$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f0eb857-0e4e-395a-98f9-d3ec8ea03608.roa File: 0f0eb857-0e4e-395a-98f9-d3ec8ea03608.roa (raw, json) Hash identifier: Se1NAmhmhdIXTUwxfo5mGD05uLL36svhkEkVXcGFPCY= Subject key identifier: 8D:AB:94:64:0E:3C:C7:D7:30:94:76:4C:FC:05:42:CC:5C:E6:8F:2D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E79013B4D5E3A87A4086E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f0eb857-0e4e-395a-98f9-d3ec8ea03608.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 396549 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:90:13:b4:d5:e3:a8:7a:40:86:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=ca27d03d-dce5-4eb0-bb24-f0c7e6a5be2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:dd:a2:a4:98:ed:2f:3d:72:33:0a:4c:a8:7f: 48:d8:53:c2:48:f1:d4:d3:f3:f2:8b:cf:43:93:c0: 10:98:d8:85:5f:7d:25:97:ed:4f:ff:aa:a8:0b:e1: b5:a9:ca:1d:9e:bd:24:bb:9a:97:39:d1:2e:03:f2: a9:96:c5:e4:39:61:3e:35:2c:2a:68:e9:5c:cf:17: 48:b9:f0:80:14:a2:b7:a9:c4:dd:63:f7:63:95:35: ed:1a:c4:45:96:a5:46:93:d6:b0:3a:63:a6:b2:a2: f2:44:6f:5b:6f:27:c6:c7:ca:fa:6a:00:89:12:aa: 7a:8e:b9:03:dd:0a:8e:84:15:7c:17:42:1d:f8:50: 29:78:cb:2e:75:c9:25:68:be:7d:58:2e:c0:41:c6: 8b:52:81:ad:45:b3:be:5d:fb:89:81:d7:22:af:1d: eb:2c:57:23:d5:32:4f:ac:89:ed:9c:8b:22:ed:f9: 17:21:68:75:d4:ef:fd:62:ee:c7:32:84:9f:12:c9: c5:19:ac:7e:6a:0b:9f:46:46:c2:a9:a8:fc:5b:80: 45:fb:11:88:3d:9e:a5:86:ed:10:a4:9f:1a:6b:9b: fb:43:ed:12:29:3c:26:2d:cc:ab:95:b7:1e:12:3b: d5:4f:74:d7:17:0d:f2:c2:b1:91:04:e2:4d:54:e2: ef:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:AB:94:64:0E:3C:C7:D7:30:94:76:4C:FC:05:42:CC:5C:E6:8F:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f0eb857-0e4e-395a-98f9-d3ec8ea03608.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:22:48:ea:f1:b7:ed:a4:b0:71:80:b8:7a:aa:c8:b2:32:23: 3e:c7:2f:a8:37:55:c6:22:8f:b9:93:03:a7:25:1b:2d:b3:08: 00:0f:10:4d:08:eb:51:39:96:6b:1e:22:ef:30:09:2f:0c:36: d7:13:84:8a:3b:38:ee:3e:42:69:5c:44:74:6d:cf:df:68:92: c2:82:64:2f:c1:2b:47:2c:fc:08:dc:c8:d4:90:12:7c:7d:56: cd:ba:a0:6c:34:a1:77:76:d3:06:59:e8:48:6f:3b:b3:59:04: d3:17:f3:07:1e:c6:91:b8:b6:cd:9b:fc:19:e6:e5:03:3b:85: 38:c3:8a:d7:5b:e4:e9:9b:5a:9c:57:8b:ea:12:e1:4f:39:64: 31:c8:54:da:8e:cd:10:14:96:19:26:8f:1a:d9:d3:22:94:9d: 06:8c:4c:55:5d:30:f2:55:75:81:27:f4:55:f7:92:62:81:16: 26:9e:c9:a7:0a:38:0d:ce:f1:bd:c6:89:38:cf:90:33:4d:b3: 84:f7:ec:b4:c2:9c:df:33:26:a3:04:e1:52:4c:b6:cb:32:cf: 22:73:eb:b8:88:39:f7:69:e9:a7:55:7c:36:24:87:2a:b3:2e: 2e:4e:fd:dc:ce:e3:fa:85:09:87:97:70:98:d8:05:46:d8:18: c2:47:f6:5c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE55ATtNXjqHpAhuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk Y2EyN2QwM2QtZGNlNS00ZWIwLWJiMjQtZjBjN2U2YTViZTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp92ipJjtLz1yMwpMqH9I2FPCSPHU0/Pyi89D k8AQmNiFX30ll+1P/6qoC+G1qcodnr0ku5qXOdEuA/KplsXkOWE+NSwqaOlczxdI ufCAFKK3qcTdY/djlTXtGsRFlqVGk9awOmOmsqLyRG9bbyfGx8r6agCJEqp6jrkD 3QqOhBV8F0Id+FApeMsudcklaL59WC7AQcaLUoGtRbO+XfuJgdcirx3rLFcj1TJP rIntnIsi7fkXIWh11O/9Yu7HMoSfEsnFGax+agufRkbCqaj8W4BF+xGIPZ6lhu0Q pJ8aa5v7Q+0SKTwmLcyrlbceEjvVT3TXFw3ywrGRBOJNVOLvIwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFI2rlGQOPMfXMJR2TPwFQsxc5o8tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGYwZWI4NTctMGU0ZS0z OTVhLTk4ZjktZDNlYzhlYTAzNjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAIIkjq8bftpLBxgLh6qsiyMiM+xy+oN1XGIo+5 kwOnJRstswgADxBNCOtROZZrHiLvMAkvDDbXE4SKOzjuPkJpXER0bc/faJLCgmQv wStHLPwI3MjUkBJ8fVbNuqBsNKF3dtMGWehIbzuzWQTTF/MHHsaRuLbNm/wZ5uUD O4U4w4rXW+Tpm1qcV4vqEuFPOWQxyFTajs0QFJYZJo8a2dMilJ0GjExVXTDyVXWB J/RV95JigRYmnsmnCjgNzvG9xok4z5AzTbOE9+y0wpzfMyajBOFSTLbLMs8ic+u4 iDn3aemnVXw2JIcqsy4uTv3czuP6hQmHl3CY2AVG2BjCR/Zc -----END CERTIFICATE-----Generated at Mon Oct 20 08:14:07 2025 by rpki-client