$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b5fe5071-76da-32a2-8ff3-30488bfde28e.roa File: b5fe5071-76da-32a2-8ff3-30488bfde28e.roa (raw, json) Hash identifier: BZb4T2lsp+h+nAazUftv0gbQbkrwcz2LLv+zItjVERQ= Subject key identifier: E5:5A:66:ED:41:AD:E7:10:B9:C5:68:DE:25:CF:91:22:55:82:34:AF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E7950FD37F3761F3DC8740 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b5fe5071-76da-32a2-8ff3-30488bfde28e.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 396592 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:95:0f:d3:7f:37:61:f3:dc:87:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=a09c0f92-cf03-4f24-b9ef-4ae9e857e433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:33:9b:26:bc:df:f8:46:d1:a1:d0:8a:36:e5: 9e:62:fb:38:08:e8:24:d2:f8:c4:01:e6:c3:ad:72: df:50:04:d2:00:e4:0a:2b:27:35:60:39:4d:7e:6b: f4:ef:23:c9:20:47:e5:1a:c8:c5:2f:e1:b2:de:99: 2c:94:ca:2a:39:a8:a7:67:2c:93:9f:84:2b:89:2f: 32:e1:12:25:e1:0a:9c:df:93:cb:e7:20:ed:89:cf: 60:6e:5d:38:2c:8e:90:8c:18:17:d1:20:8d:26:4b: 99:1b:6d:94:d3:8b:85:f4:5f:e5:fc:ed:95:a3:7c: ae:93:0a:ae:bd:2c:68:4f:9e:1a:88:d0:3f:39:b3: 6d:dd:e2:19:d4:cc:12:f9:b1:3a:35:3b:08:f1:4b: 56:8e:91:88:3a:b1:d7:ef:63:89:fb:e1:d3:f5:3d: 3b:58:6d:0c:16:11:1b:bc:50:7f:3f:99:db:98:50: 4a:0d:ef:47:31:ac:cd:e0:a1:87:29:32:53:69:49: 29:e0:e1:f0:3e:55:c4:86:b4:df:72:0e:80:a8:1e: f3:ac:25:ee:c7:54:79:5f:5f:5f:cd:53:5c:3d:22: 71:ec:bf:cd:16:d9:3a:a6:2a:dd:e8:06:d9:6e:69: 46:c7:d8:88:83:f3:14:06:a3:15:60:e0:c4:b5:e2: 00:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:5A:66:ED:41:AD:E7:10:B9:C5:68:DE:25:CF:91:22:55:82:34:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b5fe5071-76da-32a2-8ff3-30488bfde28e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:f5:8b:ef:1c:c9:b3:7f:a4:00:14:cd:0e:5b:4a:ba:e4:db: a7:36:ab:05:6b:43:76:6a:b0:89:46:28:27:c8:5f:31:1d:a1: 24:82:21:73:9c:2a:b3:87:5f:ac:f5:47:a5:50:a4:ef:3c:f0: b2:46:c7:38:3b:3d:67:85:aa:66:8b:a3:32:ad:86:20:6d:34: 77:c5:00:26:24:d5:89:eb:c4:46:95:8e:9e:dc:3b:31:a8:42: c2:08:c6:2f:c7:a7:c8:fd:ff:60:0a:47:24:cb:a0:7f:c7:0b: 3b:cd:04:62:fe:65:55:3e:a8:f7:6f:87:ae:42:ec:38:83:17: bd:a7:6b:53:95:45:7c:09:bc:3f:3a:b0:c9:07:e9:6c:9e:b5: 71:03:d0:c8:cd:e6:de:48:b8:10:87:94:d4:b5:aa:52:4d:ac: 4d:29:dd:f7:18:5f:30:2c:03:b8:11:93:51:25:a1:8d:f2:37: 4a:5a:d7:39:45:88:a1:96:17:e4:a8:d4:29:cb:dc:ab:54:8b: c2:e9:78:73:5f:e0:62:0f:96:dd:8b:38:21:22:3b:38:fb:63: 1f:a9:78:f0:e0:51:e0:8c:13:f5:53:5b:8c:d0:b4:0d:69:03: 44:28:c6:33:c6:e3:60:14:fd:a1:3e:5f:ca:16:8d:db:e5:84: f2:2d:7a:a2 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE55UP0383YfPch0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk YTA5YzBmOTItY2YwMy00ZjI0LWI5ZWYtNGFlOWU4NTdlNDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDObJrzf+EbRodCKNuWeYvs4COgk0vjEAebD rXLfUATSAOQKKyc1YDlNfmv07yPJIEflGsjFL+Gy3pkslMoqOainZyyTn4QriS8y 4RIl4Qqc35PL5yDtic9gbl04LI6QjBgX0SCNJkuZG22U04uF9F/l/O2Vo3yukwqu vSxoT54aiNA/ObNt3eIZ1MwS+bE6NTsI8UtWjpGIOrHX72OJ++HT9T07WG0MFhEb vFB/P5nbmFBKDe9HMazN4KGHKTJTaUkp4OHwPlXEhrTfcg6AqB7zrCXux1R5X19f zVNcPSJx7L/NFtk6pird6AbZbmlGx9iIg/MUBqMVYODEteIA7wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOVaZu1BrecQucVo3iXPkSJVgjSvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjVmZTUwNzEtNzZkYS0z MmEyLThmZjMtMzA0ODhiZmRlMjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAs9YvvHMmzf6QAFM0OW0q65NunNqsFa0N2arCJ RignyF8xHaEkgiFznCqzh1+s9UelUKTvPPCyRsc4Oz1nhapmi6MyrYYgbTR3xQAm JNWJ68RGlY6e3DsxqELCCMYvx6fI/f9gCkcky6B/xws7zQRi/mVVPqj3b4euQuw4 gxe9p2tTlUV8Cbw/OrDJB+lsnrVxA9DIzebeSLgQh5TUtapSTaxNKd33GF8wLAO4 EZNRJaGN8jdKWtc5RYihlhfkqNQpy9yrVIvC6XhzX+BiD5bdizghIjs4+2MfqXjw 4FHgjBP1U1uM0LQNaQNEKMYzxuNgFP2hPl/KFo3b5YTyLXqi -----END CERTIFICATE-----Generated at Wed Oct 29 20:25:11 2025 by rpki-client