$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bceabade-34a5-3fd7-aa22-752619bc3467.roa File: bceabade-34a5-3fd7-aa22-752619bc3467.roa (raw, json) Hash identifier: RO82QJ7lsXa7OlE2sMR0U06c1lxCNcSREBh/B+lgAUM= Subject key identifier: 42:5A:EE:08:21:0F:8A:1D:B7:31:DB:33:86:4C:97:19:38:C1:C2:66 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E78C86167332D332997680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bceabade-34a5-3fd7-aa22-752619bc3467.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 396593 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:8c:86:16:73:32:d3:32:99:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=7823e50e-822c-4cf5-8d18-36fe1059ba54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:78:db:7c:f6:a3:f6:00:21:f2:f6:70:ba:f8: eb:27:da:61:98:49:13:b5:7a:f8:e4:28:be:db:56: 24:a0:ec:83:1d:d1:8e:4a:d5:35:0a:e0:bc:94:d0: 65:58:c9:d8:f2:f4:bc:9a:11:1d:ba:5f:b4:0a:7b: 48:a7:3e:7c:4d:d4:b0:ef:7c:a6:08:cb:a4:4e:a0: a7:12:21:35:70:f9:65:b4:2e:2a:09:57:3c:c0:79: 23:0d:d4:93:34:60:46:68:cc:03:6c:f1:ce:41:d8: b1:16:18:8c:30:b7:f7:18:58:4b:3a:c3:7d:fd:92: 24:e3:e7:1c:f4:22:60:7b:d5:d2:89:ee:16:80:fe: 11:3e:22:39:18:bc:06:98:72:34:8f:a8:38:a4:70: d8:ce:1a:0f:05:67:e2:7c:9a:91:87:55:66:6c:71: c8:26:6a:bb:fb:66:ab:fb:08:3a:51:16:ed:13:3b: 08:66:3d:3a:e0:cc:18:c7:37:db:1c:f9:30:86:ff: 5f:a5:3a:af:c8:3e:55:7f:d7:07:94:d3:fe:85:bc: a1:76:f9:0c:bc:2e:49:5f:b0:e0:ba:e6:90:f7:83: 26:e6:ed:64:0e:04:fe:7a:be:8e:b6:80:73:a3:ba: 24:b2:b4:cc:78:9b:cb:12:83:96:f8:c8:9a:8b:83: 4a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:5A:EE:08:21:0F:8A:1D:B7:31:DB:33:86:4C:97:19:38:C1:C2:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bceabade-34a5-3fd7-aa22-752619bc3467.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:59:48:ed:a6:ab:ea:5c:0f:ac:36:7d:fe:20:b4:6e:27:c7: 33:57:dd:0f:3b:9c:db:54:fe:aa:f3:e8:c5:0c:be:27:7d:34: 4e:c7:26:48:c2:5e:95:8c:7a:91:64:28:e8:96:b5:e2:66:13: 20:6f:f2:83:30:cc:80:a5:5b:3c:88:18:9a:e8:be:12:9b:5f: 1a:4c:fc:1a:d9:e0:77:91:ec:6e:98:3e:a4:19:1a:be:16:8f: ca:15:0e:76:b2:27:fb:45:e7:a1:48:fd:a0:69:54:b1:46:4c: 5f:7d:56:39:e4:d2:ed:2f:4c:ae:69:de:ba:d7:ce:81:8a:14: 89:d4:5b:38:f9:f0:f0:c8:f9:60:f9:f6:f1:31:e0:53:4e:3c: fd:08:0a:32:19:e0:39:81:4d:22:91:34:cc:5f:17:c1:a8:37: ed:ef:28:b6:fe:78:3b:d8:ee:85:95:70:aa:40:c0:0a:ad:53: 2b:42:c6:81:28:32:15:14:d9:63:5b:93:88:7a:1b:f9:20:11: 71:23:a5:ca:a7:94:73:89:be:7d:98:95:ff:13:cc:d2:1d:d6: 53:5d:90:8d:d0:59:2d:aa:47:bf:9f:23:f8:ce:b7:ea:1a:0f: c3:71:f8:54:f3:84:40:61:d2:ff:83:5d:22:99:09:5b:28:51: 84:32:bc:2c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE54yGFnMy0zKZdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk NzgyM2U1MGUtODIyYy00Y2Y1LThkMTgtMzZmZTEwNTliYTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHjbfPaj9gAh8vZwuvjrJ9phmEkTtXr45Ci+ 21YkoOyDHdGOStU1CuC8lNBlWMnY8vS8mhEdul+0CntIpz58TdSw73ymCMukTqCn EiE1cPlltC4qCVc8wHkjDdSTNGBGaMwDbPHOQdixFhiMMLf3GFhLOsN9/ZIk4+cc 9CJge9XSie4WgP4RPiI5GLwGmHI0j6g4pHDYzhoPBWfifJqRh1VmbHHIJmq7+2ar +wg6URbtEzsIZj064MwYxzfbHPkwhv9fpTqvyD5Vf9cHlNP+hbyhdvkMvC5JX7Dg uuaQ94Mm5u1kDgT+er6OtoBzo7oksrTMeJvLEoOW+Miai4NKpQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEJa7gghD4odtzHbM4ZMlxk4wcJmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmNlYWJhZGUtMzRhNS0z ZmQ3LWFhMjItNzUyNjE5YmMzNDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAfWUjtpqvqXA+sNn3+ILRuJ8czV90PO5zbVP6q 8+jFDL4nfTROxyZIwl6VjHqRZCjolrXiZhMgb/KDMMyApVs8iBia6L4Sm18aTPwa 2eB3kexumD6kGRq+Fo/KFQ52sif7ReehSP2gaVSxRkxffVY55NLtL0yuad66186B ihSJ1Fs4+fDwyPlg+fbxMeBTTjz9CAoyGeA5gU0ikTTMXxfBqDft7yi2/ng72O6F lXCqQMAKrVMrQsaBKDIVFNljW5OIehv5IBFxI6XKp5Rzib59mJX/E8zSHdZTXZCN 0Fktqke/nyP4zrfqGg/DcfhU84RAYdL/g10imQlbKFGEMrws -----END CERTIFICATE-----Generated at Wed Oct 29 20:26:10 2025 by rpki-client