0:f4:c7:6e: 2c:b5:31:db:84:e7:d2:80:ca:d9:dd:bb:75:bc:5e:77:ea:47: bd:49:0d:2f:7f:17:af:3e:fb:23:69:2e:a7:6d:5d:5c:b1:ba: 38:66:df:9f:49:c6:e9:20:2f:ad:4c:18:40:26:08:04:5b:c7: 1a:30:4e:a1:d7:8d:d1:f8:9b:c4:8f:f4:38:f7:54:b3:30:df: 69:7a:c4:26 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEu6EFFavb5O8bu+6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk NzcyYjE1ODMtNjljOC00ZjRmLWEzYTktNzQ5MTE3YTkzNWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OpL9cAlwkiKO/JoZ9zEQxSpkW7mohIjAtSi 3fV0gYL9JvrGBiQe5eyy8WVYJ2B49WeHt957Zyo/vSKt3u2/+yVlx3gMFTG70Cde jEWFGyLng5cyk3LOm0SH0CNL0T5FEHJgW7MszzZy4fHUzw8tuvw/wSvr8655Oott YJZLeTsFU6hpIe5co5Q2vUjn5ymjMS7pi4jFNdhxxD/9Qc57uP6u0OLB1sYQRCE6 5LnQR7wJBrEzfiObxLSvww2Nb0Kz52OOnS4v43v5jsKReO9QzirPvHjTEmTQheRG 8NqRtHKBTLdIzfcixYbVHD+7H6vvqSxy519FVfAoUBZ1W1q1ewIDAQABo4IDYjCC A14wHQYDVR0OBBYEFN+ipzr0MG5WK2ostrk+rETlWiTdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjdlMDhkNmUtZjc1Yy0z NDY0LWFjMmItNmRmY2E2NWIyYTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBXKqQCS79KxvENqxG+ISJh2APYl+B6j61VNrqW 81S1gzzZQrkuPEvifd60850MkaKaDITbTxXXIU61YoSCPBz2Y4tF5kDW9zIsAO6l drfCe3aZQ9Y4H9GWX0iGqnUZHdwQz2KCHnF9UsfDvdjFfOBYcZebalDDCod/WMnq DajUmjszU/XuPCj4jT13LsY/wGx7vfiGmEoTp5rxkO5BxXmoxWPzQFcVlhIl65TW 4IEBF6D0x24stTHbhOfSgMrZ3bt1vF536ke9SQ0vfxevPvsjaS6nbV1csbo4Zt+f ScbpIC+tTBhAJggEW8caME6h143R+JvEj/Q491SzMN9pesQm -----END CERTIFICATE-----Generated at Wed Nov 5 00:52:35 2025 by rpki-client