$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7bb9b789-bbe0-3b2c-b252-fd5cd2f5e06d.roa File: 7bb9b789-bbe0-3b2c-b252-fd5cd2f5e06d.roa (raw, json) Hash identifier: AAF/TUXBzAXO4RG1oggL0dKBW2IDl8fAjBllMm0JLso= Subject key identifier: 1D:14:D9:85:B9:C2:78:0D:0B:EE:0B:F2:53:73:F9:22:DA:81:38:C2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E796AD76D4D186766B4380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7bb9b789-bbe0-3b2c-b252-fd5cd2f5e06d.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 396613 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:96:ad:76:d4:d1:86:76:6b:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=865c65a4-2902-44a0-84b7-2c08e27b6523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:40:46:78:ac:b9:29:d7:94:1a:9a:ca:04:6b: de:58:e6:f6:f5:d2:ad:f7:65:d7:b0:42:80:93:60: b4:0e:27:4d:27:51:d4:39:cc:40:6b:75:04:e6:8e: 06:1c:09:0a:23:6c:d6:a2:17:fb:9c:c1:da:8a:b2: fa:a5:a3:ca:20:22:42:c7:e7:79:6a:e8:14:d0:8f: b5:78:af:8a:ab:33:62:ea:20:7a:b9:93:bd:87:90: 28:99:14:89:86:c8:0b:a9:eb:fa:51:d8:23:1d:d9: 7b:53:6d:c1:ca:0c:02:c3:4f:5f:fe:1e:ac:6e:8e: 0e:5b:27:2e:de:45:a0:a4:c3:91:4b:be:e2:73:6c: fc:fa:be:8c:62:1e:7f:e5:42:b8:6a:9d:4e:f2:12: cb:5d:18:13:b4:72:28:4d:61:d3:9a:cc:1e:5e:a4: 19:80:90:29:d5:3d:8b:1a:32:66:fb:21:14:1e:9e: b5:43:12:8a:2f:8b:9b:e6:bf:ea:85:42:72:ad:19: 46:ae:07:99:44:31:8f:a3:41:a3:1c:f4:04:d1:8f: ce:32:08:53:a3:6f:a0:67:db:94:7a:97:35:75:17: 80:7a:b6:4c:28:d6:2f:5d:a1:11:e0:25:f0:f5:4d: 5a:3e:a8:5d:d5:62:84:8a:e2:eb:a4:4f:63:35:3e: f8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:14:D9:85:B9:C2:78:0D:0B:EE:0B:F2:53:73:F9:22:DA:81:38:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7bb9b789-bbe0-3b2c-b252-fd5cd2f5e06d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:f2:43:83:b6:75:f3:f4:29:2e:4c:c2:4b:9e:09:5b:a3:15: b1:83:9f:b8:34:28:74:1b:e4:8b:6f:97:e3:e4:8f:64:c5:ed: 41:e1:34:e3:da:3a:a1:35:9a:0f:a2:06:99:87:85:1a:04:3e: ea:82:ef:f9:70:70:19:e7:61:f5:14:81:41:54:bd:3d:b0:05: 53:65:0a:df:6a:d8:c5:6c:cc:9f:31:6f:ac:d5:52:7a:db:75: 44:09:fe:06:90:d5:89:ec:5c:2a:5d:65:65:ec:91:f0:77:fc: 7b:92:a3:62:ca:88:1e:e9:ee:63:58:8a:51:10:db:ef:70:88: 8b:46:36:a9:f3:16:5f:55:7a:62:76:a6:2d:e8:a1:85:3b:05: d3:e2:45:88:11:45:74:6e:9c:9e:e5:9f:33:fe:97:57:10:f5: 69:81:ad:e4:4c:d9:04:ba:64:33:3e:57:8d:65:e6:de:3a:97: 8d:dd:8c:97:7a:38:cd:58:8a:d2:5a:50:fe:75:f2:f5:08:5c: d2:a6:8d:74:87:e1:2e:5a:ea:6f:c8:b8:cd:5f:4a:bf:49:bc: c0:8d:14:f4:34:ea:52:46:84:13:69:89:5a:87:dd:4f:48:b1: ff:28:2f:a4:f8:4f:27:63:0b:38:6f:28:48:46:8d:ed:fd:79: bc:ce:91:09 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE55atdtTRhnZrQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk ODY1YzY1YTQtMjkwMi00NGEwLTg0YjctMmMwOGUyN2I2NTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkBGeKy5KdeUGprKBGveWOb29dKt92XXsEKA k2C0DidNJ1HUOcxAa3UE5o4GHAkKI2zWohf7nMHairL6paPKICJCx+d5augU0I+1 eK+KqzNi6iB6uZO9h5AomRSJhsgLqev6UdgjHdl7U23BygwCw09f/h6sbo4OWycu 3kWgpMORS77ic2z8+r6MYh5/5UK4ap1O8hLLXRgTtHIoTWHTmsweXqQZgJAp1T2L GjJm+yEUHp61QxKKL4ub5r/qhUJyrRlGrgeZRDGPo0GjHPQE0Y/OMghTo2+gZ9uU epc1dReAerZMKNYvXaER4CXw9U1aPqhd1WKEiuLrpE9jNT74GwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFB0U2YW5wngNC+4L8lNz+SLagTjCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvN2JiOWI3ODktYmJlMC0z YjJjLWIyNTItZmQ1Y2QyZjVlMDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAf8kODtnXz9CkuTMJLnglboxWxg5+4NCh0G+SL b5fj5I9kxe1B4TTj2jqhNZoPogaZh4UaBD7qgu/5cHAZ52H1FIFBVL09sAVTZQrf atjFbMyfMW+s1VJ623VECf4GkNWJ7FwqXWVl7JHwd/x7kqNiyoge6e5jWIpRENvv cIiLRjap8xZfVXpidqYt6KGFOwXT4kWIEUV0bpye5Z8z/pdXEPVpga3kTNkEumQz PleNZebeOpeN3YyXejjNWIrSWlD+dfL1CFzSpo10h+EuWupvyLjNX0q/SbzAjRT0 NOpSRoQTaYlah91PSLH/KC+k+E8nYws4byhIRo3t/Xm8zpEJ -----END CERTIFICATE-----Generated at Mon Oct 20 15:59:12 2025 by rpki-client