$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aaea545a-8507-32e4-b296-ad80f5989cc2.roa File: aaea545a-8507-32e4-b296-ad80f5989cc2.roa (raw, json) Hash identifier: bgAvszSVLZfhqCE5iTnbB88m+XlNQbF/G3gq5sn61pE= Subject key identifier: C5:53:31:09:74:75:8C:1E:09:73:22:28:A7:FD:F8:AB:EC:B9:FE:E5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E78DE18AB63FC447554BC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aaea545a-8507-32e4-b296-ad80f5989cc2.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 396573 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:8d:e1:8a:b6:3f:c4:47:55:4b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=d523bc85-be1c-4961-9387-719e3dfa270a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:4d:5e:58:c5:79:7f:1e:31:2e:e2:eb:6c:fa: f0:61:01:47:f5:3b:9b:8f:cf:fd:3b:5a:83:92:eb: ba:bc:77:d7:14:07:2d:c6:a2:fb:11:0c:cf:cd:07: cf:9e:7e:09:b8:e4:b5:87:7a:d6:34:ed:7d:5b:b1: 62:5f:cc:e6:8a:38:d1:64:c1:9c:84:c4:c6:d4:79: c3:62:12:41:4a:ed:af:62:14:06:8a:b0:49:cd:e3: ea:8f:67:fc:3c:43:65:d8:fe:71:69:16:92:6b:e6: f8:e7:8a:66:5c:5a:70:6d:da:23:e8:f2:c0:70:eb: 07:f8:3b:ba:9b:0b:34:8f:6e:1c:34:8d:12:3f:d1: 47:bb:27:e9:7f:89:91:1b:60:9b:49:96:ed:ec:16: a4:26:a1:9a:b3:31:cc:56:1a:0f:6e:ab:27:d5:34: 85:cc:20:11:d9:2c:81:9f:04:4f:f6:47:ee:e1:77: 12:7c:17:0d:21:25:1c:0f:7e:98:fc:d6:a2:cc:09: 28:ed:f8:af:b1:17:97:ea:a9:0f:ad:85:c8:18:81: d1:3a:1b:d1:43:29:82:d9:28:e9:1f:6d:6a:33:53: 4f:ef:bc:68:4c:43:85:99:b6:6d:ed:35:6e:b4:43: 9b:3e:e6:31:37:e5:a9:2d:1b:a8:43:df:ac:e0:7f: d0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:53:31:09:74:75:8C:1E:09:73:22:28:A7:FD:F8:AB:EC:B9:FE:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aaea545a-8507-32e4-b296-ad80f5989cc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:6d:c7:be:fd:75:31:3a:19:60:63:45:df:4d:2d:5c:b3:27: cc:49:44:f7:ad:fb:27:0f:82:b9:fd:2a:7c:42:57:61:07:74: 77:9d:18:10:27:d3:d7:2b:c7:b0:be:25:fe:f2:b5:df:c6:54: 04:69:09:87:c4:72:5a:a0:a4:35:99:a9:18:06:9d:a2:3a:71: 50:d6:d7:b0:bf:e7:1b:85:92:44:7f:b7:f1:2a:e6:1a:ed:43: 22:35:3b:cb:00:dc:f5:33:f6:e7:be:aa:14:31:44:c6:88:ac: 7a:11:8c:a1:23:27:29:ff:48:70:a5:0e:d4:d0:51:0b:fd:79: 82:8f:23:b8:1b:f0:99:d7:ee:dc:46:fa:4d:23:bf:dc:35:fd: 7f:48:53:45:ab:ea:a9:42:69:9f:a8:a8:88:80:85:2b:a6:ff: 65:dd:ac:dc:c1:01:ef:1c:5a:5b:c6:ca:d4:03:26:40:c8:f2: 44:99:eb:fd:76:b3:05:d2:34:d5:51:3a:b6:24:85:a8:ee:30: 33:16:2b:23:fa:76:88:88:f2:04:44:24:38:d8:6e:89:99:d9: bf:b6:9c:78:77:71:49:50:dd:94:7e:98:bb:7e:c2:61:c2:53: b1:d0:b6:dd:97:c5:25:59:24:1b:f6:c9:e5:d1:20:a0:56:6d: 64:26:b0:52 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE543hirY/xEdVS8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk ZDUyM2JjODUtYmUxYy00OTYxLTkzODctNzE5ZTNkZmEyNzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4E1eWMV5fx4xLuLrbPrwYQFH9Tubj8/9O1qD kuu6vHfXFActxqL7EQzPzQfPnn4JuOS1h3rWNO19W7FiX8zmijjRZMGchMTG1HnD YhJBSu2vYhQGirBJzePqj2f8PENl2P5xaRaSa+b454pmXFpwbdoj6PLAcOsH+Du6 mws0j24cNI0SP9FHuyfpf4mRG2CbSZbt7BakJqGaszHMVhoPbqsn1TSFzCAR2SyB nwRP9kfu4XcSfBcNISUcD36Y/NaizAko7fivsReX6qkPrYXIGIHROhvRQymC2Sjp H21qM1NP77xoTEOFmbZt7TVutEObPuYxN+WpLRuoQ9+s4H/QVwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMVTMQl0dYweCXMiKKf9+Kvsuf7lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWFlYTU0NWEtODUwNy0z MmU0LWIyOTYtYWQ4MGY1OTg5Y2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBtbce+/XUxOhlgY0XfTS1csyfMSUT3rfsnD4K5 /Sp8QldhB3R3nRgQJ9PXK8ewviX+8rXfxlQEaQmHxHJaoKQ1makYBp2iOnFQ1tew v+cbhZJEf7fxKuYa7UMiNTvLANz1M/bnvqoUMUTGiKx6EYyhIycp/0hwpQ7U0FEL /XmCjyO4G/CZ1+7cRvpNI7/cNf1/SFNFq+qpQmmfqKiIgIUrpv9l3azcwQHvHFpb xsrUAyZAyPJEmev9drMF0jTVUTq2JIWo7jAzFisj+naIiPIERCQ42G6Jmdm/tpx4 d3FJUN2Ufpi7fsJhwlOx0Lbdl8UlWSQb9snl0SCgVm1kJrBS -----END CERTIFICATE-----Generated at Mon Oct 20 10:24:45 2025 by rpki-client