$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f4b1591f-22a8-3f20-bd40-3ee18f89e78b.roa File: f4b1591f-22a8-3f20-bd40-3ee18f89e78b.roa (raw, json) Hash identifier: G13wk79bDiqQYupz+lMXSuJROd787rSIoTWlhlx7pRU= Subject key identifier: 18:52:39:56:41:8A:D4:45:EA:B6:7B:09:86:A0:67:07:F4:7E:5D:12 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584BBA1050100F844ADB59F05880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f4b1591f-22a8-3f20-bd40-3ee18f89e78b.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 36621 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:50:10:0f:84:4a:db:59:f0:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=df5ebb95-dfe5-469e-ae64-40217e5eeb20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5f:c8:06:2a:f6:80:46:18:a4:59:57:38:c3: 0f:aa:10:37:aa:e2:49:c4:bd:67:df:54:84:f8:eb: 01:09:76:65:55:3e:62:98:93:86:95:4a:d0:75:bd: 33:df:b1:e9:31:c3:72:cb:10:83:b6:d4:86:23:8b: 7c:21:1c:d5:d3:3c:b4:8d:95:34:d6:7c:06:7e:88: 12:06:ae:7f:73:d8:12:06:97:05:04:ea:fc:d6:9d: 1c:67:fa:03:15:b5:16:7e:20:6a:7e:b1:c3:d7:2c: df:0c:1b:21:80:e3:1c:fe:da:85:5c:24:a5:aa:ab: 54:d6:c4:e4:ad:47:27:6f:47:64:81:74:45:b1:ac: 71:00:5a:59:f9:6a:b4:7c:b0:e8:e6:d9:00:43:02: c1:66:af:63:8a:8c:ea:41:fa:5f:30:e7:7f:30:78: 6c:70:d1:55:2d:1a:fd:d7:f2:ba:cd:18:d9:26:64: 8c:c4:f2:95:a9:69:54:1e:77:51:a8:d5:e4:74:52: a2:9b:a3:e7:46:11:f9:98:5e:26:4b:db:8c:40:35: 1d:1c:ae:c9:ed:12:36:17:64:f2:ae:fe:c8:18:5a: 20:fc:89:4d:96:5c:99:18:86:51:78:7b:08:c3:16: 17:73:22:84:4e:39:44:ba:f0:b3:36:2e:98:2e:b1: 54:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:52:39:56:41:8A:D4:45:EA:B6:7B:09:86:A0:67:07:F4:7E:5D:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f4b1591f-22a8-3f20-bd40-3ee18f89e78b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:b5:eb:d1:6d:99:31:7f:08:86:e2:b9:b5:44:09:3d:7e:d4: 6d:2e:35:95:61:5d:60:41:03:7f:3f:02:60:aa:77:47:9c:e3: db:de:3e:db:89:2c:0a:2e:48:2c:f9:5f:aa:c2:83:11:9b:03: f0:24:be:91:5f:02:4d:bf:22:7c:39:dc:22:f1:a6:8f:a0:a8: 10:d5:50:bf:68:ce:2a:87:d3:b5:ed:05:9c:ae:e3:99:88:20: 6b:2f:4a:b2:77:fb:08:3a:2e:94:d2:74:00:cd:42:0a:a3:43: 31:96:cc:f9:c3:be:8c:30:e0:89:1e:88:43:0f:80:15:2b:fe: 29:cc:13:65:e0:20:26:27:cb:41:bb:7f:e5:fa:52:d3:77:b1: 67:98:6a:48:aa:1f:c9:6c:f9:03:8e:e4:49:ca:7f:77:7b:b9: 52:50:2d:ab:ff:41:10:72:aa:a5:0f:88:51:25:20:ba:9e:e0: 7a:da:0c:02:27:70:a5:b5:da:21:84:b4:e8:3f:c2:16:7e:bb: 26:76:51:0c:13:39:81:a9:3b:fa:c3:75:52:60:91:80:eb:42: d3:d1:96:73:22:2a:00:73:7e:11:12:e5:72:f8:bd:c3:aa:42: eb:28:82:04:85:32:49:ca:c2:9c:63:5f:63:67:e9:10:45:ad: 31:fd:58:d2 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEu6EFAQD4RK21nwWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk ZGY1ZWJiOTUtZGZlNS00NjllLWFlNjQtNDAyMTdlNWVlYjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1/IBir2gEYYpFlXOMMPqhA3quJJxL1n31SE +OsBCXZlVT5imJOGlUrQdb0z37HpMcNyyxCDttSGI4t8IRzV0zy0jZU01nwGfogS Bq5/c9gSBpcFBOr81p0cZ/oDFbUWfiBqfrHD1yzfDBshgOMc/tqFXCSlqqtU1sTk rUcnb0dkgXRFsaxxAFpZ+Wq0fLDo5tkAQwLBZq9jiozqQfpfMOd/MHhscNFVLRr9 1/K6zRjZJmSMxPKVqWlUHndRqNXkdFKim6PnRhH5mF4mS9uMQDUdHK7J7RI2F2Ty rv7IGFog/IlNllyZGIZReHsIwxYXcyKETjlEuvCzNi6YLrFUYwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBhSOVZBitRF6rZ7CYagZwf0fl0SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjRiMTU5MWYtMjJhOC0z ZjIwLWJkNDAtM2VlMThmODllNzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBUtevRbZkxfwiG4rm1RAk9ftRtLjWVYV1gQQN/ PwJgqndHnOPb3j7biSwKLkgs+V+qwoMRmwPwJL6RXwJNvyJ8Odwi8aaPoKgQ1VC/ aM4qh9O17QWcruOZiCBrL0qyd/sIOi6U0nQAzUIKo0Mxlsz5w76MMOCJHohDD4AV K/4pzBNl4CAmJ8tBu3/l+lLTd7FnmGpIqh/JbPkDjuRJyn93e7lSUC2r/0EQcqql D4hRJSC6nuB62gwCJ3CltdohhLToP8IWfrsmdlEMEzmBqTv6w3VSYJGA60LT0ZZz IioAc34REuVy+L3DqkLrKIIEhTJJysKcY19jZ+kQRa0x/VjS -----END CERTIFICATE-----Generated at Wed Nov 5 00:50:54 2025 by rpki-client