$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cac6065a-0aca-3b0e-913b-79eb92e707e9.roa File: cac6065a-0aca-3b0e-913b-79eb92e707e9.roa (raw, json) Hash identifier: 0rKhZb0KsQGgQmpaMHb2OgTd68qsTGoxp9j2NppqEeA= Subject key identifier: E0:88:21:20:D3:6D:CA:9B:32:1C:95:0A:3C:B4:E2:55:4E:BE:80:EF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E78D9DC75153909CB85880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cac6065a-0aca-3b0e-913b-79eb92e707e9.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 396560 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:8d:9d:c7:51:53:90:9c:b8:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=008d808f-248f-4159-ae58-5bfe6af845be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:26:6a:f8:72:a4:d4:19:b7:53:44:cb:26:2b: c1:e7:74:35:be:5d:c8:76:aa:56:1b:1d:05:3e:6d: 40:ec:16:d7:df:e3:b7:e9:66:d9:cb:62:ad:4a:b7: 48:cd:2b:19:e5:9a:7a:42:8c:ef:d8:c2:0f:f5:98: 5f:3b:16:aa:f2:c4:8a:1f:6b:0f:c2:42:88:0f:99: c2:87:d4:53:80:6e:d3:07:23:47:45:06:cf:a2:c8: c9:19:a9:5d:35:b9:d9:f5:f6:db:33:f7:e8:da:7e: e5:fc:c5:ba:8f:3a:cc:04:bf:8d:03:4f:8c:72:7c: 11:0a:20:9e:52:fc:5d:23:00:66:71:85:67:6f:83: 04:5d:21:21:9d:40:0a:e5:53:64:3a:7c:10:3b:ef: ab:c5:01:cf:87:ee:01:98:79:86:36:c5:1a:ea:9f: 19:71:31:e1:53:e4:43:2a:22:9c:46:6b:d6:d1:92: ad:48:3e:68:4f:22:1c:f4:89:54:64:6e:e8:44:8b: ee:ee:9a:3e:d8:52:a4:3a:07:bb:10:3b:55:f9:de: 95:f7:e1:b8:91:f7:57:dd:4c:bb:7d:a7:86:ec:58: 65:4a:d9:24:74:c4:fc:f3:64:79:8f:4c:a0:59:4e: e2:9d:60:ed:ed:22:41:dc:e1:a2:d1:3a:73:e7:ce: 16:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:88:21:20:D3:6D:CA:9B:32:1C:95:0A:3C:B4:E2:55:4E:BE:80:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cac6065a-0aca-3b0e-913b-79eb92e707e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:80:37:2f:9d:04:0c:89:2a:da:bc:6e:55:6d:81:74:ab:cc: a9:36:c7:56:3f:6f:92:27:80:9f:e7:6f:1a:29:cb:6a:2e:c5: bd:ac:07:cd:51:56:2a:20:07:d7:8d:34:09:9a:52:7e:04:97: ea:b3:e2:47:ff:e2:d9:08:b4:0d:28:fa:84:bd:8b:54:5e:5c: 48:ca:11:03:63:08:53:6b:b4:99:aa:e0:30:10:44:1e:e8:ea: ce:22:5a:92:35:e1:ce:f2:3f:e4:97:12:de:ec:ce:d2:41:b2: 00:27:52:85:a9:f9:d3:a2:3b:12:22:1b:11:1f:f6:7c:08:ee: 80:6a:ad:29:8d:42:85:fb:66:6f:ba:08:3f:e5:be:bd:ea:fd: d2:c2:db:97:f0:0c:71:6d:e1:67:af:ef:77:e6:ec:c5:3f:b5: 72:36:f4:13:5e:76:f7:73:8a:55:63:34:1d:c4:a7:98:74:82: 81:90:c9:fa:7b:95:9e:72:84:d7:b4:96:9d:4d:fa:98:d2:94: a7:69:bd:55:9e:7e:f3:7c:28:3e:a3:67:f3:e3:d7:eb:32:c6: 50:1f:85:35:0d:2f:a3:a7:1e:59:d1:dd:9d:65:c2:e3:d5:f4: 16:e4:e1:29:69:eb:be:87:85:4d:96:4f:47:ff:7a:56:3b:f5: 14:04:c8:d8 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE542dx1FTkJy4WIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk MDA4ZDgwOGYtMjQ4Zi00MTU5LWFlNTgtNWJmZTZhZjg0NWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiZq+HKk1Bm3U0TLJivB53Q1vl3IdqpWGx0F Pm1A7BbX3+O36WbZy2KtSrdIzSsZ5Zp6Qozv2MIP9ZhfOxaq8sSKH2sPwkKID5nC h9RTgG7TByNHRQbPosjJGaldNbnZ9fbbM/fo2n7l/MW6jzrMBL+NA0+McnwRCiCe UvxdIwBmcYVnb4MEXSEhnUAK5VNkOnwQO++rxQHPh+4BmHmGNsUa6p8ZcTHhU+RD KiKcRmvW0ZKtSD5oTyIc9IlUZG7oRIvu7po+2FKkOge7EDtV+d6V9+G4kfdX3Uy7 faeG7FhlStkkdMT882R5j0ygWU7inWDt7SJB3OGi0Tpz584WPwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOCIISDTbcqbMhyVCjy04lVOvoDvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2FjNjA2NWEtMGFjYS0z YjBlLTkxM2ItNzllYjkyZTcwN2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBKgDcvnQQMiSravG5VbYF0q8ypNsdWP2+SJ4Cf 528aKctqLsW9rAfNUVYqIAfXjTQJmlJ+BJfqs+JH/+LZCLQNKPqEvYtUXlxIyhED YwhTa7SZquAwEEQe6OrOIlqSNeHO8j/klxLe7M7SQbIAJ1KFqfnTojsSIhsRH/Z8 CO6Aaq0pjUKF+2Zvugg/5b696v3SwtuX8AxxbeFnr+935uzFP7VyNvQTXnb3c4pV YzQdxKeYdIKBkMn6e5WecoTXtJadTfqY0pSnab1Vnn7zfCg+o2fz49frMsZQH4U1 DS+jpx5Z0d2dZcLj1fQW5OEpaeu+h4VNlk9H/3pWO/UUBMjY -----END CERTIFICATE-----Generated at Wed Oct 29 20:38:52 2025 by rpki-client