$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/86339f38-d42c-3ac9-8b39-3720c40bbbc9.roa File: 86339f38-d42c-3ac9-8b39-3720c40bbbc9.roa (raw, json) Hash identifier: IU76sBVN2Eg0lfnNAKCI7X1e8E71ejACWbhRJMEZJEs= Subject key identifier: 69:0A:DD:FE:34:4F:8D:34:89:FB:07:C1:FF:E4:D5:AB:F9:56:47:7F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E790AFDDA7EFD1CAC0AF00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/86339f38-d42c-3ac9-8b39-3720c40bbbc9.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 396606 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:90:af:dd:a7:ef:d1:ca:c0:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=b1f75e7c-26b4-4e0b-bfbe-3f7a053c1e62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bb:a9:0f:9e:6f:f3:10:a6:08:93:be:5a:a9: 0d:29:03:f9:c9:df:47:27:26:06:95:ee:96:47:e4: 25:80:25:66:5d:d5:e6:2b:b8:e3:63:47:ca:d4:85: 6a:db:dc:99:e9:84:98:13:9c:74:70:4d:91:9c:28: 60:36:8a:1d:3a:32:4d:e6:8e:89:3c:7f:a0:b8:16: 11:64:21:ff:23:5e:77:69:62:9f:41:a3:cd:e0:3b: f4:2b:ba:9e:b5:2e:a5:4d:4c:5e:4d:94:88:73:06: 7f:94:6a:eb:d1:4b:a4:99:f0:2c:b6:ce:4b:72:cd: f5:b0:60:ad:eb:06:d0:8a:2e:93:8d:17:81:39:48: a7:7f:05:ff:bd:3e:4d:d6:23:34:ba:11:a1:57:9b: 4b:37:84:04:70:f6:41:00:f0:53:0e:e4:55:a0:32: c3:e6:fc:0a:0d:6c:87:3e:69:d3:7b:be:44:90:23: a0:23:83:ea:7a:dc:3a:54:84:df:82:21:44:38:ba: 55:ab:d5:fd:4f:40:f5:5a:0e:38:26:d0:dc:3f:d2: 6d:fd:69:08:80:01:63:ab:16:93:a7:f3:dd:96:28: a9:d6:b8:7a:4c:71:ce:44:a4:d7:91:10:c5:a1:1b: ab:1e:a4:a6:34:54:20:12:80:27:dd:2b:f7:a7:cc: 90:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:0A:DD:FE:34:4F:8D:34:89:FB:07:C1:FF:E4:D5:AB:F9:56:47:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/86339f38-d42c-3ac9-8b39-3720c40bbbc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:29:f8:c6:d6:8b:25:ab:32:36:6d:45:4a:11:67:d7:9d:fa: d2:25:75:3a:e6:9e:36:b8:38:58:66:17:94:7a:f0:4a:a4:6d: 6b:22:60:25:f1:17:aa:b8:4a:f3:25:6d:93:b3:2f:74:e1:53: 1f:ed:03:ca:7f:46:1c:25:d9:d0:30:76:7a:0f:cb:95:b8:bb: 14:83:2a:42:08:a6:62:f2:c0:f6:33:02:57:a0:40:cc:da:4e: 0b:b5:77:22:b2:85:d2:72:0c:3d:18:2f:45:86:f4:a0:e1:43: 4e:36:aa:78:d8:e7:9f:8f:14:dd:de:c8:b4:a4:5a:54:8c:a0: 82:11:fe:12:dc:9e:27:1e:11:2f:a0:26:95:ad:42:23:5b:e5: 0b:e0:15:52:88:ab:2e:92:7c:22:c4:3b:c9:f7:e1:77:cb:e2: 6c:62:33:0c:96:3c:2e:2d:95:8c:45:f6:77:f5:49:82:cf:52: 90:75:d6:dd:51:3b:7a:74:ed:63:60:0e:e7:05:bb:ff:93:09: 66:05:02:7a:25:a9:b7:ed:6c:63:f5:4d:22:22:df:23:78:0b: ce:60:89:c1:96:f1:1c:27:f4:7e:34:94:19:62:b1:68:86:0a: 4b:52:f6:4c:23:51:75:e1:85:74:31:9e:d6:cc:ec:40:23:40: cc:b8:0f:1c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE55Cv3afv0crArwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk YjFmNzVlN2MtMjZiNC00ZTBiLWJmYmUtM2Y3YTA1M2MxZTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbupD55v8xCmCJO+WqkNKQP5yd9HJyYGle6W R+QlgCVmXdXmK7jjY0fK1IVq29yZ6YSYE5x0cE2RnChgNoodOjJN5o6JPH+guBYR ZCH/I153aWKfQaPN4Dv0K7qetS6lTUxeTZSIcwZ/lGrr0UukmfAsts5Lcs31sGCt 6wbQii6TjReBOUinfwX/vT5N1iM0uhGhV5tLN4QEcPZBAPBTDuRVoDLD5vwKDWyH PmnTe75EkCOgI4Pqetw6VITfgiFEOLpVq9X9T0D1Wg44JtDcP9Jt/WkIgAFjqxaT p/Pdliip1rh6THHORKTXkRDFoRurHqSmNFQgEoAn3Sv3p8yQfwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGkK3f40T400ifsHwf/k1av5Vkd/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODYzMzlmMzgtZDQyYy0z YWM5LThiMzktMzcyMGM0MGJiYmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQABKfjG1oslqzI2bUVKEWfXnfrSJXU65p42uDhY ZheUevBKpG1rImAl8RequErzJW2Tsy904VMf7QPKf0YcJdnQMHZ6D8uVuLsUgypC CKZi8sD2MwJXoEDM2k4LtXcisoXScgw9GC9FhvSg4UNONqp42OefjxTd3si0pFpU jKCCEf4S3J4nHhEvoCaVrUIjW+UL4BVSiKsuknwixDvJ9+F3y+JsYjMMljwuLZWM RfZ39UmCz1KQddbdUTt6dO1jYA7nBbv/kwlmBQJ6Jam37Wxj9U0iIt8jeAvOYInB lvEcJ/R+NJQZYrFohgpLUvZMI1F14YV0MZ7WzOxAI0DMuA8c -----END CERTIFICATE-----Generated at Mon Oct 20 15:58:40 2025 by rpki-client