$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b2053b7a-8ad0-30ec-8a93-512a9cb1dcab.roa File: b2053b7a-8ad0-30ec-8a93-512a9cb1dcab.roa (raw, json) Hash identifier: LCdZxPfbdGNVUvJarWj82h2oOtArHGCSJUqjQo20Ou4= Subject key identifier: 63:3F:51:05:2C:EE:1B:6F:FC:93:E6:60:A0:21:46:7E:2E:09:46:8D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E78C08D4B535F96BD46500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b2053b7a-8ad0-30ec-8a93-512a9cb1dcab.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 396552 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:8c:08:d4:b5:35:f9:6b:d4:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=319ebd35-6821-4e8c-a166-90f5bd4486b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f8:43:b0:86:e0:04:82:27:ce:f3:77:f1:18: 93:2b:08:55:92:5f:94:f6:e1:8d:92:93:84:ed:b3: c3:66:a8:c9:b5:1b:db:ec:88:72:fe:3e:67:a0:6f: f5:8f:2b:da:88:41:95:c5:6a:dc:aa:6b:79:ea:3d: 6e:09:8c:70:d6:60:06:e7:30:41:c6:8c:8f:12:05: 46:5d:30:0e:11:70:e2:49:76:e2:3b:23:00:97:57: 07:6a:0d:79:f3:54:e7:12:6f:89:dd:0f:48:ce:70: 69:92:6f:1d:f3:45:22:4d:06:73:c5:8f:0e:48:77: b8:27:e2:18:4b:6d:83:fd:55:70:6a:7e:42:0e:bf: 29:91:4a:97:14:fa:37:e1:1f:6f:e4:df:c6:9b:48: 82:ec:e1:52:46:76:b9:4e:e2:dc:0d:01:6e:84:e0: a7:aa:89:ba:1a:76:e3:01:ff:a8:20:83:b3:8d:e6: ce:24:d5:46:2f:0d:b8:e1:eb:0f:49:cc:78:6b:22: b7:05:5d:94:a4:43:c4:5c:60:6d:cc:9c:f6:36:33: a4:76:09:d0:7d:cc:d3:61:1c:ea:3b:04:21:fb:7a: 21:87:dd:e4:14:47:2b:2a:7b:57:13:36:f5:98:a3: 22:81:c5:95:df:c9:f7:1b:75:15:22:78:aa:33:f4: 4e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:3F:51:05:2C:EE:1B:6F:FC:93:E6:60:A0:21:46:7E:2E:09:46:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b2053b7a-8ad0-30ec-8a93-512a9cb1dcab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:b4:d5:8e:62:e6:58:b7:99:ee:16:8a:70:e9:0d:3d:52:03: 02:d4:26:2d:06:84:9d:7a:26:9d:23:c4:f8:99:42:b4:25:48: 05:ee:93:19:02:7d:24:8b:bb:ff:90:96:e9:0f:dc:76:d6:2e: ef:47:cf:f0:7e:5f:29:95:b4:96:20:ac:41:b2:69:1b:bb:fb: ac:59:ff:83:47:3f:26:e4:48:07:7d:29:88:b1:ed:9b:39:0c: 8b:d6:ee:e5:46:6c:21:60:fd:6c:02:80:f1:d7:95:86:6b:a5: 25:79:4a:85:5e:b9:33:cb:c3:d9:24:06:b1:c0:aa:b7:62:1e: ad:1e:05:15:4c:7c:ea:00:96:19:81:fa:d2:92:64:25:fa:d9: 61:48:e6:a8:4a:69:38:ac:3c:f6:79:79:8a:cf:99:ef:0b:91: d2:d3:ba:24:fb:a5:86:da:05:d3:4e:8f:87:f9:f2:cd:f1:4f: 43:f3:af:d9:bb:99:4b:a4:24:02:b1:38:6a:4a:9f:61:40:c4: 31:31:48:27:09:94:aa:6d:56:e4:b0:35:3e:23:ec:4d:9f:0b: 81:c2:dd:60:64:32:df:5d:ff:41:a6:5e:4b:20:78:af:4a:42: 1a:30:c9:01:df:68:40:9d:43:37:1a:54:fe:e6:b9:f9:00:cd: bf:c4:78:b5 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE54wI1LU1+WvUZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk MzE5ZWJkMzUtNjgyMS00ZThjLWExNjYtOTBmNWJkNDQ4NmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/hDsIbgBIInzvN38RiTKwhVkl+U9uGNkpOE 7bPDZqjJtRvb7Ihy/j5noG/1jyvaiEGVxWrcqmt56j1uCYxw1mAG5zBBxoyPEgVG XTAOEXDiSXbiOyMAl1cHag1581TnEm+J3Q9IznBpkm8d80UiTQZzxY8OSHe4J+IY S22D/VVwan5CDr8pkUqXFPo34R9v5N/Gm0iC7OFSRna5TuLcDQFuhOCnqom6Gnbj Af+oIIOzjebOJNVGLw244esPScx4ayK3BV2UpEPEXGBtzJz2NjOkdgnQfczTYRzq OwQh+3ohh93kFEcrKntXEzb1mKMigcWV38n3G3UVIniqM/ROgwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGM/UQUs7htv/JPmYKAhRn4uCUaNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjIwNTNiN2EtOGFkMC0z MGVjLThhOTMtNTEyYTljYjFkY2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAqtNWOYuZYt5nuFopw6Q09UgMC1CYtBoSdeiad I8T4mUK0JUgF7pMZAn0ki7v/kJbpD9x21i7vR8/wfl8plbSWIKxBsmkbu/usWf+D Rz8m5EgHfSmIse2bOQyL1u7lRmwhYP1sAoDx15WGa6UleUqFXrkzy8PZJAaxwKq3 Yh6tHgUVTHzqAJYZgfrSkmQl+tlhSOaoSmk4rDz2eXmKz5nvC5HS07ok+6WG2gXT To+H+fLN8U9D86/Zu5lLpCQCsThqSp9hQMQxMUgnCZSqbVbksDU+I+xNnwuBwt1g ZDLfXf9Bpl5LIHivSkIaMMkB32hAnUM3GlT+5rn5AM2/xHi1 -----END CERTIFICATE-----Generated at Tue Oct 21 02:06:24 2025 by rpki-client