$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/65e15862-c70b-3149-97d3-6a70cd69bb23.roa File: 65e15862-c70b-3149-97d3-6a70cd69bb23.roa (raw, json) Hash identifier: vguhqlMkYRXSjZVs/iGTaG+Qstz/QAi/djKzmo1T4Us= Subject key identifier: C5:DB:6E:64:2C:86:2A:6D:6C:B6:86:A8:AA:0B:2B:08:0E:C5:52:F8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B715CE749E93639A832E7E1C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/65e15862-c70b-3149-97d3-6a70cd69bb23.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 396542 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:e7:49:e9:36:39:a8:32:e7:e1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=1a8374c5-937b-4cb2-9cd7-dd1ee3c24f12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:37:f2:be:ce:13:f7:9a:05:1c:0b:aa:a8:19: 44:6c:d6:aa:bd:c0:68:e9:5b:12:45:47:f4:dd:02: e2:67:36:b5:fd:df:d7:b1:ab:d0:fb:78:76:0f:bf: b4:71:f0:66:86:6b:ce:08:3c:ad:5e:af:85:5c:bf: ee:9b:41:c0:d9:6f:80:9f:79:aa:da:b2:5e:9c:28: 0f:f2:0b:84:28:1c:45:61:5f:ef:2f:04:12:ce:8c: f5:24:05:89:42:7a:64:1e:88:7a:ad:e4:2c:ee:f7: e6:00:d7:b5:c8:af:7c:d7:fe:40:f7:8a:e7:ca:6c: 80:5e:e9:d3:eb:32:33:00:4c:29:7d:14:8d:4c:8b: 9c:c2:17:dd:3a:49:63:a9:bd:3a:d2:7e:3e:24:08: 86:6f:ab:8b:7a:fe:02:2a:c1:22:17:10:55:7c:b7: 9a:09:23:87:a7:2d:78:d8:f7:18:57:ca:3c:1d:14: b2:72:62:13:f3:37:08:27:3b:fd:ff:24:00:14:af: 18:e5:04:30:be:52:9a:b5:ed:e1:0e:c8:e8:5e:ca: 74:ca:72:79:6d:cd:e8:48:ac:8c:82:ff:a6:bf:97: d1:cd:bc:9e:86:73:68:6f:37:6e:98:06:91:e1:e0: 37:23:5c:db:8b:76:61:f9:e9:48:05:e0:b5:c6:b7: 30:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:DB:6E:64:2C:86:2A:6D:6C:B6:86:A8:AA:0B:2B:08:0E:C5:52:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/65e15862-c70b-3149-97d3-6a70cd69bb23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:6d:d2:6f:eb:4f:5f:10:1c:9a:3f:77:a5:90:86:4d:03:37: 2f:27:93:0b:76:c5:34:55:37:77:87:16:82:af:e0:3c:52:f1: 37:fb:68:89:f5:07:cf:20:bc:7c:72:34:e3:3c:86:a1:8a:33: 11:b4:1a:96:16:83:aa:07:50:4d:2b:9f:79:16:51:ba:27:44: 92:28:b5:d0:ac:4a:08:cc:48:8b:40:ca:02:9c:5a:11:92:6a: e0:3b:7d:5f:77:cd:7a:ab:65:ad:2f:1e:67:0b:2f:44:3f:56: c4:c3:a8:1f:a2:48:7d:38:fb:3b:35:e7:2e:1f:34:dd:9b:7a: 89:89:a0:e4:e8:12:41:0e:34:77:0d:a4:58:ef:59:03:86:32: 3c:34:14:84:72:34:37:d8:f4:61:b5:54:59:4e:c4:26:95:fa: 13:6a:40:0f:8a:ed:47:93:50:fe:a7:dd:95:c2:45:ad:eb:46: 99:ff:66:2e:a4:27:37:30:53:1f:df:c3:eb:c8:bf:42:02:37: 1c:74:03:8b:eb:36:57:12:c4:3c:b6:19:c0:6b:de:30:17:ad: af:16:1d:72:a2:b3:3b:82:c8:64:9d:31:7a:56:5f:a6:54:33: 1f:71:9f:08:f3:dc:3c:00:58:15:bf:3e:6e:5d:e3:af:cd:35: 53:27:5a:7d -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtxXOdJ6TY5qDLn4cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MWE4Mzc0YzUtOTM3Yi00Y2IyLTljZDctZGQxZWUzYzI0ZjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jfyvs4T95oFHAuqqBlEbNaqvcBo6VsSRUf0 3QLiZza1/d/XsavQ+3h2D7+0cfBmhmvOCDytXq+FXL/um0HA2W+An3mq2rJenCgP 8guEKBxFYV/vLwQSzoz1JAWJQnpkHoh6reQs7vfmANe1yK981/5A94rnymyAXunT 6zIzAEwpfRSNTIucwhfdOkljqb060n4+JAiGb6uLev4CKsEiFxBVfLeaCSOHpy14 2PcYV8o8HRSycmIT8zcIJzv9/yQAFK8Y5QQwvlKate3hDsjoXsp0ynJ5bc3oSKyM gv+mv5fRzbyehnNobzdumAaR4eA3I1zbi3Zh+elIBeC1xrcw6QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMXbbmQshiptbLaGqKoLKwgOxVL4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjVlMTU4NjItYzcwYi0z MTQ5LTk3ZDMtNmE3MGNkNjliYjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCEbdJv609fEByaP3elkIZNAzcvJ5MLdsU0VTd3 hxaCr+A8UvE3+2iJ9QfPILx8cjTjPIahijMRtBqWFoOqB1BNK595FlG6J0SSKLXQ rEoIzEiLQMoCnFoRkmrgO31fd816q2WtLx5nCy9EP1bEw6gfokh9OPs7NecuHzTd m3qJiaDk6BJBDjR3DaRY71kDhjI8NBSEcjQ32PRhtVRZTsQmlfoTakAPiu1Hk1D+ p92VwkWt60aZ/2YupCc3MFMf38PryL9CAjccdAOL6zZXEsQ8thnAa94wF62vFh1y orM7gshknTF6Vl+mVDMfcZ8I89w8AFgVvz5uXeOvzTVTJ1p9 -----END CERTIFICATE-----Generated at Tue Oct 21 02:06:52 2025 by rpki-client