$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b8d78135-ba09-3e21-b9f8-0f857c1f5f83.roa File: b8d78135-ba09-3e21-b9f8-0f857c1f5f83.roa (raw, json) Hash identifier: o52Xk/LX2uIdS1pSeo/9YSGIeKD75zMroUdX0Wvy+kc= Subject key identifier: DC:ED:EE:26:F6:D5:38:50:6D:8C:AA:D5:6C:7F:F0:41:91:E8:5C:30 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B99D7D9465A4DA22913F41A40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b8d78135-ba09-3e21-b9f8-0f857c1f5f83.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 396577 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:d9:46:5a:4d:a2:29:13:f4:1a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=d355cf1c-2200-4ea6-b8d1-6eb661aa639e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:58:49:d3:71:b7:be:1b:87:da:a7:f3:d8:86: 1d:1e:7e:1c:b6:05:bf:08:42:fe:6a:99:28:96:28: cd:71:72:c2:02:78:b1:46:26:34:0d:cd:de:58:92: ad:be:15:e3:b1:f1:8c:56:33:72:80:a8:fa:db:74: 84:9c:88:3d:a9:4b:56:4e:6c:74:80:0c:cb:92:67: 70:12:31:a1:cd:a7:c9:20:23:e6:6c:c2:38:9c:ae: a4:01:a0:af:af:67:a4:2c:e1:bc:94:e3:7f:d7:46: c6:9b:96:78:47:5e:12:03:72:02:94:17:4d:79:12: b5:9b:bf:19:19:9d:7a:20:1e:8a:92:1a:31:d1:13: 05:74:07:bf:bc:82:5f:41:ef:f9:cb:c2:d7:89:7e: 46:8a:58:34:64:4b:b1:6a:dc:e3:c7:4e:4b:a9:57: 24:94:fc:a7:87:87:46:7a:e0:db:c9:32:dd:ba:5e: bb:c8:c5:42:d9:80:a2:20:fb:c3:68:6f:8c:99:25: 23:5d:84:6c:4c:29:a7:30:bc:17:14:d4:07:56:10: c8:66:ee:80:55:e4:7e:3e:73:71:a2:aa:25:c4:18: 87:bf:09:2a:14:8d:9e:8d:12:49:3d:ba:1b:e2:4d: 7d:16:f8:37:dd:11:d2:af:dd:bf:ba:b9:74:f9:30: a9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:ED:EE:26:F6:D5:38:50:6D:8C:AA:D5:6C:7F:F0:41:91:E8:5C:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b8d78135-ba09-3e21-b9f8-0f857c1f5f83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:cb:d2:3d:e0:46:36:a3:3a:96:88:43:ca:a3:3b:e5:ae:d6: a5:7a:78:e8:8c:eb:f0:6d:7b:6c:77:8d:a7:3c:f6:a7:a1:b5: 6b:a7:47:71:f8:82:73:b0:4a:a3:e6:6b:dd:ee:60:93:fa:e9: b8:c6:f2:41:ba:08:24:a0:fa:27:92:c9:47:ef:52:ff:b9:58: 5d:fd:16:9c:db:3b:41:22:5a:f3:95:e4:42:59:86:54:01:6d: 2f:84:1f:cd:72:06:9c:43:46:c9:c2:77:59:ad:f2:39:11:45: 38:02:e0:8c:f5:7c:64:2c:3b:b7:8f:79:71:84:57:61:8c:18: 17:6a:e1:08:0e:f4:75:66:d9:42:5d:df:5a:6a:8a:a8:e5:7e: ea:a8:57:a2:55:da:95:d1:bb:c3:9c:f0:f1:ef:06:19:9e:c2: 50:f8:c0:40:ad:cf:ec:8d:26:cb:86:5f:4a:d7:27:8b:1f:c3: 4b:10:5f:db:f2:33:1c:bd:ba:a5:a9:9c:13:06:64:ed:9f:f4: bf:1a:f8:f5:cc:fa:1d:fe:93:fd:95:08:db:c6:27:90:de:0e: a9:d5:8f:ad:3b:c4:46:fd:6e:d6:ee:1b:3d:de:ed:8a:31:8f: 44:09:32:b8:7a:20:c5:78:a5:36:8a:ae:68:00:84:b2:22:5d: 6a:30:c5:28 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuZ19lGWk2iKRP0GkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZDM1NWNmMWMtMjIwMC00ZWE2LWI4ZDEtNmViNjYxYWE2MzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFhJ03G3vhuH2qfz2IYdHn4ctgW/CEL+apko lijNcXLCAnixRiY0Dc3eWJKtvhXjsfGMVjNygKj623SEnIg9qUtWTmx0gAzLkmdw EjGhzafJICPmbMI4nK6kAaCvr2ekLOG8lON/10bGm5Z4R14SA3IClBdNeRK1m78Z GZ16IB6Kkhox0RMFdAe/vIJfQe/5y8LXiX5Gilg0ZEuxatzjx05LqVcklPynh4dG euDbyTLdul67yMVC2YCiIPvDaG+MmSUjXYRsTCmnMLwXFNQHVhDIZu6AVeR+PnNx oqolxBiHvwkqFI2ejRJJPbob4k19Fvg33RHSr92/url0+TCprwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNzt7ib21ThQbYyq1Wx/8EGR6FwwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjhkNzgxMzUtYmEwOS0z ZTIxLWI5ZjgtMGY4NTdjMWY1ZjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBKy9I94EY2ozqWiEPKozvlrtalenjojOvwbXts d42nPPanobVrp0dx+IJzsEqj5mvd7mCT+um4xvJBuggkoPonkslH71L/uVhd/Rac 2ztBIlrzleRCWYZUAW0vhB/NcgacQ0bJwndZrfI5EUU4AuCM9XxkLDu3j3lxhFdh jBgXauEIDvR1ZtlCXd9aaoqo5X7qqFeiVdqV0bvDnPDx7wYZnsJQ+MBArc/sjSbL hl9K1yeLH8NLEF/b8jMcvbqlqZwTBmTtn/S/Gvj1zPod/pP9lQjbxieQ3g6p1Y+t O8RG/W7W7hs93u2KMY9ECTK4eiDFeKU2iq5oAISyIl1qMMUo -----END CERTIFICATE-----Generated at Wed Oct 29 20:45:17 2025 by rpki-client