$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cbd8546d-0b75-3ab3-8b8a-32f1d856e7f0.roa File: cbd8546d-0b75-3ab3-8b8a-32f1d856e7f0.roa (raw, json) Hash identifier: KdX3OMdIRg30/2VRNqZgnd5dJdJwyxV49zvCWA5SykI= Subject key identifier: 53:EE:7B:2F:67:69:E2:93:69:57:2A:77:79:72:F5:FD:D2:12:F5:11 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B715CDCE88D354BC986265700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cbd8546d-0b75-3ab3-8b8a-32f1d856e7f0.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 20431 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:dc:e8:8d:35:4b:c9:86:26:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=1b9ba2b6-9b18-4e8f-8839-976a7c4a6ed1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:db:d8:d9:2f:b1:b5:93:c0:66:80:d2:1c:c5: 13:78:6b:a7:39:93:77:d3:81:68:a6:cf:52:09:55: 6f:69:43:20:e4:36:5b:06:5f:15:2e:f7:b6:d7:49: 91:da:54:e8:92:15:1d:21:fa:0c:a2:0f:58:fa:f0: 2f:9e:df:42:ef:ca:e7:d4:9c:23:16:f8:7e:f2:77: 2b:d7:0e:14:95:44:01:d1:6c:5f:0c:3c:0b:ee:7f: bf:76:0a:71:51:e3:24:3d:ad:76:ed:65:5d:ef:7d: 63:d8:ec:74:a7:9d:34:1b:29:7f:54:c5:da:fb:86: 15:5d:c3:bd:a0:89:58:eb:bc:8a:82:cb:d1:d8:c8: 88:02:fb:35:d0:e8:29:5b:b9:24:48:39:a8:b5:97: 66:dc:ff:bc:cf:52:d8:44:5d:b6:d1:65:98:9b:3b: ec:24:42:6f:d6:94:6b:46:33:62:f8:42:f1:1f:cf: 78:61:38:eb:f7:4c:c5:8a:bf:51:64:ff:c4:dd:50: 61:f5:f1:5d:8e:38:c1:08:a6:53:f0:e8:1b:c5:af: 50:b5:17:50:ec:b1:eb:a1:86:54:a0:e2:a2:8e:4e: 72:8d:ae:ff:98:2d:95:e6:53:6c:75:dd:bc:7c:4c: 77:e5:61:a4:d4:96:6e:32:a0:da:79:a3:87:10:34: d6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:EE:7B:2F:67:69:E2:93:69:57:2A:77:79:72:F5:FD:D2:12:F5:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cbd8546d-0b75-3ab3-8b8a-32f1d856e7f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:ba:41:a9:2d:75:ac:b0:21:a2:8f:76:7b:42:69:ba:ee:3f: 1d:44:f8:d9:20:7c:8f:3f:e4:f9:28:ab:8e:4b:eb:b8:f3:e9: 19:b0:d9:86:be:0e:fb:22:4c:e4:5a:b5:56:88:03:34:e6:55: da:ff:ff:ac:a5:87:a4:90:da:ef:0d:ce:c0:11:5b:17:ce:8e: 20:11:5e:5f:bb:f3:85:c7:38:90:b7:d0:e3:63:b3:98:ed:b8: 15:f2:cd:e9:01:20:4d:de:c3:b0:b8:8c:c9:91:f1:74:42:20: 24:2b:5f:98:7b:c5:49:64:3a:9f:58:b8:f6:6b:9b:af:59:43: e0:db:88:68:1e:bc:e8:72:2d:b2:20:8a:fc:12:00:5c:4f:4c: d7:9b:1f:62:4a:11:81:0d:29:7b:c2:70:d5:3a:03:31:bf:70: f6:19:2f:8b:25:cd:bb:9d:99:ba:d1:bf:4b:7b:95:7c:94:fb: 03:30:0a:5c:3e:44:57:70:42:3d:74:13:09:0b:eb:93:e1:de: a9:7d:7c:c8:bd:b9:cf:f6:d0:53:be:50:0e:f7:be:5e:a2:cf: 55:dc:1a:fb:24:ef:5d:b1:7d:4e:2b:4b:64:d6:a6:43:12:0e: 72:f7:36:d3:3b:9a:2f:78:b0:29:30:f1:da:63:4e:41:3b:9a: ab:a6:67:cf -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtxXNzojTVLyYYmVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MWI5YmEyYjYtOWIxOC00ZThmLTg4MzktOTc2YTdjNGE2ZWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+tvY2S+xtZPAZoDSHMUTeGunOZN304Fops9S CVVvaUMg5DZbBl8VLve210mR2lTokhUdIfoMog9Y+vAvnt9C78rn1JwjFvh+8ncr 1w4UlUQB0WxfDDwL7n+/dgpxUeMkPa127WVd731j2Ox0p500Gyl/VMXa+4YVXcO9 oIlY67yKgsvR2MiIAvs10OgpW7kkSDmotZdm3P+8z1LYRF220WWYmzvsJEJv1pRr RjNi+ELxH894YTjr90zFir9RZP/E3VBh9fFdjjjBCKZT8Ogbxa9QtRdQ7LHroYZU oOKijk5yja7/mC2V5lNsdd28fEx35WGk1JZuMqDaeaOHEDTWKwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFPuey9naeKTaVcqd3ly9f3SEvURMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2JkODU0NmQtMGI3NS0z YWIzLThiOGEtMzJmMWQ4NTZlN2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBwukGpLXWssCGij3Z7Qmm67j8dRPjZIHyPP+T5 KKuOS+u48+kZsNmGvg77IkzkWrVWiAM05lXa//+spYekkNrvDc7AEVsXzo4gEV5f u/OFxziQt9DjY7OY7bgV8s3pASBN3sOwuIzJkfF0QiAkK1+Ye8VJZDqfWLj2a5uv WUPg24hoHrzoci2yIIr8EgBcT0zXmx9iShGBDSl7wnDVOgMxv3D2GS+LJc27nZm6 0b9Le5V8lPsDMApcPkRXcEI9dBMJC+uT4d6pfXzIvbnP9tBTvlAO975eos9V3Br7 JO9dsX1OK0tk1qZDEg5y9zbTO5oveLApMPHaY05BO5qrpmfP -----END CERTIFICATE-----Generated at Wed Oct 29 20:36:36 2025 by rpki-client