$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ceaf848a-a95c-37a9-b202-2ac941822059.roa File: ceaf848a-a95c-37a9-b202-2ac941822059.roa (raw, json) Hash identifier: 6LBjgMwAfSYWiMvKFj07d5P9qKU/geGfUvDDPG5qKBw= Subject key identifier: B8:4A:B2:E6:DA:65:66:BC:B1:68:01:18:13:80:A9:AC:0D:C4:90:70 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B715CDD17264B23044F549400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ceaf848a-a95c-37a9-b202-2ac941822059.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 397207 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:dd:17:26:4b:23:04:4f:54:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=dd0dfa10-9b73-40db-8964-43ca8a1aeab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:61:fd:a4:c9:5d:bb:0a:5a:fd:91:3d:cb:04: b7:32:e1:08:67:8d:bc:d8:94:4d:f5:e8:78:1e:ba: 7c:3a:84:e1:79:8b:e6:32:79:82:81:4e:cc:21:de: 96:68:21:28:88:39:72:0a:64:86:bb:81:7e:45:85: aa:4b:b2:91:8e:3c:fe:38:c6:5f:d9:ff:3c:49:50: b7:5a:0d:05:03:91:0e:8c:a6:1a:23:5b:b9:5d:85: 03:65:3f:89:0b:9a:34:8b:98:96:41:aa:7a:24:7d: b0:74:f4:85:c4:cc:24:80:9f:64:f4:50:65:45:a8: 97:f5:f4:19:b7:73:ab:c3:54:1f:af:a8:35:52:db: bf:be:b8:ca:e2:cb:e7:5d:9b:fe:a8:69:70:c5:b3: 5a:4f:51:26:77:12:49:a9:dd:ad:a3:62:56:cb:9a: 58:75:12:bd:c9:ad:f5:00:65:8d:51:a4:77:31:99: c8:01:5f:d1:b4:6b:5b:9a:c4:d2:08:d6:f6:a1:c1: 6f:e0:33:90:26:0e:78:6b:91:d8:d2:7a:50:93:f8: a1:ff:90:62:49:90:7b:24:00:34:35:a9:82:bc:2f: 1c:eb:bf:ef:e0:9c:38:4c:e2:d9:50:b9:60:6a:2e: a9:b2:5d:bf:42:dd:af:9c:3c:3d:10:aa:45:45:fd: 6f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:4A:B2:E6:DA:65:66:BC:B1:68:01:18:13:80:A9:AC:0D:C4:90:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ceaf848a-a95c-37a9-b202-2ac941822059.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:b5:ee:55:97:78:e9:39:31:7b:ff:d3:54:31:dc:ae:e6:c8: 25:3a:17:bf:af:c9:a9:0c:1d:dc:12:ed:7b:fd:d9:ce:db:4f: 1a:16:ef:17:7a:0e:71:28:26:b4:93:4b:bd:31:5c:98:39:30: e4:38:ca:c2:7d:1c:3e:27:9c:f1:79:37:45:d3:b8:d0:17:c0: 8e:e8:cf:ab:da:08:90:ee:bb:f0:8b:7a:c1:c6:9c:53:6a:3a: c7:cb:bf:6a:37:eb:d7:66:ea:9e:68:b3:1d:5f:0b:fa:e6:a9: 3a:73:ff:da:a8:dd:d2:b1:be:b4:cc:08:7b:f0:05:2a:50:74: e1:9d:ae:b2:dd:9d:76:ef:60:27:bc:74:56:f7:5a:22:94:e1: 04:71:06:24:67:14:e7:57:73:f2:ce:a6:8f:6b:93:a0:2f:61: 63:c2:f7:fe:3b:e8:67:8d:ad:c3:78:89:ec:11:55:d2:d4:44: 53:7c:31:14:9b:30:5d:7e:d7:1d:b8:e9:c1:54:a9:d2:66:7b: d4:8e:a3:20:cc:5a:f1:bc:a1:dd:47:f2:0e:55:bf:6d:0c:3f: 5d:4e:a4:a1:95:b0:22:47:72:2c:0f:10:0f:3b:52:c9:bc:9e: d0:6f:83:d0:83:73:f2:27:67:b8:16:4c:4c:ca:92:ec:80:ac: 16:cc:e4:d8 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtxXN0XJksjBE9UlAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ZGQwZGZhMTAtOWI3My00MGRiLTg5NjQtNDNjYThhMWFlYWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GH9pMlduwpa/ZE9ywS3MuEIZ4282JRN9eh4 Hrp8OoTheYvmMnmCgU7MId6WaCEoiDlyCmSGu4F+RYWqS7KRjjz+OMZf2f88SVC3 Wg0FA5EOjKYaI1u5XYUDZT+JC5o0i5iWQap6JH2wdPSFxMwkgJ9k9FBlRaiX9fQZ t3Orw1Qfr6g1Utu/vrjK4svnXZv+qGlwxbNaT1EmdxJJqd2to2JWy5pYdRK9ya31 AGWNUaR3MZnIAV/RtGtbmsTSCNb2ocFv4DOQJg54a5HY0npQk/ih/5BiSZB7JAA0 NamCvC8c67/v4Jw4TOLZULlgai6psl2/Qt2vnDw9EKpFRf1vfQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLhKsubaZWa8sWgBGBOAqawNxJBwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2VhZjg0OGEtYTk1Yy0z N2E5LWIyMDItMmFjOTQxODIyMDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAAte5Vl3jpOTF7/9NUMdyu5sglOhe/r8mpDB3c Eu17/dnO208aFu8Xeg5xKCa0k0u9MVyYOTDkOMrCfRw+J5zxeTdF07jQF8CO6M+r 2giQ7rvwi3rBxpxTajrHy79qN+vXZuqeaLMdXwv65qk6c//aqN3Ssb60zAh78AUq UHThna6y3Z1272AnvHRW91oilOEEcQYkZxTnV3PyzqaPa5OgL2Fjwvf+O+hnja3D eInsEVXS1ERTfDEUmzBdftcduOnBVKnSZnvUjqMgzFrxvKHdR/IOVb9tDD9dTqSh lbAiR3IsDxAPO1LJvJ7Qb4PQg3PyJ2e4FkxMypLsgKwWzOTY -----END CERTIFICATE-----Generated at Thu Oct 30 03:23:04 2025 by rpki-client