$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2044af53-1751-3c14-b88d-8a21757b959c.roa File: 2044af53-1751-3c14-b88d-8a21757b959c.roa (raw, json) Hash identifier: 4KjD/BpY7QSgzHTP7+KLyPUDllJNO3BZ2burcTtJOJQ= Subject key identifier: 5C:FB:E8:6D:CB:F7:1B:81:6F:E0:EF:09:D2:D8:7C:9F:DD:C2:8E:5A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B48E20FD11B0E8033EC9C4C80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2044af53-1751-3c14-b88d-8a21757b959c.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 396575 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:0f:d1:1b:0e:80:33:ec:9c:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=e4d6533c-4af0-4d7c-8a71-f4d7a067fa42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d7:e2:87:16:c0:d4:29:a1:75:4b:d7:38:3c: 41:52:dc:ae:f8:6a:db:96:f9:4d:a9:02:91:be:3e: d3:da:e7:39:1f:3a:2f:8e:09:b3:fc:e5:88:4c:4a: dc:53:d4:0d:69:8c:3e:3f:67:b4:30:04:c9:4e:4b: fe:ee:d8:76:bc:87:df:bc:89:df:0e:ba:b3:4e:be: 34:67:88:ae:2e:f2:9c:50:d6:92:b7:af:77:8c:66: 0f:c6:28:98:1c:7f:c1:1d:25:9a:74:dd:ff:5a:de: bd:12:b1:77:43:b9:62:3f:b4:ca:42:6a:c5:42:b2: 80:db:e3:78:78:30:e2:09:d5:c8:7c:22:7b:c7:9f: ed:b7:7b:00:b2:d4:fb:39:3e:a9:8b:9f:c5:ae:0c: bc:77:dd:26:92:8e:7e:a9:99:b8:5a:48:28:d8:93: 43:13:78:6d:e2:71:d3:3d:f9:11:8b:0e:e4:97:ba: dc:d3:c5:e8:97:c7:60:ed:7d:aa:b2:95:a1:b6:37: 8a:50:11:51:51:98:71:6e:24:3e:cd:7f:af:31:c6: 87:ce:7b:55:26:86:ce:18:f7:16:c7:af:7f:e4:ed: 6a:54:ab:07:77:0b:12:a7:ce:3e:4f:bd:36:97:e2: ec:ef:30:cb:e8:db:61:75:f8:14:c0:49:4c:96:98: ba:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:FB:E8:6D:CB:F7:1B:81:6F:E0:EF:09:D2:D8:7C:9F:DD:C2:8E:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2044af53-1751-3c14-b88d-8a21757b959c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:b3:16:9d:0e:f7:e4:37:86:96:a7:7d:33:e2:cf:8e:0e:27: ac:2f:36:36:cf:bb:46:25:af:1b:6b:a9:4f:0b:dc:16:93:e3: 0b:14:ca:c6:15:f4:ca:7c:3b:4c:c6:5e:cb:af:1e:46:0e:d1: e8:1e:c7:60:c5:8d:ab:f9:f1:90:b1:a2:4f:9e:36:4a:29:6f: aa:67:af:b0:c8:ca:60:87:a4:5d:32:3d:9b:48:a5:05:cb:49: 8b:2e:8a:aa:29:7b:01:95:76:0a:28:a9:16:c5:56:6f:44:5e: 1d:76:d0:2d:67:97:bf:66:8a:cb:bb:f8:29:ca:9c:27:7d:07: 00:7a:27:9a:33:e7:b5:0d:5f:e3:1b:46:e6:a1:77:60:f0:23: 7b:3b:70:0a:c1:eb:99:28:5b:98:8d:f3:7c:b8:63:71:04:78: 81:b1:55:7f:ef:33:9d:35:ae:ca:ec:6a:79:35:92:87:0c:e5: a7:e5:f3:10:e3:75:7f:9f:05:1d:66:d8:81:32:08:a7:9f:71: ac:db:ce:c2:1a:6d:da:e5:5f:44:dc:52:2d:01:5a:e0:6c:fc: ef:15:29:fd:f1:c9:e2:bc:62:13:57:2b:06:e6:cf:b3:02:98: fa:ec:0d:44:f0:72:1f:db:83:7a:6a:7d:b0:48:eb:5a:04:c1: 22:d3:e2:e5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4g/RGw6AM+ycTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZTRkNjUzM2MtNGFmMC00ZDdjLThhNzEtZjRkN2EwNjdmYTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9fihxbA1CmhdUvXODxBUtyu+GrblvlNqQKR vj7T2uc5Hzovjgmz/OWITErcU9QNaYw+P2e0MATJTkv+7th2vIffvInfDrqzTr40 Z4iuLvKcUNaSt693jGYPxiiYHH/BHSWadN3/Wt69ErF3Q7liP7TKQmrFQrKA2+N4 eDDiCdXIfCJ7x5/tt3sAstT7OT6pi5/Frgy8d90mko5+qZm4Wkgo2JNDE3ht4nHT PfkRiw7kl7rc08Xol8dg7X2qspWhtjeKUBFRUZhxbiQ+zX+vMcaHzntVJobOGPcW x69/5O1qVKsHdwsSp84+T702l+Ls7zDL6NthdfgUwElMlpi6hQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFz76G3L9xuBb+DvCdLYfJ/dwo5aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjA0NGFmNTMtMTc1MS0z YzE0LWI4OGQtOGEyMTc1N2I5NTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA2zFp0O9+Q3hpanfTPiz44OJ6wvNjbPu0YlrxtrqU8L3BaT4wsU ysYV9Mp8O0zGXsuvHkYO0egex2DFjav58ZCxok+eNkopb6pnr7DIymCHpF0yPZtI pQXLSYsuiqopewGVdgooqRbFVm9EXh120C1nl79misu7+CnKnCd9BwB6J5oz57UN X+MbRuahd2DwI3s7cArB65koW5iN83y4Y3EEeIGxVX/vM501rsrsank1kocM5afl 8xDjdX+fBR1m2IEyCKefcazbzsIabdrlX0TcUi0BWuBs/O8VKf3xyeK8YhNXKwbm z7MCmPrsDUTwch/bg3pqfbBI61oEwSLT4uU= -----END CERTIFICATE-----Generated at Wed Oct 29 20:44:54 2025 by rpki-client