$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aaa623aa-85d2-3ac3-a2b7-d15bddf9e8ea.roa File: aaa623aa-85d2-3ac3-a2b7-d15bddf9e8ea.roa (raw, json) Hash identifier: VCA4s2WXHKfn7++lpC/7BHyp8aX3zuhIpzVFlnOL87A= Subject key identifier: F2:66:DB:7A:A1:8A:AE:8A:9B:09:76:BE:E6:AC:A4:69:A4:69:67:6C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B715CE7CE28F724CD926B2410 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aaa623aa-85d2-3ac3-a2b7-d15bddf9e8ea.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 396572 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:e7:ce:28:f7:24:cd:92:6b:24:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=512b0084-a3ad-43f3-adaa-0235529bdaee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f0:56:07:70:98:ae:69:19:42:0a:8d:40:f4: 18:bf:47:47:d5:c5:45:a3:3e:46:2e:86:d9:e8:8c: ff:28:92:77:03:0c:5a:ef:0a:2a:6b:9f:21:c9:9f: 27:61:75:cf:86:e2:25:69:37:63:53:8c:92:b9:1b: 55:21:51:1b:84:b9:0e:23:b7:2a:be:f1:f4:a9:89: 39:5b:4f:1b:12:33:f0:d8:4e:3e:82:c2:16:65:42: ef:4a:00:f7:8e:08:1f:89:84:68:02:84:c0:e1:e2: a5:d7:4b:cd:cc:28:0e:ef:8e:58:2a:88:c8:62:cf: ea:ca:03:32:1e:19:f5:81:e4:2b:5c:2f:ae:bc:34: 84:9c:c6:61:37:5d:4c:9a:75:3d:00:be:8c:1e:5d: e1:90:66:10:f5:5f:78:e6:f7:95:d0:5b:dc:e1:bc: e1:92:49:9b:a6:a1:68:55:32:33:d2:b1:11:9a:f7: 7c:8c:0d:6c:e5:40:dd:ab:01:12:4b:be:4a:9b:35: 49:61:63:39:b0:81:8a:66:6e:91:36:c8:4a:f8:60: 7b:e4:f2:c8:38:18:8e:d2:eb:b9:2d:ce:59:e9:a1: 4b:ad:53:53:a7:cc:2d:0e:dc:1b:af:de:fb:06:79: 24:e9:ac:25:51:cf:c9:d9:ed:18:d1:0f:fe:d9:79: 13:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:66:DB:7A:A1:8A:AE:8A:9B:09:76:BE:E6:AC:A4:69:A4:69:67:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aaa623aa-85d2-3ac3-a2b7-d15bddf9e8ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:f9:2e:0c:73:e8:d1:3d:83:c2:41:e0:33:c3:dc:f8:c8:48: 74:01:29:2c:83:35:35:c4:62:0b:1c:a9:a3:7a:7d:b9:7a:ec: 93:11:26:67:67:bf:9d:13:7d:fb:ad:24:b7:b2:d0:3d:4d:18: 6a:6b:7f:02:9a:b2:3d:60:5b:07:38:97:6e:d3:99:37:10:bc: 58:6a:76:8c:4d:d5:66:6b:74:5f:76:9d:0a:73:88:e2:86:09: c8:f0:ce:b3:6f:dd:c6:5a:01:a9:e5:0f:34:a3:fe:98:16:7e: 7d:df:08:26:52:94:7b:8a:a5:16:53:23:cf:26:bc:36:9f:69: 85:d4:38:a1:b8:d1:52:4e:29:70:c3:e8:05:e3:0d:58:78:b2: 86:fa:b3:f1:6b:df:7f:85:a5:ee:6f:27:23:e1:31:d4:98:c2: 3d:6d:9d:0f:20:40:ac:55:63:2d:21:c8:62:d0:8c:fe:7b:e0: 00:40:51:09:07:45:e2:14:78:b7:90:79:c7:48:11:d9:e4:8a: 1f:7d:8c:41:f3:5c:31:00:73:6b:28:7d:19:e4:b9:68:87:9e: 4c:e4:59:31:86:b0:17:6e:ee:31:58:22:62:b4:55:7d:e1:c2: ff:ba:38:93:18:88:c9:22:d6:2d:c1:5c:f4:2a:aa:8e:67:75: 6b:ff:35:ba -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtxXOfOKPckzZJrJBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NTEyYjAwODQtYTNhZC00M2YzLWFkYWEtMDIzNTUyOWJkYWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/BWB3CYrmkZQgqNQPQYv0dH1cVFoz5GLobZ 6Iz/KJJ3Awxa7woqa58hyZ8nYXXPhuIlaTdjU4ySuRtVIVEbhLkOI7cqvvH0qYk5 W08bEjPw2E4+gsIWZULvSgD3jggfiYRoAoTA4eKl10vNzCgO745YKojIYs/qygMy Hhn1geQrXC+uvDSEnMZhN11MmnU9AL6MHl3hkGYQ9V945veV0Fvc4bzhkkmbpqFo VTIz0rERmvd8jA1s5UDdqwESS75KmzVJYWM5sIGKZm6RNshK+GB75PLIOBiO0uu5 Lc5Z6aFLrVNTp8wtDtwbr977Bnkk6awlUc/J2e0Y0Q/+2XkTQwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPJm23qhiq6Kmwl2vuaspGmkaWdsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWFhNjIzYWEtODVkMi0z YWMzLWEyYjctZDE1YmRkZjllOGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAp+S4Mc+jRPYPCQeAzw9z4yEh0ASksgzU1xGIL HKmjen25euyTESZnZ7+dE337rSS3stA9TRhqa38CmrI9YFsHOJdu05k3ELxYanaM TdVma3Rfdp0Kc4jihgnI8M6zb93GWgGp5Q80o/6YFn593wgmUpR7iqUWUyPPJrw2 n2mF1DihuNFSTilww+gF4w1YeLKG+rPxa99/haXubycj4THUmMI9bZ0PIECsVWMt Ichi0Iz+e+AAQFEJB0XiFHi3kHnHSBHZ5IoffYxB81wxAHNrKH0Z5Lloh55M5Fkx hrAXbu4xWCJitFV94cL/ujiTGIjJItYtwVz0KqqOZ3Vr/zW6 -----END CERTIFICATE-----Generated at Wed Oct 29 20:03:09 2025 by rpki-client