$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dc7fb0d9-5156-38a1-a545-728baab0d293.roa File: dc7fb0d9-5156-38a1-a545-728baab0d293.roa (raw, json) Hash identifier: VWrjDypiwbrO0ZhHLzuV4vrJ6CWHahn6fPCtqbfKP/4= Subject key identifier: 4A:FF:F3:C1:FA:49:04:82:3E:56:FA:60:4F:6C:AE:34:77:42:C1:EB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584BBA105447E3CA2E81A0B3080C Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dc7fb0d9-5156-38a1-a545-728baab0d293.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 397206 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:54:47:e3:ca:2e:81:a0:b3:08:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=f67c83f3-3c9e-4d4d-b41f-e05ec5c6d754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:59:3b:e2:ee:08:f5:90:47:bf:8c:14:b1:ff: 16:4d:1e:44:a8:a6:c6:5b:70:5a:b3:e3:ba:72:51: 42:a9:33:f4:e0:b9:35:b0:19:26:a7:28:14:8b:91: 14:2d:78:5c:b9:93:ce:89:0f:e9:e8:aa:8b:76:ff: 2d:62:e1:77:f0:84:f3:74:8f:83:7f:1f:8d:71:2b: 34:e9:48:71:b7:06:a8:9d:25:78:79:ae:b9:22:e8: e0:ee:1a:ed:0e:f6:33:80:f0:dd:25:27:67:5f:c0: e2:e6:a0:3b:16:b1:66:42:93:a4:1f:63:3b:08:f4: 82:b7:71:d0:8a:65:e7:9c:d5:e9:9c:66:50:76:0c: 8f:cd:c4:64:c1:5b:8c:f4:28:e1:ac:ad:a5:36:2e: 76:03:b2:81:ab:62:e0:62:8c:73:5e:6c:db:c0:69: 57:bc:68:b0:0c:2b:88:c2:76:6b:c0:fc:27:1a:ba: 57:62:43:cf:1d:53:09:ea:cc:22:a1:94:fa:16:9d: 4a:73:27:ac:db:9f:f1:3d:a2:75:70:a9:3b:b9:35: a6:5f:0d:bb:36:5f:df:b0:24:b3:cb:93:86:b2:5c: 33:59:a7:49:09:cd:9d:f2:e5:50:43:90:38:f1:e7: c2:04:37:b5:5f:01:d8:5e:60:d1:17:0c:5a:ea:d2: 8c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:FF:F3:C1:FA:49:04:82:3E:56:FA:60:4F:6C:AE:34:77:42:C1:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dc7fb0d9-5156-38a1-a545-728baab0d293.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:1f:98:7e:48:75:22:96:0e:56:66:c2:8e:0d:e1:16:70:30: 2d:4b:91:aa:48:f3:8b:be:fc:ee:03:96:f3:b3:03:9a:2d:56: 51:51:e9:47:5f:ed:7d:75:4d:5b:81:34:a2:67:df:4f:a2:61: f4:d5:42:00:db:e8:8e:00:e0:fd:61:3d:67:98:b0:4f:f8:de: e5:73:52:8d:52:ed:e9:90:73:e2:6c:90:d4:53:36:29:65:f2: e4:68:bc:5d:50:5e:67:8d:de:9f:c7:8d:b8:eb:a4:45:87:03: ff:76:bf:1b:fb:d7:3a:19:fd:c0:a4:73:0c:7f:d5:bf:62:a7: 4a:e2:ed:bf:cf:62:ae:a8:18:06:0a:8c:38:9c:4c:e0:9e:a8: 03:01:d3:dc:34:7f:96:09:1e:7e:e7:6b:d3:3b:f7:63:b7:19: 6a:ae:58:c5:9d:55:ee:cc:82:88:09:27:eb:39:7b:94:0d:6f: be:9b:02:42:5d:d9:d1:3b:82:6a:40:dd:33:08:cf:63:68:63: 54:e6:6e:f1:80:ed:81:59:1e:f9:c5:6b:d2:a4:05:c1:fa:20: b0:5e:2b:db:5f:8c:00:60:a7:06:13:46:72:c5:ef:af:c5:79: 7b:9c:6e:f4:32:c2:f6:cf:a0:4a:79:73:8a:93:cc:24:9b:22: bf:c4:e1:69 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEu6EFRH48ougaCzCAwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk ZjY3YzgzZjMtM2M5ZS00ZDRkLWI0MWYtZTA1ZWM1YzZkNzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolk74u4I9ZBHv4wUsf8WTR5EqKbGW3Bas+O6 clFCqTP04Lk1sBkmpygUi5EULXhcuZPOiQ/p6KqLdv8tYuF38ITzdI+Dfx+NcSs0 6UhxtwaonSV4ea65Iujg7hrtDvYzgPDdJSdnX8Di5qA7FrFmQpOkH2M7CPSCt3HQ imXnnNXpnGZQdgyPzcRkwVuM9CjhrK2lNi52A7KBq2LgYoxzXmzbwGlXvGiwDCuI wnZrwPwnGrpXYkPPHVMJ6swioZT6Fp1Kcyes25/xPaJ1cKk7uTWmXw27Nl/fsCSz y5OGslwzWadJCc2d8uVQQ5A48efCBDe1XwHYXmDRFwxa6tKMkQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEr/88H6SQSCPlb6YE9srjR3QsHrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGM3ZmIwZDktNTE1Ni0z OGExLWE1NDUtNzI4YmFhYjBkMjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBgH5h+SHUilg5WZsKODeEWcDAtS5GqSPOLvvzu A5bzswOaLVZRUelHX+19dU1bgTSiZ99PomH01UIA2+iOAOD9YT1nmLBP+N7lc1KN Uu3pkHPibJDUUzYpZfLkaLxdUF5njd6fx42466RFhwP/dr8b+9c6Gf3ApHMMf9W/ YqdK4u2/z2KuqBgGCow4nEzgnqgDAdPcNH+WCR5+52vTO/djtxlqrljFnVXuzIKI CSfrOXuUDW++mwJCXdnRO4JqQN0zCM9jaGNU5m7xgO2BWR75xWvSpAXB+iCwXivb X4wAYKcGE0Zyxe+vxXl7nG70MsL2z6BKeXOKk8wkmyK/xOFp -----END CERTIFICATE-----Generated at Wed Nov 5 07:31:46 2025 by rpki-client