$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/caa0a0d0-1ea7-35a5-95d4-0981a9de36c8.roa File: caa0a0d0-1ea7-35a5-95d4-0981a9de36c8.roa (raw, json) Hash identifier: bg2Xt7TrROrCwLzp5r0cahvB9IET6o0BBAPXL6p8J0A= Subject key identifier: B5:72:75:66:D9:FB:8D:31:97:BA:BF:36:6D:96:6B:A6:08:42:85:86 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B715CDB387F7D6D25D043A900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/caa0a0d0-1ea7-35a5-95d4-0981a9de36c8.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 396605 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:db:38:7f:7d:6d:25:d0:43:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=18106126-63c3-4718-b5e6-b4189bb28f9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a7:e0:1c:b8:40:13:48:63:c7:2a:58:73:b4: 53:82:d0:0a:7d:e3:ae:fd:d0:10:4e:f0:a9:a4:d4: 7c:ad:2c:3b:9c:17:06:fc:28:d0:0a:97:a6:04:74: 7c:ce:6e:15:ba:b6:c9:a8:8b:74:43:8f:e0:09:c2: 0b:44:ba:10:e3:63:96:18:38:df:86:c0:96:bc:35: 0c:09:aa:f3:71:52:73:71:e8:10:89:bc:84:5b:38: 94:7e:35:e2:c8:6a:32:f9:bc:27:f2:0a:b6:a6:93: 11:54:2f:52:44:b2:30:8a:6d:18:d3:24:07:e9:f9: 98:3a:a8:52:01:e3:fa:6a:53:77:82:88:1c:04:95: 68:58:58:45:29:9a:6c:de:3d:70:3b:df:2f:8d:e0: 4f:61:59:ac:b3:65:aa:c6:4a:8e:e6:f4:b7:f5:4c: a0:0d:cd:e5:12:e5:89:06:7e:20:e7:df:39:84:ae: a2:c7:77:94:67:7b:74:53:07:97:2a:57:ab:49:fb: 1c:cf:3d:35:fc:36:57:63:c0:f7:10:5a:c9:2d:cd: 20:71:55:92:42:9f:d3:ba:2e:d9:f4:13:c7:12:33: d8:46:10:36:ee:4b:f0:ac:71:96:60:b7:18:2c:d3: 88:a3:2a:fd:8e:9e:07:40:98:53:a2:0e:3e:15:6d: 4b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:72:75:66:D9:FB:8D:31:97:BA:BF:36:6D:96:6B:A6:08:42:85:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/caa0a0d0-1ea7-35a5-95d4-0981a9de36c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:9f:84:08:9b:00:e7:dd:3c:e2:94:38:53:cb:4f:83:86:7a: 34:91:2d:ad:e8:18:f6:48:72:af:da:6b:79:a3:c6:59:85:17: 74:c3:72:a4:e7:6f:70:6c:18:33:b9:57:a1:f0:38:84:47:75: 22:59:e9:5d:1b:f5:71:a8:1c:02:65:9f:4a:23:7e:09:ab:73: 0a:fe:a8:73:35:8c:78:41:9d:c8:5b:33:75:59:bc:04:37:17: 1b:6f:6b:e4:4a:a0:28:be:c3:79:74:39:8a:3a:2e:db:25:1c: fc:59:3d:13:ad:c9:c0:b7:96:07:be:56:96:79:04:2b:e1:cd: 32:d4:d7:50:9c:e9:22:04:3a:30:fa:9e:97:3c:67:18:7b:79: 95:ec:fe:4d:2e:1c:3e:df:b9:c4:a8:7f:30:f5:14:8f:df:23: 49:c0:0b:c8:e3:16:d2:b1:07:41:61:56:25:f4:7c:71:89:c3: fd:d6:5f:43:5f:64:3a:ce:17:16:06:3b:52:5a:80:ac:12:c6: cf:75:24:9f:92:fe:22:43:67:a1:94:4d:2c:bd:69:e8:3f:9d: 01:8a:00:ab:4d:02:bf:11:31:9f:02:b9:86:3b:1d:87:ea:80: 3d:a4:c4:48:57:92:d8:d4:bc:4c:e7:62:d7:a3:95:c3:b0:19: 34:62:00:87 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtxXNs4f31tJdBDqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MTgxMDYxMjYtNjNjMy00NzE4LWI1ZTYtYjQxODliYjI4ZjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKfgHLhAE0hjxypYc7RTgtAKfeOu/dAQTvCp pNR8rSw7nBcG/CjQCpemBHR8zm4VurbJqIt0Q4/gCcILRLoQ42OWGDjfhsCWvDUM CarzcVJzcegQibyEWziUfjXiyGoy+bwn8gq2ppMRVC9SRLIwim0Y0yQH6fmYOqhS AeP6alN3gogcBJVoWFhFKZps3j1wO98vjeBPYVmss2WqxkqO5vS39UygDc3lEuWJ Bn4g5985hK6ix3eUZ3t0UweXKlerSfsczz01/DZXY8D3EFrJLc0gcVWSQp/Tui7Z 9BPHEjPYRhA27kvwrHGWYLcYLNOIoyr9jp4HQJhTog4+FW1L0QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLVydWbZ+40xl7q/Nm2Wa6YIQoWGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2FhMGEwZDAtMWVhNy0z NWE1LTk1ZDQtMDk4MWE5ZGUzNmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBCn4QImwDn3TzilDhTy0+Dhno0kS2t6Bj2SHKv 2mt5o8ZZhRd0w3Kk529wbBgzuVeh8DiER3UiWeldG/VxqBwCZZ9KI34Jq3MK/qhz NYx4QZ3IWzN1WbwENxcbb2vkSqAovsN5dDmKOi7bJRz8WT0TrcnAt5YHvlaWeQQr 4c0y1NdQnOkiBDow+p6XPGcYe3mV7P5NLhw+37nEqH8w9RSP3yNJwAvI4xbSsQdB YVYl9HxxicP91l9DX2Q6zhcWBjtSWoCsEsbPdSSfkv4iQ2ehlE0svWnoP50BigCr TQK/ETGfArmGOx2H6oA9pMRIV5LY1LxM52LXo5XDsBk0YgCH -----END CERTIFICATE-----Generated at Wed Oct 29 11:51:06 2025 by rpki-client