$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ed2feb91-c0f3-3f43-949a-6201028bcf66.roa File: ed2feb91-c0f3-3f43-949a-6201028bcf66.roa (raw, json) Hash identifier: woI4UBHQDtVtI4gjwsfDcSM9s1TZE8mLYLrE32On/Zw= Subject key identifier: 0E:A9:AC:A8:0E:67:02:B7:45:70:6B:01:FF:83:58:FD:6B:1E:2F:10 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584BBA10556DBD34AA746BD4B480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ed2feb91-c0f3-3f43-949a-6201028bcf66.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 32651 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:55:6d:bd:34:aa:74:6b:d4:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=ccd64258-aa78-4d89-84d5-1cdf68d98d99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5f:42:29:0d:05:01:e1:23:40:0d:ab:f6:20: 9a:e5:3b:02:51:dc:02:fb:51:94:a4:2e:5f:e1:d8: ab:17:fa:8a:74:dd:b9:39:f6:2b:90:00:c7:c5:49: 0c:80:0c:1a:b7:f3:35:f4:b9:4a:28:fc:29:85:bf: b3:ea:64:5a:e6:ee:0a:3a:42:29:05:79:72:6c:79: 43:d7:d1:f1:a1:64:db:44:c2:98:48:db:0d:50:6d: ff:b7:79:75:1f:bd:99:e6:5b:00:9b:85:f4:f7:7b: 7d:f3:2f:b4:33:c0:28:d6:cd:ba:e6:85:6a:df:94: 4d:cc:05:1d:95:00:3a:46:fe:c0:c4:b5:ce:38:9d: 09:d6:40:b5:e9:54:64:da:a0:13:6e:ae:75:d6:84: ea:f3:9c:4f:65:58:30:87:2e:34:45:ba:0f:9b:63: f5:33:f7:25:73:7d:f0:73:2f:e0:8d:44:e4:75:60: 1c:3f:b6:0c:c1:58:3f:eb:14:98:32:24:f6:c9:79: 82:d5:77:9f:8a:e6:38:91:9e:9c:45:d0:67:e2:bc: 91:b1:72:ee:4d:42:86:94:7b:ad:46:9a:67:57:e8: b4:57:72:f6:9a:eb:58:5a:f5:55:56:18:29:fa:fe: d2:18:f8:b7:99:9e:4d:d2:a9:23:8e:7e:aa:01:9d: e0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:A9:AC:A8:0E:67:02:B7:45:70:6B:01:FF:83:58:FD:6B:1E:2F:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ed2feb91-c0f3-3f43-949a-6201028bcf66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:ad:86:2f:ea:7c:cd:af:b0:10:1a:8d:27:15:7c:86:b9:95: 33:e8:23:c7:d2:98:c0:b8:fa:a0:35:e8:ce:02:8a:35:23:6e: 18:26:a6:2a:40:15:22:15:86:3e:87:23:a9:a9:80:df:4f:e7: ab:7b:41:9b:44:7b:17:5c:0c:d4:85:a5:49:e0:17:38:a8:f2: d4:eb:0d:ab:18:ca:5f:01:9c:da:26:6d:30:1f:ba:a8:49:66: e8:fa:5e:c1:62:af:58:dc:23:d1:b0:d0:d9:29:0f:97:6f:67: f1:99:3e:d7:77:04:41:c9:8a:60:a9:2d:91:7e:41:b5:69:2f: 27:97:97:37:f8:d2:88:47:55:a5:96:70:8c:f6:5f:47:25:0d: 57:8b:9c:d1:4b:b6:24:79:b2:dd:fd:cf:44:43:aa:78:9a:f1: bb:04:d4:31:ec:bc:a3:91:e6:12:b5:cd:44:ab:9b:20:bc:d4: d5:16:3b:30:9d:05:28:6a:b3:b3:6a:6e:d7:3c:51:a9:b1:9e: 61:07:13:44:88:08:a5:33:70:dd:b8:bf:ad:fe:a3:0e:d2:95: f4:39:f0:80:f1:b2:ae:de:0b:ed:df:bb:d5:12:63:15:b7:f8: e6:5d:49:29:e3:89:4b:7e:da:17:d7:ea:2e:5c:d5:6b:99:36: 90:c2:b5:0c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEu6EFVtvTSqdGvUtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk Y2NkNjQyNTgtYWE3OC00ZDg5LTg0ZDUtMWNkZjY4ZDk4ZDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp19CKQ0FAeEjQA2r9iCa5TsCUdwC+1GUpC5f 4dirF/qKdN25OfYrkADHxUkMgAwat/M19LlKKPwphb+z6mRa5u4KOkIpBXlybHlD 19HxoWTbRMKYSNsNUG3/t3l1H72Z5lsAm4X093t98y+0M8Ao1s265oVq35RNzAUd lQA6Rv7AxLXOOJ0J1kC16VRk2qATbq511oTq85xPZVgwhy40RboPm2P1M/clc33w cy/gjUTkdWAcP7YMwVg/6xSYMiT2yXmC1XefiuY4kZ6cRdBn4ryRsXLuTUKGlHut RppnV+i0V3L2mutYWvVVVhgp+v7SGPi3mZ5N0qkjjn6qAZ3geQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFA6prKgOZwK3RXBrAf+DWP1rHi8QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWQyZmViOTEtYzBmMy0z ZjQzLTk0OWEtNjIwMTAyOGJjZjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA7rYYv6nzNr7AQGo0nFXyGuZUz6CPH0pjAuPqg NejOAoo1I24YJqYqQBUiFYY+hyOpqYDfT+ere0GbRHsXXAzUhaVJ4Bc4qPLU6w2r GMpfAZzaJm0wH7qoSWbo+l7BYq9Y3CPRsNDZKQ+Xb2fxmT7XdwRByYpgqS2RfkG1 aS8nl5c3+NKIR1WllnCM9l9HJQ1Xi5zRS7YkebLd/c9EQ6p4mvG7BNQx7LyjkeYS tc1Eq5sgvNTVFjswnQUoarOzam7XPFGpsZ5hBxNEiAilM3DduL+t/qMO0pX0OfCA 8bKu3gvt37vVEmMVt/jmXUkp44lLftoX1+ouXNVrmTaQwrUM -----END CERTIFICATE-----Generated at Wed Nov 5 07:02:02 2025 by rpki-client