$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/225282df-df33-3a53-9da3-ba45b2a16a38.roa File: 225282df-df33-3a53-9da3-ba45b2a16a38.roa (raw, json) Hash identifier: WHLcMdfMfIXAcLFCV+ALUxHe8yMxr/3Xj3wEpNpQrZc= Subject key identifier: ED:02:B4:EE:3D:67:4D:9E:5D:A0:98:FB:A1:D7:36:64:7B:EA:A3:A1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6201D7F00769548513EE4CE0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/225282df-df33-3a53-9da3-ba45b2a16a38.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 397210 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:d7:f0:07:69:54:85:13:ee:4c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=39aa7985-f5da-42b2-98d3-e373f61dd6a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c5:f8:0d:b1:4e:4f:ed:fa:73:a5:76:ea:c8: f2:fc:7c:cb:77:6a:fa:bd:f2:5b:b5:4e:46:24:9b: 6d:f3:09:00:69:71:8d:a2:00:09:88:07:0f:4c:06: 39:50:e5:a6:7a:6f:e6:e5:6a:da:96:06:c5:bc:25: 01:5b:10:89:7f:50:e3:23:9d:bc:d0:d1:cc:53:e7: 70:de:ab:1d:4d:7a:7e:d6:f3:b7:61:82:e8:ba:8d: c7:a4:46:cf:04:19:3e:10:32:4a:4f:9b:03:34:ad: 7a:73:c1:a5:ce:14:94:63:38:cb:5d:68:97:0e:cb: c1:94:82:38:59:46:09:f8:ff:6b:ee:77:d5:0d:82: 6d:eb:15:f5:20:52:d0:54:17:9b:72:2f:ed:f5:ee: b2:d0:86:96:72:d2:e6:0d:a3:28:2c:f4:2a:3b:11: 24:28:25:99:0c:b9:ca:5d:bf:3e:37:8a:bc:fa:56: 87:5e:31:cb:13:ad:63:eb:d7:08:9c:6e:68:1e:a2: 54:e0:4b:10:83:0e:cc:8d:c6:90:8f:fc:c5:5c:6f: 3b:29:58:57:8a:f2:7b:b3:6c:3e:24:1d:cd:a6:e7: 09:e3:04:d1:10:c0:bf:1a:dc:6f:0b:c3:b2:95:25: 73:d3:07:db:7f:68:5d:25:b3:aa:68:e6:5d:69:a8: e6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:02:B4:EE:3D:67:4D:9E:5D:A0:98:FB:A1:D7:36:64:7B:EA:A3:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/225282df-df33-3a53-9da3-ba45b2a16a38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:a3:85:c5:f8:b3:f6:c3:26:5d:c0:70:0a:d4:28:21:e1:6e: 0e:87:1a:29:0f:db:60:94:e3:46:2d:6a:d6:1e:d9:16:df:f4: 60:2a:f5:7c:a3:9d:0e:4d:56:f7:61:b6:24:6f:25:24:9e:0b: 66:bf:69:de:b4:07:fa:11:4b:2d:15:ad:63:92:f4:61:c3:b7: 07:57:db:25:79:c8:e6:12:a4:55:74:f8:0a:0a:94:7e:28:89: e3:42:4c:db:67:31:4a:34:0b:b9:f6:80:08:a3:2f:10:ff:87: 6f:12:4a:f5:74:bf:94:30:54:8f:31:88:36:52:3c:c0:83:a0: 5f:f6:19:75:2f:6e:2a:20:ca:23:2c:f1:7c:e1:40:0e:6c:40: c8:45:cd:7a:33:8a:37:97:bf:cd:4f:e2:68:c2:08:e1:52:dd: c4:4d:58:29:de:a1:bf:28:5d:34:04:e0:bd:0e:06:63:b1:b8: 64:f1:30:d0:e4:07:8b:01:28:30:3c:77:de:ee:d9:44:5f:47: 37:2a:fc:2c:a3:0b:01:29:f7:89:d5:96:0f:d5:a4:b1:6e:86: 9d:e4:89:fe:ce:b4:79:ae:5d:e1:b3:77:5b:68:f5:fd:d8:17: 62:35:38:62:5e:3e:09:79:80:37:ff:e0:90:30:92:52:36:c3: 40:b7:a1:3e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAdfwB2lUhRPuTOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk MzlhYTc5ODUtZjVkYS00MmIyLTk4ZDMtZTM3M2Y2MWRkNmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMX4DbFOT+36c6V26sjy/HzLd2r6vfJbtU5G JJtt8wkAaXGNogAJiAcPTAY5UOWmem/m5WralgbFvCUBWxCJf1DjI5280NHMU+dw 3qsdTXp+1vO3YYLouo3HpEbPBBk+EDJKT5sDNK16c8GlzhSUYzjLXWiXDsvBlII4 WUYJ+P9r7nfVDYJt6xX1IFLQVBebci/t9e6y0IaWctLmDaMoLPQqOxEkKCWZDLnK Xb8+N4q8+laHXjHLE61j69cInG5oHqJU4EsQgw7MjcaQj/zFXG87KVhXivJ7s2w+ JB3NpucJ4wTREMC/GtxvC8OylSVz0wfbf2hdJbOqaOZdaajmaQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO0CtO49Z02eXaCY+6HXNmR76qOhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjI1MjgyZGYtZGYzMy0z YTUzLTlkYTMtYmE0NWIyYTE2YTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACCjhcX4s/bDJl3AcArUKCHhbg6HGikP22CU40YtatYe2Rbf9GAq 9XyjnQ5NVvdhtiRvJSSeC2a/ad60B/oRSy0VrWOS9GHDtwdX2yV5yOYSpFV0+AoK lH4oieNCTNtnMUo0C7n2gAijLxD/h28SSvV0v5QwVI8xiDZSPMCDoF/2GXUvbiog yiMs8XzhQA5sQMhFzXozijeXv81P4mjCCOFS3cRNWCneob8oXTQE4L0OBmOxuGTx MNDkB4sBKDA8d97u2URfRzcq/CyjCwEp94nVlg/VpLFuhp3kif7OtHmuXeGzd1to 9f3YF2I1OGJePgl5gDf/4JAwklI2w0C3oT4= -----END CERTIFICATE-----Generated at Wed Oct 29 11:52:19 2025 by rpki-client