$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/90ba2b4a-1d63-3d21-9d0d-7ca65dcad9d6.roa File: 90ba2b4a-1d63-3d21-9d0d-7ca65dcad9d6.roa (raw, json) Hash identifier: bXViusorSwsvMIWTFgnRpG/blepWq1kuYaqSjBIdtfE= Subject key identifier: 47:25:45:B7:36:C5:28:FD:B0:A7:B9:7E:6F:4E:05:C7:86:27:AF:26 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E78C506B9ED164A8661A80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/90ba2b4a-1d63-3d21-9d0d-7ca65dcad9d6.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 396826 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:8c:50:6b:9e:d1:64:a8:66:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=a14a2228-d106-4ea5-97e0-2f967bd841a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:bb:d9:7c:67:ec:3d:5b:54:c5:52:6a:bd:0a: 83:d1:7c:80:85:2e:db:69:a4:63:17:65:aa:b9:20: 55:57:53:a8:37:03:18:c2:d2:ab:b6:7a:96:6c:d3: 2e:41:e8:22:60:f7:dc:1e:77:f9:fd:b9:9a:01:2d: b6:dc:1e:da:01:d1:27:07:f1:9a:bf:08:c8:64:ef: 39:d3:cc:2b:75:db:76:78:c2:e6:bc:c5:8c:ef:38: 26:db:0b:5c:bf:f1:9b:95:61:b6:66:09:c3:0d:85: 88:6c:63:be:35:73:c5:6b:de:c7:4e:7d:b4:59:06: b5:d3:e6:64:c4:6a:76:43:62:69:ea:dd:19:f2:27: 34:35:77:c1:ea:0f:de:45:9d:33:d8:58:e7:bf:02: 1f:ab:e5:9f:97:40:c1:fd:a2:03:f9:53:49:b9:ee: 1b:68:b4:25:92:f5:fa:a8:85:59:e1:b0:1f:ab:d0: f7:c7:1e:e7:e8:3c:b5:db:1c:34:f7:29:05:b9:7c: ea:03:34:a4:af:18:a8:b2:fb:51:22:ee:ac:12:e5: 1e:3c:97:b4:81:29:5d:31:e3:b4:7f:c4:f5:2d:41: 82:da:33:24:50:5a:79:86:80:ae:f6:62:e2:07:80: 3c:42:d0:fd:8f:33:45:e5:4f:07:b8:fc:a6:ac:1a: 1f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:25:45:B7:36:C5:28:FD:B0:A7:B9:7E:6F:4E:05:C7:86:27:AF:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/90ba2b4a-1d63-3d21-9d0d-7ca65dcad9d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:5d:42:95:5b:32:0b:54:64:57:e6:36:64:23:73:9b:65:fb: d9:39:53:7d:60:85:5d:b0:57:fc:3f:c4:f6:00:e2:33:c3:d5: 7e:4b:92:7c:62:5b:03:15:f1:40:9d:f3:3d:6e:64:a3:88:9f: 88:95:a6:38:2a:0d:ec:87:17:f0:7f:91:11:bf:70:57:ce:5f: 36:08:f7:09:18:a4:87:82:92:76:73:26:99:1d:03:e2:48:ce: cd:62:a2:84:2c:f1:b3:c8:60:2c:f3:5a:aa:67:ad:4e:97:af: e9:32:8f:90:eb:2c:9a:bd:9c:a8:a4:09:1e:23:fa:9f:7f:cf: 11:33:aa:51:42:53:12:88:5b:22:e4:71:0b:ba:42:8b:28:19: 84:ed:98:36:41:0c:51:ac:ad:84:fd:92:fd:c8:9c:f8:84:39: d7:9a:a7:6f:79:fe:f7:73:b9:63:ce:0c:5a:f1:69:80:f8:a2: 2c:1f:93:9b:54:39:0f:8e:d2:e7:d8:af:93:1e:ef:0a:d7:47: 0e:71:35:2e:9b:33:ed:02:03:67:dc:8b:ee:48:08:dd:b5:51: 16:f5:83:28:db:53:0b:58:41:ec:ad:d4:eb:6b:b8:f1:89:ee: 8c:76:27:e3:c5:78:64:bd:13:84:89:19:ae:23:35:91:4f:5f: 44:82:0d:ac -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE54xQa57RZKhmGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk YTE0YTIyMjgtZDEwNi00ZWE1LTk3ZTAtMmY5NjdiZDg0MWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibvZfGfsPVtUxVJqvQqD0XyAhS7baaRjF2Wq uSBVV1OoNwMYwtKrtnqWbNMuQegiYPfcHnf5/bmaAS223B7aAdEnB/GavwjIZO85 08wrddt2eMLmvMWM7zgm2wtcv/GblWG2ZgnDDYWIbGO+NXPFa97HTn20WQa10+Zk xGp2Q2Jp6t0Z8ic0NXfB6g/eRZ0z2FjnvwIfq+Wfl0DB/aID+VNJue4baLQlkvX6 qIVZ4bAfq9D3xx7n6Dy12xw09ykFuXzqAzSkrxiosvtRIu6sEuUePJe0gSldMeO0 f8T1LUGC2jMkUFp5hoCu9mLiB4A8QtD9jzNF5U8HuPymrBofOwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEclRbc2xSj9sKe5fm9OBceGJ68mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTBiYTJiNGEtMWQ2My0z ZDIxLTlkMGQtN2NhNjVkY2FkOWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAtXUKVWzILVGRX5jZkI3ObZfvZOVN9YIVdsFf8 P8T2AOIzw9V+S5J8YlsDFfFAnfM9bmSjiJ+IlaY4Kg3shxfwf5ERv3BXzl82CPcJ GKSHgpJ2cyaZHQPiSM7NYqKELPGzyGAs81qqZ61Ol6/pMo+Q6yyavZyopAkeI/qf f88RM6pRQlMSiFsi5HELukKLKBmE7Zg2QQxRrK2E/ZL9yJz4hDnXmqdvef73c7lj zgxa8WmA+KIsH5ObVDkPjtLn2K+THu8K10cOcTUumzPtAgNn3IvuSAjdtVEW9YMo 21MLWEHsrdTra7jxie6MdifjxXhkvROEiRmuIzWRT19Egg2s -----END CERTIFICATE-----Generated at Mon Oct 20 08:16:57 2025 by rpki-client