$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9f8b3e69-6874-3713-a3c4-f886a966c41c.roa File: 9f8b3e69-6874-3713-a3c4-f886a966c41c.roa (raw, json) Hash identifier: rP/81hX5KQG/Zf5WQ1mli8txvJU0LgSjAAVB99b37Yg= Subject key identifier: 8F:14:B5:EF:4C:0E:46:76:1C:67:80:95:1F:35:1B:91:C9:2B:3B:DC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584BB45D3B10A2DF40ED97CE0A80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9f8b3e69-6874-3713-a3c4-f886a966c41c.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 7342 IP address blocks: 2620:74:38::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:3b:10:a2:df:40:ed:97:ce:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=1bb85191-deb0-4049-82ed-d66199733907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:58:62:b5:e8:0a:21:96:34:70:2b:7c:26:1b: 19:cc:53:52:7b:66:82:9d:bd:8d:51:eb:e8:89:dc: ff:d7:19:11:95:f5:87:4f:7d:37:b1:62:3b:62:fa: 19:68:2f:07:53:01:21:db:e6:0e:e8:d8:94:5d:f8: 20:b3:39:fb:95:63:88:ca:66:d2:b0:d3:b9:e3:5a: 24:f1:4d:fa:f7:cb:0c:96:a9:b3:b5:c9:13:0b:ab: f7:60:52:ea:22:e5:8a:ee:45:ae:5a:dd:f8:91:87: c2:8d:24:1e:b8:ee:ea:7c:05:de:79:3c:4f:cf:a7: ad:99:27:c7:0f:3d:c2:5d:6d:4d:ee:bd:02:9f:01: 7a:92:fa:58:df:f4:ea:a4:04:80:aa:97:e8:57:b7: c1:d0:ae:2d:26:c0:54:b2:1c:c8:6f:2d:42:3e:b6: 7a:76:b5:4e:c4:13:80:ef:a8:4f:3a:88:b9:4f:0b: 49:5d:eb:ea:fb:36:35:05:2e:3c:d8:0e:86:54:23: b1:92:ec:e9:a0:47:fd:1d:04:70:b5:d3:f7:bd:92: 35:ee:d7:75:98:6b:be:47:dd:b4:c0:14:13:26:96: 62:82:67:34:83:ee:3c:01:d5:01:47:1e:a3:eb:e4: ba:cd:5d:a9:44:4c:48:36:1c:c2:d4:35:87:93:d7: 97:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:14:B5:EF:4C:0E:46:76:1C:67:80:95:1F:35:1B:91:C9:2B:3B:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9f8b3e69-6874-3713-a3c4-f886a966c41c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:38::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:1e:70:45:f7:71:55:cd:0b:e2:23:a9:41:52:77:13:d2:5b: 51:89:38:23:eb:d6:90:df:71:e1:44:a2:66:77:a1:39:b4:04: 7f:5e:08:d9:e9:b5:a0:90:68:58:01:15:fc:8d:15:f7:a9:f4: e9:e5:42:31:84:cb:c3:69:f8:09:9d:a1:58:5c:1e:9f:2b:e8: 72:7e:d6:e6:31:d8:9e:f4:59:68:da:52:74:18:65:89:c9:77: 00:6b:11:95:16:cb:b8:2c:df:73:30:e6:28:ac:bc:6d:63:86: 77:4a:c2:9e:f0:e7:d5:43:a2:85:52:91:a1:1e:57:71:68:52: bd:9e:47:83:4e:db:18:ca:83:69:60:28:7e:0a:a3:78:bd:98: c9:e2:0d:1c:44:7d:19:76:4f:45:9d:c5:9f:0b:dd:c2:16:34: 31:09:f3:9f:46:c3:c3:98:23:ad:da:19:bb:77:93:6b:c4:1f: 71:0a:b2:a5:06:6a:31:03:a8:ba:6d:1f:a4:69:6a:fd:e6:e0: a2:09:76:a5:52:c3:5f:5b:ab:3b:1b:40:29:23:04:94:2f:0a: 92:1b:7d:fa:1e:67:37:08:d2:16:0e:61:28:fd:5f:81:a0:35: ee:ce:80:2d:02:73:58:44:ac:eb:89:b6:a7:83:65:48:fa:1c: 74:53:0d:08 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu0XTsQot9A7ZfOCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk MWJiODUxOTEtZGViMC00MDQ5LTgyZWQtZDY2MTk5NzMzOTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1hitegKIZY0cCt8JhsZzFNSe2aCnb2NUevo idz/1xkRlfWHT303sWI7YvoZaC8HUwEh2+YO6NiUXfggszn7lWOIymbSsNO541ok 8U3698sMlqmztckTC6v3YFLqIuWK7kWuWt34kYfCjSQeuO7qfAXeeTxPz6etmSfH Dz3CXW1N7r0CnwF6kvpY3/TqpASAqpfoV7fB0K4tJsBUshzIby1CPrZ6drVOxBOA 76hPOoi5TwtJXevq+zY1BS482A6GVCOxkuzpoEf9HQRwtdP3vZI17td1mGu+R920 wBQTJpZigmc0g+48AdUBRx6j6+S6zV2pRExINhzC1DWHk9eXZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI8Ute9MDkZ2HGeAlR81G5HJKzvcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWY4YjNlNjktNjg3NC0z NzEzLWEzYzQtZjg4NmE5NjZjNDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAA4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABwecEX3cVXNC+IjqUFSdxPSW1GJOCPr1pDfceFEomZ3oTm0BH9e CNnptaCQaFgBFfyNFfep9OnlQjGEy8Np+AmdoVhcHp8r6HJ+1uYx2J70WWjaUnQY ZYnJdwBrEZUWy7gs33Mw5iisvG1jhndKwp7w59VDooVSkaEeV3FoUr2eR4NO2xjK g2lgKH4Ko3i9mMniDRxEfRl2T0WdxZ8L3cIWNDEJ859Gw8OYI63aGbt3k2vEH3EK sqUGajEDqLptH6Rpav3m4KIJdqVSw19bqzsbQCkjBJQvCpIbffoeZzcI0hYOYSj9 X4GgNe7OgC0Cc1hErOuJtqeDZUj6HHRTDQg= -----END CERTIFICATE-----Generated at Wed Nov 5 00:52:50 2025 by rpki-client