$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/789e9b1d-868c-35eb-9b89-45836fbb5570.roa File: 789e9b1d-868c-35eb-9b89-45836fbb5570.roa (raw, json) Hash identifier: gBPBLFqpAGoG9lAz+Ul0s99lfsla6RJ/ClzdMNg/Hn8= Subject key identifier: 70:7E:4A:60:A5:93:3B:36:64:87:77:E4:3C:98:D6:28:F8:31:69:CC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584BBA1052CCF828B8083B9D7CC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/789e9b1d-868c-35eb-9b89-45836fbb5570.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 10515 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:52:cc:f8:28:b8:08:3b:9d:7c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=e0bb07d5-0a30-4db9-9386-7077197a99db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e8:01:5f:ff:8a:0d:55:7d:51:04:53:62:af: 33:16:fc:f0:96:cb:4e:fe:36:ac:4b:8e:e7:db:0b: 81:a2:9d:37:45:1d:3c:cc:00:de:09:2c:f1:59:55: 19:bd:76:b4:b6:ee:a2:d2:c1:c2:aa:8b:2f:f6:0f: da:e8:2c:26:37:a6:18:9a:38:53:fd:76:a4:ad:81: 14:93:9b:18:a0:b3:9e:6d:32:c7:0c:d1:61:4c:f8: 85:2f:fe:df:24:2c:95:8f:13:21:6f:0e:1e:5b:2f: f4:aa:c5:0c:32:e1:2f:78:6c:37:b9:12:c4:1f:0a: 45:c2:ab:60:47:50:7b:ab:0b:f3:43:fc:53:ad:c9: 4b:3b:90:fd:1d:5b:02:87:50:83:a2:20:bb:bd:b8: c7:8c:13:90:79:a1:26:7f:d6:09:d4:92:ee:30:7a: 9b:86:03:ca:40:e6:a6:fb:36:52:6c:12:60:67:e6: 03:72:53:6d:8c:2b:c0:7a:97:61:d9:d8:a7:4d:52: c4:61:53:8f:17:6d:a2:80:f7:8e:b4:04:c2:39:c4: 66:b4:d9:d1:27:41:20:f7:30:06:29:67:80:42:0a: 7c:d3:d9:3c:41:55:3c:34:4e:c4:9e:a2:e5:8f:95: c3:fa:a2:89:ea:ce:10:6e:c4:4c:3c:a2:71:39:29: af:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:7E:4A:60:A5:93:3B:36:64:87:77:E4:3C:98:D6:28:F8:31:69:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/789e9b1d-868c-35eb-9b89-45836fbb5570.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:1c:3f:91:af:74:5a:2b:12:2f:b3:59:3e:16:0b:27:76:35: f2:1e:cb:f5:0a:6e:09:ef:a1:21:d1:33:17:b3:95:17:8f:76: 02:b7:d2:24:02:25:d9:41:f6:e2:d4:26:cf:18:60:a8:5a:db: e8:cc:11:d3:92:aa:b3:3a:93:43:94:f3:b1:ff:0d:11:f8:d8: 7c:77:61:67:17:bc:55:5e:d3:ce:64:77:a9:49:3f:a0:05:a8: 70:4b:a0:59:ee:0e:96:5f:95:58:12:98:e3:0b:a1:d3:df:f4: 68:db:70:25:68:26:f4:85:36:58:77:cf:cb:08:37:1b:96:65: b0:b3:2c:00:2b:15:fd:ac:01:18:69:0c:b1:1a:62:cf:75:9a: 5a:0f:27:7e:89:a8:f1:78:36:df:dc:a7:fc:9e:17:4d:6a:b9: 0e:e9:cb:6d:81:ad:8c:f3:47:d8:ac:83:26:57:95:e7:ee:c5: 3e:1b:62:6f:2f:42:03:12:d1:75:02:89:f6:14:ac:28:7e:16: 19:3c:73:cc:8b:57:e6:a5:d9:09:83:5e:96:80:ba:ce:aa:c9: e4:76:a3:94:f5:09:3e:fe:c3:54:c8:11:78:33:3f:cf:4a:e1: c9:77:cd:34:57:55:c5:11:bd:25:48:2e:e5:9a:33:ab:57:d3: bf:34:39:f8 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEu6EFLM+Ci4CDudfMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk ZTBiYjA3ZDUtMGEzMC00ZGI5LTkzODYtNzA3NzE5N2E5OWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+gBX/+KDVV9UQRTYq8zFvzwlstO/jasS47n 2wuBop03RR08zADeCSzxWVUZvXa0tu6i0sHCqosv9g/a6CwmN6YYmjhT/XakrYEU k5sYoLOebTLHDNFhTPiFL/7fJCyVjxMhbw4eWy/0qsUMMuEveGw3uRLEHwpFwqtg R1B7qwvzQ/xTrclLO5D9HVsCh1CDoiC7vbjHjBOQeaEmf9YJ1JLuMHqbhgPKQOam +zZSbBJgZ+YDclNtjCvAepdh2dinTVLEYVOPF22igPeOtATCOcRmtNnRJ0Eg9zAG KWeAQgp809k8QVU8NE7EnqLlj5XD+qKJ6s4QbsRMPKJxOSmvUQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHB+SmClkzs2ZId35DyY1ij4MWnMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzg5ZTliMWQtODY4Yy0z NWViLTliODktNDU4MzZmYmI1NTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCLHD+Rr3RaKxIvs1k+FgsndjXyHsv1Cm4J76Eh 0TMXs5UXj3YCt9IkAiXZQfbi1CbPGGCoWtvozBHTkqqzOpNDlPOx/w0R+Nh8d2Fn F7xVXtPOZHepST+gBahwS6BZ7g6WX5VYEpjjC6HT3/Ro23AlaCb0hTZYd8/LCDcb lmWwsywAKxX9rAEYaQyxGmLPdZpaDyd+iajxeDbf3Kf8nhdNarkO6cttga2M80fY rIMmV5Xn7sU+G2JvL0IDEtF1Aon2FKwofhYZPHPMi1fmpdkJg16WgLrOqsnkdqOU 9Qk+/sNUyBF4Mz/PSuHJd800V1XFEb0lSC7lmjOrV9O/NDn4 -----END CERTIFICATE-----Generated at Wed Nov 5 04:44:51 2025 by rpki-client