$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/125825cb-4616-3038-8492-1ab7b635d97e.roa File: 125825cb-4616-3038-8492-1ab7b635d97e.roa (raw, json) Hash identifier: BwHbqVfl8Vnd3ntCgFikGv8zDVLgndM0IFUzEOtXn6g= Subject key identifier: 12:86:3C:9A:8D:8F:BB:F4:6C:C1:E5:CD:3F:05:4F:BC:64:88:BD:3C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E78BD447DF0B3136AF6700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/125825cb-4616-3038-8492-1ab7b635d97e.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 396587 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:8b:d4:47:df:0b:31:36:af:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=34278fd5-4452-4cd4-8506-42d24515907b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:59:89:b1:30:21:d3:5b:17:fd:0f:0d:60:c2: 2e:48:20:37:be:15:3d:15:17:ce:a7:1c:a1:2a:fb: 0a:6d:32:c3:94:81:b3:7a:3a:54:52:60:3d:6e:50: 2c:0a:fc:9c:ab:43:e4:aa:00:88:9d:d9:76:0f:08: e9:7b:fc:76:4a:b3:49:11:08:90:48:77:d7:8d:d5: 38:83:01:d3:47:47:21:c5:b2:68:39:a5:d8:71:ab: d9:5e:18:77:08:c4:83:d5:94:ff:02:87:1c:99:68: 09:c0:30:ce:df:d2:96:79:1f:16:6c:db:86:ab:c4: 01:a9:c1:10:35:f6:99:60:c6:c8:44:27:d0:6d:3d: ff:d4:7c:f9:b0:0a:b4:fc:4e:ee:3c:5f:ca:9b:f5: 80:ae:20:87:40:f1:75:24:74:9f:36:34:fa:e0:87: d1:fa:3b:dc:c7:ce:39:f1:91:ce:d8:ba:00:bc:e4: d9:3d:e3:f4:74:70:60:f7:76:32:ef:94:ce:7c:2d: 4a:e1:1e:58:5a:ef:36:62:1a:2e:fd:bb:87:04:14: 01:21:77:83:70:db:28:a6:16:b9:29:d5:b0:17:03: 5a:f0:9b:84:8f:8c:dd:e8:b2:c6:fe:21:51:27:96: b3:19:3c:46:2e:33:9f:cc:c8:fd:89:aa:5c:93:b1: 78:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:86:3C:9A:8D:8F:BB:F4:6C:C1:E5:CD:3F:05:4F:BC:64:88:BD:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/125825cb-4616-3038-8492-1ab7b635d97e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:42:a2:0b:03:09:60:32:15:5a:20:47:4b:63:75:23:39:a9: 46:f8:7a:2b:a4:05:10:e1:44:3e:e4:b5:ba:6a:b4:80:58:a3: bc:44:d5:f2:b5:3e:a0:c0:15:3b:3e:2b:af:e0:8d:89:21:04: 1f:29:59:37:61:d5:90:09:52:52:be:92:3f:ed:c0:c4:95:75: d5:2d:ac:e7:7a:9a:04:cb:28:88:77:d8:37:1e:3a:3e:6a:0f: 50:92:49:81:4a:87:69:4c:ce:13:ff:a6:fc:45:93:49:29:9b: e0:8e:30:fc:40:18:11:6f:a7:61:0b:28:92:a8:a3:5f:f2:38: 6a:c4:61:12:42:1c:2b:b4:cf:d8:e8:4c:b5:31:c5:85:6d:d7: 79:c7:0d:16:7c:d7:0c:8e:09:a3:10:11:9f:2b:fe:d2:47:7b: ef:44:6e:e6:ab:25:be:54:a4:2f:dc:b8:20:2c:3b:a5:c4:b8: 97:cf:f3:af:77:53:7a:6c:12:6c:1a:da:a0:67:72:c0:c4:b9: 45:d9:30:69:7f:65:20:e9:9e:f8:f1:29:5f:31:26:b8:61:ac: b7:6e:c4:b6:16:22:89:63:2e:d0:ae:fd:fe:52:60:7c:7b:73: 7d:e5:e7:ea:4a:90:7a:cd:a8:17:e4:b4:e9:4f:77:9d:fc:25: b3:a8:98:16 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE54vUR98LMTavZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk MzQyNzhmZDUtNDQ1Mi00Y2Q0LTg1MDYtNDJkMjQ1MTU5MDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlmJsTAh01sX/Q8NYMIuSCA3vhU9FRfOpxyh KvsKbTLDlIGzejpUUmA9blAsCvycq0PkqgCIndl2Dwjpe/x2SrNJEQiQSHfXjdU4 gwHTR0chxbJoOaXYcavZXhh3CMSD1ZT/AoccmWgJwDDO39KWeR8WbNuGq8QBqcEQ NfaZYMbIRCfQbT3/1Hz5sAq0/E7uPF/Km/WAriCHQPF1JHSfNjT64IfR+jvcx845 8ZHO2LoAvOTZPeP0dHBg93Yy75TOfC1K4R5YWu82Yhou/buHBBQBIXeDcNsopha5 KdWwFwNa8JuEj4zd6LLG/iFRJ5azGTxGLjOfzMj9iapck7F4pQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBKGPJqNj7v0bMHlzT8FT7xkiL08MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTI1ODI1Y2ItNDYxNi0z MDM4LTg0OTItMWFiN2I2MzVkOTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQACQqILAwlgMhVaIEdLY3UjOalG+HorpAUQ4UQ+ 5LW6arSAWKO8RNXytT6gwBU7Piuv4I2JIQQfKVk3YdWQCVJSvpI/7cDElXXVLazn epoEyyiId9g3Hjo+ag9QkkmBSodpTM4T/6b8RZNJKZvgjjD8QBgRb6dhCyiSqKNf 8jhqxGESQhwrtM/Y6Ey1McWFbdd5xw0WfNcMjgmjEBGfK/7SR3vvRG7mqyW+VKQv 3LggLDulxLiXz/Ovd1N6bBJsGtqgZ3LAxLlF2TBpf2Ug6Z748SlfMSa4Yay3bsS2 FiKJYy7Qrv3+UmB8e3N95efqSpB6zagX5LTpT3ed/CWzqJgW -----END CERTIFICATE-----Generated at Mon Oct 20 10:37:25 2025 by rpki-client