$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7bafad66-82bb-3bda-a62d-fd6314179046.roa File: 7bafad66-82bb-3bda-a62d-fd6314179046.roa (raw, json) Hash identifier: I3U3k8LcOYNlT+u05pRHc5Tj4sQWaLc2QmgIqlPngyA= Subject key identifier: B2:29:40:04:DB:76:4D:8B:65:67:6B:29:90:66:A5:19:6E:7F:81:37 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B62023C233545880E191B7700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7bafad66-82bb-3bda-a62d-fd6314179046.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 396540 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:3c:23:35:45:88:0e:19:1b:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=4846e300-902d-4a3a-8c5a-405df309383c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a3:02:01:9a:70:b3:9c:f4:34:f4:a1:5f:13: e1:2d:ed:e4:c8:93:c3:58:c5:12:39:3b:f6:15:ed: 5d:32:4f:85:d9:d7:ee:b8:83:3b:0b:c0:98:03:b9: cd:d5:a2:c0:fc:b0:2e:45:9e:0d:2e:7f:1d:52:4b: 48:8c:f7:78:f0:22:22:3a:e8:5f:2a:c3:5a:92:c5: 71:5e:0f:e3:bf:cc:e1:f3:ab:eb:c0:ed:cc:c8:05: b8:f3:70:7e:99:e4:8a:c5:81:d0:aa:af:56:8f:90: 07:ef:85:e1:29:30:bd:6e:8f:51:cb:c0:f6:af:cd: 65:c1:ea:24:f0:4e:15:1e:ac:42:2f:1f:3a:9c:e1: 2b:83:af:70:74:07:7d:09:dc:89:62:74:ae:b1:58: 7c:7c:0c:6d:1c:6e:72:b4:ab:17:23:f3:14:94:eb: ab:d7:ea:b0:30:1b:7e:30:32:2c:dc:27:0b:03:fa: fb:83:b0:e0:c0:32:ab:8a:bb:d8:6f:5e:73:05:d8: ce:b2:9f:a0:9c:72:6d:3c:c0:8b:90:38:b0:80:f6: 57:8a:7c:ab:6a:93:70:ef:76:d3:76:76:73:ee:fe: 23:e7:37:5e:50:dc:e3:65:8b:a9:5a:f2:ed:ab:eb: e5:05:16:f2:8f:77:c0:da:08:b7:89:fa:79:0a:04: a2:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:29:40:04:DB:76:4D:8B:65:67:6B:29:90:66:A5:19:6E:7F:81:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7bafad66-82bb-3bda-a62d-fd6314179046.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:b1:d3:9e:62:3d:4f:5f:27:de:54:97:dc:0e:d6:26:32:9c: ce:8d:99:63:77:7a:c9:46:60:97:27:a4:1a:06:a6:16:ae:c2: 08:c9:44:45:c3:02:28:2b:c9:a3:8e:8d:fd:7f:b0:ff:22:0d: 46:61:a1:1d:ce:34:2f:e4:d4:07:de:91:23:01:38:15:42:31: 27:bb:af:d4:49:a6:78:2e:87:62:c7:6f:69:88:7f:10:a2:dc: 42:ab:0e:e0:07:9f:7f:93:4f:8f:2d:2b:41:e9:eb:4a:39:a0: 7a:47:5f:7b:3b:77:f1:1b:67:2b:86:29:77:75:2a:3f:cb:6f: bd:d5:e0:10:0d:50:32:fb:47:7e:b9:b8:27:d4:73:b0:17:03: c4:b2:66:76:24:3b:58:2e:65:c0:23:21:57:2c:cd:91:25:a1: 74:a9:d2:e9:8a:be:8b:03:03:97:fb:79:d1:ad:58:6a:f2:02: 1c:86:7b:55:d3:2a:74:e4:f5:37:01:73:95:7b:89:1e:08:1f: 96:03:30:a9:72:ab:50:24:bc:fe:95:c5:41:c5:09:33:b5:de: a3:69:48:a0:4e:32:4f:5d:60:a5:73:45:a8:87:e4:82:5e:91: 18:03:05:02:37:21:a0:d9:ab:f8:01:14:31:f7:57:07:f7:50: 8d:dc:2d:b8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAjwjNUWIDhkbdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NDg0NmUzMDAtOTAyZC00YTNhLThjNWEtNDA1ZGYzMDkzODNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaMCAZpws5z0NPShXxPhLe3kyJPDWMUSOTv2 Fe1dMk+F2dfuuIM7C8CYA7nN1aLA/LAuRZ4NLn8dUktIjPd48CIiOuhfKsNaksVx Xg/jv8zh86vrwO3MyAW483B+meSKxYHQqq9Wj5AH74XhKTC9bo9Ry8D2r81lweok 8E4VHqxCLx86nOErg69wdAd9CdyJYnSusVh8fAxtHG5ytKsXI/MUlOur1+qwMBt+ MDIs3CcLA/r7g7DgwDKrirvYb15zBdjOsp+gnHJtPMCLkDiwgPZXinyrapNw73bT dnZz7v4j5zdeUNzjZYupWvLtq+vlBRbyj3fA2gi3ifp5CgSi4wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLIpQATbdk2LZWdrKZBmpRluf4E3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvN2JhZmFkNjYtODJiYi0z YmRhLWE2MmQtZmQ2MzE0MTc5MDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACKx055iPU9fJ95Ul9wO1iYynM6NmWN3eslGYJcnpBoGphauwgjJ REXDAigryaOOjf1/sP8iDUZhoR3ONC/k1AfekSMBOBVCMSe7r9RJpnguh2LHb2mI fxCi3EKrDuAHn3+TT48tK0Hp60o5oHpHX3s7d/EbZyuGKXd1Kj/Lb73V4BANUDL7 R365uCfUc7AXA8SyZnYkO1guZcAjIVcszZEloXSp0umKvosDA5f7edGtWGryAhyG e1XTKnTk9TcBc5V7iR4IH5YDMKlyq1AkvP6VxUHFCTO13qNpSKBOMk9dYKVzRaiH 5IJekRgDBQI3IaDZq/gBFDH3Vwf3UI3cLbg= -----END CERTIFICATE-----Generated at Wed Oct 29 20:09:44 2025 by rpki-client