$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2ff5102a-d5f5-3a7d-ad0d-9bd45d888bc2.roa File: 2ff5102a-d5f5-3a7d-ad0d-9bd45d888bc2.roa (raw, json) Hash identifier: JSgm7mO0CLvRmPZj+ec6627ypMcgfJgVYYTyIH/NUpM= Subject key identifier: C0:DC:C8:E2:6E:42:41:F6:AC:1B:BB:E9:C6:78:89:39:5A:F6:4D:71 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B3557008060FA2C0F9E61AB00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2ff5102a-d5f5-3a7d-ad0d-9bd45d888bc2.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 396611 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:57:00:80:60:fa:2c:0f:9e:61:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=de9e3edc-4acc-44bc-a95c-72f784c4bfd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:14:4d:3b:c7:ab:74:db:5e:23:7a:78:20:fc: 53:e1:4e:57:ad:72:d7:22:00:38:6a:d7:02:d9:ca: 77:23:f6:94:96:76:43:ca:c2:2e:76:42:04:92:4f: 32:b9:f5:b2:8e:c2:82:6c:6c:f0:30:62:f3:59:91: cf:90:ad:61:99:76:bd:47:57:9c:c2:82:30:d5:ce: 71:d7:ee:e9:ff:f0:51:cf:ef:18:16:3b:98:28:ea: 3f:70:d1:1f:8a:a5:85:2e:6f:57:33:c5:f3:d8:3f: 8a:c7:75:5f:db:a7:ab:fc:bb:8c:ef:c6:f8:d8:48: 64:6d:16:e9:f2:5d:b9:e3:bf:ed:e2:2e:8c:93:e3: 01:3b:8a:44:4e:2a:1c:4b:d2:78:63:65:22:87:02: 9e:48:eb:bc:7e:9e:34:b9:47:cc:ee:11:4b:6c:53: 22:20:19:9c:e8:d6:8f:67:a8:98:10:fa:06:b3:49: f2:50:47:77:11:92:93:e2:65:53:9b:24:ce:5f:69: 24:95:fc:07:53:88:41:06:67:6e:28:9c:9e:41:41: 62:67:ff:72:73:43:c4:7e:aa:ee:e1:25:dc:b8:23: 27:5e:89:5e:98:05:97:30:3d:95:e7:a2:69:ae:60: 95:b6:01:cd:40:c2:42:8a:67:94:62:05:7b:dc:f6: 91:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:DC:C8:E2:6E:42:41:F6:AC:1B:BB:E9:C6:78:89:39:5A:F6:4D:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2ff5102a-d5f5-3a7d-ad0d-9bd45d888bc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:36:96:d4:de:f8:4a:d1:03:47:cf:d4:d9:4c:0b:ea:d6:ab: 53:29:ae:cf:fa:04:25:f6:ef:7b:72:de:63:bd:fa:d2:4b:85: ec:cb:fa:14:f4:b8:f6:bf:1c:82:a0:fa:5f:26:04:5f:3b:ba: cb:c5:48:f5:3f:74:18:d9:34:a1:5a:4f:04:b1:34:30:16:e7: bf:9b:aa:ab:a2:ab:0f:a9:8f:a8:7a:ef:ad:22:75:a0:7c:ea: 02:41:71:43:9b:b8:54:11:f1:bd:89:e9:3e:30:1c:20:da:c5: 54:2f:86:88:93:f9:ed:ab:07:1d:37:34:c0:89:19:a5:ee:ff: d0:f9:7d:4f:96:86:c8:c2:5d:53:03:d6:5b:11:d5:ef:71:5c: 0b:fd:55:2d:77:90:19:59:dd:6e:33:74:c5:03:8d:aa:4e:09: 46:d4:75:c6:f9:48:7a:ef:56:9d:66:e4:09:cb:76:6e:8c:ee: 1a:db:5e:cd:1c:37:6b:27:1b:ea:b8:21:6b:4e:4b:2d:10:19: b8:55:ad:e4:b7:ea:30:97:e7:af:4e:3d:68:f4:42:b6:96:a6: 60:71:a7:df:25:d6:cb:77:bd:46:48:0f:62:89:65:12:b2:11: 5c:c1:e5:5b:ce:c9:46:83:21:c5:a1:f9:22:20:e7:b5:45:0f: bd:04:56:6c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEs1VwCAYPosD55hqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk ZGU5ZTNlZGMtNGFjYy00NGJjLWE5NWMtNzJmNzg0YzRiZmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hRNO8erdNteI3p4IPxT4U5XrXLXIgA4atcC 2cp3I/aUlnZDysIudkIEkk8yufWyjsKCbGzwMGLzWZHPkK1hmXa9R1ecwoIw1c5x 1+7p//BRz+8YFjuYKOo/cNEfiqWFLm9XM8Xz2D+Kx3Vf26er/LuM78b42EhkbRbp 8l2547/t4i6Mk+MBO4pETiocS9J4Y2UihwKeSOu8fp40uUfM7hFLbFMiIBmc6NaP Z6iYEPoGs0nyUEd3EZKT4mVTmyTOX2kklfwHU4hBBmduKJyeQUFiZ/9yc0PEfqru 4SXcuCMnXolemAWXMD2V56JprmCVtgHNQMJCimeUYgV73PaRPwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMDcyOJuQkH2rBu76cZ4iTla9k1xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmZmNTEwMmEtZDVmNS0z YTdkLWFkMGQtOWJkNDVkODg4YmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAyNpbU3vhK0QNHz9TZTAvq1qtTKa7P+gQl9u97 ct5jvfrSS4Xsy/oU9Lj2vxyCoPpfJgRfO7rLxUj1P3QY2TShWk8EsTQwFue/m6qr oqsPqY+oeu+tInWgfOoCQXFDm7hUEfG9iek+MBwg2sVUL4aIk/ntqwcdNzTAiRml 7v/Q+X1PlobIwl1TA9ZbEdXvcVwL/VUtd5AZWd1uM3TFA42qTglG1HXG+Uh671ad ZuQJy3ZujO4a217NHDdrJxvquCFrTkstEBm4Va3kt+owl+evTj1o9EK2lqZgcaff JdbLd71GSA9iiWUSshFcweVbzslGgyHFofkiIOe1RQ+9BFZs -----END CERTIFICATE-----Generated at Wed Oct 29 20:36:35 2025 by rpki-client