$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a1f5a5e-6e2d-3d6a-a9d3-5d0ed67e6b3d.roa File: 1a1f5a5e-6e2d-3d6a-a9d3-5d0ed67e6b3d.roa (raw, json) Hash identifier: gR4qvod8NB1VqGWUpNcN/PiVzH6dz2/NxhYx+y+nWQ4= Subject key identifier: E8:BB:F5:59:7F:09:F3:A9:4B:27:E4:A4:FB:7C:41:41:F6:F5:08:2F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B715CE5E28446B543537AA480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a1f5a5e-6e2d-3d6a-a9d3-5d0ed67e6b3d.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 396551 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:e5:e2:84:46:b5:43:53:7a:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=eaa8d4e5-bd0e-45fb-800e-9eeef1c64bfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:a4:27:76:0e:cb:09:4f:f8:00:4c:50:55:3d: b3:53:68:4a:0a:6d:a9:94:4b:fe:82:43:72:ea:0e: 20:36:eb:59:ae:76:e0:74:91:01:d9:04:4c:21:0f: 57:c9:87:aa:0f:32:76:f6:4f:ea:3c:e0:70:c1:94: 13:0f:ac:41:7b:3e:cb:b5:b1:b2:7f:59:31:c9:b4: 00:f9:c8:ab:c0:09:92:a8:d4:4b:a9:41:5b:d5:9e: a1:47:42:9b:71:0a:c0:47:ff:d1:bf:48:3d:55:1b: 25:87:3e:d6:c7:29:af:3f:14:77:a1:2a:c7:04:bb: 36:54:17:b0:72:10:f4:1a:9d:2b:13:17:16:b0:78: 68:4d:a4:fd:aa:01:a3:90:39:84:bd:d6:ee:49:2c: 44:44:9a:5e:77:13:fe:22:7e:e8:d6:71:0b:b5:73: 96:cf:3c:ea:bb:00:69:fc:8c:ae:16:74:04:94:1a: ae:1d:b9:a7:0c:dc:9a:58:0c:52:29:60:60:ee:b9: f9:b9:4f:2a:59:f4:4c:b1:13:52:74:7a:f9:2c:d1: 5e:5a:6f:fc:9d:4f:25:24:99:63:6b:ee:d5:03:10: a5:ea:40:04:80:ac:b4:ec:12:f7:83:2b:67:6b:0d: c3:3f:3e:11:b8:24:37:0c:31:ea:d9:94:d0:c5:04: b8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:BB:F5:59:7F:09:F3:A9:4B:27:E4:A4:FB:7C:41:41:F6:F5:08:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a1f5a5e-6e2d-3d6a-a9d3-5d0ed67e6b3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:2d:23:9e:48:b0:ce:d0:40:26:fa:a6:cb:cc:1f:d4:11:38: 90:12:3a:9f:77:08:79:95:18:c3:44:a8:ce:d9:5e:9d:77:be: cf:e0:9c:99:6f:2b:a6:35:54:29:d4:10:63:ed:f9:df:4d:f6: d8:e2:fd:e3:19:e3:05:ec:eb:9a:8c:83:b9:d0:59:49:de:ca: 07:bb:93:d5:bf:b0:10:6b:86:8f:3d:8e:39:56:bd:1f:8f:9e: f4:41:09:1c:f2:b8:57:86:e8:f3:db:d6:9a:36:65:3f:93:e2: 03:b8:05:e3:15:8e:e7:87:51:0d:a5:00:86:c7:32:19:53:0b: b8:d6:7e:ee:88:dd:40:62:ac:41:cc:e4:57:af:94:e9:45:cf: c6:45:15:8a:1d:1f:3d:b6:c1:bb:f5:33:f3:83:2d:2a:83:00: d3:07:29:47:6f:3f:88:1a:86:04:02:47:40:d4:af:ac:7f:56: 38:af:4d:91:b4:63:4c:a0:cb:cb:87:18:64:1f:b0:04:05:da: 91:37:5a:c6:6a:a3:b7:61:65:68:77:da:b3:b2:00:06:8b:96: ac:06:84:b7:2a:dd:4c:4a:6f:d8:f6:b9:c1:a0:50:4d:1a:c5: 4a:5b:3b:30:e4:34:fc:c9:48:7f:18:60:c6:7b:92:12:3c:ef: e4:aa:12:f8 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtxXOXihEa1Q1N6pIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ZWFhOGQ0ZTUtYmQwZS00NWZiLTgwMGUtOWVlZWYxYzY0YmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA76Qndg7LCU/4AExQVT2zU2hKCm2plEv+gkNy 6g4gNutZrnbgdJEB2QRMIQ9XyYeqDzJ29k/qPOBwwZQTD6xBez7LtbGyf1kxybQA +cirwAmSqNRLqUFb1Z6hR0KbcQrAR//Rv0g9VRslhz7WxymvPxR3oSrHBLs2VBew chD0Gp0rExcWsHhoTaT9qgGjkDmEvdbuSSxERJpedxP+In7o1nELtXOWzzzquwBp /IyuFnQElBquHbmnDNyaWAxSKWBg7rn5uU8qWfRMsRNSdHr5LNFeWm/8nU8lJJlj a+7VAxCl6kAEgKy07BL3gytnaw3DPz4RuCQ3DDHq2ZTQxQS4DQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOi79Vl/CfOpSyfkpPt8QUH29QgvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWExZjVhNWUtNmUyZC0z ZDZhLWE5ZDMtNWQwZWQ2N2U2YjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBrLSOeSLDO0EAm+qbLzB/UETiQEjqfdwh5lRjD RKjO2V6dd77P4JyZbyumNVQp1BBj7fnfTfbY4v3jGeMF7OuajIO50FlJ3soHu5PV v7AQa4aPPY45Vr0fj570QQkc8rhXhujz29aaNmU/k+IDuAXjFY7nh1ENpQCGxzIZ Uwu41n7uiN1AYqxBzORXr5TpRc/GRRWKHR89tsG79TPzgy0qgwDTBylHbz+IGoYE AkdA1K+sf1Y4r02RtGNMoMvLhxhkH7AEBdqRN1rGaqO3YWVod9qzsgAGi5asBoS3 Kt1MSm/Y9rnBoFBNGsVKWzsw5DT8yUh/GGDGe5ISPO/kqhL4 -----END CERTIFICATE-----Generated at Mon Oct 20 08:17:18 2025 by rpki-client