$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa71b912-ec1b-36e2-9852-18906b9fa27f.roa File: aa71b912-ec1b-36e2-9852-18906b9fa27f.roa (raw, json) Hash identifier: ATpStns1r1O0dYzdoNPe42uN8crVZg6lUeNXebOVNLw= Subject key identifier: 16:2F:0C:20:B8:32:1F:8E:3E:E0:9C:92:E3:39:9A:AD:CA:33:C7:52 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E7972314801CBF05306280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa71b912-ec1b-36e2-9852-18906b9fa27f.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 396597 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:97:23:14:80:1c:bf:05:30:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=050933bf-b20c-4624-b17b-090e9396af21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7d:7f:45:1f:3b:85:c7:45:d3:34:db:fb:ff: f8:9e:61:c1:45:f1:0e:b7:9f:4d:d1:b2:aa:79:fc: 4a:c1:8b:cb:0f:ff:40:8a:8d:8c:9a:d0:95:c9:89: aa:07:3a:0d:36:8e:52:b1:28:37:b3:68:e5:1f:61: 0d:4e:b3:fc:3f:31:3f:e5:a5:15:b6:8e:0c:07:a7: d1:97:50:e1:55:1a:c0:6b:a3:47:6b:54:6a:17:a0: c7:55:3c:27:63:53:3c:cf:c0:4c:10:ba:f9:c9:3f: 6e:cc:16:84:d8:ce:9c:27:b0:51:40:96:64:ae:36: ce:7b:a6:73:c9:23:26:7e:86:43:71:b0:5b:37:a3: 6d:cf:ef:64:14:c1:9c:82:9e:78:9c:60:3a:4e:97: 96:53:a2:ac:48:6b:23:1c:b4:d7:b1:17:ed:20:42: 20:ad:33:6f:1c:0d:5e:b0:7a:16:16:d4:75:eb:d6: 51:64:da:1a:ab:61:7e:e0:14:06:9c:ad:34:30:ca: df:5b:16:88:1e:a1:5e:69:c0:70:e9:c1:7e:55:53: 4d:c2:12:1a:51:7f:63:4a:ad:28:6b:3d:ed:b0:10: 8f:d1:10:ea:06:36:4f:35:0c:03:aa:f0:4a:b2:5a: 9d:10:af:1b:73:5a:d5:84:14:bf:9d:f5:aa:ae:92: 17:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:2F:0C:20:B8:32:1F:8E:3E:E0:9C:92:E3:39:9A:AD:CA:33:C7:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa71b912-ec1b-36e2-9852-18906b9fa27f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:ac:48:cb:d3:99:9f:fc:45:4c:1a:18:1a:eb:2a:2d:f5:30: 9d:12:1f:5c:91:cb:d6:44:ad:71:b4:95:f0:3d:e8:c7:64:39: 17:f2:0d:f9:01:c2:41:67:94:68:bb:96:96:5c:93:d8:60:65: e5:96:61:b4:4a:3f:e9:8a:98:58:42:60:a2:3f:cc:bd:d9:44: 23:2a:dc:db:af:0d:da:81:3a:ef:40:1a:f3:88:2d:ff:41:ec: 97:42:23:bb:49:ce:ff:06:d4:c0:75:0e:b2:64:69:c9:32:c4: 7f:2f:ac:5e:35:b6:95:02:0b:48:42:89:82:ae:38:6a:d3:ad: b2:b3:af:43:e7:e3:c6:c0:fe:40:9a:48:55:0e:b2:2c:3e:71: 47:ed:e3:e6:63:f5:a9:0f:16:31:16:99:f6:30:5e:b8:ae:af: a4:cd:04:26:3d:6a:3b:e3:7a:ac:c2:ed:e9:68:2e:40:4e:b9: f0:db:1e:21:7e:cf:21:a7:91:a1:4d:00:5d:be:7d:da:82:1d: 62:e2:1e:bd:24:5d:ff:c7:2d:78:20:51:08:ae:5c:2e:ba:d6: ee:35:f5:2f:53:fa:7a:17:8f:aa:05:c9:90:27:45:13:e3:9b: 48:45:97:f6:c8:e3:d5:ce:66:4e:03:59:fe:8d:76:a4:0c:7f: 8d:8b:ea:ac -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE55cjFIAcvwUwYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk MDUwOTMzYmYtYjIwYy00NjI0LWIxN2ItMDkwZTkzOTZhZjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsX1/RR87hcdF0zTb+//4nmHBRfEOt59N0bKq efxKwYvLD/9Aio2MmtCVyYmqBzoNNo5SsSg3s2jlH2ENTrP8PzE/5aUVto4MB6fR l1DhVRrAa6NHa1RqF6DHVTwnY1M8z8BMELr5yT9uzBaE2M6cJ7BRQJZkrjbOe6Zz ySMmfoZDcbBbN6Ntz+9kFMGcgp54nGA6TpeWU6KsSGsjHLTXsRftIEIgrTNvHA1e sHoWFtR169ZRZNoaq2F+4BQGnK00MMrfWxaIHqFeacBw6cF+VVNNwhIaUX9jSq0o az3tsBCP0RDqBjZPNQwDqvBKslqdEK8bc1rVhBS/nfWqrpIXawIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBYvDCC4Mh+OPuCckuM5mq3KM8dSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWE3MWI5MTItZWMxYi0z NmUyLTk4NTItMTg5MDZiOWZhMjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCPrEjL05mf/EVMGhga6yot9TCdEh9ckcvWRK1x tJXwPejHZDkX8g35AcJBZ5Rou5aWXJPYYGXllmG0Sj/piphYQmCiP8y92UQjKtzb rw3agTrvQBrziC3/QeyXQiO7Sc7/BtTAdQ6yZGnJMsR/L6xeNbaVAgtIQomCrjhq 062ys69D5+PGwP5AmkhVDrIsPnFH7ePmY/WpDxYxFpn2MF64rq+kzQQmPWo743qs wu3paC5ATrnw2x4hfs8hp5GhTQBdvn3agh1i4h69JF3/xy14IFEIrlwuutbuNfUv U/p6F4+qBcmQJ0UT45tIRZf2yOPVzmZOA1n+jXakDH+Ni+qs -----END CERTIFICATE-----Generated at Mon Oct 20 13:20:49 2025 by rpki-client