$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5bda4689-f4ea-320e-9a49-0aa2f182128b.roa File: 5bda4689-f4ea-320e-9a49-0aa2f182128b.roa (raw, json) Hash identifier: ermcD+q0y4XHDUUdR8Dn55cuQomWOE9stoyfOPNpRKE= Subject key identifier: 5B:D1:D9:23:57:54:E4:F7:44:6D:BD:2E:8C:C1:FD:B2:31:AD:7A:2A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B3556FE729006F6E9E0634080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5bda4689-f4ea-320e-9a49-0aa2f182128b.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 396581 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:fe:72:90:06:f6:e9:e0:63:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=4d740f0a-394f-4261-82be-09e9b6189bff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1e:50:b1:6b:a3:4c:a1:c1:73:29:f8:f2:5b: 28:9c:89:4e:69:bd:52:11:c9:5b:66:da:92:c3:b3: 48:94:cf:08:a9:5e:a4:13:c3:d2:5b:ab:f9:83:9d: 08:f5:9b:33:6c:3a:a3:bc:0c:0a:16:f2:3e:57:4e: 33:32:2c:6a:a3:b7:9d:73:4f:67:b9:14:17:ec:3e: f6:3b:88:bf:6e:b5:d1:92:bd:4a:88:b3:de:76:82: f2:35:c9:65:f6:00:19:5e:d9:03:07:eb:42:a5:a2: 23:8a:45:49:be:d5:97:ac:2a:10:30:18:5f:8d:f2: bb:1a:0b:07:2f:fb:f0:85:23:4a:d0:a8:0f:26:67: 59:a4:e7:25:e7:dd:de:64:43:6c:68:6c:23:80:fa: 9c:99:63:de:bc:17:77:64:18:e0:d3:da:4e:31:24: 9a:2d:cd:5a:69:12:8d:27:a3:c1:96:0a:3d:ae:66: 3a:fd:bc:30:7f:88:ab:2d:59:e9:15:de:0b:d3:2e: bf:7a:84:84:3d:1e:b8:7f:aa:65:8c:82:2c:61:cd: c4:59:46:aa:b2:2b:dc:83:c5:7e:b9:a7:3f:d4:4f: 17:fc:4b:7b:46:2d:5e:fe:6b:d0:ce:c1:b3:94:26: 6c:b1:21:c7:98:87:6c:67:d5:5d:51:49:79:59:c2: e1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D1:D9:23:57:54:E4:F7:44:6D:BD:2E:8C:C1:FD:B2:31:AD:7A:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5bda4689-f4ea-320e-9a49-0aa2f182128b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:90:4f:bc:b1:5b:f5:0a:96:94:c4:c1:03:dd:26:e6:5f:a8: 2a:ac:43:dc:15:24:58:95:65:da:fb:fe:64:c7:15:f7:cd:0e: 28:43:7f:e8:21:1f:81:24:55:2b:83:bb:a2:89:cd:df:4b:c0: f1:4e:ff:75:f3:80:d8:a9:e8:a8:91:91:ad:0e:a2:de:09:b0: bc:b5:c7:22:85:2a:b8:5b:60:b4:58:30:6c:2b:cd:fe:54:76: b2:ed:da:fa:ab:05:68:17:ac:3a:3b:aa:2c:11:9f:06:19:aa: 6c:47:9c:39:05:22:50:37:e4:a6:23:58:5c:28:d5:7a:40:98: 11:bf:c2:7b:f7:64:cb:98:a3:77:73:e4:8c:55:21:b6:c5:e3: 84:39:08:7d:d4:86:52:0d:76:09:43:17:bc:bf:35:cd:06:95: 64:82:13:ad:6b:1f:e7:fa:d3:d5:25:e5:70:7c:6a:6e:bd:d0: 71:1b:5c:37:c5:84:45:76:9d:d1:89:86:84:f0:0d:d1:a0:2b: fa:4f:b9:8d:23:c6:25:a6:98:89:1a:43:a8:9a:d0:32:a7:50: 5b:65:7a:40:3b:53:2a:fb:5b:77:77:22:e9:04:17:0d:6d:b1: 58:26:36:00:c6:1d:f1:cd:a7:5e:ab:aa:c5:a2:c9:c9:5a:27: 8d:6c:47:71 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEs1Vv5ykAb26eBjQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk NGQ3NDBmMGEtMzk0Zi00MjYxLTgyYmUtMDllOWI2MTg5YmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtB5QsWujTKHBcyn48lsonIlOab1SEclbZtqS w7NIlM8IqV6kE8PSW6v5g50I9ZszbDqjvAwKFvI+V04zMixqo7edc09nuRQX7D72 O4i/brXRkr1KiLPedoLyNcll9gAZXtkDB+tCpaIjikVJvtWXrCoQMBhfjfK7GgsH L/vwhSNK0KgPJmdZpOcl593eZENsaGwjgPqcmWPevBd3ZBjg09pOMSSaLc1aaRKN J6PBlgo9rmY6/bwwf4irLVnpFd4L0y6/eoSEPR64f6pljIIsYc3EWUaqsivcg8V+ uac/1E8X/Et7Ri1e/mvQzsGzlCZssSHHmIdsZ9VdUUl5WcLhiQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFvR2SNXVOT3RG29LozB/bIxrXoqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWJkYTQ2ODktZjRlYS0z MjBlLTlhNDktMGFhMmYxODIxMjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAWkE+8sVv1CpaUxMED3SbmX6gqrEPcFSRYlWXa +/5kxxX3zQ4oQ3/oIR+BJFUrg7uiic3fS8DxTv9184DYqeiokZGtDqLeCbC8tcci hSq4W2C0WDBsK83+VHay7dr6qwVoF6w6O6osEZ8GGapsR5w5BSJQN+SmI1hcKNV6 QJgRv8J792TLmKN3c+SMVSG2xeOEOQh91IZSDXYJQxe8vzXNBpVkghOtax/n+tPV JeVwfGpuvdBxG1w3xYRFdp3RiYaE8A3RoCv6T7mNI8YlppiJGkOomtAyp1BbZXpA O1Mq+1t3dyLpBBcNbbFYJjYAxh3xzadeq6rFosnJWieNbEdx -----END CERTIFICATE-----Generated at Mon Oct 20 08:25:10 2025 by rpki-client