$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bc7644f9-052c-318e-84a6-4156dfcc073d.roa File: bc7644f9-052c-318e-84a6-4156dfcc073d.roa (raw, json) Hash identifier: e2W/KO4v1kCePSvNCPNCCVLG1AM/hBqW8VMVqJFTKLM= Subject key identifier: D9:F2:78:1A:2A:BE:DB:60:8C:4C:71:75:8C:12:08:92:D1:53:BC:69 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E795DFFAEEA046A508EA80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bc7644f9-052c-318e-84a6-4156dfcc073d.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 397194 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:95:df:fa:ee:a0:46:a5:08:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=646d630e-2915-4857-834e-c00552476707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:91:2c:8a:4e:53:38:e2:23:72:47:56:8a:58: 63:6f:ea:cf:7b:4b:92:6a:cd:a6:b7:4f:2e:2d:c2: dd:52:4d:19:37:c1:6c:ea:67:ca:13:69:53:aa:47: 41:52:75:8a:d9:32:8e:e5:d2:a4:7d:67:a1:ca:da: bc:67:45:4b:3e:da:0c:7d:1d:92:dd:5a:35:71:17: 1c:0a:36:94:5d:41:0f:45:e6:d1:40:98:45:cc:d8: e5:87:35:c1:62:a1:1a:07:a9:62:ae:00:d6:38:65: 78:e5:69:8e:af:f8:b5:67:4b:ad:54:bf:5a:24:10: d0:42:5b:09:9c:82:86:6d:eb:71:80:b8:af:0a:97: dd:d0:27:56:f6:c7:57:d6:1a:6e:73:90:ad:91:dd: 6c:31:69:6b:0d:cc:ca:e9:a8:5f:ce:18:6d:cd:56: 64:dc:91:5f:71:5e:56:06:20:5a:da:ab:30:13:34: c6:79:5e:ed:a1:d5:1f:05:f8:5e:3f:5a:f9:0d:10: 99:23:c6:1f:02:d4:d6:7a:77:3a:d4:5d:75:a4:1b: ff:2f:55:2d:fa:e5:6c:5a:6b:c9:9d:81:66:df:d9: 02:da:1f:25:f2:55:5c:ea:99:39:ff:68:46:6f:e6: 86:6f:61:db:5d:dc:df:f4:ab:4d:1b:81:91:ae:b8: e4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F2:78:1A:2A:BE:DB:60:8C:4C:71:75:8C:12:08:92:D1:53:BC:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bc7644f9-052c-318e-84a6-4156dfcc073d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:7e:2c:75:70:ac:30:33:4d:4d:cb:c6:25:eb:a8:84:a3:b2: a0:20:8f:af:f8:a3:c2:bd:bf:7a:54:9f:a8:b2:60:3f:2a:87: 13:d0:3f:07:47:91:75:28:cf:b1:8a:6d:c8:c8:ae:f2:b0:17: 29:2c:f7:5e:cf:07:1b:90:97:ea:9f:70:24:2a:da:ab:00:54: 2d:ab:38:05:bf:86:42:d0:93:22:19:cb:84:85:da:12:8c:c5: 62:dd:cf:f4:5f:45:d8:2e:66:59:5e:91:f6:cb:5f:24:b6:c0: a7:93:c4:cd:fc:36:f0:e4:fc:23:bb:d6:af:aa:b3:46:ea:93: e3:64:69:49:83:dd:d7:58:fb:f6:6f:5e:4b:7e:40:1b:39:7c: 1c:f3:d6:fd:cb:6d:ea:c6:1a:ba:05:e0:6b:1d:ca:1a:9d:78: 1f:ac:d3:b3:8a:c7:bc:fe:31:b0:37:81:c1:ed:a3:aa:7d:8d: 7a:97:96:73:84:dd:d3:d7:2b:5f:fe:66:c6:a3:a4:e7:1f:e8: 76:b2:de:97:87:df:05:d6:cd:95:f0:b1:ab:16:e3:36:1e:81: 4a:a2:33:6c:e5:90:a1:66:93:33:f3:7e:50:b1:ae:21:99:ba: cd:fc:72:49:97:71:d2:bc:b9:a0:a0:77:59:47:50:5e:f1:ce: c7:9d:e5:6d -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE55Xf+u6gRqUI6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk NjQ2ZDYzMGUtMjkxNS00ODU3LTgzNGUtYzAwNTUyNDc2NzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZEsik5TOOIjckdWilhjb+rPe0uSas2mt08u LcLdUk0ZN8Fs6mfKE2lTqkdBUnWK2TKO5dKkfWehytq8Z0VLPtoMfR2S3Vo1cRcc CjaUXUEPRebRQJhFzNjlhzXBYqEaB6lirgDWOGV45WmOr/i1Z0utVL9aJBDQQlsJ nIKGbetxgLivCpfd0CdW9sdX1hpuc5Ctkd1sMWlrDczK6ahfzhhtzVZk3JFfcV5W BiBa2qswEzTGeV7todUfBfheP1r5DRCZI8YfAtTWenc61F11pBv/L1Ut+uVsWmvJ nYFm39kC2h8l8lVc6pk5/2hGb+aGb2HbXdzf9KtNG4GRrrjkGQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNnyeBoqvttgjExxdYwSCJLRU7xpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmM3NjQ0ZjktMDUyYy0z MThlLTg0YTYtNDE1NmRmY2MwNzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAVfix1cKwwM01Ny8Yl66iEo7KgII+v+KPCvb96 VJ+osmA/KocT0D8HR5F1KM+xim3IyK7ysBcpLPdezwcbkJfqn3AkKtqrAFQtqzgF v4ZC0JMiGcuEhdoSjMVi3c/0X0XYLmZZXpH2y18ktsCnk8TN/Dbw5Pwju9avqrNG 6pPjZGlJg93XWPv2b15LfkAbOXwc89b9y23qxhq6BeBrHcoanXgfrNOzise8/jGw N4HB7aOqfY16l5ZzhN3T1ytf/mbGo6TnH+h2st6Xh98F1s2V8LGrFuM2HoFKojNs 5ZChZpMz835Qsa4hmbrN/HJJl3HSvLmgoHdZR1Be8c7HneVt -----END CERTIFICATE-----Generated at Mon Oct 20 13:20:54 2025 by rpki-client