$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f39c5d1-23a6-3ce6-90ec-834cb7dbd4cf.roa File: 0f39c5d1-23a6-3ce6-90ec-834cb7dbd4cf.roa (raw, json) Hash identifier: VniC2TPmd8lr0XHQVSspIKJ+N6N0ptHzDxSuzsvJIRU= Subject key identifier: 0D:13:4E:CA:14:20:E8:7E:1F:5F:60:D3:7F:1D:C4:56:35:FF:7C:A5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B99D7D9572E7953A09F134880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f39c5d1-23a6-3ce6-90ec-834cb7dbd4cf.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 396542 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:d9:57:2e:79:53:a0:9f:13:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=3bf49f74-6355-47d7-b905-2e7a24ca40bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:0f:f8:95:76:58:4a:2b:9b:50:87:a1:8c:7d: d4:8d:57:3e:2b:b1:63:32:79:9c:35:fb:58:28:e2: de:70:9e:6d:47:f7:54:0b:05:e9:23:33:c1:9d:3f: d7:72:c6:4c:ca:3c:97:53:bb:b1:9d:1f:0f:0f:14: e9:88:33:b2:9b:40:08:7e:9f:52:6e:53:94:27:76: 2e:96:6d:e3:da:e0:27:9a:0e:76:d9:4b:93:9d:22: ee:2f:2a:21:78:00:d8:0b:e7:db:55:f0:0a:bc:07: 85:ce:26:9d:72:f0:d3:72:17:99:4c:8f:c9:18:7a: 69:e3:cd:5c:6d:11:16:3e:c8:c3:e5:83:30:2e:3f: 74:41:9e:47:b1:c4:1b:ef:74:bf:93:74:19:56:c8: 62:34:7d:df:e7:9c:aa:39:d5:58:63:cc:3b:f5:4e: b8:a6:fc:f4:e0:22:74:bd:7e:61:16:44:8d:48:34: 63:dc:8c:2f:0c:31:60:f1:31:5f:82:23:d9:d7:44: ec:82:3b:35:64:c5:71:ef:dc:bd:4c:61:7c:ae:19: 71:6e:d6:0d:69:28:45:6f:66:4d:56:c2:6d:b8:8d: 6b:81:e9:15:c2:22:4d:6c:d2:73:43:7c:ee:29:e0: b9:b0:ac:58:a3:1c:8c:81:ba:2d:dc:b0:c3:5e:bb: a0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:13:4E:CA:14:20:E8:7E:1F:5F:60:D3:7F:1D:C4:56:35:FF:7C:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f39c5d1-23a6-3ce6-90ec-834cb7dbd4cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:63:5a:43:dc:58:9f:bc:cc:5e:fd:d3:70:c1:5f:1b:9f:3f: 6f:c9:b2:db:0b:79:03:db:73:21:d6:f3:5b:61:04:ee:bc:5f: 16:8e:22:f2:4f:ff:14:a3:9d:41:35:75:83:84:3e:cc:5c:28: 79:1f:cc:d8:31:23:b3:ef:77:85:ef:7e:c8:fe:b4:e5:ad:0e: 4d:18:38:18:c8:37:52:1c:1b:01:86:74:2a:c9:f7:94:5f:f4: a3:49:14:4a:4c:24:fe:ba:de:2f:08:5f:fc:bc:5c:bb:e0:b3: 97:28:7b:0c:52:be:40:08:eb:c9:b1:06:c9:b1:0d:ec:64:c4: 79:75:82:5d:29:63:4e:c2:4d:07:99:8f:c7:75:21:14:0a:bd: fc:c4:a6:1f:64:f3:aa:68:0b:32:a7:a5:75:11:a5:26:a5:1f: 8f:c1:6b:49:7e:55:6c:51:55:cd:0f:05:f8:65:5d:f8:23:32: d8:65:0b:cf:bd:24:b9:cf:3d:4f:c6:ea:16:39:2d:b5:45:13: 26:5c:8a:b6:b7:11:45:01:8e:a4:97:fc:a9:84:db:9b:7a:50: 62:0a:d3:06:43:be:d2:49:60:86:db:ef:67:21:dc:83:00:bf: bd:a2:6d:12:db:5c:f1:de:58:dc:dc:e3:8e:6c:34:f0:28:b6: 07:e2:0d:36 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuZ19lXLnlToJ8TSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk M2JmNDlmNzQtNjM1NS00N2Q3LWI5MDUtMmU3YTI0Y2E0MGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQ/4lXZYSiubUIehjH3UjVc+K7FjMnmcNftY KOLecJ5tR/dUCwXpIzPBnT/XcsZMyjyXU7uxnR8PDxTpiDOym0AIfp9SblOUJ3Yu lm3j2uAnmg522UuTnSLuLyoheADYC+fbVfAKvAeFziadcvDTcheZTI/JGHpp481c bREWPsjD5YMwLj90QZ5HscQb73S/k3QZVshiNH3f55yqOdVYY8w79U64pvz04CJ0 vX5hFkSNSDRj3IwvDDFg8TFfgiPZ10Tsgjs1ZMVx79y9TGF8rhlxbtYNaShFb2ZN VsJtuI1rgekVwiJNbNJzQ3zuKeC5sKxYoxyMgbot3LDDXrugfQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFA0TTsoUIOh+H19g038dxFY1/3ylMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGYzOWM1ZDEtMjNhNi0z Y2U2LTkwZWMtODM0Y2I3ZGJkNGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBDY1pD3FifvMxe/dNwwV8bnz9vybLbC3kD23Mh 1vNbYQTuvF8WjiLyT/8Uo51BNXWDhD7MXCh5H8zYMSOz73eF737I/rTlrQ5NGDgY yDdSHBsBhnQqyfeUX/SjSRRKTCT+ut4vCF/8vFy74LOXKHsMUr5ACOvJsQbJsQ3s ZMR5dYJdKWNOwk0HmY/HdSEUCr38xKYfZPOqaAsyp6V1EaUmpR+PwWtJflVsUVXN DwX4ZV34IzLYZQvPvSS5zz1PxuoWOS21RRMmXIq2txFFAY6kl/yphNubelBiCtMG Q77SSWCG2+9nIdyDAL+9om0S21zx3ljc3OOObDTwKLYH4g02 -----END CERTIFICATE-----Generated at Thu Oct 30 03:23:05 2025 by rpki-client