$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9b41aff8-95c6-3d06-b569-35d5d3bdd243.roa File: 9b41aff8-95c6-3d06-b569-35d5d3bdd243.roa (raw, json) Hash identifier: esK9bImjjPLr6zWseLXZOE10IaE/hEoKx4j4gRMVmr4= Subject key identifier: AB:9D:F1:91:29:6B:C8:A1:64:EC:0A:90:77:5C:A5:10:B2:DE:D2:03 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584BBA1054B22802A51AC7A30680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9b41aff8-95c6-3d06-b569-35d5d3bdd243.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 396565 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:54:b2:28:02:a5:1a:c7:a3:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=e892f376-9875-4c2d-a229-69a180342140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:27:71:29:24:05:38:ea:87:b3:87:94:c5:f5: 75:ab:bb:51:3f:95:67:bb:da:c1:1e:12:8e:1d:7d: fa:7a:01:21:f4:7b:3a:7d:ce:45:4b:af:cd:21:76: 9a:40:64:5d:c2:f4:b6:49:3a:04:a4:61:c3:aa:07: 9f:b8:35:df:cb:7e:64:24:5b:bd:9e:8c:ef:ea:b8: f1:5e:bc:0a:22:62:90:2a:b7:0a:a2:00:cd:2d:74: dc:1f:10:7a:e5:9a:90:74:d5:3e:9a:eb:55:f5:4d: c8:91:b5:6b:a9:f6:82:69:8c:e9:00:59:77:a4:32: e6:b8:de:74:ce:b3:32:5a:4b:21:95:86:9a:f0:f5: 91:35:3f:e6:8d:73:05:57:01:31:00:38:7e:06:85: d4:83:68:79:ae:36:84:1f:56:89:10:20:14:ad:5e: a9:8a:80:72:9a:d7:ec:af:c9:d8:e0:99:a2:89:5d: 49:9f:fa:f1:05:5e:9a:ca:53:04:f1:b2:c9:84:b8: 44:f8:f6:91:2e:e6:af:bc:85:e4:19:d8:98:3a:a7: 8d:73:dc:8e:ea:1d:63:db:83:cf:60:bf:c0:f4:57: f2:57:39:20:47:06:59:64:47:ea:37:15:fe:ec:15: 5a:68:e8:f9:e2:1a:30:58:e4:d7:e2:51:e0:5f:98: 10:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:9D:F1:91:29:6B:C8:A1:64:EC:0A:90:77:5C:A5:10:B2:DE:D2:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9b41aff8-95c6-3d06-b569-35d5d3bdd243.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:d0:13:e5:10:84:03:ff:27:90:0e:98:95:b0:ea:73:06:1a: 72:2e:f6:1c:3c:1d:18:18:9a:4c:44:bb:ec:63:c0:0d:1d:65: b7:de:f8:d5:6c:11:9a:71:73:1d:27:52:e2:8d:a3:92:f0:b5: 0c:b0:40:7a:15:4b:42:2d:8e:89:ba:a9:00:88:79:fb:de:e0: 34:3d:19:57:4d:80:cf:5b:90:df:01:48:04:2e:d3:f4:8d:98: 56:fd:d3:c7:4d:8a:4b:74:aa:91:67:52:f4:6a:cb:0f:74:64: 81:0f:13:fa:06:4f:26:5c:55:ad:2b:c7:97:96:0c:8e:b3:11: 68:be:e3:b1:d6:f5:24:d6:9d:7b:8d:5b:36:3d:fc:ef:d8:fc: 56:a4:20:ca:8f:68:13:46:e4:cb:0d:0a:c8:f3:0d:55:5c:e4: 8f:ae:39:38:81:91:39:20:8e:3a:1d:f1:75:c0:8e:45:2a:33: 97:0a:3a:8c:ba:63:b2:a6:4f:50:23:1d:9b:9e:0f:f7:a4:25: 8b:27:ba:87:25:9f:9a:c1:20:38:83:a7:1f:d8:79:49:7d:2e: ab:a4:c5:85:29:10:9d:7e:6f:c2:9b:fc:83:09:ae:6b:25:27: 21:a2:2f:4f:66:fe:57:26:d3:94:a4:7e:9b:57:59:94:da:0a: 76:9a:5a:04 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEu6EFSyKAKlGsejBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk ZTg5MmYzNzYtOTg3NS00YzJkLWEyMjktNjlhMTgwMzQyMTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkidxKSQFOOqHs4eUxfV1q7tRP5Vnu9rBHhKO HX36egEh9Hs6fc5FS6/NIXaaQGRdwvS2SToEpGHDqgefuDXfy35kJFu9nozv6rjx XrwKImKQKrcKogDNLXTcHxB65ZqQdNU+mutV9U3IkbVrqfaCaYzpAFl3pDLmuN50 zrMyWkshlYaa8PWRNT/mjXMFVwExADh+BoXUg2h5rjaEH1aJECAUrV6pioBymtfs r8nY4JmiiV1Jn/rxBV6aylME8bLJhLhE+PaRLuavvIXkGdiYOqeNc9yO6h1j24PP YL/A9FfyVzkgRwZZZEfqNxX+7BVaaOj54howWOTX4lHgX5gQWwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKud8ZEpa8ihZOwKkHdcpRCy3tIDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWI0MWFmZjgtOTVjNi0z ZDA2LWI1NjktMzVkNWQzYmRkMjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBa0BPlEIQD/yeQDpiVsOpzBhpyLvYcPB0YGJpM RLvsY8ANHWW33vjVbBGacXMdJ1LijaOS8LUMsEB6FUtCLY6JuqkAiHn73uA0PRlX TYDPW5DfAUgELtP0jZhW/dPHTYpLdKqRZ1L0assPdGSBDxP6Bk8mXFWtK8eXlgyO sxFovuOx1vUk1p17jVs2Pfzv2PxWpCDKj2gTRuTLDQrI8w1VXOSPrjk4gZE5II46 HfF1wI5FKjOXCjqMumOypk9QIx2bng/3pCWLJ7qHJZ+awSA4g6cf2HlJfS6rpMWF KRCdfm/Cm/yDCa5rJSchoi9PZv5XJtOUpH6bV1mU2gp2mloE -----END CERTIFICATE-----Generated at Wed Nov 5 00:58:30 2025 by rpki-client