$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a8e0686a-540b-34d6-b6fd-6370a5743775.roa File: a8e0686a-540b-34d6-b6fd-6370a5743775.roa (raw, json) Hash identifier: O7j5hksEk+5jB2jKdWMJMD/pjJDKxhbGFDgUU8VFeVs= Subject key identifier: C5:73:96:55:B6:C1:25:21:10:13:41:D1:41:65:EA:69:FB:3E:17:4C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B715CDACF4A567527B6804800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a8e0686a-540b-34d6-b6fd-6370a5743775.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 396590 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:da:cf:4a:56:75:27:b6:80:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=0446373a-871c-4611-b70a-0124a53c9b65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a3:b8:19:33:87:8b:6a:70:1e:22:74:38:df: ef:49:12:fb:91:28:9a:ce:60:c4:d5:40:d8:6b:62: b7:d4:7f:1b:16:c3:20:44:eb:6a:7c:50:21:ee:2b: 47:e3:15:1c:7b:3f:9f:96:43:8e:3a:27:5a:46:9f: 51:09:e1:30:2a:68:2a:7f:80:cf:fb:29:26:c5:47: d8:4c:a0:75:34:44:01:09:17:b7:25:e9:e3:e7:fa: 68:1e:33:2c:39:ef:fe:22:c9:76:a3:2f:7b:33:22: 44:e3:bd:c7:e0:45:63:9b:26:ba:86:45:8a:39:da: 60:b3:03:41:97:84:8b:c4:23:b0:d1:08:94:ca:b1: e8:e8:b0:04:6e:90:06:cf:89:ac:17:d6:f5:6f:c1: bb:01:45:b3:a4:9b:96:8d:63:b0:c8:d2:5f:1f:a6: 2d:12:17:62:4b:cc:70:99:53:0b:1e:6d:c3:9c:bf: 59:f9:dc:60:29:8f:25:ef:e9:65:23:5e:6a:60:01: 54:ab:bf:5b:7e:ae:e8:48:2b:04:56:7b:2f:1a:19: 9a:1a:ce:ee:49:44:41:89:4b:94:7c:19:85:64:32: 0a:aa:48:42:d5:01:d7:61:5e:c3:37:5f:1a:4f:28: c3:e4:f5:63:9f:07:c4:2f:65:40:38:61:e4:94:7f: 19:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:73:96:55:B6:C1:25:21:10:13:41:D1:41:65:EA:69:FB:3E:17:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a8e0686a-540b-34d6-b6fd-6370a5743775.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:97:95:57:1a:3b:39:a2:b7:69:3e:3d:48:25:fc:32:b9:75: 79:43:00:ad:f9:26:af:46:f5:35:12:14:45:70:77:9c:b5:8c: 1f:2a:da:7f:e6:77:62:58:ae:c3:76:ac:46:18:20:6f:17:29: ec:47:66:0b:13:f0:2d:eb:78:30:50:65:be:67:b0:6c:10:d6: d7:e2:61:00:8c:10:c2:68:78:4d:3c:57:24:52:2a:f3:fa:67: c0:35:32:95:2d:49:12:9d:eb:08:5e:22:2f:d7:0f:24:58:3e: dd:03:a2:06:67:fe:d7:40:a4:fa:8c:aa:95:dc:94:55:fa:52: 7c:41:0c:18:52:f9:3a:2f:83:8f:26:e1:08:07:1c:5a:be:61: 94:7e:99:6e:1a:7d:89:fe:02:1f:dc:4a:98:cf:e1:4b:df:b9: 81:e7:68:bf:90:8d:4a:41:e7:b3:29:24:f3:25:e7:28:4b:2d: 23:70:f1:38:44:77:0c:fb:32:77:fe:2a:08:8a:b5:9a:4e:f0: 19:77:05:71:f3:b8:d2:98:e0:6b:f8:dc:ba:82:f4:6d:9c:8b: c4:72:ae:c6:8a:a2:f5:13:b9:af:c6:61:dd:70:12:aa:15:6c: 06:8f:0f:09:11:00:a3:c8:b9:26:3e:11:36:a7:22:21:70:d0: 29:f5:6e:bd -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtxXNrPSlZ1J7aASAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MDQ0NjM3M2EtODcxYy00NjExLWI3MGEtMDEyNGE1M2M5YjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6O4GTOHi2pwHiJ0ON/vSRL7kSiazmDE1UDY a2K31H8bFsMgROtqfFAh7itH4xUcez+flkOOOidaRp9RCeEwKmgqf4DP+ykmxUfY TKB1NEQBCRe3Jenj5/poHjMsOe/+Isl2oy97MyJE473H4EVjmya6hkWKOdpgswNB l4SLxCOw0QiUyrHo6LAEbpAGz4msF9b1b8G7AUWzpJuWjWOwyNJfH6YtEhdiS8xw mVMLHm3DnL9Z+dxgKY8l7+llI15qYAFUq79bfq7oSCsEVnsvGhmaGs7uSURBiUuU fBmFZDIKqkhC1QHXYV7DN18aTyjD5PVjnwfEL2VAOGHklH8ZowIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMVzllW2wSUhEBNB0UFl6mn7PhdMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYThlMDY4NmEtNTQwYi0z NGQ2LWI2ZmQtNjM3MGE1NzQzNzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCFl5VXGjs5ordpPj1IJfwyuXV5QwCt+SavRvU1 EhRFcHectYwfKtp/5ndiWK7DdqxGGCBvFynsR2YLE/At63gwUGW+Z7BsENbX4mEA jBDCaHhNPFckUirz+mfANTKVLUkSnesIXiIv1w8kWD7dA6IGZ/7XQKT6jKqV3JRV +lJ8QQwYUvk6L4OPJuEIBxxavmGUfpluGn2J/gIf3EqYz+FL37mB52i/kI1KQeez KSTzJecoSy0jcPE4RHcM+zJ3/ioIirWaTvAZdwVx87jSmOBr+Ny6gvRtnIvEcq7G iqL1E7mvxmHdcBKqFWwGjw8JEQCjyLkmPhE2pyIhcNAp9W69 -----END CERTIFICATE-----Generated at Mon Oct 20 08:12:51 2025 by rpki-client