$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba6c45d4-d761-3ace-a3f3-976815895243.roa File: ba6c45d4-d761-3ace-a3f3-976815895243.roa (raw, json) Hash identifier: kiQs44N7Ajg/9s3AnQgqR2GrbXgaHsjJMqTk5QTBCm4= Subject key identifier: A9:F6:C8:7D:76:6F:21:53:08:0D:E3:76:FC:B5:FA:4F:F5:F2:AB:01 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E797F79AFBFBC4B2DE4A80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba6c45d4-d761-3ace-a3f3-976815895243.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 397201 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:97:f7:9a:fb:fb:c4:b2:de:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=6884cd9a-d93f-4e3e-85e5-cec49728e9a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8d:cc:5c:09:b1:2a:e0:a1:80:e6:a1:c7:cd: e3:9e:81:28:9d:a0:17:d3:ee:ed:ad:ce:19:84:72: 11:62:98:81:28:fc:ab:03:e2:a2:9a:a9:b3:f7:21: 86:b1:8b:10:3b:75:cd:23:d7:d6:b5:57:50:50:18: 4b:77:2f:b2:dc:1e:cd:43:5e:6e:e1:47:50:e8:2b: 88:b8:f8:2e:ee:76:e8:db:59:9d:dd:14:a8:90:6c: 04:e9:b8:21:45:35:85:90:74:66:35:35:ac:b2:a0: 56:84:c2:0c:21:04:c3:50:93:45:f8:f8:2d:c1:e9: 87:f0:b3:4f:79:be:47:9e:d6:88:f3:fb:30:d4:18: 7f:4c:eb:b5:0a:5c:35:02:c4:f1:d5:9a:cf:e1:72: 98:57:e2:e7:39:d2:66:94:e3:d7:2c:f8:e8:6a:42: aa:c7:20:7d:86:28:79:fa:7c:d8:9c:b0:83:83:d1: 6e:81:48:fb:2f:2f:7b:3d:8c:33:48:da:47:bf:dc: cf:bd:29:64:c2:72:5c:9d:23:de:33:e6:86:2e:86: 53:72:3a:36:44:70:f1:71:00:68:fe:67:dd:fb:b2: 53:fa:11:14:f5:cd:ab:a2:d8:0c:6e:c6:17:94:fb: e6:a9:ef:ab:47:1b:4d:d7:97:18:ed:db:f0:fb:08: 11:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F6:C8:7D:76:6F:21:53:08:0D:E3:76:FC:B5:FA:4F:F5:F2:AB:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba6c45d4-d761-3ace-a3f3-976815895243.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:83:19:9d:56:84:d3:06:a6:03:60:ab:a9:5d:18:ab:10:02: 86:b3:31:78:52:57:31:44:e7:b3:34:32:88:bc:da:69:a6:f7: a1:ec:5e:3b:36:64:48:aa:79:d9:29:33:4d:0d:37:e5:12:e3: 99:b6:73:27:42:65:6d:9d:aa:5e:b1:d6:e8:e9:ea:be:67:03: 70:7d:f1:55:3e:1e:97:53:66:7c:9b:89:88:80:c5:c9:a7:0a: ac:2e:12:17:64:a2:37:8a:c6:18:b2:d3:b2:ac:70:39:52:2f: 37:cf:bf:e6:3e:20:f3:56:1a:f7:a9:cb:26:b1:be:88:1d:92: 22:f5:3b:71:ae:ac:68:1f:f7:1a:5f:75:25:6b:70:67:a9:b2: 68:34:2d:24:52:d6:7a:30:fe:8d:01:62:b2:f9:d0:b4:e9:38: 1a:bd:58:d8:c8:75:40:72:67:c3:50:46:62:8b:90:e2:83:83: 68:6e:a0:d5:92:37:4d:e5:51:20:f3:b1:1d:f2:75:33:df:95: e1:2a:59:01:d6:06:5c:12:87:36:41:79:18:ca:9d:a2:05:d4: 83:ed:f9:f5:ff:b4:3b:44:23:37:77:f3:9b:e7:bc:a0:95:7c: c5:e0:cf:b0:51:88:2c:57:e8:f5:1b:c9:5f:39:d9:e8:aa:c3: df:b3:25:af -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE55f3mvv7xLLeSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk Njg4NGNkOWEtZDkzZi00ZTNlLTg1ZTUtY2VjNDk3MjhlOWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnI3MXAmxKuChgOahx83jnoEonaAX0+7trc4Z hHIRYpiBKPyrA+Kimqmz9yGGsYsQO3XNI9fWtVdQUBhLdy+y3B7NQ15u4UdQ6CuI uPgu7nbo21md3RSokGwE6bghRTWFkHRmNTWssqBWhMIMIQTDUJNF+PgtwemH8LNP eb5HntaI8/sw1Bh/TOu1Clw1AsTx1ZrP4XKYV+LnOdJmlOPXLPjoakKqxyB9hih5 +nzYnLCDg9FugUj7Ly97PYwzSNpHv9zPvSlkwnJcnSPeM+aGLoZTcjo2RHDxcQBo /mfd+7JT+hEU9c2rotgMbsYXlPvmqe+rRxtN15cY7dvw+wgR1wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKn2yH12byFTCA3jdvy1+k/18qsBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmE2YzQ1ZDQtZDc2MS0z YWNlLWEzZjMtOTc2ODE1ODk1MjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAwgxmdVoTTBqYDYKupXRirEAKGszF4UlcxROez NDKIvNpppveh7F47NmRIqnnZKTNNDTflEuOZtnMnQmVtnapesdbo6eq+ZwNwffFV Ph6XU2Z8m4mIgMXJpwqsLhIXZKI3isYYstOyrHA5Ui83z7/mPiDzVhr3qcsmsb6I HZIi9TtxrqxoH/caX3Ula3BnqbJoNC0kUtZ6MP6NAWKy+dC06TgavVjYyHVAcmfD UEZii5Dig4NobqDVkjdN5VEg87Ed8nUz35XhKlkB1gZcEoc2QXkYyp2iBdSD7fn1 /7Q7RCM3d/Ob57yglXzF4M+wUYgsV+j1G8lfOdnoqsPfsyWv -----END CERTIFICATE-----Generated at Thu Oct 30 03:23:26 2025 by rpki-client