$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28442dbf-3e84-35ca-b8ec-ee72ef42f351.roa File: 28442dbf-3e84-35ca-b8ec-ee72ef42f351.roa (raw, json) Hash identifier: uMz4qG2T4DwZFvDaGpQg6mghNpPotf+3wu3Kkf8Kh9g= Subject key identifier: D8:D5:2F:95:2D:BF:B1:35:74:B4:84:38:58:03:EA:48:5A:F0:25:F6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6201FC104A43F8E5888B6900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28442dbf-3e84-35ca-b8ec-ee72ef42f351.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 396564 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:fc:10:4a:43:f8:e5:88:8b:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=7ba926b7-fcf2-401b-b798-66e6e667d642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:98:c6:2b:c2:43:cf:d6:03:54:4c:95:b4:1e: 0d:74:80:62:e1:d7:a0:25:15:82:86:2f:49:0c:c1: 60:f4:1d:75:57:44:9a:e2:ab:c2:e4:43:db:63:33: d2:56:52:b0:51:b6:f6:aa:16:01:c8:43:cc:62:ad: 91:e8:b2:d2:32:12:63:cd:96:67:20:a9:35:54:36: 00:95:34:3c:0a:7a:d5:8d:8a:c0:f1:aa:b4:63:95: 0b:02:82:80:39:7f:e8:94:38:44:0f:e9:79:78:e3: 86:9b:7d:5b:61:c1:d9:f2:eb:f1:79:78:d7:d3:1d: 27:9e:69:6c:0c:e3:75:7e:97:06:38:c3:1e:45:b3: da:7a:36:fc:07:57:b1:e2:82:b2:d4:35:8c:73:7a: 0b:f1:02:ef:36:b1:70:b7:f2:28:47:d5:ed:13:31: 71:67:3e:17:46:11:bb:cb:fd:71:d2:c1:96:e9:de: 76:c9:10:10:42:b2:8e:0b:40:6c:b6:02:bf:df:c9: 72:9a:65:88:51:0b:2e:fb:bd:f3:e8:e2:73:4b:21: 44:6a:92:3d:34:3b:8f:95:16:57:30:f8:fa:0e:eb: e5:7b:6d:5c:02:e1:ca:de:db:a7:e6:0e:16:7d:5c: d3:d6:57:0f:64:c3:22:90:8b:bf:6d:d5:e7:20:ed: cc:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D5:2F:95:2D:BF:B1:35:74:B4:84:38:58:03:EA:48:5A:F0:25:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28442dbf-3e84-35ca-b8ec-ee72ef42f351.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:fe:3c:0e:cc:24:9a:b7:da:eb:33:c3:4b:8d:d8:d9:37:1e: 35:08:63:aa:fd:e2:0c:36:c6:f8:da:01:af:8b:22:0b:1f:2e: 05:e6:92:ae:e1:63:51:96:79:b0:7f:97:a2:54:36:16:a7:a4: af:84:5e:ca:09:48:0b:ad:5d:f5:83:09:6b:e4:f1:9d:e3:d0: eb:ad:3d:e3:1e:e9:c5:2d:1f:b2:97:0f:f2:d0:5e:71:67:61: a8:f8:36:34:df:30:27:b0:31:1b:e8:5a:14:3e:df:93:87:d2: 8a:a5:5d:4a:41:54:ee:85:15:01:a9:97:74:03:9d:9c:9b:6a: de:93:6c:d8:27:79:7d:8d:1e:68:24:cf:7e:4b:5b:9c:e0:bb: 92:df:98:92:18:ed:e3:ac:94:ee:9e:6d:ab:9b:aa:34:ae:ac: 1a:fc:74:06:b3:f6:45:c0:5e:96:82:2a:a2:31:d7:4d:b8:fb: 2a:9c:85:44:39:05:3d:5d:11:4e:f8:f6:1b:7e:30:2f:a0:04: f6:ed:5d:82:38:96:af:87:9a:9f:5f:56:2a:e8:97:76:39:a8: 45:8c:1d:6d:75:12:fc:e5:95:cc:31:85:31:26:f2:2f:e5:ae: 29:4d:3d:90:7f:fd:1a:be:8c:f2:eb:5e:14:ff:4a:a5:84:8f: e7:0b:2d:05 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAfwQSkP45YiLaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk N2JhOTI2YjctZmNmMi00MDFiLWI3OTgtNjZlNmU2NjdkNjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5jGK8JDz9YDVEyVtB4NdIBi4degJRWChi9J DMFg9B11V0Sa4qvC5EPbYzPSVlKwUbb2qhYByEPMYq2R6LLSMhJjzZZnIKk1VDYA lTQ8CnrVjYrA8aq0Y5ULAoKAOX/olDhED+l5eOOGm31bYcHZ8uvxeXjX0x0nnmls DON1fpcGOMMeRbPaejb8B1ex4oKy1DWMc3oL8QLvNrFwt/IoR9XtEzFxZz4XRhG7 y/1x0sGW6d52yRAQQrKOC0BstgK/38lymmWIUQsu+73z6OJzSyFEapI9NDuPlRZX MPj6Duvle21cAuHK3tun5g4WfVzT1lcPZMMikIu/bdXnIO3MWwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNjVL5Utv7E1dLSEOFgD6kha8CX2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjg0NDJkYmYtM2U4NC0z NWNhLWI4ZWMtZWU3MmVmNDJmMzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABP+PA7MJJq32uszw0uN2Nk3HjUIY6r94gw2xvjaAa+LIgsfLgXm kq7hY1GWebB/l6JUNhanpK+EXsoJSAutXfWDCWvk8Z3j0OutPeMe6cUtH7KXD/LQ XnFnYaj4NjTfMCewMRvoWhQ+35OH0oqlXUpBVO6FFQGpl3QDnZybat6TbNgneX2N Hmgkz35LW5zgu5LfmJIY7eOslO6ebaubqjSurBr8dAaz9kXAXpaCKqIx1024+yqc hUQ5BT1dEU749ht+MC+gBPbtXYI4lq+Hmp9fVirol3Y5qEWMHW11EvzllcwxhTEm 8i/lrilNPZB//Rq+jPLrXhT/SqWEj+cLLQU= -----END CERTIFICATE-----Generated at Wed Oct 29 20:32:14 2025 by rpki-client