$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ae757c2-fd54-34e5-b835-c80962e8a054.roa File: 1ae757c2-fd54-34e5-b835-c80962e8a054.roa (raw, json) Hash identifier: CuK1M+KAV8sfe4XoLzed85ejznm/MaSuYQfCxNlORhI= Subject key identifier: 14:59:4E:F3:16:C8:69:F9:15:C5:88:EA:64:0A:20:C5:05:57:9F:54 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6202010CEB56EF6C053B397C Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ae757c2-fd54-34e5-b835-c80962e8a054.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 10515 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:01:0c:eb:56:ef:6c:05:3b:39:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=03f401e0-f6c9-41e6-b7e1-b33d9c8e3a24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:39:87:05:98:4f:53:af:8d:54:18:01:85:19: 36:72:e3:04:f9:99:d7:2b:9c:d5:b9:46:bc:32:02: 91:0a:0a:4d:53:cb:9b:e0:72:04:37:00:5b:68:7c: c9:0b:fd:c6:89:b1:de:e6:29:df:35:09:c0:e7:42: 95:4f:d2:c5:b7:3f:00:65:b2:bb:dd:5b:bc:66:2b: ee:1c:16:65:cc:5e:f7:22:ab:3d:e0:8c:46:d5:70: 8b:e1:8d:66:b5:43:fc:71:17:f3:14:60:46:f3:2c: f9:76:04:66:91:83:53:e0:8f:32:2f:3a:a6:41:00: d9:51:28:e1:db:6e:e1:59:1e:eb:09:bf:f9:34:78: 6b:62:c3:2e:ec:a1:f2:b0:20:89:74:ef:9c:ae:5d: 10:b6:54:e9:24:c8:39:14:94:14:2f:68:a6:4b:25: cb:9f:83:df:2e:d8:66:02:eb:91:e6:ae:85:0f:5f: 98:29:d9:a7:58:69:c7:e8:e1:b3:a6:ad:71:29:cb: 6a:2d:b2:49:fe:ba:df:41:97:7d:36:32:c3:f5:4f: c4:c7:2c:af:d5:73:ab:2b:17:2e:6e:42:b4:e8:8e: 85:04:10:e5:0f:7e:bf:2a:ca:ee:08:44:df:1c:d1: c1:16:88:3d:1a:2d:ec:21:51:e5:4f:e8:9f:79:4b: a2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:59:4E:F3:16:C8:69:F9:15:C5:88:EA:64:0A:20:C5:05:57:9F:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ae757c2-fd54-34e5-b835-c80962e8a054.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:4f:39:d1:a9:db:12:11:bf:67:6a:a2:23:92:c8:b9:67:db: d2:6f:69:d1:c8:ae:2d:0f:b3:04:21:c9:77:ec:b6:30:3b:eb: ec:24:44:73:26:f4:2f:81:4f:fe:e1:a7:40:fa:83:df:82:f2: 9a:78:00:e9:2d:4f:19:54:3b:1d:25:52:63:7a:6a:75:b1:79: 23:e8:de:b7:ab:2d:b2:fc:1c:7b:2b:39:0c:20:61:0c:70:59: 60:b8:4c:01:5a:70:ee:de:c8:34:eb:49:89:54:33:a4:ec:df: 37:9b:12:52:12:b2:fa:c3:33:62:93:31:3f:84:48:cf:26:f4: ec:68:60:1e:c6:08:87:b5:e0:4c:be:39:0b:23:04:ec:0e:1f: 55:c5:08:e5:12:d2:95:a1:0a:42:f2:93:e9:d0:b5:39:cf:21: 37:5a:83:9c:f3:3e:ef:86:03:2c:b0:81:dc:44:ec:00:94:6d: ac:7a:2c:c1:d0:b5:52:16:83:a7:fb:61:7e:7e:0a:38:0f:c2: 11:06:07:c9:72:4a:2b:1d:00:bc:39:8a:e1:56:81:64:f4:ff: 20:23:19:c4:00:15:86:85:50:3e:b4:cc:e2:7b:00:1c:06:c6: 10:08:de:81:03:0b:89:c6:b6:40:60:b9:db:ab:6d:3b:a5:32: 96:12:e4:9a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAgEM61bvbAU7OXwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk MDNmNDAxZTAtZjZjOS00MWU2LWI3ZTEtYjMzZDljOGUzYTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijmHBZhPU6+NVBgBhRk2cuME+ZnXK5zVuUa8 MgKRCgpNU8ub4HIENwBbaHzJC/3GibHe5infNQnA50KVT9LFtz8AZbK73Vu8Zivu HBZlzF73Iqs94IxG1XCL4Y1mtUP8cRfzFGBG8yz5dgRmkYNT4I8yLzqmQQDZUSjh 227hWR7rCb/5NHhrYsMu7KHysCCJdO+crl0QtlTpJMg5FJQUL2imSyXLn4PfLthm AuuR5q6FD1+YKdmnWGnH6OGzpq1xKctqLbJJ/rrfQZd9NjLD9U/Exyyv1XOrKxcu bkK06I6FBBDlD36/KsruCETfHNHBFog9Gi3sIVHlT+ifeUuiWQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBRZTvMWyGn5FcWI6mQKIMUFV59UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWFlNzU3YzItZmQ1NC0z NGU1LWI4MzUtYzgwOTYyZThhMDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIxPOdGp2xIRv2dqoiOSyLln29JvadHIri0PswQhyXfstjA76+wk RHMm9C+BT/7hp0D6g9+C8pp4AOktTxlUOx0lUmN6anWxeSPo3rerLbL8HHsrOQwg YQxwWWC4TAFacO7eyDTrSYlUM6Ts3zebElISsvrDM2KTMT+ESM8m9OxoYB7GCIe1 4Ey+OQsjBOwOH1XFCOUS0pWhCkLyk+nQtTnPITdag5zzPu+GAyywgdxE7ACUbax6 LMHQtVIWg6f7YX5+CjgPwhEGB8lySisdALw5iuFWgWT0/yAjGcQAFYaFUD60zOJ7 ABwGxhAI3oEDC4nGtkBgudurbTulMpYS5Jo= -----END CERTIFICATE-----Generated at Wed Oct 29 20:10:30 2025 by rpki-client