$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb107715-bde9-34d7-b228-8c2cf8726e3b.roa File: bb107715-bde9-34d7-b228-8c2cf8726e3b.roa (raw, json) Hash identifier: gIPaMq18XqpZBlT+pA3zF+Qsmwc9HwbTiHRMoD/MMVU= Subject key identifier: 4A:BF:9A:1D:BA:87:20:0F:98:6F:1A:95:BE:24:57:C7:02:01:2E:DE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584BBA105421F4911F12B9D52F20 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb107715-bde9-34d7-b228-8c2cf8726e3b.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 396606 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:54:21:f4:91:1f:12:b9:d5:2f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=1071085f-ae26-4c1b-9891-8ef5520fb232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:64:6e:6f:bd:34:6f:c8:b4:67:2e:04:2f:db: 5a:2e:00:75:54:c4:b3:23:be:25:ab:86:fe:16:c1: fd:3a:d5:22:80:6b:07:f0:26:94:5d:57:88:33:a3: 5f:15:e2:9b:fd:28:18:9b:cb:3a:fa:2e:2a:3e:a9: f6:af:33:36:f6:bf:52:a4:bd:67:a2:b9:65:2c:5f: 82:2d:fa:ba:04:ac:8a:93:77:a3:82:79:10:76:08: bc:32:73:a7:2c:91:42:92:fb:8f:70:8c:66:73:a5: 6d:5f:6b:0e:98:cf:d9:4e:67:0c:b0:86:5e:39:bb: c6:45:4c:2a:74:78:08:a9:18:70:5c:22:0c:01:1e: a8:28:b4:55:19:8f:29:2a:e0:31:f5:ee:67:59:c0: b1:d8:d1:8c:57:28:59:c8:f5:cd:8d:6a:7c:10:c5: c3:4e:ec:c5:e7:15:69:c3:2c:16:6c:34:e3:9b:c9: cc:ca:9f:c4:9f:54:70:44:9d:55:a1:ec:70:4f:27: 68:74:e9:a3:5a:c3:83:41:59:08:ec:b4:3f:a0:33: 43:f5:b9:16:ef:9b:b3:cf:09:24:6e:5e:c5:1a:1b: 26:e5:59:d6:b9:23:b6:8a:27:94:a3:b2:74:43:71: cf:be:95:bf:ac:ed:a8:aa:d3:c1:16:ea:84:c2:de: df:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:BF:9A:1D:BA:87:20:0F:98:6F:1A:95:BE:24:57:C7:02:01:2E:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb107715-bde9-34d7-b228-8c2cf8726e3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:a2:23:40:bc:ce:ac:e1:7e:ba:6e:17:4d:28:f0:af:8b:34: 2b:8b:cf:1f:9c:65:a1:58:4e:66:60:19:1c:32:4a:7a:a6:a1: 69:f5:7b:63:60:09:31:41:9c:85:0c:e7:be:f7:fb:6d:d7:01: 5a:b4:f6:a2:82:c3:09:77:fe:d6:e7:0b:cf:f2:42:00:09:a4: ff:eb:4c:72:7c:1f:24:44:e9:50:30:79:ce:68:e4:ec:76:8e: 36:76:60:66:37:36:6c:ae:87:81:59:c9:41:61:68:29:59:a3: 45:8b:6d:f3:c3:0e:64:1d:14:0a:df:b3:31:0c:b9:4d:e6:fb: 4e:ac:f0:38:99:c9:94:ab:39:ac:c9:a5:9e:d4:29:ef:2e:77: 41:b0:f6:d3:9f:b5:88:30:43:b4:34:ef:f7:9d:0a:7e:80:d2: 81:24:d3:cb:4c:cc:98:af:8d:a9:81:fc:ec:76:9e:75:d9:aa: e6:95:2a:b3:9c:6a:0e:68:00:41:34:3e:c1:0b:c4:7e:d3:ca: ba:0a:66:3c:91:ab:ef:35:19:c5:5d:91:71:3b:88:ec:c7:67: 58:e8:3f:7f:bf:bf:d0:96:b0:b1:b1:7c:01:22:d8:27:b9:5d: 52:d4:e2:6c:59:56:3d:71:e8:20:00:63:2f:18:e9:70:bc:f6: b2:47:7f:bf -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEu6EFQh9JEfErnVLyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk MTA3MTA4NWYtYWUyNi00YzFiLTk4OTEtOGVmNTUyMGZiMjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2Rub700b8i0Zy4EL9taLgB1VMSzI74lq4b+ FsH9OtUigGsH8CaUXVeIM6NfFeKb/SgYm8s6+i4qPqn2rzM29r9SpL1norllLF+C Lfq6BKyKk3ejgnkQdgi8MnOnLJFCkvuPcIxmc6VtX2sOmM/ZTmcMsIZeObvGRUwq dHgIqRhwXCIMAR6oKLRVGY8pKuAx9e5nWcCx2NGMVyhZyPXNjWp8EMXDTuzF5xVp wywWbDTjm8nMyp/En1RwRJ1VoexwTydodOmjWsODQVkI7LQ/oDND9bkW75uzzwkk bl7FGhsm5VnWuSO2iieUo7J0Q3HPvpW/rO2oqtPBFuqEwt7fVwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEq/mh26hyAPmG8alb4kV8cCAS7eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmIxMDc3MTUtYmRlOS0z NGQ3LWIyMjgtOGMyY2Y4NzI2ZTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBDoiNAvM6s4X66bhdNKPCvizQri88fnGWhWE5m YBkcMkp6pqFp9XtjYAkxQZyFDOe+9/tt1wFatPaigsMJd/7W5wvP8kIACaT/60xy fB8kROlQMHnOaOTsdo42dmBmNzZsroeBWclBYWgpWaNFi23zww5kHRQK37MxDLlN 5vtOrPA4mcmUqzmsyaWe1CnvLndBsPbTn7WIMEO0NO/3nQp+gNKBJNPLTMyYr42p gfzsdp512armlSqznGoOaABBND7BC8R+08q6CmY8kavvNRnFXZFxO4jsx2dY6D9/ v7/QlrCxsXwBItgnuV1S1OJsWVY9ceggAGMvGOlwvPayR3+/ -----END CERTIFICATE-----Generated at Wed Nov 5 00:58:21 2025 by rpki-client