$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2578eeb8-b64a-389c-8ff9-957a1652926d.roa File: 2578eeb8-b64a-389c-8ff9-957a1652926d.roa (raw, json) Hash identifier: x5+GjRH3HcBRRJPye2Q8mwBqxYk5hwXkJ1Tuvl5dpGM= Subject key identifier: 8F:A8:4E:ED:73:2C:D7:8D:A9:84:B2:27:76:A0:E1:75:8D:4F:40:28 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B99D7DBD1F504107376F0E840 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2578eeb8-b64a-389c-8ff9-957a1652926d.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 396617 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:db:d1:f5:04:10:73:76:f0:e8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=598667a9-ecde-49ba-8ad3-35e7054cede2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8b:57:d6:57:1a:2d:58:67:ea:85:7b:57:7c: 12:65:d9:02:ff:0e:b3:d2:f1:e0:3c:dd:e0:1a:30: ad:f2:97:3c:be:8a:ab:50:b4:09:6b:b1:a8:63:7c: d5:de:c8:c5:2e:72:05:c3:47:02:fb:d3:5d:c4:bb: 74:89:17:03:9e:c1:f7:48:77:b7:5c:26:12:f3:c1: 69:cb:48:40:bc:5d:36:6f:97:74:04:2d:c3:57:97: ad:5c:bc:ce:e7:95:c6:3b:22:1b:61:16:b7:7d:ed: 88:23:a5:4a:5b:a9:f8:7e:2f:a0:59:4b:8b:01:92: 14:53:d3:c3:0b:2f:27:1d:0e:2e:82:0f:ef:ed:42: 33:83:68:02:ba:5c:20:dd:28:9f:7e:71:88:b0:cb: 83:2b:ec:86:ab:85:ae:05:f2:7c:36:1a:73:85:c2: 14:0c:12:fd:7a:70:ff:f2:95:34:5e:34:de:94:86: da:9f:a9:f8:db:c7:00:e7:0c:12:8e:de:4a:7c:b8: c6:98:7f:9f:ad:70:56:06:9d:05:7f:98:20:f6:d3: 00:46:f2:6e:ef:69:52:36:b9:8e:56:fc:51:2d:c5: a5:23:c2:d8:f4:16:56:4e:ee:2a:3a:8d:d0:93:1f: 82:3f:eb:b5:33:99:99:79:f9:bf:2f:7d:36:b9:ef: b6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A8:4E:ED:73:2C:D7:8D:A9:84:B2:27:76:A0:E1:75:8D:4F:40:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2578eeb8-b64a-389c-8ff9-957a1652926d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:b1:ad:a4:e9:fa:ac:95:9e:fa:13:87:7c:46:dc:4b:9e:1d: 99:c5:60:07:59:f7:f4:78:db:7d:d1:ae:30:72:8b:41:c9:19: 8d:5e:db:88:81:cc:f8:0c:4a:b7:4e:b8:bd:84:22:94:ab:07: c3:45:db:9b:52:33:32:81:2c:1b:59:d9:47:48:38:ad:0e:13: ea:01:ca:0a:63:e4:19:1c:6a:30:96:f2:13:79:32:2c:77:89: a9:fc:f4:51:2a:c0:a0:c1:86:66:4f:e7:20:60:29:6e:e7:1f: 8c:b7:f3:55:71:ec:5f:60:ad:8c:b2:4a:36:59:8d:2c:ae:fb: 4c:ad:70:89:28:ff:b2:a6:a0:3d:b0:9a:f3:10:dc:8f:8d:8c: 0f:21:22:03:bc:dc:2a:3c:94:20:c0:a7:fb:85:ad:da:7b:a0: 53:04:5a:b9:db:28:4f:ea:1e:38:76:78:24:d3:91:56:58:c4: 31:3c:ee:ef:dc:4c:0b:b0:05:04:ff:0a:8a:2b:46:37:ce:8b: 43:97:b7:eb:4e:0c:d3:07:ce:85:a0:8c:35:45:3c:d1:8a:77: cd:98:f0:b9:83:a6:bb:58:27:89:fa:2c:1b:b7:b7:ae:55:fa: 10:1d:9a:2b:02:81:e6:26:d3:d3:47:5a:a5:0d:8a:1f:45:76: db:b6:2b:67 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuZ19vR9QQQc3bw6EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NTk4NjY3YTktZWNkZS00OWJhLThhZDMtMzVlNzA1NGNlZGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjotX1lcaLVhn6oV7V3wSZdkC/w6z0vHgPN3g GjCt8pc8voqrULQJa7GoY3zV3sjFLnIFw0cC+9NdxLt0iRcDnsH3SHe3XCYS88Fp y0hAvF02b5d0BC3DV5etXLzO55XGOyIbYRa3fe2II6VKW6n4fi+gWUuLAZIUU9PD Cy8nHQ4ugg/v7UIzg2gCulwg3SiffnGIsMuDK+yGq4WuBfJ8NhpzhcIUDBL9enD/ 8pU0XjTelIban6n428cA5wwSjt5KfLjGmH+frXBWBp0Ff5gg9tMARvJu72lSNrmO VvxRLcWlI8LY9BZWTu4qOo3Qkx+CP+u1M5mZefm/L302ue+2zwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFI+oTu1zLNeNqYSyJ3ag4XWNT0AoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjU3OGVlYjgtYjY0YS0z ODljLThmZjktOTU3YTE2NTI5MjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAxsa2k6fqslZ76E4d8RtxLnh2ZxWAHWff0eNt9 0a4wcotByRmNXtuIgcz4DEq3Tri9hCKUqwfDRdubUjMygSwbWdlHSDitDhPqAcoK Y+QZHGowlvITeTIsd4mp/PRRKsCgwYZmT+cgYClu5x+Mt/NVcexfYK2Msko2WY0s rvtMrXCJKP+ypqA9sJrzENyPjYwPISIDvNwqPJQgwKf7ha3ae6BTBFq52yhP6h44 dngk05FWWMQxPO7v3EwLsAUE/wqKK0Y3zotDl7frTgzTB86FoIw1RTzRinfNmPC5 g6a7WCeJ+iwbt7euVfoQHZorAoHmJtPTR1qlDYofRXbbtitn -----END CERTIFICATE-----Generated at Wed Oct 29 20:42:29 2025 by rpki-client