$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d9bf4c20-84d9-3bce-9ba6-e7bed946cfd5.roa File: d9bf4c20-84d9-3bce-9ba6-e7bed946cfd5.roa (raw, json) Hash identifier: ZDWpKd0iu0XnLV2GrmvywGGvNmbHyPHTkP5uAFv13AE= Subject key identifier: FD:DA:D5:D3:BC:1E:AA:33:F6:57:6F:A0:70:8F:06:20:14:0B:2D:8C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584BBA1052622B4129F37FC261E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d9bf4c20-84d9-3bce-9ba6-e7bed946cfd5.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 25485 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:52:62:2b:41:29:f3:7f:c2:61:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=cefcfc7b-e77d-48f7-b9e8-dfa16ada4289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:28:af:e7:aa:85:74:12:df:46:dd:df:61:54: f2:71:a3:21:fa:5c:ac:a9:0c:f1:41:ac:eb:35:9f: 9a:cd:82:91:3f:f9:88:34:bd:cd:b7:1c:70:b1:7d: ce:ad:d6:5f:6a:0a:f0:6b:73:7f:65:77:0d:23:9d: d6:d3:13:b7:93:3c:06:b6:26:86:61:6c:fc:41:d5: e6:a5:66:ff:bb:64:12:3c:bf:1c:fe:9a:d8:2f:d5: 9b:48:47:d0:c3:69:f3:ad:b2:d2:27:04:f7:ce:b5: 09:26:1f:70:65:73:77:d0:54:57:11:47:0b:16:39: b0:ab:35:88:7b:08:4f:df:12:b6:bb:1b:e4:95:8b: bb:84:5d:e3:14:ae:92:6d:06:39:d0:b9:cd:55:20: 2c:e7:63:d1:6f:eb:ed:c0:95:ad:01:34:bb:04:40: 55:14:08:01:aa:2f:fc:e2:9d:19:f6:e0:92:dd:3f: c3:3e:8b:56:a2:33:4e:a4:0d:79:37:3c:6e:77:54: 7d:15:f7:7b:9e:ab:e7:5f:da:ca:c4:16:38:19:33: 3f:c6:5d:18:69:0e:7d:b9:7b:40:c0:4c:42:7f:5a: b3:5a:4e:cf:67:51:e6:69:0c:1a:a5:df:5f:c0:5e: 3c:36:32:26:ce:18:27:b2:3c:6b:b0:2f:23:84:c6: d9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:DA:D5:D3:BC:1E:AA:33:F6:57:6F:A0:70:8F:06:20:14:0B:2D:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d9bf4c20-84d9-3bce-9ba6-e7bed946cfd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:94:e4:26:d3:fc:9c:6f:7c:67:68:dd:0e:7a:eb:b6:d1:77: da:39:c4:31:e2:4f:9f:e3:1d:d5:50:a6:b3:d9:9c:5d:ef:2c: 81:15:20:79:9a:24:eb:c7:fb:fe:73:bd:da:15:a5:78:93:e5: 2c:41:fc:ca:11:e3:85:2d:3c:1a:25:28:cb:20:d3:e6:47:ad: 7f:13:2a:58:dd:4f:54:16:22:6f:d5:67:ae:cf:15:58:3d:b9: 26:3f:d5:60:cf:6d:e9:ee:83:6a:df:f4:e1:e2:d1:fc:7a:9e: af:64:ec:94:ea:47:13:d6:b9:95:50:6b:4d:0a:c0:9b:d4:53: 5d:15:aa:57:d9:12:61:04:c1:94:71:4e:8a:53:ce:8a:b2:05: cc:71:26:e0:b1:11:2f:0b:6c:ab:59:f6:3e:f9:d1:91:45:79: ae:74:06:51:45:be:59:56:e3:56:41:da:c6:0d:5d:66:9f:e4: 9c:0b:8e:de:41:41:5f:cf:32:40:5f:1b:86:f3:14:31:e9:f9: 7d:b1:9a:56:81:ae:c1:4d:f8:ef:9c:04:65:34:f4:2b:4e:e9: e6:78:2c:8e:fd:9c:e6:20:25:92:47:82:4b:f7:ea:9e:9a:c8: 8f:80:36:b1:07:30:1d:3b:65:16:e3:1c:4c:a5:42:aa:0a:96: 92:d5:25:d3 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEu6EFJiK0Ep83/CYeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk Y2VmY2ZjN2ItZTc3ZC00OGY3LWI5ZTgtZGZhMTZhZGE0Mjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyiv56qFdBLfRt3fYVTycaMh+lysqQzxQazr NZ+azYKRP/mINL3NtxxwsX3OrdZfagrwa3N/ZXcNI53W0xO3kzwGtiaGYWz8QdXm pWb/u2QSPL8c/prYL9WbSEfQw2nzrbLSJwT3zrUJJh9wZXN30FRXEUcLFjmwqzWI ewhP3xK2uxvklYu7hF3jFK6SbQY50LnNVSAs52PRb+vtwJWtATS7BEBVFAgBqi/8 4p0Z9uCS3T/DPotWojNOpA15Nzxud1R9Ffd7nqvnX9rKxBY4GTM/xl0YaQ59uXtA wExCf1qzWk7PZ1HmaQwapd9fwF48NjImzhgnsjxrsC8jhMbZ3QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFP3a1dO8Hqoz9ldvoHCPBiAUCy2MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDliZjRjMjAtODRkOS0z YmNlLTliYTYtZTdiZWQ5NDZjZmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBTlOQm0/ycb3xnaN0Oeuu20XfaOcQx4k+f4x3V UKaz2Zxd7yyBFSB5miTrx/v+c73aFaV4k+UsQfzKEeOFLTwaJSjLINPmR61/EypY 3U9UFiJv1WeuzxVYPbkmP9Vgz23p7oNq3/Th4tH8ep6vZOyU6kcT1rmVUGtNCsCb 1FNdFapX2RJhBMGUcU6KU86KsgXMcSbgsREvC2yrWfY++dGRRXmudAZRRb5ZVuNW QdrGDV1mn+ScC47eQUFfzzJAXxuG8xQx6fl9sZpWga7BTfjvnARlNPQrTunmeCyO /ZzmICWSR4JL9+qemsiPgDaxBzAdO2UW4xxMpUKqCpaS1SXT -----END CERTIFICATE-----Generated at Wed Nov 5 04:20:29 2025 by rpki-client