$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec4ce038-adb0-340d-991a-17b3e6981613.roa File: ec4ce038-adb0-340d-991a-17b3e6981613.roa (raw, json) Hash identifier: 5/m/QLXBoJVYilcsnZLzwsblp+J2mXGg6QmOwTPe+UM= Subject key identifier: 5E:74:22:8A:B2:D6:A4:2B:1A:1A:4A:46:7F:D2:51:6C:29:11:17:CB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584BBA105534414C87CFA3BCF3E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec4ce038-adb0-340d-991a-17b3e6981613.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 396549 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:55:34:41:4c:87:cf:a3:bc:f3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=f557859c-8f58-4d90-81b1-a9d067192b44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:97:bb:b3:95:5c:f3:30:80:09:eb:60:0e:c7: 15:1b:6c:32:f0:95:ce:91:92:3e:91:94:36:19:41: dd:34:60:8a:6b:1e:06:fd:84:c9:32:71:ff:fd:5d: 1b:99:75:5b:d2:f7:45:ad:db:3f:51:67:5c:16:ce: 39:5f:62:59:a6:00:d9:90:5b:d5:59:f5:43:98:fb: 7b:83:26:10:3a:c2:53:9a:3f:87:29:39:c4:68:17: 58:91:be:ba:04:3f:2e:a1:e9:1f:d9:30:96:ce:1d: 8a:15:59:b9:3e:ad:4f:cd:48:9d:98:9d:dd:27:87: 6b:6c:50:b3:8c:b7:b0:dc:c0:a2:73:e6:cf:b7:6c: eb:dd:e2:b0:a8:58:87:21:04:69:87:12:bd:43:4b: 71:ef:54:0f:c6:31:15:0d:97:1f:ed:76:0e:85:a0: 42:1b:94:3e:7b:80:3d:e4:06:0a:6c:4a:f4:22:75: 70:df:38:cf:11:66:67:f6:28:b1:eb:0b:8b:7c:66: 49:55:39:39:75:b3:31:c6:eb:a9:d9:ad:aa:59:e4: 57:76:24:55:df:a6:84:ab:6c:c6:9a:6b:74:8d:28: 80:36:4d:0a:c9:c4:0a:da:c2:ac:bf:4e:ad:24:6e: 4c:2c:38:d8:7b:46:f1:69:de:31:9e:67:cf:05:d8: df:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:74:22:8A:B2:D6:A4:2B:1A:1A:4A:46:7F:D2:51:6C:29:11:17:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec4ce038-adb0-340d-991a-17b3e6981613.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:c3:a9:48:c5:61:da:7d:06:c9:3d:6b:a1:88:79:57:46:b1: 45:f0:21:81:69:16:3e:a8:b0:89:9b:b7:18:15:0e:2e:73:ee: aa:10:b0:ae:6e:db:1a:70:ed:77:d7:2f:53:6c:fa:64:67:1e: 8b:1e:74:b6:47:9e:98:bc:e6:92:9f:50:20:37:b9:c2:16:0a: 27:81:7b:a8:a6:24:33:a1:b6:f5:1b:9a:46:af:4b:fb:c1:8e: 8e:6d:45:b1:02:fd:a1:0f:c1:d4:5f:4a:b2:2e:bb:7f:dc:63: df:b3:19:43:ba:76:de:bf:b4:26:1e:b6:0f:65:f4:71:19:5b: 7c:e5:31:14:dd:32:dd:d4:85:e0:4e:49:e9:da:89:48:17:fe: d8:64:48:a1:9a:af:04:87:2c:af:d5:90:8a:e1:08:f0:c7:50: f3:4e:e6:df:b9:39:e0:11:bb:4f:ba:93:3f:10:bb:b2:31:5b: 34:c4:63:ab:6c:cb:c8:ce:78:b3:36:07:d2:3a:7e:53:f6:b0: 49:c1:ca:19:9e:c5:d9:ff:60:92:9d:05:e6:fc:e4:7a:a0:ce: a8:d7:45:a4:23:67:39:17:24:a8:d0:e7:3c:63:de:f5:55:eb: 0e:b3:57:a8:21:64:91:9a:bf:bf:0d:be:81:7a:7e:24:59:85: 64:74:0f:e5 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEu6EFU0QUyHz6O88+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk ZjU1Nzg1OWMtOGY1OC00ZDkwLTgxYjEtYTlkMDY3MTkyYjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpe7s5Vc8zCACetgDscVG2wy8JXOkZI+kZQ2 GUHdNGCKax4G/YTJMnH//V0bmXVb0vdFrds/UWdcFs45X2JZpgDZkFvVWfVDmPt7 gyYQOsJTmj+HKTnEaBdYkb66BD8uoekf2TCWzh2KFVm5Pq1PzUidmJ3dJ4drbFCz jLew3MCic+bPt2zr3eKwqFiHIQRphxK9Q0tx71QPxjEVDZcf7XYOhaBCG5Q+e4A9 5AYKbEr0InVw3zjPEWZn9iix6wuLfGZJVTk5dbMxxuup2a2qWeRXdiRV36aEq2zG mmt0jSiANk0KycQK2sKsv06tJG5MLDjYe0bxad4xnmfPBdjfzwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFF50Ioqy1qQrGhpKRn/SUWwpERfLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWM0Y2UwMzgtYWRiMC0z NDBkLTk5MWEtMTdiM2U2OTgxNjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAAw6lIxWHafQbJPWuhiHlXRrFF8CGBaRY+qLCJ m7cYFQ4uc+6qELCubtsacO131y9TbPpkZx6LHnS2R56YvOaSn1AgN7nCFgongXuo piQzobb1G5pGr0v7wY6ObUWxAv2hD8HUX0qyLrt/3GPfsxlDunbev7QmHrYPZfRx GVt85TEU3TLd1IXgTknp2olIF/7YZEihmq8Ehyyv1ZCK4Qjwx1DzTubfuTngEbtP upM/ELuyMVs0xGOrbMvIznizNgfSOn5T9rBJwcoZnsXZ/2CSnQXm/OR6oM6o10Wk I2c5FySo0Oc8Y971VesOs1eoIWSRmr+/Db6Ben4kWYVkdA/l -----END CERTIFICATE-----Generated at Wed Nov 5 02:49:32 2025 by rpki-client