$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6c7ed5b5-c1d2-3822-bc35-b9d17afc24c5.roa File: 6c7ed5b5-c1d2-3822-bc35-b9d17afc24c5.roa (raw, json) Hash identifier: 6v9bF3059ohJTNnQS+5r4NQj0o9C2teellayLchr2ec= Subject key identifier: 42:C1:B8:C3:7F:4A:D0:76:89:8B:62:39:F8:64:E9:49:94:A3:D1:07 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E79311BBC3DD91F29B0700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6c7ed5b5-c1d2-3822-bc35-b9d17afc24c5.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 396555 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:93:11:bb:c3:dd:91:f2:9b:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=7f9e5caa-a940-4269-a72c-a1dc78d1c3b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c4:e7:db:c1:33:d5:1b:f3:ac:8a:01:8c:53: 0e:ff:42:82:80:09:10:3c:2f:f5:99:cc:96:37:a4: e8:48:5e:20:1a:2d:2d:36:7d:fe:5c:e8:d4:a9:9d: c5:dd:de:d3:7b:ab:9f:7c:81:4a:82:0c:eb:c9:0f: d5:fc:08:a0:82:d7:b6:ab:35:cb:4d:34:46:4e:a4: 8e:ff:2e:5b:fd:30:8a:3d:b1:78:9a:0a:92:e0:07: 0d:49:f3:5d:a8:4f:73:6d:73:2d:fb:b9:64:e9:77: e0:af:c7:2c:c6:26:69:68:90:bc:f0:55:db:dc:45: f4:c3:b1:ea:fa:cf:19:19:4c:63:02:12:e7:db:dd: 81:6a:84:fb:07:6f:dd:9b:68:3a:f5:b3:75:82:ab: d5:72:99:51:0d:41:99:56:63:77:87:d2:8a:d5:db: e1:a2:96:5d:87:e6:59:06:72:b2:62:4f:15:03:44: 3c:2e:7a:b4:97:13:d5:ad:eb:39:f3:1e:5c:06:d3: 60:dd:33:0c:d5:8c:7f:03:7f:fd:6e:5a:f6:e2:87: fd:6a:c6:67:25:83:6d:15:e0:de:5c:4b:7e:e7:6c: a2:56:68:6d:2c:89:9a:1d:0c:b6:56:91:c9:29:ff: 7a:6b:1a:50:9a:93:eb:82:01:1a:55:12:eb:10:f0: 8d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C1:B8:C3:7F:4A:D0:76:89:8B:62:39:F8:64:E9:49:94:A3:D1:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6c7ed5b5-c1d2-3822-bc35-b9d17afc24c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:a7:94:08:d0:f7:f8:a2:7d:ee:de:8a:97:0e:9e:f5:80:d2: 1d:48:d4:7f:81:d2:71:06:38:4b:0e:2a:82:fa:35:af:e4:bf: 97:b8:54:9c:4d:0b:17:24:0d:5f:01:fd:f8:54:db:ac:28:e8: f4:0d:e3:d2:18:2d:20:21:11:6c:0b:de:a9:35:a8:f3:1b:54: b2:0d:18:61:b0:31:b6:4b:13:f7:02:7a:9e:6b:ef:39:36:5a: 3b:4f:1c:7d:37:4f:4f:2b:78:79:9e:28:8f:b7:73:99:9d:1e: d2:39:e7:7a:e5:6c:e0:94:7b:ab:9c:50:3b:a6:e4:7d:3e:f2: 46:80:06:98:fc:d3:cb:76:fd:21:01:4b:1c:67:9b:79:b8:a4: 87:f2:b5:2a:1e:d2:cc:28:42:7b:47:82:2b:62:5c:73:ed:f9: c0:18:be:8a:16:1b:91:a6:d4:93:cc:91:c9:ff:8b:e6:e1:8f: 44:9b:fb:e1:2c:d4:98:60:ba:4b:fe:ef:3c:53:6e:af:85:bc: 87:06:62:d6:22:20:65:d1:c8:0e:a4:70:2e:ba:d5:36:49:0a: 98:29:cd:e2:d2:5c:60:1a:c6:95:7b:bb:5b:9c:d6:1c:91:ee: 91:ee:a9:5c:64:75:b0:99:e9:b6:bc:fb:d8:dc:e2:6d:37:74: 5c:5b:88:7a -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE55MRu8PdkfKbBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk N2Y5ZTVjYWEtYTk0MC00MjY5LWE3MmMtYTFkYzc4ZDFjM2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18Tn28Ez1RvzrIoBjFMO/0KCgAkQPC/1mcyW N6ToSF4gGi0tNn3+XOjUqZ3F3d7Te6uffIFKggzryQ/V/Aiggte2qzXLTTRGTqSO /y5b/TCKPbF4mgqS4AcNSfNdqE9zbXMt+7lk6Xfgr8csxiZpaJC88FXb3EX0w7Hq +s8ZGUxjAhLn292BaoT7B2/dm2g69bN1gqvVcplRDUGZVmN3h9KK1dvhopZdh+ZZ BnKyYk8VA0Q8Lnq0lxPVres58x5cBtNg3TMM1Yx/A3/9blr24of9asZnJYNtFeDe XEt+52yiVmhtLImaHQy2VpHJKf96axpQmpPrggEaVRLrEPCNBwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFELBuMN/StB2iYtiOfhk6UmUo9EHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmM3ZWQ1YjUtYzFkMi0z ODIyLWJjMzUtYjlkMTdhZmMyNGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAhp5QI0Pf4on3u3oqXDp71gNIdSNR/gdJxBjhL DiqC+jWv5L+XuFScTQsXJA1fAf34VNusKOj0DePSGC0gIRFsC96pNajzG1SyDRhh sDG2SxP3Anqea+85Nlo7Txx9N09PK3h5niiPt3OZnR7SOed65WzglHurnFA7puR9 PvJGgAaY/NPLdv0hAUscZ5t5uKSH8rUqHtLMKEJ7R4IrYlxz7fnAGL6KFhuRptST zJHJ/4vm4Y9Em/vhLNSYYLpL/u88U26vhbyHBmLWIiBl0cgOpHAuutU2SQqYKc3i 0lxgGsaVe7tbnNYcke6R7qlcZHWwmem2vPvY3OJtN3RcW4h6 -----END CERTIFICATE-----Generated at Wed Oct 29 20:42:24 2025 by rpki-client