$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c978a05f-a3bf-3b9c-baf3-45b517a44c2f.roa File: c978a05f-a3bf-3b9c-baf3-45b517a44c2f.roa (raw, json) Hash identifier: NCM4SrX2pKHOnwIN7dSXJBstZGdmTYHWe8vfCl1iiLg= Subject key identifier: D8:9A:C5:4B:5B:03:DE:D9:AF:64:B7:84:FB:A9:D2:7A:84:FD:C3:AD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B99D7DEB8A2756272FCC33EC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c978a05f-a3bf-3b9c-baf3-45b517a44c2f.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 36632 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:de:b8:a2:75:62:72:fc:c3:3e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=9b383100-4961-41d1-9cbf-ef42a477163a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:47:22:c6:4c:e9:e4:a5:da:ba:db:28:b0:70: 6f:45:11:19:6d:b1:60:24:8d:8b:bb:32:61:e3:7d: 22:f4:b6:09:fd:c0:ee:e1:13:fe:22:b7:5c:33:17: dc:0e:77:48:a0:7d:d2:8b:0d:19:43:f5:c6:2a:d5: e5:e3:4a:da:39:59:72:5d:e0:d9:26:9c:17:68:01: b2:1f:51:e1:92:b7:cc:c5:82:8f:23:97:24:b4:bf: 98:0d:25:0c:f2:ab:b2:f5:57:73:bc:09:34:2b:f6: d0:04:8b:d2:0a:5f:53:79:b2:48:a6:f2:21:64:65: 26:75:5e:08:2d:05:08:23:59:44:7f:b6:59:14:f6: 49:01:a3:c4:04:14:a2:d0:66:d7:6f:67:12:3d:9b: 72:a1:6f:d2:eb:e3:0d:b2:cb:9f:a7:02:e0:f5:44: 74:e2:19:79:44:49:64:c3:00:8d:5c:a2:bf:f3:de: a0:50:02:16:89:c1:c7:3c:e9:ca:ea:b1:39:1c:ce: 76:08:a8:5a:c7:de:90:a2:c1:d2:27:5b:dc:a3:4d: 0f:2c:18:d1:76:d2:b7:ca:47:9c:92:8d:13:e9:df: 7e:7e:3a:86:ba:b0:df:08:cf:25:21:7d:48:7a:1b: 53:1b:4f:51:f4:f1:0c:1f:60:07:0d:0f:1c:f2:ce: bd:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:9A:C5:4B:5B:03:DE:D9:AF:64:B7:84:FB:A9:D2:7A:84:FD:C3:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c978a05f-a3bf-3b9c-baf3-45b517a44c2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:71:e9:fb:98:a9:4e:0b:bf:ae:77:b1:af:0e:fe:5e:86:48: 59:e5:4a:33:b6:91:c7:cb:24:06:57:44:d8:8e:5c:c9:56:f0: 18:86:57:7f:ba:1b:70:4a:b7:e0:0e:f4:62:2e:a9:bd:98:ff: 48:db:f8:8b:65:69:29:e5:59:7e:b0:bc:65:cb:9f:d0:11:3d: b5:32:45:bf:9b:b3:6c:52:aa:5c:1a:72:67:f9:d9:a6:44:00: 8f:e9:7b:de:22:6c:18:28:a2:2d:43:13:a4:51:ac:e2:b9:ef: b5:1b:bd:b3:0e:00:ee:6a:4c:a6:5d:4e:f8:07:ad:51:41:e1: 1d:60:d2:d4:bc:c9:da:53:5c:13:d4:25:fa:a1:17:47:87:93: 20:df:d1:2e:11:04:73:81:11:35:d4:a2:22:df:c3:fc:59:b2: 94:fa:38:b6:0f:5a:1b:5d:e5:d5:98:42:a5:22:c3:89:1f:03: b0:b6:1d:7b:5d:18:f5:df:6b:c7:4e:bf:5a:cb:2a:26:cf:85: 34:57:cc:94:52:76:57:43:4e:8a:a5:29:f1:29:67:20:ef:40: ea:e5:e4:1f:e8:ed:46:54:94:6d:3a:22:79:ea:3a:b1:1b:53: b1:f0:4e:8a:e4:c3:15:8a:37:be:9d:bb:ec:d7:f7:29:85:a1: a1:ff:d8:b7 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuZ1964onVicvzDPsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk OWIzODMxMDAtNDk2MS00MWQxLTljYmYtZWY0MmE0NzcxNjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkcixkzp5KXautsosHBvRREZbbFgJI2LuzJh 430i9LYJ/cDu4RP+IrdcMxfcDndIoH3Siw0ZQ/XGKtXl40raOVlyXeDZJpwXaAGy H1HhkrfMxYKPI5cktL+YDSUM8quy9VdzvAk0K/bQBIvSCl9TebJIpvIhZGUmdV4I LQUII1lEf7ZZFPZJAaPEBBSi0GbXb2cSPZtyoW/S6+MNssufpwLg9UR04hl5RElk wwCNXKK/896gUAIWicHHPOnK6rE5HM52CKhax96QosHSJ1vco00PLBjRdtK3ykec ko0T6d9+fjqGurDfCM8lIX1IehtTG09R9PEMH2AHDQ8c8s69wwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNiaxUtbA97Zr2S3hPup0nqE/cOtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzk3OGEwNWYtYTNiZi0z YjljLWJhZjMtNDViNTE3YTQ0YzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBjcen7mKlOC7+ud7GvDv5ehkhZ5UoztpHHyyQG V0TYjlzJVvAYhld/uhtwSrfgDvRiLqm9mP9I2/iLZWkp5Vl+sLxly5/QET21MkW/ m7NsUqpcGnJn+dmmRACP6XveImwYKKItQxOkUaziue+1G72zDgDuakymXU74B61R QeEdYNLUvMnaU1wT1CX6oRdHh5Mg39EuEQRzgRE11KIi38P8WbKU+ji2D1obXeXV mEKlIsOJHwOwth17XRj132vHTr9ayyomz4U0V8yUUnZXQ06KpSnxKWcg70Dq5eQf 6O1GVJRtOiJ56jqxG1Ox8E6K5MMVije+nbvs1/cphaGh/9i3 -----END CERTIFICATE-----Generated at Wed Oct 29 22:39:56 2025 by rpki-client