$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b77e3540-a5c2-31a8-a73a-f8c83e199e69.roa File: b77e3540-a5c2-31a8-a73a-f8c83e199e69.roa (raw, json) Hash identifier: 0KQsR0A5eJLe2zpyzFZkra7yu27UIpvhIoou0xhpSAE= Subject key identifier: 90:F6:99:F3:3A:70:F5:73:56:A4:B9:49:A0:76:12:48:F2:81:81:CA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E78B06CA297E3D3444DDE0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b77e3540-a5c2-31a8-a73a-f8c83e199e69.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 396605 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:8b:06:ca:29:7e:3d:34:44:dd:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=680a8635-b197-447c-be20-f2d9042d710b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bf:6c:c0:49:69:05:88:53:b2:19:f7:a2:3d: 8d:35:6e:70:d7:34:68:80:b4:4a:4c:04:23:3e:64: 03:26:ba:f5:69:4f:c2:a8:1d:79:8a:4d:e3:10:04: 46:ac:7c:02:b0:fa:a3:bf:66:74:15:98:ce:a6:f6: 2d:51:a4:2d:23:42:60:68:39:54:09:fe:4f:c4:70: a5:3d:f9:f4:e8:69:8d:0a:a4:a2:5a:0a:e6:1a:4e: 41:cb:bc:07:ab:4f:39:fd:05:72:c6:0a:1c:8e:22: a1:6a:a9:f9:52:69:ed:52:ab:8b:dd:41:1e:35:58: 90:06:18:28:ba:e0:1f:9b:0e:0c:08:0d:5c:35:22: 47:83:2c:85:10:c1:2a:8a:27:1b:34:fb:7e:86:4a: f7:13:92:f6:15:c4:69:2d:3c:31:1e:c3:46:ab:3e: 2e:f2:d3:f3:2d:9e:de:88:2d:33:dd:b1:48:50:c0: f2:02:0f:47:f4:76:82:1d:84:39:8e:9e:42:7b:c5: 4f:50:3b:01:56:b2:aa:ab:49:3f:54:76:a6:40:8b: 2c:34:a1:fc:07:e7:e7:11:89:a5:c6:a3:f3:36:c9: 30:50:82:19:9a:a4:01:66:66:a5:60:53:42:9e:ef: 73:1f:35:09:0d:6f:76:f1:4e:7c:e6:4f:9c:81:29: 62:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:F6:99:F3:3A:70:F5:73:56:A4:B9:49:A0:76:12:48:F2:81:81:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b77e3540-a5c2-31a8-a73a-f8c83e199e69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:d2:57:83:9c:30:16:15:4b:a3:02:1a:ae:26:f3:22:00:19: 4a:49:81:49:75:f6:95:7b:f8:33:13:20:3b:ff:34:26:9b:bb: 51:6f:28:a3:1a:94:72:60:67:84:da:b8:09:72:01:df:49:51: 08:a4:94:29:ff:90:74:04:62:cf:97:a3:cd:d7:b3:78:92:84: 37:b1:fb:95:a1:d4:03:81:e7:63:11:7d:a1:a3:da:b6:cd:bb: ff:c0:09:85:3f:e8:b9:8e:2e:b4:9c:c4:72:da:a1:1d:87:d0: ef:ae:b8:95:f8:35:16:d0:2d:62:45:5d:5e:ea:c3:a8:48:d3: 66:4a:ec:3e:0a:71:4f:b5:2f:fc:8a:76:b9:a8:8a:50:12:71: c2:bf:84:ac:76:65:41:41:83:4c:45:76:8f:9a:dd:7d:1f:86: f1:5e:ac:bb:6b:52:3e:45:ff:b0:97:66:c3:3f:17:c0:49:5f: 43:91:7f:19:8b:91:44:6f:3d:6b:65:16:0d:eb:9a:d3:78:95: 5f:1f:93:ae:77:5c:80:7a:15:aa:f6:df:29:e7:61:62:16:66: 56:f8:7c:13:1b:e5:2d:27:57:a5:72:4a:01:ed:a3:93:24:78: 4a:a3:0a:a5:f5:7d:ce:b5:cd:1e:5f:ba:36:51:c1:7c:01:65: f7:5d:8c:15 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE54sGyil+PTRE3eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk NjgwYTg2MzUtYjE5Ny00NDdjLWJlMjAtZjJkOTA0MmQ3MTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyL9swElpBYhTshn3oj2NNW5w1zRogLRKTAQj PmQDJrr1aU/CqB15ik3jEARGrHwCsPqjv2Z0FZjOpvYtUaQtI0JgaDlUCf5PxHCl Pfn06GmNCqSiWgrmGk5By7wHq085/QVyxgocjiKhaqn5UmntUquL3UEeNViQBhgo uuAfmw4MCA1cNSJHgyyFEMEqiicbNPt+hkr3E5L2FcRpLTwxHsNGqz4u8tPzLZ7e iC0z3bFIUMDyAg9H9HaCHYQ5jp5Ce8VPUDsBVrKqq0k/VHamQIssNKH8B+fnEYml xqPzNskwUIIZmqQBZmalYFNCnu9zHzUJDW928U585k+cgSlicwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJD2mfM6cPVzVqS5SaB2EkjygYHKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjc3ZTM1NDAtYTVjMi0z MWE4LWE3M2EtZjhjODNlMTk5ZTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAb0leDnDAWFUujAhquJvMiABlKSYFJdfaVe/gz EyA7/zQmm7tRbyijGpRyYGeE2rgJcgHfSVEIpJQp/5B0BGLPl6PN17N4koQ3sfuV odQDgedjEX2ho9q2zbv/wAmFP+i5ji60nMRy2qEdh9DvrriV+DUW0C1iRV1e6sOo SNNmSuw+CnFPtS/8ina5qIpQEnHCv4SsdmVBQYNMRXaPmt19H4bxXqy7a1I+Rf+w l2bDPxfASV9DkX8Zi5FEbz1rZRYN65rTeJVfH5Oud1yAehWq9t8p52FiFmZW+HwT G+UtJ1elckoB7aOTJHhKowql9X3Otc0eX7o2UcF8AWX3XYwV -----END CERTIFICATE-----Generated at Wed Oct 29 11:51:05 2025 by rpki-client