$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d9a49422-7587-3e1c-ae43-6db8a437033e.roa File: d9a49422-7587-3e1c-ae43-6db8a437033e.roa (raw, json) Hash identifier: 3WC58zH9mKWfSG0ZgjzEC2sF8wKw3MT5jHKVSnfZbXU= Subject key identifier: 9C:B3:95:2D:5E:02:3B:C6:E0:91:7B:32:B8:96:33:C5:CF:E4:83:97 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584BBA1052BA05A1E8DBF7C04B80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d9a49422-7587-3e1c-ae43-6db8a437033e.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 36619 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:52:ba:05:a1:e8:db:f7:c0:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=70e4e703-f843-4977-be46-b2175ec415f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c3:15:46:34:d2:8f:82:ed:27:51:7f:54:4a: e3:7c:5c:48:de:ec:fd:fa:e3:07:82:19:c4:7b:ae: 52:af:01:9d:39:ba:0c:60:b7:0e:b4:5d:f7:2e:73: 1d:fa:cc:4a:b8:e6:56:fb:ef:03:ee:02:ab:66:41: 07:ef:66:e1:8d:30:8a:58:28:20:5f:11:6f:ca:0a: 6f:2e:42:2f:fd:bb:1c:1f:b2:4d:1f:45:cb:36:f2: 34:ce:bc:fb:62:ac:de:08:d5:62:1c:20:66:15:2c: 9c:02:36:1f:81:76:5e:2a:e4:53:bf:0c:e7:6b:95: 16:c3:c0:47:5f:db:ae:3f:12:4e:f3:82:ae:b6:b2: 87:71:37:c4:50:75:81:4a:55:46:f5:0c:c7:41:b9: e7:cc:f1:4d:69:93:b7:d9:11:8f:e5:59:3e:dc:e6: d1:9e:ed:35:87:13:cf:fd:de:98:d8:83:be:95:0c: f0:1c:06:72:b4:27:64:b4:e1:cd:e5:01:68:b8:c2: 48:72:ac:43:23:0f:77:ca:97:09:a1:bc:3d:a1:d9: 4a:5d:fd:a0:eb:70:f7:9c:5c:f1:30:3b:95:01:f8: 5c:65:67:29:fc:9b:f2:80:29:eb:cb:ec:72:5f:4d: 83:6d:58:35:c5:98:e9:4f:5e:80:65:6e:2b:ca:76: 09:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B3:95:2D:5E:02:3B:C6:E0:91:7B:32:B8:96:33:C5:CF:E4:83:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d9a49422-7587-3e1c-ae43-6db8a437033e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:64:93:12:90:21:2f:81:2d:c0:09:22:ff:0a:d2:e0:9e:35: 0d:1c:b3:de:10:24:7c:5d:9f:a8:6f:6c:f7:e9:b5:91:f1:09: 71:95:b8:d0:a9:7f:b6:ac:e4:45:16:e9:86:33:ea:cd:81:77: 84:bb:16:9d:4e:b4:9e:e2:29:cd:36:f9:81:5b:e7:1a:d7:87: cf:50:98:e7:1e:74:64:14:35:41:a8:f0:aa:7f:b1:03:92:ab: 70:78:9c:4d:53:c3:37:97:da:fb:4e:f4:c2:0f:ad:14:2c:e7: 65:77:85:d6:96:14:97:c1:8c:a0:c2:c7:bc:a6:91:c7:33:c1: 50:bc:3e:d0:11:30:b6:0e:78:28:91:c1:ab:ed:29:42:24:e1: e9:f6:9e:af:ed:31:5d:9d:9f:06:41:74:35:e2:48:9d:56:f4: e2:01:de:b1:96:8f:b0:2c:c7:71:ed:47:e3:0a:ee:ea:e2:cd: c1:26:e0:70:4b:90:1b:fb:bd:78:c1:4d:3c:fb:6e:8b:2d:b1: 79:9a:6d:3d:db:9d:65:34:d5:d2:cd:b5:8a:cf:a5:d7:cb:ec: f5:b5:76:29:5d:d0:5a:11:42:0b:46:c1:a4:91:3a:b1:5d:e7: 3d:ea:ae:36:67:3e:98:65:f9:ad:6d:b9:57:41:28:c0:53:83: 6a:d6:fc:db -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEu6EFK6BaHo2/fAS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk NzBlNGU3MDMtZjg0My00OTc3LWJlNDYtYjIxNzVlYzQxNWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8MVRjTSj4LtJ1F/VErjfFxI3uz9+uMHghnE e65SrwGdOboMYLcOtF33LnMd+sxKuOZW++8D7gKrZkEH72bhjTCKWCggXxFvygpv LkIv/bscH7JNH0XLNvI0zrz7YqzeCNViHCBmFSycAjYfgXZeKuRTvwzna5UWw8BH X9uuPxJO84KutrKHcTfEUHWBSlVG9QzHQbnnzPFNaZO32RGP5Vk+3ObRnu01hxPP /d6Y2IO+lQzwHAZytCdktOHN5QFouMJIcqxDIw93ypcJobw9odlKXf2g63D3nFzx MDuVAfhcZWcp/JvygCnry+xyX02DbVg1xZjpT16AZW4rynYJmQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJyzlS1eAjvG4JF7MriWM8XP5IOXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDlhNDk0MjItNzU4Ny0z ZTFjLWFlNDMtNmRiOGE0MzcwMzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB5ZJMSkCEvgS3ACSL/CtLgnjUNHLPeECR8XZ+o b2z36bWR8QlxlbjQqX+2rORFFumGM+rNgXeEuxadTrSe4inNNvmBW+ca14fPUJjn HnRkFDVBqPCqf7EDkqtweJxNU8M3l9r7TvTCD60ULOdld4XWlhSXwYygwse8ppHH M8FQvD7QETC2DngokcGr7SlCJOHp9p6v7TFdnZ8GQXQ14kidVvTiAd6xlo+wLMdx 7UfjCu7q4s3BJuBwS5Ab+714wU08+26LLbF5mm09251lNNXSzbWKz6XXy+z1tXYp XdBaEUILRsGkkTqxXec96q42Zz6YZfmtbblXQSjAU4Nq1vzb -----END CERTIFICATE-----Generated at Wed Nov 5 02:51:48 2025 by rpki-client