$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/876852cb-0c93-3cf3-9c07-e73af46b04a8.roa File: 876852cb-0c93-3cf3-9c07-e73af46b04a8.roa (raw, json) Hash identifier: Thg3BQL9kG9svMZ6aZOYFIdzgiR7zPXH8Jp4dhqoMQE= Subject key identifier: 53:6B:AC:CA:9B:65:EA:D6:AC:D2:AB:C9:5A:F8:85:34:C9:D1:F7:5E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E799E5FC8C9DAEAF6EE580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/876852cb-0c93-3cf3-9c07-e73af46b04a8.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 397206 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:99:e5:fc:8c:9d:ae:af:6e:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=b714c1bb-3e81-4812-b3ed-0b125e5347aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7d:46:fd:9d:0a:48:af:e9:00:36:63:13:84: 9e:ba:b4:df:67:c7:29:6c:41:af:f6:93:b3:b5:42: 82:ec:24:d4:15:64:ed:cc:f2:46:7a:bb:bf:84:48: 78:ed:8e:9f:97:f6:89:66:b9:40:a5:0f:29:b1:2d: b1:51:3f:72:73:21:91:8e:d8:24:1f:7c:aa:df:49: 57:e3:a8:35:1d:b7:b3:e6:b3:fe:3f:ba:70:36:a3: 29:ac:ec:d2:59:27:ba:f3:08:ac:c0:ed:75:de:de: c6:eb:fe:20:cd:11:02:58:5e:02:bf:e9:69:8d:14: 30:7b:84:cc:19:50:ce:cb:22:86:0b:f6:38:dd:3e: c7:fe:72:7e:a0:6d:83:1a:57:54:5b:58:be:f2:54: 14:67:d9:f9:a1:ac:6e:5e:c1:28:3b:b3:64:44:19: 85:31:47:dd:dc:74:f2:c5:2c:b2:99:0a:b5:3c:f8: 5f:f7:b7:5a:be:99:78:64:53:29:11:e6:f3:ab:3f: d8:33:5b:bf:11:e4:d2:a0:90:61:c9:46:7e:2f:08: 7e:fe:ea:5c:15:34:2a:f7:ad:26:9e:18:76:f8:a9: f3:3c:3d:9a:37:3a:22:09:d0:13:e6:38:96:ed:0c: 91:c7:28:58:29:dc:96:07:ea:82:14:6c:2f:bb:e7: fa:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:6B:AC:CA:9B:65:EA:D6:AC:D2:AB:C9:5A:F8:85:34:C9:D1:F7:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/876852cb-0c93-3cf3-9c07-e73af46b04a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:3e:11:c5:c3:9c:ce:9f:94:a8:d5:23:5c:31:22:1e:2f:9a: d7:17:d6:85:b8:0d:19:80:93:2a:47:23:40:73:45:1f:94:87: 56:f4:8f:bb:8e:52:26:a5:0d:41:ac:ce:fe:1c:a6:bd:e1:c1: d5:78:46:c8:b2:0c:9a:01:87:b8:e2:5e:fd:91:e4:26:4a:1e: 59:7b:9e:b5:cb:7f:11:b2:88:b6:4d:e5:fe:65:0a:70:5b:a3: 3f:c2:0b:16:a1:20:78:21:73:8e:58:1c:5c:13:89:75:7a:5e: 9b:78:2b:49:c6:af:a2:65:de:b4:02:b7:9e:87:51:d7:85:ce: ea:af:cd:23:12:f0:6c:bc:a7:1f:22:e3:29:d8:db:e4:34:d0: 8a:8c:29:92:b5:36:48:ad:4e:39:88:f3:13:d9:c3:37:2a:ea: 54:ba:57:13:36:60:f5:86:d5:bb:af:fe:ad:49:d0:70:3d:2c: 9b:ee:38:e0:93:81:de:7e:72:62:6b:16:cf:7b:bc:55:97:00: 8c:b3:f6:6e:01:28:d6:13:8b:26:02:02:77:bc:9c:64:a1:79: 42:80:94:eb:b3:fe:6d:c4:35:80:a2:c9:81:54:8c:eb:78:31: 52:12:5c:8e:b6:8e:b0:ea:1d:71:7f:60:94:52:b7:f7:4c:56: d6:5e:9c:90 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE55nl/Iydrq9u5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk YjcxNGMxYmItM2U4MS00ODEyLWIzZWQtMGIxMjVlNTM0N2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlH1G/Z0KSK/pADZjE4SeurTfZ8cpbEGv9pOz tUKC7CTUFWTtzPJGeru/hEh47Y6fl/aJZrlApQ8psS2xUT9ycyGRjtgkH3yq30lX 46g1Hbez5rP+P7pwNqMprOzSWSe68wiswO113t7G6/4gzRECWF4Cv+lpjRQwe4TM GVDOyyKGC/Y43T7H/nJ+oG2DGldUW1i+8lQUZ9n5oaxuXsEoO7NkRBmFMUfd3HTy xSyymQq1PPhf97davpl4ZFMpEebzqz/YM1u/EeTSoJBhyUZ+Lwh+/upcFTQq960m nhh2+KnzPD2aNzoiCdAT5jiW7QyRxyhYKdyWB+qCFGwvu+f65QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFNrrMqbZerWrNKryVr4hTTJ0fdeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODc2ODUyY2ItMGM5My0z Y2YzLTljMDctZTczYWY0NmIwNGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAyPhHFw5zOn5So1SNcMSIeL5rXF9aFuA0ZgJMq RyNAc0UflIdW9I+7jlImpQ1BrM7+HKa94cHVeEbIsgyaAYe44l79keQmSh5Ze561 y38Rsoi2TeX+ZQpwW6M/wgsWoSB4IXOOWBxcE4l1el6beCtJxq+iZd60Areeh1HX hc7qr80jEvBsvKcfIuMp2NvkNNCKjCmStTZIrU45iPMT2cM3KupUulcTNmD1htW7 r/6tSdBwPSyb7jjgk4HefnJiaxbPe7xVlwCMs/ZuASjWE4smAgJ3vJxkoXlCgJTr s/5txDWAosmBVIzreDFSElyOto6w6h1xf2CUUrf3TFbWXpyQ -----END CERTIFICATE-----Generated at Wed Oct 29 20:36:35 2025 by rpki-client