$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0ae18fcd-1d24-3e96-b326-4a537c734928.roa File: 0ae18fcd-1d24-3e96-b326-4a537c734928.roa (raw, json) Hash identifier: FbDNAx9D2DtpAcCOtFEfmO+xlkX72vx0yBmPL0KgUDQ= Subject key identifier: 48:7C:D4:4C:D6:59:35:B2:BD:BB:27:86:3D:43:D3:10:FB:57:72:8E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B715CDF90DA7FE10B624C4160 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0ae18fcd-1d24-3e96-b326-4a537c734928.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 25485 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:df:90:da:7f:e1:0b:62:4c:41:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=0fb33747-abe9-425a-bff4-b8bc9aa72639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:47:31:de:31:19:38:84:e5:f6:76:8c:6f:33: 71:58:38:e6:ef:bc:5d:59:0d:0b:6d:4d:61:4a:27: 6d:49:20:ea:8f:42:00:ec:47:c0:7c:cc:64:8f:0d: 5a:cf:69:65:4c:17:5e:f2:80:a1:9f:75:19:fa:10: 8f:91:65:d1:80:07:4d:ec:c8:36:71:e8:b5:0a:c3: be:3f:f3:dd:9c:ab:d6:a6:c9:ae:0d:e3:13:b2:b5: eb:85:f9:58:ba:be:07:82:bf:48:b5:58:07:a8:64: c6:3a:0d:e5:74:1e:1f:3d:19:43:ef:28:39:99:55: 79:47:c7:d2:88:2e:82:87:14:70:8e:ff:80:50:e3: 15:d5:f2:48:00:85:25:49:d9:58:60:e7:d6:c6:9a: dd:9b:39:63:ef:cf:10:f9:e1:63:08:96:ca:14:bb: cc:fa:3d:2a:43:d4:ef:6e:72:a5:ef:b9:36:cb:8c: 7b:56:56:c9:8c:84:e5:84:af:81:52:bb:66:30:96: 52:02:c2:a4:f1:d2:ed:1f:e0:f3:c5:af:22:dd:cc: 60:a3:7f:1f:99:fb:11:a4:d5:3d:e6:6a:76:2f:4b: 7c:8b:d5:3c:9f:57:7f:46:61:34:73:65:4a:2a:37: 20:8c:bf:00:4d:4b:13:87:40:1e:b0:02:a2:66:59: 3f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:7C:D4:4C:D6:59:35:B2:BD:BB:27:86:3D:43:D3:10:FB:57:72:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0ae18fcd-1d24-3e96-b326-4a537c734928.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:ae:49:dc:b4:12:88:fd:dc:ba:d1:fe:5e:b3:e7:e1:41:78: f3:10:68:d7:a6:21:40:1c:09:65:52:e3:52:8a:c4:3d:63:51: c9:49:d9:45:5c:af:21:f3:a2:63:ad:ec:5b:b0:ed:72:c0:cf: 56:d4:59:d6:c8:39:80:3c:42:e8:d7:b8:fe:9c:9a:49:2d:5d: 12:f9:7b:5e:ee:61:3f:03:76:c8:a7:18:f3:8f:84:24:81:d8: 03:bc:6e:b4:37:c2:4c:74:b9:1d:2b:1b:70:ed:46:c3:d8:19: 43:26:10:79:fc:9a:87:31:e4:1b:64:e1:9a:fd:25:60:db:af: 94:99:83:6d:03:9b:64:f9:f2:4c:32:b4:ff:23:bb:33:31:cc: a7:3f:eb:5c:8d:05:d3:9f:c0:6b:ca:01:c4:b3:9a:70:84:bf: 15:3c:dd:4e:23:37:c4:2c:95:b6:77:a6:f2:42:bb:1c:05:ed: 1c:39:50:a8:07:29:9b:e1:76:61:c2:3a:5a:c3:74:7d:6c:5e: 6f:c4:70:69:39:f0:2a:ed:95:cc:93:58:a2:8a:b7:9d:b5:20: c4:75:c2:8c:d0:e1:bd:06:62:15:2a:c9:91:ea:c2:ca:3e:d2: a1:df:7e:5c:52:91:5f:53:d3:26:9f:f5:95:b8:4f:c3:a5:0e: bc:5c:68:e9 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtxXN+Q2n/hC2JMQWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MGZiMzM3NDctYWJlOS00MjVhLWJmZjQtYjhiYzlhYTcyNjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUcx3jEZOITl9naMbzNxWDjm77xdWQ0LbU1h SidtSSDqj0IA7EfAfMxkjw1az2llTBde8oChn3UZ+hCPkWXRgAdN7Mg2cei1CsO+ P/PdnKvWpsmuDeMTsrXrhflYur4Hgr9ItVgHqGTGOg3ldB4fPRlD7yg5mVV5R8fS iC6ChxRwjv+AUOMV1fJIAIUlSdlYYOfWxprdmzlj788Q+eFjCJbKFLvM+j0qQ9Tv bnKl77k2y4x7VlbJjITlhK+BUrtmMJZSAsKk8dLtH+Dzxa8i3cxgo38fmfsRpNU9 5mp2L0t8i9U8n1d/RmE0c2VKKjcgjL8ATUsTh0AesAKiZlk/uwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEh81EzWWTWyvbsnhj1D0xD7V3KOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGFlMThmY2QtMWQyNC0z ZTk2LWIzMjYtNGE1MzdjNzM0OTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBKrknctBKI/dy60f5es+fhQXjzEGjXpiFAHAll UuNSisQ9Y1HJSdlFXK8h86JjrexbsO1ywM9W1FnWyDmAPELo17j+nJpJLV0S+Xte 7mE/A3bIpxjzj4QkgdgDvG60N8JMdLkdKxtw7UbD2BlDJhB5/JqHMeQbZOGa/SVg 26+UmYNtA5tk+fJMMrT/I7szMcynP+tcjQXTn8BrygHEs5pwhL8VPN1OIzfELJW2 d6byQrscBe0cOVCoBymb4XZhwjpaw3R9bF5vxHBpOfAq7ZXMk1iiiredtSDEdcKM 0OG9BmIVKsmR6sLKPtKh335cUpFfU9Mmn/WVuE/DpQ68XGjp -----END CERTIFICATE-----Generated at Wed Oct 29 20:09:46 2025 by rpki-client