$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e2c8594-7a4c-3d65-a503-33adbe29a328.roa File: 2e2c8594-7a4c-3d65-a503-33adbe29a328.roa (raw, json) Hash identifier: gy90SU/E/x+cswlcObm2QmEIu4jVdprKSC6Qh4G/4gs= Subject key identifier: 86:2B:64:DF:5C:62:C4:74:C4:57:D0:49:D8:0F:FE:FE:2F:2D:99:49 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B99D7D868A2335CBBAFD10540 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e2c8594-7a4c-3d65-a503-33adbe29a328.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 396545 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:d8:68:a2:33:5c:bb:af:d1:05:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=df89a17a-4bcd-4b33-9e27-0ea24f9dfa80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c1:83:a5:eb:2f:24:96:ce:eb:cd:2a:c8:0b: 96:5e:99:2a:f5:24:2c:95:5e:8b:de:46:9d:b9:12: 2c:59:7f:0c:78:2b:e6:68:b6:c5:41:e0:c5:6e:91: 22:f6:1c:59:e1:46:39:94:ff:66:c8:d6:ac:a1:f0: ef:09:c6:bb:c5:18:ea:1b:17:10:77:62:7c:ea:9a: 8d:3a:b6:44:8b:6f:ba:c1:33:ec:51:56:bd:2b:e0: 16:58:c5:33:41:73:2a:8a:58:4f:15:4e:f9:6c:ee: 6e:f2:00:2b:ea:b7:0b:5d:4a:cb:ea:1a:9f:e7:4e: 2b:30:06:4d:33:da:59:83:e1:4e:8b:53:6d:fc:16: e0:49:a2:d0:56:be:a2:70:4e:76:02:dc:94:22:42: 95:e8:be:f4:c0:65:8c:f8:2b:08:46:87:32:35:91: 62:5e:a6:f7:d7:56:f4:2a:ee:20:35:75:8f:a1:c1: 2d:16:eb:c1:1b:c5:3a:d9:25:ca:9e:aa:f4:4a:9b: 8f:99:2d:bc:76:0b:72:08:91:03:cf:99:20:1b:0a: 02:3c:be:ca:05:80:3d:6e:aa:56:fd:95:47:1c:54: 61:9a:17:61:73:af:fc:67:5b:ad:98:b5:04:39:6a: f6:ef:d5:dc:f1:e7:a5:48:f3:da:3c:8b:08:f7:2c: cc:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:2B:64:DF:5C:62:C4:74:C4:57:D0:49:D8:0F:FE:FE:2F:2D:99:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e2c8594-7a4c-3d65-a503-33adbe29a328.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:af:27:3e:96:70:ac:4b:00:7f:1a:b6:d0:53:4c:c9:01:fe: 96:ad:5f:1e:7c:bf:01:87:55:3c:ac:38:54:e0:2a:14:0f:b5: a6:4e:ee:9b:af:96:d0:b1:2d:d0:ad:95:7e:82:83:ed:1f:1d: 11:c7:be:4b:21:ba:50:97:95:f1:1f:a1:70:65:31:3c:c3:43: 13:e0:4b:4b:a2:a6:6b:d8:eb:d4:e5:85:01:5c:6e:35:90:0d: dd:77:84:64:65:44:57:22:d3:83:dd:54:0e:1e:d9:64:1c:70: f6:c7:9f:41:17:fd:e8:f3:72:0b:71:bb:2c:ca:e4:d2:80:7d: 1b:3b:28:cf:05:cf:5b:22:c0:f9:0f:4e:a8:1c:5c:24:2b:89: 85:b8:c1:0d:22:e3:69:8e:0b:f2:98:73:b7:9e:ba:e3:df:66: 17:20:12:d6:98:97:90:06:04:e3:6e:6d:ca:4b:4b:b5:77:f0: e1:be:9b:82:15:7c:79:11:68:a2:38:f2:c0:2e:26:f5:22:b3: d2:da:8a:11:ea:a2:3e:b2:64:f9:f3:29:2b:30:02:a1:ac:f3: 95:48:d7:e7:40:cf:aa:4a:18:69:d5:13:92:ea:31:8b:33:39: 99:58:05:c3:88:24:95:2b:dd:c3:78:24:bc:61:7a:8c:19:6b: a9:0c:24:2b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuZ19hoojNcu6/RBUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZGY4OWExN2EtNGJjZC00YjMzLTllMjctMGVhMjRmOWRmYTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcGDpesvJJbO680qyAuWXpkq9SQslV6L3kad uRIsWX8MeCvmaLbFQeDFbpEi9hxZ4UY5lP9myNasofDvCca7xRjqGxcQd2J86pqN OrZEi2+6wTPsUVa9K+AWWMUzQXMqilhPFU75bO5u8gAr6rcLXUrL6hqf504rMAZN M9pZg+FOi1Nt/BbgSaLQVr6icE52AtyUIkKV6L70wGWM+CsIRocyNZFiXqb311b0 Ku4gNXWPocEtFuvBG8U62SXKnqr0SpuPmS28dgtyCJEDz5kgGwoCPL7KBYA9bqpW /ZVHHFRhmhdhc6/8Z1utmLUEOWr279Xc8eelSPPaPIsI9yzMBwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIYrZN9cYsR0xFfQSdgP/v4vLZlJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmUyYzg1OTQtN2E0Yy0z ZDY1LWE1MDMtMzNhZGJlMjlhMzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAmryc+lnCsSwB/GrbQU0zJAf6WrV8efL8Bh1U8 rDhU4CoUD7WmTu6br5bQsS3QrZV+goPtHx0Rx75LIbpQl5XxH6FwZTE8w0MT4EtL oqZr2OvU5YUBXG41kA3dd4RkZURXItOD3VQOHtlkHHD2x59BF/3o83ILcbssyuTS gH0bOyjPBc9bIsD5D06oHFwkK4mFuMENIuNpjgvymHO3nrrj32YXIBLWmJeQBgTj bm3KS0u1d/DhvpuCFXx5EWiiOPLALib1IrPS2ooR6qI+smT58ykrMAKhrPOVSNfn QM+qShhp1ROS6jGLMzmZWAXDiCSVK93DeCS8YXqMGWupDCQr -----END CERTIFICATE-----Generated at Wed Oct 29 20:45:23 2025 by rpki-client