$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b8d580d-1adf-3325-96ec-121ffd843302.roa File: 2b8d580d-1adf-3325-96ec-121ffd843302.roa (raw, json) Hash identifier: E1x6rzED0NyKigqxYB9GVrhfkKypY/BeL0gCOQBCmLw= Subject key identifier: 28:FF:82:08:94:15:94:AA:D6:89:01:1F:AF:A5:80:B3:AB:1D:94:9F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B715CE27ACD886E37B9186780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b8d580d-1adf-3325-96ec-121ffd843302.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 396599 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:e2:7a:cd:88:6e:37:b9:18:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=ef8e7b18-9b59-4763-80cb-832ceb4c79cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:50:fe:4e:43:92:e7:f6:29:5e:ea:75:a7:5a: 58:bb:bb:50:77:16:f5:e2:22:9c:be:ea:3a:5a:4a: cd:63:ba:59:10:6b:24:fc:04:ad:7e:fb:d2:50:23: b4:9c:23:d2:91:f9:f3:21:18:91:5d:7b:70:10:47: 67:8d:ce:2c:f9:ea:a0:ed:99:e1:54:42:68:75:f3: 2a:31:fa:b4:ef:9a:b2:ab:28:0d:b9:d1:45:a7:84: d8:6b:08:1f:19:39:86:7b:89:e8:f9:6b:59:1e:5c: 36:7f:6f:1c:c2:38:4e:b0:c8:52:c4:26:8b:83:21: 14:ff:d3:e9:d5:59:c5:da:05:46:5a:77:f1:6a:b0: 61:61:ac:dc:18:33:32:6f:85:96:e4:a5:ca:b1:2d: 9f:18:18:cc:0c:9a:65:70:fc:af:ca:b2:3b:6a:d2: 79:43:43:6a:ea:7f:a8:e4:05:68:05:aa:a1:25:61: a7:f9:f1:b2:88:9c:ec:60:8a:50:ad:24:c5:65:42: 74:a0:d7:49:cb:df:e2:d3:2a:3a:fd:f1:a7:01:52: c5:a8:04:e8:53:75:3b:e1:50:c5:04:d8:04:c5:1e: a2:30:ad:1c:9a:a9:7c:1c:8b:e6:bb:72:cb:e4:ed: 8e:c1:d3:62:f6:c5:0c:30:0e:1a:71:4b:61:85:ff: a8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:FF:82:08:94:15:94:AA:D6:89:01:1F:AF:A5:80:B3:AB:1D:94:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b8d580d-1adf-3325-96ec-121ffd843302.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:b7:d8:48:d7:e5:9a:fe:54:3d:06:93:c3:6c:c4:59:ef:c4: c9:d3:39:0b:a4:be:13:14:a2:5d:56:0e:b1:06:4c:d0:88:f8: 73:45:e2:e1:78:62:97:b1:bf:c0:31:05:cb:a8:23:5d:e7:b4: 03:6b:2f:9c:f1:35:7d:23:77:44:98:b7:ef:da:9f:06:9d:a4: 36:f8:ff:c5:53:78:44:28:c4:98:e0:86:54:c8:0f:a4:4d:19: ca:35:9d:17:ae:83:9b:e3:9c:d6:ac:a6:45:34:0a:40:65:1e: c3:71:09:76:10:30:24:a2:44:45:2a:dc:88:46:b0:fc:03:13: 8e:05:2c:9b:75:15:79:00:78:ed:6d:a6:3f:28:6e:18:ca:5c: 79:b2:67:b8:75:bc:11:e9:72:e2:9b:ad:b6:df:87:55:67:a1: 19:fe:56:41:d2:a9:14:b3:15:2d:47:db:c7:56:73:d7:64:f2: 1a:cb:8b:00:b7:f1:81:19:79:4f:59:56:a1:84:17:e4:18:f7: 7f:52:87:55:9b:d7:30:a6:4c:5c:b7:65:66:c0:e9:77:10:0f: e2:16:67:78:b2:44:65:c1:ae:66:0a:73:81:1f:ff:a2:73:d9: 5e:50:de:40:c5:13:62:3d:53:fd:9b:df:16:13:fc:2e:fc:d9: f4:e6:9c:9b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtxXOJ6zYhuN7kYZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ZWY4ZTdiMTgtOWI1OS00NzYzLTgwY2ItODMyY2ViNGM3OWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1D+TkOS5/YpXup1p1pYu7tQdxb14iKcvuo6 WkrNY7pZEGsk/AStfvvSUCO0nCPSkfnzIRiRXXtwEEdnjc4s+eqg7ZnhVEJodfMq Mfq075qyqygNudFFp4TYawgfGTmGe4no+WtZHlw2f28cwjhOsMhSxCaLgyEU/9Pp 1VnF2gVGWnfxarBhYazcGDMyb4WW5KXKsS2fGBjMDJplcPyvyrI7atJ5Q0Nq6n+o 5AVoBaqhJWGn+fGyiJzsYIpQrSTFZUJ0oNdJy9/i0yo6/fGnAVLFqAToU3U74VDF BNgExR6iMK0cmql8HIvmu3LL5O2OwdNi9sUMMA4acUthhf+oTwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCj/ggiUFZSq1okBH6+lgLOrHZSfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmI4ZDU4MGQtMWFkZi0z MzI1LTk2ZWMtMTIxZmZkODQzMzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBdt9hI1+Wa/lQ9BpPDbMRZ78TJ0zkLpL4TFKJd Vg6xBkzQiPhzReLheGKXsb/AMQXLqCNd57QDay+c8TV9I3dEmLfv2p8GnaQ2+P/F U3hEKMSY4IZUyA+kTRnKNZ0XroOb45zWrKZFNApAZR7DcQl2EDAkokRFKtyIRrD8 AxOOBSybdRV5AHjtbaY/KG4Yylx5sme4dbwR6XLim62234dVZ6EZ/lZB0qkUsxUt R9vHVnPXZPIay4sAt/GBGXlPWVahhBfkGPd/UodVm9cwpkxct2VmwOl3EA/iFmd4 skRlwa5mCnOBH/+ic9leUN5AxRNiPVP9m98WE/wu/Nn05pyb -----END CERTIFICATE-----Generated at Wed Oct 29 20:39:51 2025 by rpki-client