$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da4622cf-2073-3cfa-8aef-0aab700d93ad.roa File: da4622cf-2073-3cfa-8aef-0aab700d93ad.roa (raw, json) Hash identifier: zIEjpHr9XajkMv6sl6HqUi8wYaHGjzJviaFn6/0dE2M= Subject key identifier: 57:0E:01:A8:CF:17:7A:AF:7F:24:8A:3D:D1:BE:1D:36:AD:CC:6B:87 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B715CDF6099379F096E61E4E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da4622cf-2073-3cfa-8aef-0aab700d93ad.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 397205 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:df:60:99:37:9f:09:6e:61:e4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=bbdb07f1-f00d-4d1a-b26b-f91138df8285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9a:ec:f1:9a:ee:71:7c:79:7e:82:23:4b:a8: 2a:b5:47:9a:2a:a1:b7:89:40:4f:e2:42:be:bb:eb: 16:e6:3e:c2:81:fc:08:d7:31:59:c4:6c:2f:59:57: c7:92:d9:65:34:86:95:fd:04:d8:7f:87:1b:e0:54: 7a:2a:13:00:f5:a4:fc:08:4d:1e:48:b3:50:eb:88: 11:97:29:a9:4b:10:95:e2:a5:ba:47:0e:87:0a:6f: 10:c5:02:0d:6d:dd:4b:61:44:5b:4d:2f:8f:c4:6b: 45:33:b7:1d:95:c8:cd:d2:7e:b3:8b:00:a8:ba:9c: 32:0e:5a:1b:e7:93:09:b7:e0:81:37:bb:9e:72:b4: 68:e1:91:0e:86:1b:ac:80:82:01:7a:01:26:17:61: f5:3e:66:c7:fc:00:0c:f2:3c:e4:3d:38:68:44:0f: e0:17:16:e2:1e:3d:0b:f1:0d:c8:cd:a4:fd:47:7e: f0:1e:ec:91:18:f9:c7:f5:c8:84:1d:83:8f:dc:eb: 62:98:d5:41:78:60:37:61:61:0e:55:7e:7d:55:df: 50:1e:59:41:42:27:b2:ef:32:dd:4e:36:fc:66:91: 99:9f:6e:02:bd:0d:b2:0c:1d:cc:33:39:64:c8:af: ef:2e:df:10:f4:b7:08:50:8c:9d:c7:53:a5:c2:8c: a0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:0E:01:A8:CF:17:7A:AF:7F:24:8A:3D:D1:BE:1D:36:AD:CC:6B:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da4622cf-2073-3cfa-8aef-0aab700d93ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:60:25:a1:43:fd:9b:a7:7d:1a:e6:e5:43:03:f1:cf:62:95: 31:3c:70:2b:f6:fe:02:32:b0:15:10:07:7c:24:5e:ed:8a:43: 6b:c6:67:85:a5:70:33:e5:57:5d:d6:2a:42:db:62:b0:1e:6e: 7d:98:f4:68:36:b4:a8:44:b6:85:0a:a0:3d:31:1c:0e:c9:a3: 0e:76:3e:2d:69:03:d3:3d:e8:c1:40:9c:11:a7:76:cf:37:19: 58:ed:1a:b5:c2:92:5b:15:77:5c:45:ff:0b:68:61:50:d2:07: 93:a8:94:bd:80:d6:87:e0:2a:4e:96:d9:7d:e2:aa:ce:7b:82: bc:af:4c:aa:9d:81:58:cb:27:85:35:fb:14:9a:43:99:fe:09: be:19:56:de:fe:0f:f0:dd:2f:d5:16:07:89:50:b2:3f:d4:40: bf:a3:8b:d5:df:af:68:66:36:24:bc:16:98:05:88:cc:b3:16: 93:db:df:0b:1c:70:11:07:57:53:7b:33:2a:3b:e2:5e:51:71: 6b:70:02:ed:ef:dd:d6:32:f9:44:f3:86:27:aa:9f:86:1b:1d: 4a:d5:ab:7c:90:26:c3:2f:76:98:0b:07:8b:22:ac:9a:d4:e0: a5:68:9d:73:16:74:43:ef:c1:3a:2b:14:65:53:c5:05:c5:d4: a1:0d:96:dd -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtxXN9gmTefCW5h5OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YmJkYjA3ZjEtZjAwZC00ZDFhLWIyNmItZjkxMTM4ZGY4Mjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJrs8ZrucXx5foIjS6gqtUeaKqG3iUBP4kK+ u+sW5j7CgfwI1zFZxGwvWVfHktllNIaV/QTYf4cb4FR6KhMA9aT8CE0eSLNQ64gR lympSxCV4qW6Rw6HCm8QxQINbd1LYURbTS+PxGtFM7cdlcjN0n6ziwCoupwyDlob 55MJt+CBN7uecrRo4ZEOhhusgIIBegEmF2H1PmbH/AAM8jzkPThoRA/gFxbiHj0L 8Q3IzaT9R37wHuyRGPnH9ciEHYOP3OtimNVBeGA3YWEOVX59Vd9QHllBQiey7zLd Tjb8ZpGZn24CvQ2yDB3MMzlkyK/vLt8Q9LcIUIydx1OlwoygFQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFcOAajPF3qvfySKPdG+HTatzGuHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGE0NjIyY2YtMjA3My0z Y2ZhLThhZWYtMGFhYjcwMGQ5M2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA7YCWhQ/2bp30a5uVDA/HPYpUxPHAr9v4CMrAV EAd8JF7tikNrxmeFpXAz5Vdd1ipC22KwHm59mPRoNrSoRLaFCqA9MRwOyaMOdj4t aQPTPejBQJwRp3bPNxlY7Rq1wpJbFXdcRf8LaGFQ0geTqJS9gNaH4CpOltl94qrO e4K8r0yqnYFYyyeFNfsUmkOZ/gm+GVbe/g/w3S/VFgeJULI/1EC/o4vV369oZjYk vBaYBYjMsxaT298LHHARB1dTezMqO+JeUXFrcALt793WMvlE84Ynqp+GGx1K1at8 kCbDL3aYCweLIqya1OClaJ1zFnRD78E6KxRlU8UFxdShDZbd -----END CERTIFICATE-----Generated at Wed Oct 29 20:26:09 2025 by rpki-client