$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c18df09f-db93-3dac-865e-7280d1e2718e.roa File: c18df09f-db93-3dac-865e-7280d1e2718e.roa (raw, json) Hash identifier: i/vVFbF/Zzm7Kb93I27MKxUaNv5wZ0Inki6gUuO/tuw= Subject key identifier: 76:35:12:1C:31:6A:E6:C8:70:94:44:39:4B:6F:16:B0:9B:5E:33:71 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E79A8E0A6131FB8AC53300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c18df09f-db93-3dac-865e-7280d1e2718e.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 396563 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:9a:8e:0a:61:31:fb:8a:c5:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=4a1c13ea-b998-4a2d-9a4f-981ce657baf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:70:ab:65:eb:89:63:5b:90:93:5d:55:1a:99: 03:95:80:50:8c:76:fd:fb:b0:08:ac:33:08:1c:df: aa:1d:a6:f7:5b:3b:b7:18:75:99:9b:03:12:3b:db: 92:89:dd:91:98:b3:a6:fc:08:c6:ec:50:e8:99:49: 56:c4:9c:88:ca:1b:7c:3d:a7:e4:aa:22:e8:a4:b6: 65:0b:c8:ff:93:90:84:62:98:30:19:81:00:02:3b: 55:41:0b:72:31:19:12:10:5a:1f:3e:ce:9b:91:58: 1c:68:6e:97:53:fb:f2:e4:51:8b:b2:1a:4e:ef:ec: 95:f3:92:e9:44:e9:76:5d:6e:60:ae:ad:34:38:82: 99:e6:6e:76:31:ed:00:dd:ea:35:e7:0c:66:9d:7e: 8e:40:26:05:7f:8c:cf:85:9a:69:15:ae:71:94:85: 20:6f:b0:4b:c2:2e:df:7c:7f:d4:ab:83:d7:1e:1e: 41:79:36:d9:19:c1:20:df:d8:be:2f:9a:a8:c5:c3: 2d:77:5f:44:b4:3e:d3:c9:e0:c3:39:68:67:aa:0b: 52:92:aa:43:4c:28:4e:5f:48:e5:f8:ac:2e:40:bd: 80:5e:66:9c:55:64:eb:81:28:33:70:d4:ee:01:8d: 62:6f:30:f7:20:d0:37:fb:9f:73:33:ee:4a:f2:ab: f1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:35:12:1C:31:6A:E6:C8:70:94:44:39:4B:6F:16:B0:9B:5E:33:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c18df09f-db93-3dac-865e-7280d1e2718e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:4d:af:5f:d2:4c:6f:cb:8d:c3:3d:0f:ce:5e:4d:4b:d8:69: 19:30:b9:64:a6:ad:2c:28:e3:d4:13:77:f8:e5:50:db:92:76: 7c:fc:8c:62:fe:7c:90:6a:06:2b:ff:3e:ca:a8:c7:66:88:65: 9b:e2:4e:6e:0c:27:06:8e:97:bc:b9:8f:3a:6a:89:ed:13:7e: 48:fd:3e:e4:bb:6c:6e:60:d9:de:17:04:07:d4:5f:c0:7e:f3: 05:66:e4:21:a0:8a:98:ca:fa:41:d7:de:58:7b:ab:97:d9:46: a6:72:66:91:ee:00:01:af:5a:e2:e5:13:26:50:07:f2:d2:09: 47:34:0a:71:dd:cf:43:c4:b5:22:29:6d:96:f6:89:8f:4c:23: ab:42:d5:19:19:34:fa:c5:fd:25:43:1d:fc:76:29:7a:07:c4: 4f:e0:74:34:97:20:24:9f:8a:3c:dc:95:fe:77:94:fc:ac:76: 9c:0c:80:31:6a:8f:76:31:c8:c3:79:89:b2:bb:2b:81:11:d2: f0:2d:cf:d8:8c:f8:15:bd:ac:12:77:24:81:cb:15:60:1e:29: 61:a6:0f:ab:3b:91:b9:f1:07:a1:72:d8:ca:13:ac:59:58:80: 64:e0:76:2c:3d:11:dd:d9:f0:4d:c8:57:6d:b0:5d:77:48:5a: 0c:ab:43:ae -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE55qOCmEx+4rFMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk NGExYzEzZWEtYjk5OC00YTJkLTlhNGYtOTgxY2U2NTdiYWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnCrZeuJY1uQk11VGpkDlYBQjHb9+7AIrDMI HN+qHab3Wzu3GHWZmwMSO9uSid2RmLOm/AjG7FDomUlWxJyIyht8PafkqiLopLZl C8j/k5CEYpgwGYEAAjtVQQtyMRkSEFofPs6bkVgcaG6XU/vy5FGLshpO7+yV85Lp ROl2XW5grq00OIKZ5m52Me0A3eo15wxmnX6OQCYFf4zPhZppFa5xlIUgb7BLwi7f fH/Uq4PXHh5BeTbZGcEg39i+L5qoxcMtd19EtD7TyeDDOWhnqgtSkqpDTChOX0jl +KwuQL2AXmacVWTrgSgzcNTuAY1ibzD3INA3+59zM+5K8qvxbQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHY1EhwxaubIcJREOUtvFrCbXjNxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzE4ZGYwOWYtZGI5My0z ZGFjLTg2NWUtNzI4MGQxZTI3MThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBVTa9f0kxvy43DPQ/OXk1L2GkZMLlkpq0sKOPU E3f45VDbknZ8/Ixi/nyQagYr/z7KqMdmiGWb4k5uDCcGjpe8uY86aontE35I/T7k u2xuYNneFwQH1F/AfvMFZuQhoIqYyvpB195Ye6uX2UamcmaR7gABr1ri5RMmUAfy 0glHNApx3c9DxLUiKW2W9omPTCOrQtUZGTT6xf0lQx38dil6B8RP4HQ0lyAkn4o8 3JX+d5T8rHacDIAxao92McjDeYmyuyuBEdLwLc/YjPgVvawSdySByxVgHilhpg+r O5G58QehctjKE6xZWIBk4HYsPRHd2fBNyFdtsF13SFoMq0Ou -----END CERTIFICATE-----Generated at Wed Oct 29 20:42:24 2025 by rpki-client