$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/99aa3db9-865e-36f9-b1f2-cf6cefcaee9c.roa File: 99aa3db9-865e-36f9-b1f2-cf6cefcaee9c.roa (raw, json) Hash identifier: 3FEFlpACd/Y2hHTdJ8enqsax/oC5/rUiQGwsBvFg5XQ= Subject key identifier: F2:BF:6B:5D:7A:CE:A2:D8:9D:0D:01:73:F5:E5:23:CB:23:69:E1:63 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6202316D3F1CCD4E3BBB3640 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/99aa3db9-865e-36f9-b1f2-cf6cefcaee9c.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 36629 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:31:6d:3f:1c:cd:4e:3b:bb:36:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=0cb387ab-ed8d-4c96-9932-b71fd44bb883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9c:7a:71:f9:8c:5f:28:65:a1:e6:d9:b7:e8: 08:17:50:be:58:07:06:fc:3b:d1:61:48:28:6f:e5: b7:bc:0e:89:76:f1:14:de:b6:36:dd:13:07:27:36: 72:12:17:56:62:f0:ca:85:61:df:fc:28:a6:31:df: b1:00:a5:4a:bc:51:26:c3:9e:5e:21:58:b4:8b:2a: be:5e:de:99:47:95:61:1c:1a:ed:ea:49:3a:c4:0a: eb:38:82:aa:1b:52:9f:6f:f4:19:0a:7c:02:34:56: cd:cc:2e:ee:00:0e:a2:85:85:b1:83:2d:f2:72:a6: ef:ae:d4:8f:53:9b:d8:91:30:e4:a5:29:29:94:79: ee:36:ed:4e:3d:1c:2f:34:3c:3e:8a:04:fb:70:cb: 77:86:fb:5d:c2:39:4b:cb:dd:94:94:0f:f6:f0:1d: 99:19:2e:d1:ea:63:1c:d8:a9:68:6c:a4:46:5a:9e: 10:0b:61:5a:7f:28:e9:d1:28:9a:53:70:5c:6f:d1: 35:7d:7e:a6:30:64:07:52:30:a5:67:60:c3:4a:2e: 55:92:e3:3a:99:cf:95:8f:77:20:32:46:11:81:e8: 1a:4c:82:b4:97:db:61:ce:f0:a2:99:e4:2c:1a:d4: 31:65:e3:2d:52:0d:63:3b:46:af:a5:b1:10:4e:59: b4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:BF:6B:5D:7A:CE:A2:D8:9D:0D:01:73:F5:E5:23:CB:23:69:E1:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/99aa3db9-865e-36f9-b1f2-cf6cefcaee9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:ab:8e:70:76:e0:2f:52:c6:d0:67:2b:57:70:d2:9c:f4:80: eb:d7:b6:6d:96:3b:3c:ae:b3:e9:d1:a3:7c:01:58:cb:97:1f: 27:71:52:3f:87:bc:8b:d1:15:3e:2e:75:1e:da:2a:48:ba:c2: f9:b6:89:85:43:fd:72:b4:a6:09:dd:5c:07:f9:e4:08:de:27: db:9b:4b:68:d8:16:06:a1:3a:e5:7d:f6:6b:b6:76:0f:2d:95: 7c:11:eb:65:44:58:9a:76:84:3e:86:85:fa:27:fa:46:d7:f7: 07:d6:9c:d4:75:f4:ef:3e:50:fc:82:e1:43:9c:96:dc:3b:e2: 61:c6:6c:db:8c:0b:57:5b:2a:e4:3a:7e:ce:bc:ec:4d:6a:e8: 2c:fe:b0:c8:cb:95:9d:8e:2f:96:9d:07:97:86:1e:d1:56:d2: cc:97:b0:30:da:af:86:20:4b:3e:4e:38:6b:d8:5a:28:f1:fa: 09:2c:2d:3c:09:28:7b:09:ad:0a:5b:42:9e:3f:7b:a7:9f:40: cd:10:37:4b:cc:e5:fe:ab:4c:85:89:97:24:df:55:3d:8a:be: e5:60:30:8a:a2:5c:0c:7d:47:e5:c0:37:03:05:09:94:8a:9b: d1:c6:d3:32:46:3e:da:8d:55:96:4b:b2:ad:ac:2d:67:2c:4d: 01:e6:d7:91 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAjFtPxzNTju7NkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk MGNiMzg3YWItZWQ4ZC00Yzk2LTk5MzItYjcxZmQ0NGJiODgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpx6cfmMXyhloebZt+gIF1C+WAcG/DvRYUgo b+W3vA6JdvEU3rY23RMHJzZyEhdWYvDKhWHf/CimMd+xAKVKvFEmw55eIVi0iyq+ Xt6ZR5VhHBrt6kk6xArrOIKqG1Kfb/QZCnwCNFbNzC7uAA6ihYWxgy3ycqbvrtSP U5vYkTDkpSkplHnuNu1OPRwvNDw+igT7cMt3hvtdwjlLy92UlA/28B2ZGS7R6mMc 2KlobKRGWp4QC2Fafyjp0SiaU3Bcb9E1fX6mMGQHUjClZ2DDSi5VkuM6mc+Vj3cg MkYRgegaTIK0l9thzvCimeQsGtQxZeMtUg1jO0avpbEQTlm0FQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPK/a116zqLYnQ0Bc/XlI8sjaeFjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTlhYTNkYjktODY1ZS0z NmY5LWIxZjItY2Y2Y2VmY2FlZTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADSrjnB24C9SxtBnK1dw0pz0gOvXtm2WOzyus+nRo3wBWMuXHydx Uj+HvIvRFT4udR7aKki6wvm2iYVD/XK0pgndXAf55AjeJ9ubS2jYFgahOuV99mu2 dg8tlXwR62VEWJp2hD6Ghfon+kbX9wfWnNR19O8+UPyC4UOcltw74mHGbNuMC1db KuQ6fs687E1q6Cz+sMjLlZ2OL5adB5eGHtFW0syXsDDar4YgSz5OOGvYWijx+gks LTwJKHsJrQpbQp4/e6efQM0QN0vM5f6rTIWJlyTfVT2KvuVgMIqiXAx9R+XANwMF CZSKm9HG0zJGPtqNVZZLsq2sLWcsTQHm15E= -----END CERTIFICATE-----Generated at Wed Oct 29 20:35:53 2025 by rpki-client