$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bdebf258-3f99-3a71-8734-c806d13f0eb9.roa File: bdebf258-3f99-3a71-8734-c806d13f0eb9.roa (raw, json) Hash identifier: d8CSOhSn36zr1kse+ZvrgVk+jCxnD1PrgTMT5X6DQd0= Subject key identifier: AC:42:E6:6B:C8:19:56:4C:A2:2B:C8:AE:52:4B:F9:1B:71:20:BC:6B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B715CE551BCA8B7A46EF751E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bdebf258-3f99-3a71-8734-c806d13f0eb9.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 397195 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:e5:51:bc:a8:b7:a4:6e:f7:51:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=b2e82254-f4da-42cd-abe4-26afd83db187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:5e:d4:3a:ff:98:eb:5d:18:ec:32:0f:b7:86: 51:fe:e2:29:43:1d:68:4d:a1:9e:21:b4:39:d6:1a: 7c:cd:7c:26:20:60:8b:a3:95:56:ba:b6:96:f9:b0: 24:1f:13:76:1b:2e:07:71:ba:48:15:9a:08:e5:9b: fb:52:20:73:fc:70:2f:b1:23:08:17:f1:83:9b:cf: 92:e7:db:bf:0e:c8:4c:21:5a:f6:e7:fc:2a:d8:df: 51:5f:0a:73:3e:a7:ee:23:b5:99:75:68:97:b2:e2: 00:cf:70:5d:d5:3e:5c:1b:f6:51:a3:b6:b5:0f:8e: 46:0d:a0:af:e5:48:9c:ac:79:dc:c5:ae:c7:15:bc: 04:64:f1:75:91:c5:d1:36:59:77:01:b9:55:a7:ce: 58:2d:b3:9f:df:b8:28:4a:8d:56:21:f4:8f:11:2e: 0f:ae:5f:47:c0:54:7f:00:ea:d5:70:dd:15:62:d8: e3:b5:4e:8d:6c:da:3c:bd:38:93:64:f9:c8:80:b3: e0:9d:a2:cc:17:75:01:a7:00:da:8f:9c:58:63:79: bb:d3:e8:b4:a5:e1:ab:51:8a:ac:50:c2:e4:ac:54: d3:3d:c6:f3:60:54:4b:e9:42:06:db:18:12:fa:a7: 68:e1:62:dd:7a:22:96:2a:14:69:5b:37:f8:26:9d: 6d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:42:E6:6B:C8:19:56:4C:A2:2B:C8:AE:52:4B:F9:1B:71:20:BC:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bdebf258-3f99-3a71-8734-c806d13f0eb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:1f:df:19:2c:cb:e2:01:87:21:ae:cd:ba:e3:47:bf:f2:6e: e8:21:f0:d2:7d:42:35:ee:d6:a0:5e:96:88:23:7a:51:a1:ad: 4a:37:3e:58:e7:c7:41:03:2c:74:66:81:5c:89:16:c9:9d:53: 1d:fc:08:fd:1b:06:70:37:01:8c:4d:c3:91:8e:64:93:0a:40: c0:4b:6e:16:5f:f0:a7:53:2f:71:31:29:b1:e5:74:b2:26:03: fd:22:6a:b0:05:1c:7f:d8:4a:0e:52:9e:92:9a:73:97:c6:43: 29:ae:48:fd:ec:3c:b3:5d:98:10:73:de:4a:6e:e8:e1:3c:5e: 6f:f6:b6:e9:20:c8:6a:30:de:13:3a:37:2b:50:b6:2b:79:03: aa:e2:02:59:80:a2:95:6f:99:46:6e:f4:6b:c0:93:f8:74:b4: 2b:96:8c:c2:62:7b:a0:b3:bb:61:c4:05:13:af:de:e4:f6:4d: fd:34:53:85:81:8b:5e:b6:a4:cf:40:3b:52:ef:2d:8f:6e:d1: d2:ec:1f:db:a0:73:97:eb:2d:a4:05:73:a7:80:9c:2c:56:b6: dc:b6:dd:2f:64:86:ea:18:af:a2:d6:64:40:e5:17:f1:c6:c3: a1:b1:8c:8c:60:e8:84:a7:8e:b4:47:ff:ba:d3:f6:c7:3b:ae: 27:ff:8d:bf -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtxXOVRvKi3pG73UeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YjJlODIyNTQtZjRkYS00MmNkLWFiZTQtMjZhZmQ4M2RiMTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhl7UOv+Y610Y7DIPt4ZR/uIpQx1oTaGeIbQ5 1hp8zXwmIGCLo5VWuraW+bAkHxN2Gy4HcbpIFZoI5Zv7UiBz/HAvsSMIF/GDm8+S 59u/DshMIVr25/wq2N9RXwpzPqfuI7WZdWiXsuIAz3Bd1T5cG/ZRo7a1D45GDaCv 5UicrHncxa7HFbwEZPF1kcXRNll3AblVp85YLbOf37goSo1WIfSPES4Prl9HwFR/ AOrVcN0VYtjjtU6NbNo8vTiTZPnIgLPgnaLMF3UBpwDaj5xYY3m70+i0peGrUYqs UMLkrFTTPcbzYFRL6UIG2xgS+qdo4WLdeiKWKhRpWzf4Jp1tFwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKxC5mvIGVZMoivIrlJL+RtxILxrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmRlYmYyNTgtM2Y5OS0z YTcxLTg3MzQtYzgwNmQxM2YwZWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA3H98ZLMviAYchrs2640e/8m7oIfDSfUI17tag XpaII3pRoa1KNz5Y58dBAyx0ZoFciRbJnVMd/Aj9GwZwNwGMTcORjmSTCkDAS24W X/CnUy9xMSmx5XSyJgP9ImqwBRx/2EoOUp6SmnOXxkMprkj97DyzXZgQc95Kbujh PF5v9rbpIMhqMN4TOjcrULYreQOq4gJZgKKVb5lGbvRrwJP4dLQrlozCYnugs7th xAUTr97k9k39NFOFgYtetqTPQDtS7y2PbtHS7B/boHOX6y2kBXOngJwsVrbctt0v ZIbqGK+i1mRA5RfxxsOhsYyMYOiEp460R/+60/bHO64n/42/ -----END CERTIFICATE-----Generated at Mon Oct 20 08:15:01 2025 by rpki-client