$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2d29b5a-61db-3a4f-97db-87e7ff925c90.roa File: a2d29b5a-61db-3a4f-97db-87e7ff925c90.roa (raw, json) Hash identifier: dQomcEqJ20vYVBSGC2tRVN673ZrX7fxtvMbA07yMqRY= Subject key identifier: 54:49:AB:BB:3F:1F:06:58:1D:61:DC:9B:15:20:32:42:C0:63:0A:AE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E7990ECA89012EE18FC000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2d29b5a-61db-3a4f-97db-87e7ff925c90.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 396604 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:99:0e:ca:89:01:2e:e1:8f:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=4af96fcf-7d3e-46b6-b6e3-1a9a417bef0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:26:66:cd:01:d0:b7:01:f3:27:72:f7:59:26: a5:ba:83:f0:4d:79:70:97:c6:54:cf:c0:a3:9d:b0: 4d:c0:1d:7a:e9:0e:ee:e0:62:11:37:67:a2:3c:21: 49:6b:b2:d2:bc:ab:0f:3d:18:e2:4b:4e:08:14:fe: 4e:9e:54:ca:81:13:7a:21:f5:4c:4a:55:62:6b:ee: a4:2a:11:d0:59:c1:79:29:4c:a6:a0:3b:97:54:c5: 6f:4d:af:52:51:fa:b7:6e:fc:87:90:4f:c0:c7:63: 88:65:72:b7:9a:f1:df:68:66:c5:09:dc:e7:6a:f8: 99:09:89:cf:c7:df:0f:5b:6c:d7:d1:19:3b:dc:29: d2:0f:9f:17:22:87:c2:58:2e:bf:87:e0:67:39:ab: 86:45:98:a1:2d:44:82:3a:c6:18:c8:d4:c4:34:d6: 5c:67:f8:36:e2:46:88:2c:c2:a8:e6:98:2e:31:a9: 4a:21:f1:e0:97:50:e8:10:9d:24:a8:1b:8a:41:13: 5f:49:c4:ad:38:b9:06:88:11:28:73:ef:18:41:55: 84:f9:e2:3c:e8:02:cb:a8:2d:5e:d2:4d:b5:5c:d4: 3b:99:bb:30:4b:c8:b9:e1:28:ba:2f:b5:fc:5d:0a: 57:39:1a:e9:42:1d:e7:c8:ad:41:74:43:e0:0d:b7: 5b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:49:AB:BB:3F:1F:06:58:1D:61:DC:9B:15:20:32:42:C0:63:0A:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2d29b5a-61db-3a4f-97db-87e7ff925c90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:5f:69:57:fe:90:fc:9c:b1:30:c3:1b:80:a1:0a:af:39:a7: ba:13:75:ef:ed:f4:a6:af:8e:16:23:8a:01:5b:9d:af:d8:b9: bd:77:23:40:83:e6:f7:95:e0:cc:cc:6d:46:19:17:52:5c:f3: be:3c:fb:dd:7b:d3:b2:3d:2e:4d:bd:11:be:a3:1c:44:e7:55: 5a:86:f0:b8:2d:f4:55:a1:8a:13:2e:cc:cc:b8:11:a6:21:ec: 06:a5:94:14:16:3b:db:f0:8d:b0:8d:54:d0:1e:62:03:4b:12: d9:ab:8b:5c:4d:82:d5:f7:a7:b5:f5:25:a8:d8:b3:cb:09:de: 75:15:05:62:c4:de:fe:7a:10:2b:1b:e2:83:59:0b:16:3d:7d: d9:6e:db:a3:2a:0f:56:21:15:c8:34:61:f3:fb:9f:a8:d8:dd: 1d:37:2a:98:f9:19:47:c5:a2:6a:40:b4:c9:8a:15:85:cf:5c: c2:b0:03:ba:73:49:4f:14:78:44:d6:d2:a1:bb:92:8f:36:64: d0:b2:ec:ca:d3:ce:97:dd:93:34:f4:be:4e:43:2b:6b:c5:0c: 69:71:dc:22:34:ef:f8:1e:76:e0:b5:5f:a1:36:a6:25:70:2d: a7:39:d9:2b:25:ea:fe:41:33:46:82:54:3c:89:ea:29:da:f4: f7:2a:cb:45 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE55kOyokBLuGPwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk NGFmOTZmY2YtN2QzZS00NmI2LWI2ZTMtMWE5YTQxN2JlZjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yZmzQHQtwHzJ3L3WSaluoPwTXlwl8ZUz8Cj nbBNwB166Q7u4GIRN2eiPCFJa7LSvKsPPRjiS04IFP5OnlTKgRN6IfVMSlVia+6k KhHQWcF5KUymoDuXVMVvTa9SUfq3bvyHkE/Ax2OIZXK3mvHfaGbFCdznaviZCYnP x98PW2zX0Rk73CnSD58XIofCWC6/h+BnOauGRZihLUSCOsYYyNTENNZcZ/g24kaI LMKo5pguMalKIfHgl1DoEJ0kqBuKQRNfScStOLkGiBEoc+8YQVWE+eI86ALLqC1e 0k21XNQ7mbswS8i54Si6L7X8XQpXORrpQh3nyK1BdEPgDbdb7QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFRJq7s/HwZYHWHcmxUgMkLAYwquMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTJkMjliNWEtNjFkYi0z YTRmLTk3ZGItODdlN2ZmOTI1YzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBOX2lX/pD8nLEwwxuAoQqvOae6E3Xv7fSmr44W I4oBW52v2Lm9dyNAg+b3leDMzG1GGRdSXPO+PPvde9OyPS5NvRG+oxxE51VahvC4 LfRVoYoTLszMuBGmIewGpZQUFjvb8I2wjVTQHmIDSxLZq4tcTYLV96e19SWo2LPL Cd51FQVixN7+ehArG+KDWQsWPX3ZbtujKg9WIRXINGHz+5+o2N0dNyqY+RlHxaJq QLTJihWFz1zCsAO6c0lPFHhE1tKhu5KPNmTQsuzK086X3ZM09L5OQytrxQxpcdwi NO/4HnbgtV+hNqYlcC2nOdkrJer+QTNGglQ8ieop2vT3KstF -----END CERTIFICATE-----Generated at Mon Oct 20 13:15:22 2025 by rpki-client