$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/baf5385d-2f68-372a-9c60-6ed99c881111.roa File: baf5385d-2f68-372a-9c60-6ed99c881111.roa (raw, json) Hash identifier: /1w5Kh8q936NYcnkhFjKY27+qy526npsXOuK5t+Ixvs= Subject key identifier: 43:55:3E:DD:C9:12:07:1A:62:04:6F:47:D9:4E:81:AA:13:EC:83:05 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E798A7CBEB8E6086C55D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/baf5385d-2f68-372a-9c60-6ed99c881111.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 396592 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:98:a7:cb:eb:8e:60:86:c5:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=f1ab6ab4-9b71-4bfb-aea5-3df6ee6e2815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:33:ac:3e:ef:18:d1:11:0e:c3:9b:a2:b7:ed: 93:b4:db:3c:37:6b:f2:da:8b:15:a0:34:29:98:f2: cf:e0:a5:09:77:a3:b6:96:37:a2:4c:c3:0f:58:f9: 8c:55:3f:3d:1e:9d:e1:c9:39:0d:40:fd:b7:eb:48: 56:d7:5b:07:ad:d5:a7:7c:6e:aa:b6:1b:5d:50:7f: b7:70:30:db:60:a8:1c:33:51:bc:76:5d:96:aa:db: 7e:8b:c5:4e:1b:50:20:84:75:23:9d:3b:2c:a5:0d: c9:fe:50:e3:62:a5:38:e9:70:a8:86:81:4a:56:51: 5a:83:fd:4f:10:b7:17:b3:ee:e2:82:42:0e:59:f7: 60:80:a1:75:78:1e:1a:a1:c6:9e:cb:5c:03:3a:ed: c5:21:e1:ec:fa:88:5a:f5:f2:0a:f8:67:f3:7b:72: e0:36:1b:02:5f:74:24:95:fa:ba:28:08:d1:af:d1: ed:0a:d9:58:03:a8:4e:34:1d:e9:74:c5:c3:38:54: c4:49:83:43:fe:21:17:ab:ec:25:45:d6:ac:5e:17: 03:ed:9b:b8:a3:f9:61:57:1b:df:10:92:a5:86:6e: d9:1b:98:92:75:99:28:99:cb:5d:11:ed:77:52:32: 08:c8:b1:10:21:d0:d2:36:38:a3:d7:83:45:29:19: 48:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:55:3E:DD:C9:12:07:1A:62:04:6F:47:D9:4E:81:AA:13:EC:83:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/baf5385d-2f68-372a-9c60-6ed99c881111.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:8e:f4:6e:8e:58:94:e6:ea:ca:26:93:a1:d4:85:89:2c:0a: 15:62:1f:9c:78:96:a6:65:39:08:35:68:51:7b:54:32:0e:43: 01:10:77:13:2c:ca:ad:fe:b5:30:32:96:41:cd:82:6e:40:cf: 51:49:1a:d0:fd:97:01:aa:b2:1f:47:a7:7b:6a:cd:85:be:99: f6:ee:8b:61:78:ee:11:1e:d6:48:f4:e6:9c:f5:8f:78:a4:c5: bc:6e:8f:6a:47:9b:00:3c:e5:5b:cc:0f:e4:04:9f:d6:5d:3d: 8a:f2:91:7b:ea:b2:49:f3:48:56:bd:6a:f8:48:3a:34:28:23: 99:a8:ca:35:de:26:1d:4f:dc:f9:26:58:81:97:b0:10:e7:7d: e6:51:04:ae:57:06:dd:37:ba:59:39:50:5a:a0:fb:f6:bb:ce: 93:17:bb:78:40:a7:99:df:bf:58:2d:48:e5:a1:d6:a9:38:f4: 9e:66:bd:8b:78:63:d6:41:a8:e5:86:97:8d:cd:91:f6:ce:3a: ff:2c:55:7b:3d:cb:76:aa:97:f0:94:c1:9d:d4:3a:b4:50:34: fe:f4:07:fe:d6:2e:0a:eb:dd:64:29:aa:05:29:c4:32:1c:12: da:16:ee:fb:e0:fb:af:41:4b:c7:d7:f7:97:d7:54:57:9b:5b: 83:a1:4a:1c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE55iny+uOYIbFXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk ZjFhYjZhYjQtOWI3MS00YmZiLWFlYTUtM2RmNmVlNmUyODE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTOsPu8Y0REOw5uit+2TtNs8N2vy2osVoDQp mPLP4KUJd6O2ljeiTMMPWPmMVT89Hp3hyTkNQP2360hW11sHrdWnfG6qthtdUH+3 cDDbYKgcM1G8dl2Wqtt+i8VOG1AghHUjnTsspQ3J/lDjYqU46XCohoFKVlFag/1P ELcXs+7igkIOWfdggKF1eB4aocaey1wDOu3FIeHs+oha9fIK+Gfze3LgNhsCX3Qk lfq6KAjRr9HtCtlYA6hONB3pdMXDOFTESYND/iEXq+wlRdasXhcD7Zu4o/lhVxvf EJKlhm7ZG5iSdZkomctdEe13UjIIyLEQIdDSNjij14NFKRlIgwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFENVPt3JEgcaYgRvR9lOgaoT7IMFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmFmNTM4NWQtMmY2OC0z NzJhLTljNjAtNmVkOTljODgxMTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBsjvRujliU5urKJpOh1IWJLAoVYh+ceJamZTkI NWhRe1QyDkMBEHcTLMqt/rUwMpZBzYJuQM9RSRrQ/ZcBqrIfR6d7as2Fvpn27oth eO4RHtZI9Oac9Y94pMW8bo9qR5sAPOVbzA/kBJ/WXT2K8pF76rJJ80hWvWr4SDo0 KCOZqMo13iYdT9z5JliBl7AQ533mUQSuVwbdN7pZOVBaoPv2u86TF7t4QKeZ379Y LUjlodapOPSeZr2LeGPWQajlhpeNzZH2zjr/LFV7Pct2qpfwlMGd1Dq0UDT+9Af+ 1i4K691kKaoFKcQyHBLaFu774PuvQUvH1/eX11RXm1uDoUoc -----END CERTIFICATE-----Generated at Mon Oct 20 08:12:17 2025 by rpki-client