$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd23a34c-758a-3e45-9705-f51aee131a75.roa File: bd23a34c-758a-3e45-9705-f51aee131a75.roa (raw, json) Hash identifier: XtDx5dO+8aqQURLX3KmTRO+AnHCdhUnVYBEgSoWrYps= Subject key identifier: 9B:4C:C8:72:3A:29:40:ED:EE:2E:7C:CB:18:46:1F:BC:91:C6:93:B3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B785747ABF3EDB7D3D3B92C50 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd23a34c-758a-3e45-9705-f51aee131a75.roa Signing time: Fri 10 Oct 2025 01:00:30 +0000 ROA not before: Fri 10 Oct 2025 01:00:30 +0000 ROA not after: Thu 08 Jan 2026 02:00:30 +0000 asID: 0 IP address blocks: 2620:74:c2::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:78:57:47:ab:f3:ed:b7:d3:d3:b9:2c:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 10 01:00:30 2025 GMT Not After : Jan 8 02:00:30 2026 GMT Subject: CN=e26e1d38-9281-456d-8895-d1e6847a9729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e1:d8:04:b7:10:b3:d2:2f:78:06:ae:f6:53: 6e:d3:f2:6a:ab:80:cf:cc:d6:02:fb:08:6d:db:c4: 0b:ef:47:3f:10:27:ef:c5:77:8e:d7:06:a6:43:78: 8e:ac:be:e2:ca:a8:77:68:02:3f:56:f2:b8:78:26: 72:a9:e3:b4:d2:bf:c0:c4:9a:a0:8f:5b:23:05:4a: 68:9b:07:78:ff:07:f8:8b:44:d9:43:fc:ff:dc:fd: 4c:d8:69:b8:41:6e:74:36:77:a3:76:85:d4:f3:15: 57:84:b5:19:56:a8:a4:e1:98:68:8c:56:32:67:26: 39:af:7d:fd:8e:d1:b6:e8:f3:35:54:f7:2d:7e:03: b2:ed:8e:ff:01:34:a5:95:a1:bf:b8:d0:09:5d:df: 8a:e8:fa:74:a2:9f:20:16:93:65:7a:07:c4:29:0d: 30:f0:76:4a:3b:be:95:26:5c:f3:34:a3:d3:9c:2c: 6c:ae:4a:64:85:2b:39:9b:57:18:68:50:2d:52:91: d8:23:ed:2b:30:4b:9c:55:6b:d5:0c:ed:fe:83:a8: 60:cb:37:95:67:8c:51:99:33:23:71:0b:1e:16:41: c9:dc:b6:8a:9e:9c:fa:94:aa:68:3d:e0:5c:5c:21: 92:a7:ff:9b:50:93:6e:d6:5e:e5:36:2a:e3:d3:3c: f5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:4C:C8:72:3A:29:40:ED:EE:2E:7C:CB:18:46:1F:BC:91:C6:93:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd23a34c-758a-3e45-9705-f51aee131a75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:c2::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:1b:92:46:da:03:23:2a:dc:e5:3c:70:67:2a:ac:25:1e:40: 90:db:07:b1:2c:94:b7:94:2f:8b:f9:f8:35:4b:09:9b:8e:84: 37:06:c9:79:a9:22:0f:7b:c5:5d:1d:00:e6:12:50:45:05:b4: 64:0c:7b:a1:19:a1:33:92:4b:c1:f0:32:ea:74:16:5b:74:ef: 0b:53:1a:dc:1d:7e:3c:e8:52:6f:42:94:4c:99:79:60:56:62: 56:74:83:ce:b4:80:03:8e:72:1d:ed:46:89:32:ce:6e:02:d4: ca:f0:bb:db:61:4b:a9:de:f7:22:6b:79:a0:b9:67:ae:95:fe: 45:eb:43:d0:94:c1:fe:91:2b:d3:be:94:77:90:a7:a0:48:55: b6:2d:08:f6:33:46:3b:4e:7a:a9:70:18:52:03:0b:3d:31:9a: d8:ad:f2:6c:c4:ae:e9:61:fb:1f:b2:cd:d7:37:94:2e:e6:96: 3b:bf:18:94:d8:8a:37:4b:47:ad:07:49:4d:e7:6d:0c:0c:ab: 14:21:98:f6:55:4f:d9:c9:a8:f4:d5:e7:53:31:64:d3:f7:80: 34:1e:a4:cd:42:8d:85:08:4a:30:6a:a1:89:bd:26:aa:fd:a9: 4c:6f:00:a9:a5:8e:f7:bc:20:3f:c9:8b:62:13:16:13:f5:49: b0:8a:33:d0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt4V0er8+2309O5LFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMDAxMDAzMFoXDTI2MDEwODAyMDAzMFowLzEtMCsGA1UEAxMk ZTI2ZTFkMzgtOTI4MS00NTZkLTg4OTUtZDFlNjg0N2E5NzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+HYBLcQs9IveAau9lNu0/Jqq4DPzNYC+wht 28QL70c/ECfvxXeO1wamQ3iOrL7iyqh3aAI/VvK4eCZyqeO00r/AxJqgj1sjBUpo mwd4/wf4i0TZQ/z/3P1M2Gm4QW50NnejdoXU8xVXhLUZVqik4ZhojFYyZyY5r339 jtG26PM1VPctfgOy7Y7/ATSllaG/uNAJXd+K6Pp0op8gFpNlegfEKQ0w8HZKO76V JlzzNKPTnCxsrkpkhSs5m1cYaFAtUpHYI+0rMEucVWvVDO3+g6hgyzeVZ4xRmTMj cQseFkHJ3LaKnpz6lKpoPeBcXCGSp/+bUJNu1l7lNirj0zz1aQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJtMyHI6KUDt7i58yxhGH7yRxpOzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmQyM2EzNGMtNzU4YS0z ZTQ1LTk3MDUtZjUxYWVlMTMxYTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJiAAdADC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADAbkkbaAyMq3OU8cGcqrCUeQJDbB7EslLeUL4v5+DVLCZuOhDcG yXmpIg97xV0dAOYSUEUFtGQMe6EZoTOSS8HwMup0Flt07wtTGtwdfjzoUm9ClEyZ eWBWYlZ0g860gAOOch3tRokyzm4C1Mrwu9thS6ne9yJreaC5Z66V/kXrQ9CUwf6R K9O+lHeQp6BIVbYtCPYzRjtOeqlwGFIDCz0xmtit8mzErulh+x+yzdc3lC7mlju/ GJTYijdLR60HSU3nbQwMqxQhmPZVT9nJqPTV51MxZNP3gDQepM1CjYUISjBqoYm9 Jqr9qUxvAKmljve8ID/Ji2ITFhP1SbCKM9A= -----END CERTIFICATE-----Generated at Sun Oct 19 23:48:48 2025 by rpki-client