$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a4b9ca4-b23c-3af3-ae29-56c8546d7a88.roa File: 1a4b9ca4-b23c-3af3-ae29-56c8546d7a88.roa (raw, json) Hash identifier: y3GO68ba/GkLIlCYZFE/rRQw53T2bN+ky4pj1UGQdXw= Subject key identifier: 72:67:59:4B:BC:54:70:E4:ED:4A:BE:7E:3B:2B:A5:17:69:D3:97:F1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B715CDC5518749EC3D3677080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a4b9ca4-b23c-3af3-ae29-56c8546d7a88.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 396595 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:dc:55:18:74:9e:c3:d3:67:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=f0fac8ba-21ab-4071-a252-20e1e2b591c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e6:6d:9a:7e:cc:7d:37:77:2d:92:eb:3a:f6: 22:34:47:9c:a8:af:c9:8f:07:85:9b:49:76:0b:88: 46:e6:28:2f:f2:9a:6a:58:03:7b:f9:c0:17:1e:ed: a2:97:b1:e9:49:ed:83:4d:e8:81:42:eb:c5:51:a2: 34:21:b0:73:fa:21:d3:3e:ac:41:eb:c7:19:50:0b: 3c:61:7e:1d:0f:39:f0:90:96:8d:43:03:46:d7:5b: 3b:0e:dd:44:b4:41:71:25:d5:af:99:92:e1:d1:a9: ad:f5:2e:33:2d:f3:50:d8:f0:49:93:e3:0d:45:95: 66:56:c7:81:76:48:1b:fc:09:a7:2e:8a:e9:aa:e1: 42:95:da:7e:ed:ce:34:e4:fc:d9:bb:bd:51:e6:b8: 04:20:af:6c:13:d4:96:2e:80:4a:d9:eb:17:fe:ff: 71:7e:65:2f:8c:2a:6a:2b:a0:b8:3c:3f:23:7e:29: 66:2a:d6:ed:94:a6:f9:10:f2:7d:19:a7:14:30:51: 4d:f2:9e:b0:6a:f8:06:45:f9:36:84:7f:2d:9c:4d: ec:3f:2c:c7:25:c6:8a:36:cb:88:c0:30:69:5d:f6: c7:5e:e8:7e:ac:b6:67:a7:fc:da:b3:af:13:05:f5: f7:a2:88:c4:3f:cf:66:7e:7b:e7:fd:2b:6f:85:d9: 39:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:67:59:4B:BC:54:70:E4:ED:4A:BE:7E:3B:2B:A5:17:69:D3:97:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a4b9ca4-b23c-3af3-ae29-56c8546d7a88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:78:2c:d6:54:35:54:a8:04:10:b9:c0:14:09:79:29:98:ca: e4:57:65:bd:6a:05:9c:ad:fd:19:56:38:59:85:ed:e9:24:a1: 16:2e:bc:8f:4f:04:5f:e5:86:56:fa:9c:11:db:d7:e2:15:f9: ef:83:94:9e:44:af:33:0f:e9:33:92:0d:8e:b7:41:5c:b6:fe: 88:06:74:9a:c7:8e:c1:28:5d:bb:03:70:99:1e:71:08:db:b1: 52:b5:a1:30:87:88:02:ed:aa:5b:22:09:21:56:9f:26:76:0f: 21:51:53:4c:4d:50:e4:b6:fa:49:89:59:1a:e7:fb:c7:c7:18: 93:06:89:20:c1:99:a8:f4:07:85:71:e7:2f:21:93:65:b1:03: c8:79:5a:2b:5b:65:64:62:d7:d7:ca:87:3e:ed:1b:e9:85:b4: 2e:92:9d:5f:f2:af:6f:86:58:40:eb:b0:cb:3c:ef:84:6a:52: ad:c5:14:62:72:00:1c:3f:4a:1b:ce:5e:a3:c5:35:87:cf:b0: 41:98:5b:3a:f0:01:72:21:3a:74:6f:74:4c:94:25:1c:49:8e: 66:98:51:93:b6:82:f8:ea:47:3e:85:e5:d4:06:3b:00:48:46: b1:c1:78:5c:eb:5b:98:1b:2a:26:19:5b:9d:e5:04:b7:53:7c: 6e:d2:e9:01 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtxXNxVGHSew9NncIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ZjBmYWM4YmEtMjFhYi00MDcxLWEyNTItMjBlMWUyYjU5MWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+Ztmn7MfTd3LZLrOvYiNEecqK/JjweFm0l2 C4hG5igv8ppqWAN7+cAXHu2il7HpSe2DTeiBQuvFUaI0IbBz+iHTPqxB68cZUAs8 YX4dDznwkJaNQwNG11s7Dt1EtEFxJdWvmZLh0amt9S4zLfNQ2PBJk+MNRZVmVseB dkgb/AmnLorpquFCldp+7c405PzZu71R5rgEIK9sE9SWLoBK2esX/v9xfmUvjCpq K6C4PD8jfilmKtbtlKb5EPJ9GacUMFFN8p6wavgGRfk2hH8tnE3sPyzHJcaKNsuI wDBpXfbHXuh+rLZnp/zas68TBfX3oojEP89mfnvn/Stvhdk5fQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHJnWUu8VHDk7Uq+fjsrpRdp05fxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWE0YjljYTQtYjIzYy0z YWYzLWFlMjktNTZjODU0NmQ3YTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA6eCzWVDVUqAQQucAUCXkpmMrkV2W9agWcrf0Z VjhZhe3pJKEWLryPTwRf5YZW+pwR29fiFfnvg5SeRK8zD+kzkg2Ot0Fctv6IBnSa x47BKF27A3CZHnEI27FStaEwh4gC7apbIgkhVp8mdg8hUVNMTVDktvpJiVka5/vH xxiTBokgwZmo9AeFcecvIZNlsQPIeVorW2VkYtfXyoc+7RvphbQukp1f8q9vhlhA 67DLPO+EalKtxRRicgAcP0obzl6jxTWHz7BBmFs68AFyITp0b3RMlCUcSY5mmFGT toL46kc+heXUBjsASEaxwXhc61uYGyomGVud5QS3U3xu0ukB -----END CERTIFICATE-----Generated at Wed Oct 29 20:36:35 2025 by rpki-client