$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/231608ca-bfd3-3766-b075-f7c10774c6cd.roa File: 231608ca-bfd3-3766-b075-f7c10774c6cd.roa (raw, json) Hash identifier: vZHFk3UL5v/R0qYiRrL7XlIxeOr1SkB8bG/1H/giGXw= Subject key identifier: 52:6D:AB:05:16:B9:AF:51:E1:00:3D:BA:CC:98:72:6F:15:78:37:2C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B715CDA6E3FA62B47657FBED8 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/231608ca-bfd3-3766-b075-f7c10774c6cd.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 396614 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:da:6e:3f:a6:2b:47:65:7f:be:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=a951bc7c-7c24-45da-9461-fb925e269062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:33:6a:50:cb:54:34:48:0b:40:92:df:06:f0: 79:b9:73:ef:83:c8:49:30:1c:e3:5f:22:55:be:b2: 24:57:af:ef:09:07:69:b9:5e:5a:de:12:92:25:41: b4:af:99:18:d5:62:3c:17:a5:d2:ae:ff:12:10:aa: 91:45:1d:cb:c6:90:33:07:f0:0c:91:21:be:29:4f: 6c:c1:dd:bc:21:96:1d:5b:20:3f:af:e2:f5:59:82: 36:4d:a5:2c:b3:b0:f8:c9:5f:a9:43:d2:d6:94:05: 5f:5f:e5:c0:c8:e2:fd:09:d4:3a:a7:67:88:73:d1: af:ce:c1:e1:80:4d:bc:6f:f1:64:aa:65:b1:bf:01: 5f:6a:7b:ab:7a:99:56:37:40:d9:21:d7:5f:2a:33: ba:5e:16:d3:3a:24:8a:54:2a:39:14:16:11:5e:65: f3:23:d5:56:ab:d6:d3:e5:69:7a:42:d2:04:13:7b: 00:37:b6:08:6e:82:08:3c:10:bf:22:2f:93:90:d9: a1:16:32:a2:ff:be:8c:e6:1d:cf:c8:61:78:c1:98: 0c:63:14:20:a9:f6:1a:85:e1:64:a5:25:ce:a3:4f: e5:94:46:c0:ae:12:84:81:9d:14:22:c1:db:33:cf: fb:a1:ac:93:03:40:0d:b3:37:94:3a:60:bc:ff:73: 80:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:6D:AB:05:16:B9:AF:51:E1:00:3D:BA:CC:98:72:6F:15:78:37:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/231608ca-bfd3-3766-b075-f7c10774c6cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:4f:95:f3:7b:2f:68:d4:36:4f:d9:fe:51:c4:19:63:d1:97: ec:06:1e:9f:49:ba:ed:d2:64:16:0e:38:b6:72:b1:55:6c:d0: 94:1f:47:15:92:16:75:36:36:1f:2e:f2:21:b0:ad:a6:72:71: 84:6a:41:98:4e:31:fc:53:9c:7c:7b:d6:ba:da:f5:82:d3:ca: 31:5c:15:de:36:13:f0:47:30:87:3b:2a:9a:52:6f:00:5a:a2: d3:f7:cd:77:1a:b8:9b:d5:10:71:33:7e:5e:31:02:ce:f1:bb: e8:07:76:7b:e9:49:f7:d9:bc:f9:80:26:df:aa:6f:1a:61:d7: 61:17:e3:a1:fe:59:72:a2:3c:dc:03:93:8d:2f:a4:3b:a9:63: 87:ed:12:e5:55:b4:9d:84:67:be:6e:3d:8c:3d:40:f4:b1:5b: a3:b1:63:5c:1b:2a:f3:41:60:44:65:b6:e4:b4:a6:39:4b:83: d1:64:9c:88:56:09:0e:50:ce:ac:4d:0c:63:64:9b:ca:76:2a: f9:1d:70:35:9e:78:ae:57:83:ae:0e:2d:d6:23:a0:e4:b7:64: f7:ba:7a:5a:f3:ad:90:af:e7:a9:b5:db:cc:fd:35:9f:b5:48: c1:ea:cd:14:19:76:0a:21:a2:04:3a:60:25:00:2c:33:01:43: b5:b4:0a:db -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtxXNpuP6YrR2V/vtgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YTk1MWJjN2MtN2MyNC00NWRhLTk0NjEtZmI5MjVlMjY5MDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijNqUMtUNEgLQJLfBvB5uXPvg8hJMBzjXyJV vrIkV6/vCQdpuV5a3hKSJUG0r5kY1WI8F6XSrv8SEKqRRR3LxpAzB/AMkSG+KU9s wd28IZYdWyA/r+L1WYI2TaUss7D4yV+pQ9LWlAVfX+XAyOL9CdQ6p2eIc9GvzsHh gE28b/FkqmWxvwFfanureplWN0DZIddfKjO6XhbTOiSKVCo5FBYRXmXzI9VWq9bT 5Wl6QtIEE3sAN7YIboIIPBC/Ii+TkNmhFjKi/76M5h3PyGF4wZgMYxQgqfYaheFk pSXOo0/llEbArhKEgZ0UIsHbM8/7oayTA0ANszeUOmC8/3OAkwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFJtqwUWua9R4QA9usyYcm8VeDcsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjMxNjA4Y2EtYmZkMy0z NzY2LWIwNzUtZjdjMTA3NzRjNmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAgT5Xzey9o1DZP2f5RxBlj0ZfsBh6fSbrt0mQW Dji2crFVbNCUH0cVkhZ1NjYfLvIhsK2mcnGEakGYTjH8U5x8e9a62vWC08oxXBXe NhPwRzCHOyqaUm8AWqLT9813Grib1RBxM35eMQLO8bvoB3Z76Un32bz5gCbfqm8a YddhF+Oh/llyojzcA5ONL6Q7qWOH7RLlVbSdhGe+bj2MPUD0sVujsWNcGyrzQWBE ZbbktKY5S4PRZJyIVgkOUM6sTQxjZJvKdir5HXA1nniuV4OuDi3WI6Dkt2T3unpa 862Qr+eptdvM/TWftUjB6s0UGXYKIaIEOmAlACwzAUO1tArb -----END CERTIFICATE-----Generated at Mon Oct 20 16:15:35 2025 by rpki-client