$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd31894b-808a-354e-8124-627c7862dd63.roa File: bd31894b-808a-354e-8124-627c7862dd63.roa (raw, json) Hash identifier: 1vIq/3h89yUU2AzZwkrwBgPDO66yh3flTv4v17sCxOM= Subject key identifier: C0:2B:FD:61:5C:B0:34:82:66:E3:F1:09:37:FA:86:CC:C0:4E:47:E4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B48E2144DD1327BC24A961FC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd31894b-808a-354e-8124-627c7862dd63.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397202 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:14:4d:d1:32:7b:c2:4a:96:1f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=c4d7a836-213d-4cb1-a424-ad7fa9955bf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9a:73:c2:94:06:f0:8b:04:af:b5:30:9a:bf: 2c:b7:b0:00:8e:98:2c:a3:e1:c8:b8:43:d0:37:d6: b9:24:ab:fc:1e:7c:fa:cc:d8:86:63:1c:63:f9:bd: d6:ba:a5:70:8a:0a:f2:64:58:ad:21:54:04:b1:e2: 5a:7f:f8:68:8e:12:e7:c6:f5:41:07:1f:ba:aa:ab: 11:17:ae:43:97:e8:b0:3e:9c:d1:35:eb:e9:a5:bc: b5:9d:2a:ef:b4:b8:84:64:77:1d:f5:b0:59:19:fe: d9:22:d5:90:c3:a3:fa:ad:42:72:c2:ca:2d:07:00: 65:09:2c:ae:e4:83:1f:b1:c2:3b:d0:0c:e0:28:b7: 1a:01:59:85:b7:ac:a4:b2:28:e9:bb:86:42:de:b3: 04:02:8d:4a:1f:c9:d5:e9:cd:13:76:de:c9:84:d1: 5f:27:82:ff:50:59:fc:5e:6c:b4:50:17:59:6b:bc: 0d:57:83:d7:67:cb:89:ec:2f:61:4a:e9:f9:56:03: 82:be:f2:97:a8:8e:3a:5d:b2:cc:01:5f:af:ae:75: 03:aa:af:a9:6d:c9:fe:bc:b2:94:e5:67:39:e4:1a: 65:3d:15:56:16:5d:97:76:44:1a:35:1e:1f:a8:f4: 24:4f:92:a6:fb:64:c2:e8:b7:dc:93:01:b6:a5:4c: 42:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:2B:FD:61:5C:B0:34:82:66:E3:F1:09:37:FA:86:CC:C0:4E:47:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd31894b-808a-354e-8124-627c7862dd63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:32:0f:71:8c:04:e5:1a:56:dc:55:b4:46:16:e1:4c:48:08: 16:4e:99:f2:88:05:b6:f5:ec:a8:87:58:cd:59:20:5f:d2:a6: c3:2f:05:f3:52:69:79:33:4e:1a:e1:b1:a6:dc:56:cc:84:f3: 28:b3:6c:c4:59:ac:66:32:a4:79:ae:89:8c:a0:53:d0:ba:6a: 24:c3:d8:db:0a:6e:f1:5b:d6:bc:ed:c1:39:73:1a:03:d7:d5: ac:53:b6:ca:a5:31:3f:76:c9:49:51:86:9e:92:63:84:40:b7: 89:05:30:0d:82:f2:65:79:bc:65:31:b8:55:f1:e0:91:5b:fa: e1:5f:72:1e:d2:5f:cf:8a:c1:17:8c:a3:6f:d6:b6:49:bf:83: 2c:01:7f:3b:d5:90:55:1c:4f:a5:a9:69:10:d5:fe:a8:66:e3: 44:35:b6:85:f8:31:ce:9a:94:cb:c9:48:a2:6e:d7:3a:87:2e: cc:36:90:c6:15:5c:7f:19:8b:95:df:60:9a:ba:6a:67:6e:ea: 0b:c1:98:46:14:78:57:de:4a:6c:52:b9:00:59:fb:83:a3:cb: b3:98:f3:5d:5e:72:0d:28:e1:53:3b:e0:b5:5b:44:ff:34:e5: fa:18:b1:d2:08:20:96:e4:75:92:d2:29:9e:c0:ab:8d:34:8a: 01:e2:5f:8a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4hRN0TJ7wkqWH8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk YzRkN2E4MzYtMjEzZC00Y2IxLWE0MjQtYWQ3ZmE5OTU1YmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5pzwpQG8IsEr7Uwmr8st7AAjpgso+HIuEPQ N9a5JKv8Hnz6zNiGYxxj+b3WuqVwigryZFitIVQEseJaf/hojhLnxvVBBx+6qqsR F65Dl+iwPpzRNevppby1nSrvtLiEZHcd9bBZGf7ZItWQw6P6rUJywsotBwBlCSyu 5IMfscI70AzgKLcaAVmFt6yksijpu4ZC3rMEAo1KH8nV6c0Tdt7JhNFfJ4L/UFn8 Xmy0UBdZa7wNV4PXZ8uJ7C9hSun5VgOCvvKXqI46XbLMAV+vrnUDqq+pbcn+vLKU 5Wc55BplPRVWFl2XdkQaNR4fqPQkT5Km+2TC6LfckwG2pUxChQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMAr/WFcsDSCZuPxCTf6hszATkfkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmQzMTg5NGItODA4YS0z NTRlLTgxMjQtNjI3Yzc4NjJkZDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHIyD3GMBOUaVtxVtEYW4UxICBZOmfKIBbb17KiHWM1ZIF/SpsMv BfNSaXkzThrhsabcVsyE8yizbMRZrGYypHmuiYygU9C6aiTD2NsKbvFb1rztwTlz GgPX1axTtsqlMT92yUlRhp6SY4RAt4kFMA2C8mV5vGUxuFXx4JFb+uFfch7SX8+K wReMo2/Wtkm/gywBfzvVkFUcT6WpaRDV/qhm40Q1toX4Mc6alMvJSKJu1zqHLsw2 kMYVXH8Zi5XfYJq6amdu6gvBmEYUeFfeSmxSuQBZ+4Ojy7OY811ecg0o4VM74LVb RP805foYsdIIIJbkdZLSKZ7Aq400igHiX4o= -----END CERTIFICATE-----Generated at Wed Oct 29 20:42:03 2025 by rpki-client