$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7f57fcd5-3d24-3bde-b64f-0baf60a2fb0e.roa File: 7f57fcd5-3d24-3bde-b64f-0baf60a2fb0e.roa (raw, json) Hash identifier: zkfPoJUGLziytBgPjFobBWoP4gNPpCniiStnBXnig00= Subject key identifier: CD:2A:D7:56:D2:4A:6E:36:84:91:34:C4:FD:1A:A0:1D:29:B6:DA:B2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B99D7DE1F407A751A2F8C2A80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7f57fcd5-3d24-3bde-b64f-0baf60a2fb0e.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 396574 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:de:1f:40:7a:75:1a:2f:8c:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=5ff4af49-bcd8-426a-a69f-d19d18799109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:06:2b:b0:5b:f5:c9:b3:b1:2a:67:fb:ae:18: 9f:d0:6f:bb:92:25:7d:e5:c5:bc:72:24:50:28:5f: 2e:ee:d2:9d:1e:3b:b6:77:ba:1c:bc:a1:6b:ce:78: 46:d2:a8:e9:6c:a0:29:6f:44:bd:35:0e:d5:b5:af: db:4d:65:b8:c8:7b:af:36:e6:a6:2a:2a:a6:fa:4a: 61:b8:61:b3:6e:1b:0f:ce:1c:fc:b7:4f:b5:5d:fd: bb:e4:cb:f4:e2:8e:00:e1:3a:c5:18:11:20:80:0f: 3d:7a:9e:16:34:84:97:24:67:e5:98:a8:6c:b2:cd: 9a:e6:2d:ad:96:13:cf:34:fa:3f:28:1c:b7:79:ea: c3:1d:5e:29:f3:56:7e:56:9b:ea:d5:d8:2d:4f:7b: 43:10:19:49:d5:74:ef:ad:95:fc:8f:6c:3f:d3:bb: 58:9c:09:78:7f:e4:4c:21:24:5d:a9:17:5e:8d:d4: 58:d0:da:b9:23:cd:a6:d0:eb:2c:73:9d:a2:33:79: 22:1f:7b:24:4f:e8:1b:aa:fb:49:6e:a2:96:16:24: 6a:3d:ec:07:ef:c8:54:b4:47:ad:48:67:ca:e1:e1: b0:45:e0:60:8f:07:7d:e9:70:3c:68:bd:58:ce:53: 7f:31:30:1f:a2:50:59:30:17:62:02:a0:50:5c:85: 62:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:2A:D7:56:D2:4A:6E:36:84:91:34:C4:FD:1A:A0:1D:29:B6:DA:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7f57fcd5-3d24-3bde-b64f-0baf60a2fb0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:85:b8:24:88:b0:9e:ab:d6:b5:6d:f4:fa:88:dd:81:f8:0d: e5:e1:74:5b:49:6d:d2:8c:8f:b3:97:da:01:df:03:22:57:22: 2a:b1:4a:03:b2:fa:d6:be:98:1d:11:4f:ec:b7:0b:25:2e:fc: e0:31:67:b6:3e:73:3b:c5:56:21:d4:a4:6f:25:94:ba:5e:76: 34:de:c9:da:5d:91:f0:ab:e6:b1:19:aa:3c:09:57:ce:16:33: 4b:64:ed:96:6e:b1:83:ac:1d:33:72:3e:b6:cd:a7:38:5a:f8: d9:a5:89:c6:cf:8a:47:3a:e3:14:fa:06:2c:02:18:57:d8:b8: 8b:c1:75:e7:42:a6:93:a3:f2:d0:e7:60:4f:99:47:54:32:be: 86:45:cc:22:b1:e4:35:ce:e1:33:fe:69:4e:99:ee:7c:be:d0: fa:fe:ec:9d:62:9e:d7:4c:f4:69:c0:ee:20:69:bb:0c:74:86: 66:53:db:9f:21:19:90:d4:85:4c:13:34:94:1e:71:17:bf:65: f8:09:c1:9e:54:a4:cb:c5:7b:9a:16:4e:25:a2:3b:f1:ac:a5: 6d:90:0f:7d:99:fa:c4:06:fc:68:84:8f:f7:f5:ca:15:77:93: 8f:11:85:ed:7c:c8:ec:4d:bc:60:0c:9f:63:6a:9b:df:c5:32: 4f:e5:db:1d -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuZ194fQHp1Gi+MKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NWZmNGFmNDktYmNkOC00MjZhLWE2OWYtZDE5ZDE4Nzk5MTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwYrsFv1ybOxKmf7rhif0G+7kiV95cW8ciRQ KF8u7tKdHju2d7ocvKFrznhG0qjpbKApb0S9NQ7Vta/bTWW4yHuvNuamKiqm+kph uGGzbhsPzhz8t0+1Xf275Mv04o4A4TrFGBEggA89ep4WNISXJGflmKhsss2a5i2t lhPPNPo/KBy3eerDHV4p81Z+Vpvq1dgtT3tDEBlJ1XTvrZX8j2w/07tYnAl4f+RM ISRdqRdejdRY0Nq5I82m0Ossc52iM3kiH3skT+gbqvtJbqKWFiRqPewH78hUtEet SGfK4eGwReBgjwd96XA8aL1YzlN/MTAfolBZMBdiAqBQXIVirQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFM0q11bSSm42hJE0xP0aoB0pttqyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvN2Y1N2ZjZDUtM2QyNC0z YmRlLWI2NGYtMGJhZjYwYTJmYjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBLhbgkiLCeq9a1bfT6iN2B+A3l4XRbSW3SjI+z l9oB3wMiVyIqsUoDsvrWvpgdEU/stwslLvzgMWe2PnM7xVYh1KRvJZS6XnY03sna XZHwq+axGao8CVfOFjNLZO2WbrGDrB0zcj62zac4WvjZpYnGz4pHOuMU+gYsAhhX 2LiLwXXnQqaTo/LQ52BPmUdUMr6GRcwiseQ1zuEz/mlOme58vtD6/uydYp7XTPRp wO4gabsMdIZmU9ufIRmQ1IVMEzSUHnEXv2X4CcGeVKTLxXuaFk4lojvxrKVtkA99 mfrEBvxohI/39coVd5OPEYXtfMjsTbxgDJ9japvfxTJP5dsd -----END CERTIFICATE-----Generated at Wed Oct 29 20:22:32 2025 by rpki-client