$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb9991f1-5fbf-33f6-a6ab-40b60b97b971.roa File: bb9991f1-5fbf-33f6-a6ab-40b60b97b971.roa (raw, json) Hash identifier: 5MG2Tu5WEV55ewFPwGjLDrCn1AtLlv1C7vhag4SHpPI= Subject key identifier: EF:16:14:02:68:65:27:E3:57:A0:6D:8B:BA:7C:FA:A4:6C:3E:B1:F9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E7905779ADB05E6E60A140 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb9991f1-5fbf-33f6-a6ab-40b60b97b971.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 397212 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:90:57:79:ad:b0:5e:6e:60:a1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=6da58ff4-9075-454b-b7af-36f4051155cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:12:df:57:01:c5:35:c1:f5:73:ba:7e:59:83: 0f:69:c6:27:41:65:cf:ec:0c:08:b3:df:d8:b7:d8: 1f:95:d6:71:4a:92:ff:a6:05:b1:2d:5b:71:07:11: 5e:14:3a:87:46:f2:ed:3e:1b:59:eb:6a:6e:19:a4: 20:10:cf:d0:c6:35:d5:80:a0:9c:bc:5a:b2:49:c2: 8f:44:44:92:53:48:51:cc:e1:73:fd:51:e3:1a:16: 08:3d:e0:22:cc:d0:c2:3c:6e:09:5e:9a:e7:f9:5a: 51:77:d2:6e:84:93:80:29:7e:31:c8:bb:f3:f7:09: 45:4c:90:d0:b8:28:e5:da:a2:41:c8:31:7f:d5:e5: e6:0e:42:11:06:23:34:c6:9d:e2:e0:50:44:f8:4d: 96:ee:31:5b:aa:68:89:58:56:0e:38:b6:a9:5d:05: 0d:e2:ef:f9:68:64:e0:ac:b9:a0:a0:51:41:14:d8: cf:25:25:76:71:ea:9e:c0:02:b9:7a:fc:d4:8a:27: ae:60:60:26:19:b6:87:7d:a8:30:3d:c8:56:af:e0: c1:03:00:43:a1:87:15:92:f8:b2:96:38:06:75:67: 9c:5b:3c:41:92:f4:d6:66:52:9b:9a:11:fb:29:38: 53:48:86:2d:65:93:64:0b:bc:f1:f8:16:7f:d5:5c: 1e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:16:14:02:68:65:27:E3:57:A0:6D:8B:BA:7C:FA:A4:6C:3E:B1:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb9991f1-5fbf-33f6-a6ab-40b60b97b971.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:dd:07:fe:a4:f6:0b:1b:e5:39:9b:c8:97:c0:36:94:99:95: d2:68:a9:d2:a0:0c:a0:27:d3:de:15:1e:de:fb:3c:cc:47:f9: b8:a9:25:59:a8:56:63:a7:a6:6c:d2:10:f1:58:f4:24:a1:92: 23:91:51:aa:48:ec:7d:7b:45:b5:9f:93:f8:1c:5c:30:09:a8: f4:6c:67:48:7d:76:d5:ab:3a:34:df:4f:6c:bf:40:51:34:1b: fa:27:e1:4b:b0:92:74:7c:d6:dd:c2:4f:4b:d8:88:52:89:2d: 96:87:11:c5:6f:ff:0e:a1:49:b4:73:ed:6d:41:b5:9a:f4:ed: 5c:90:a1:c2:f8:a3:09:07:45:ee:c7:66:e0:d1:2a:4e:cf:67: fe:3a:8f:56:90:5c:54:f5:c5:69:93:bc:06:8d:a9:72:e8:97: 66:33:69:1f:1f:0f:f9:03:1d:b8:97:8a:e6:71:0c:b1:96:72: 19:57:55:9a:a2:e1:c6:2e:f7:fa:e0:c6:e2:e4:2c:d8:c8:54: ea:0a:36:d6:12:08:73:60:83:de:2c:94:28:e1:c5:f0:28:76: e8:95:94:d0:55:68:e5:06:0c:7e:4d:dc:0a:0e:7e:65:8d:8e: ff:16:f2:a5:1f:d6:72:8a:32:d3:f9:6f:4a:83:08:bc:65:96: f3:42:a0:dc -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE55BXea2wXm5goUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk NmRhNThmZjQtOTA3NS00NTRiLWI3YWYtMzZmNDA1MTE1NWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBLfVwHFNcH1c7p+WYMPacYnQWXP7AwIs9/Y t9gfldZxSpL/pgWxLVtxBxFeFDqHRvLtPhtZ62puGaQgEM/QxjXVgKCcvFqyScKP RESSU0hRzOFz/VHjGhYIPeAizNDCPG4JXprn+VpRd9JuhJOAKX4xyLvz9wlFTJDQ uCjl2qJByDF/1eXmDkIRBiM0xp3i4FBE+E2W7jFbqmiJWFYOOLapXQUN4u/5aGTg rLmgoFFBFNjPJSV2ceqewAK5evzUiieuYGAmGbaHfagwPchWr+DBAwBDoYcVkviy ljgGdWecWzxBkvTWZlKbmhH7KThTSIYtZZNkC7zx+BZ/1VweJQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFO8WFAJoZSfjV6Bti7p8+qRsPrH5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmI5OTkxZjEtNWZiZi0z M2Y2LWE2YWItNDBiNjBiOTdiOTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBh3Qf+pPYLG+U5m8iXwDaUmZXSaKnSoAygJ9Pe FR7e+zzMR/m4qSVZqFZjp6Zs0hDxWPQkoZIjkVGqSOx9e0W1n5P4HFwwCaj0bGdI fXbVqzo0309sv0BRNBv6J+FLsJJ0fNbdwk9L2IhSiS2WhxHFb/8OoUm0c+1tQbWa 9O1ckKHC+KMJB0Xux2bg0SpOz2f+Oo9WkFxU9cVpk7wGjaly6JdmM2kfHw/5Ax24 l4rmcQyxlnIZV1WaouHGLvf64Mbi5CzYyFTqCjbWEghzYIPeLJQo4cXwKHbolZTQ VWjlBgx+TdwKDn5ljY7/FvKlH9ZyijLT+W9Kgwi8ZZbzQqDc -----END CERTIFICATE-----Generated at Mon Oct 20 10:23:42 2025 by rpki-client