$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b829613-62cd-3ed2-8ad3-7b36febc6235.roa File: 2b829613-62cd-3ed2-8ad3-7b36febc6235.roa (raw, json) Hash identifier: rKN/S4nXA+J2YeclFtqpY67BPPfHP+6mcSL/OBipB7M= Subject key identifier: 08:60:99:A7:0A:24:7F:22:CB:48:09:3A:3F:FC:5B:91:A6:08:CB:56 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6201D4B6FD4C3CF5212B3E00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b829613-62cd-3ed2-8ad3-7b36febc6235.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 396565 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:d4:b6:fd:4c:3c:f5:21:2b:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=03579ad8-603d-4183-a8f6-965949378e6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a5:49:6a:b7:87:3d:4a:84:3b:fb:e8:bb:2c: be:c4:db:b0:4a:f2:fc:4d:32:b9:29:cd:e0:29:d8: 8d:1e:92:7d:9c:39:f3:4c:45:88:7b:7b:82:ef:b1: be:6b:95:c7:dd:f3:85:0a:6d:d5:d0:06:8c:2c:01: cc:68:33:71:18:db:54:2f:68:2e:85:b9:35:ef:48: ef:e7:69:8b:dd:b4:da:7a:df:05:a2:f4:2a:f0:c4: dc:53:8a:b2:13:30:ce:a7:7f:91:8f:b4:5c:32:d5: 2d:bb:af:ad:f3:6a:0a:a6:42:bf:44:e0:d9:d2:95: eb:76:08:e5:c6:0e:47:9a:10:9c:a8:a7:1b:ad:ce: a2:a2:da:e1:be:9e:ef:32:70:f2:a3:b5:39:1b:cd: f9:5e:d4:c7:7d:0d:00:0f:46:21:93:f2:46:6b:6f: 28:d2:2a:25:ee:3c:5b:9f:cc:bf:cf:63:7c:ee:30: fd:ef:91:14:d7:86:19:0c:b4:92:fa:4f:2d:75:0c: 3f:f1:86:6d:83:ad:17:80:3e:7d:9d:cf:13:76:25: 52:3f:05:ba:3d:2f:35:c6:35:90:c0:93:40:79:1e: 50:46:ff:a0:ce:e2:7a:84:89:8d:a7:ea:17:0d:d6: 02:9f:a5:39:82:11:90:aa:a8:5d:33:0e:35:5f:2a: 55:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:60:99:A7:0A:24:7F:22:CB:48:09:3A:3F:FC:5B:91:A6:08:CB:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b829613-62cd-3ed2-8ad3-7b36febc6235.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:30:7e:37:e1:cd:7c:96:eb:51:1d:7d:a8:17:ad:f4:fb:0f: 5a:b7:15:9e:bd:12:34:48:e3:6e:61:be:db:b8:64:f2:f9:16: ea:06:d4:33:1a:5e:0f:ce:a4:36:da:40:ae:ae:44:02:13:b1: 2e:f8:83:cc:aa:ce:e2:87:e7:2f:f4:a5:98:aa:6c:42:e2:3d: fa:d8:d6:32:ef:54:91:d4:ce:25:bb:0a:b9:c3:e4:62:f2:e4: 21:ea:47:de:a4:e2:f1:b0:9f:24:39:2c:9b:78:00:d2:2b:f3: d1:cc:be:9a:df:48:ff:ac:4d:6b:1f:ab:78:a8:b9:6b:86:9a: 34:5f:d6:8b:46:57:94:ee:06:bb:1d:b4:fe:29:49:cf:b0:0a: b2:17:c4:22:0e:8c:b3:73:54:69:d7:8f:9b:76:ff:b9:b0:8f: 32:00:32:67:c1:47:8f:f1:4a:0c:75:56:e1:b8:d5:94:7b:fe: 0a:90:21:52:ca:e4:5c:ec:de:93:e3:af:6b:45:aa:d5:75:09: 03:ee:0c:b9:e8:6d:4b:66:d5:b8:13:f4:4e:41:b3:18:62:90: b1:7f:a4:53:0d:ad:df:ca:54:e8:1b:13:7f:ba:39:ca:dc:74: 32:b3:71:f2:75:79:5b:2e:45:dc:fe:60:df:b5:1d:4a:95:15: 09:fa:0b:4a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAdS2/Uw89SErPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk MDM1NzlhZDgtNjAzZC00MTgzLWE4ZjYtOTY1OTQ5Mzc4ZTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqVJareHPUqEO/vouyy+xNuwSvL8TTK5Kc3g KdiNHpJ9nDnzTEWIe3uC77G+a5XH3fOFCm3V0AaMLAHMaDNxGNtUL2guhbk170jv 52mL3bTaet8FovQq8MTcU4qyEzDOp3+Rj7RcMtUtu6+t82oKpkK/RODZ0pXrdgjl xg5HmhCcqKcbrc6iotrhvp7vMnDyo7U5G835XtTHfQ0AD0Yhk/JGa28o0iol7jxb n8y/z2N87jD975EU14YZDLSS+k8tdQw/8YZtg60XgD59nc8TdiVSPwW6PS81xjWQ wJNAeR5QRv+gzuJ6hImNp+oXDdYCn6U5ghGQqqhdMw41XypVEwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAhgmacKJH8iy0gJOj/8W5GmCMtWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmI4Mjk2MTMtNjJjZC0z ZWQyLThhZDMtN2IzNmZlYmM2MjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHUwfjfhzXyW61EdfagXrfT7D1q3FZ69EjRI425hvtu4ZPL5FuoG 1DMaXg/OpDbaQK6uRAITsS74g8yqzuKH5y/0pZiqbELiPfrY1jLvVJHUziW7CrnD 5GLy5CHqR96k4vGwnyQ5LJt4ANIr89HMvprfSP+sTWsfq3iouWuGmjRf1otGV5Tu BrsdtP4pSc+wCrIXxCIOjLNzVGnXj5t2/7mwjzIAMmfBR4/xSgx1VuG41ZR7/gqQ IVLK5Fzs3pPjr2tFqtV1CQPuDLnobUtm1bgT9E5BsxhikLF/pFMNrd/KVOgbE3+6 OcrcdDKzcfJ1eVsuRdz+YN+1HUqVFQn6C0o= -----END CERTIFICATE-----Generated at Thu Oct 30 03:18:58 2025 by rpki-client