$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e4d4c92d-3705-3c22-aade-7a9dd4f6e9a5.roa File: e4d4c92d-3705-3c22-aade-7a9dd4f6e9a5.roa (raw, json) Hash identifier: k627bxVmb2jy4XGkJX75gkvO3fxnRjuyo/ND4d5fKZw= Subject key identifier: F4:D7:41:81:33:09:C6:24:5F:03:D2:EF:74:34:3A:9B:43:7C:35:CB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B3556FF10D9EF05BF7DAABAC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e4d4c92d-3705-3c22-aade-7a9dd4f6e9a5.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 396551 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:ff:10:d9:ef:05:bf:7d:aa:ba:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=decc81b0-edbf-466b-801f-26671b455395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bf:0c:e6:d8:b4:88:75:11:24:e1:8d:66:ba: 29:d9:2a:f3:ca:96:7d:e3:07:f3:5f:77:5e:ca:f4: 22:db:3d:63:f6:5b:cd:30:07:ad:ed:41:d8:4b:7a: 69:4f:c4:25:66:50:a5:15:cd:12:fe:b9:55:55:e2: 2d:28:0d:47:a5:a8:c7:b8:a3:24:52:6d:ee:c5:52: 2d:85:8c:70:c4:60:ba:0f:eb:48:61:49:66:08:f1: 1f:fb:1c:c9:99:dc:7a:0f:df:54:ca:37:87:a5:d2: 42:68:60:5a:04:a4:f1:c0:f6:82:05:55:77:a0:24: e4:a8:c9:7e:35:8d:e4:f7:f4:90:68:c3:b3:48:cb: 70:40:1e:da:85:fc:79:34:2a:ef:a9:e7:b6:0d:f5: ce:ac:da:21:91:6b:de:dc:01:dd:d6:4d:ef:f4:1e: 9d:2a:ce:11:1a:26:84:83:bd:73:be:08:b3:e0:78: 53:64:9c:94:48:c2:bb:9f:9d:f4:92:b9:4e:67:09: 55:1e:0b:f8:76:51:c9:f9:b6:ee:12:38:28:17:b1: 11:8f:62:45:c8:89:ee:31:c5:e9:da:0a:cc:9c:07: b6:bf:00:96:ab:fa:a9:32:0a:a8:8a:6b:8a:11:f9: 60:f7:46:2d:2a:24:df:b5:fd:40:b1:77:43:dd:13: dd:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:D7:41:81:33:09:C6:24:5F:03:D2:EF:74:34:3A:9B:43:7C:35:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e4d4c92d-3705-3c22-aade-7a9dd4f6e9a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:1b:6f:7d:9e:7f:c5:fa:2d:e5:05:9b:cf:b1:e4:92:6b:f3: 7f:df:d1:d4:a9:53:0d:63:eb:3e:cd:89:92:22:98:76:5c:8d: b4:04:72:f7:10:80:76:7c:3f:bd:ee:9b:81:5c:c3:df:2d:06: b4:47:98:4e:35:ed:53:40:84:20:58:55:4a:7b:52:62:88:73: a9:91:67:cd:e1:43:e6:8b:54:e2:00:41:56:e3:3c:e0:3b:10: f3:c7:d0:a6:da:16:63:76:65:94:3e:03:e3:9e:bb:6c:5b:3c: 1e:cf:8a:4b:86:9e:f4:74:8a:d6:63:a8:5a:43:cf:a8:c3:45: 31:27:41:45:1d:f2:8e:7d:33:00:6b:d2:37:36:94:68:95:c1: 0f:54:08:e1:d8:c8:a4:8e:4f:3d:77:15:60:0b:be:ac:d3:93: 3f:71:8e:9d:05:e6:98:3c:e1:5e:97:94:f5:cc:16:92:ac:29: 6d:8b:8a:e7:65:73:57:be:83:0e:95:b4:a2:81:5f:79:64:d5: c4:56:61:e9:af:43:26:98:c2:62:c7:85:9f:f7:e0:ad:28:9e: 67:25:35:50:a3:87:eb:95:83:52:b6:e9:fa:a1:d2:94:63:94: a5:4f:a2:6d:14:b0:d1:1a:73:b8:69:43:ce:4e:d5:e9:c8:1b: 34:c6:72:c2 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEs1Vv8Q2e8Fv32qusAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk ZGVjYzgxYjAtZWRiZi00NjZiLTgwMWYtMjY2NzFiNDU1Mzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0b8M5ti0iHURJOGNZrop2SrzypZ94wfzX3de yvQi2z1j9lvNMAet7UHYS3ppT8QlZlClFc0S/rlVVeItKA1HpajHuKMkUm3uxVIt hYxwxGC6D+tIYUlmCPEf+xzJmdx6D99UyjeHpdJCaGBaBKTxwPaCBVV3oCTkqMl+ NY3k9/SQaMOzSMtwQB7ahfx5NCrvqee2DfXOrNohkWve3AHd1k3v9B6dKs4RGiaE g71zvgiz4HhTZJyUSMK7n530krlOZwlVHgv4dlHJ+bbuEjgoF7ERj2JFyInuMcXp 2grMnAe2vwCWq/qpMgqoimuKEflg90YtKiTftf1AsXdD3RPdAwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPTXQYEzCcYkXwPS73Q0OptDfDXLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTRkNGM5MmQtMzcwNS0z YzIyLWFhZGUtN2E5ZGQ0ZjZlOWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA6G299nn/F+i3lBZvPseSSa/N/39HUqVMNY+s+ zYmSIph2XI20BHL3EIB2fD+97puBXMPfLQa0R5hONe1TQIQgWFVKe1JiiHOpkWfN 4UPmi1TiAEFW4zzgOxDzx9Cm2hZjdmWUPgPjnrtsWzwez4pLhp70dIrWY6haQ8+o w0UxJ0FFHfKOfTMAa9I3NpRolcEPVAjh2Mikjk89dxVgC76s05M/cY6dBeaYPOFe l5T1zBaSrClti4rnZXNXvoMOlbSigV95ZNXEVmHpr0MmmMJix4Wf9+CtKJ5nJTVQ o4frlYNStun6odKUY5SlT6JtFLDRGnO4aUPOTtXpyBs0xnLC -----END CERTIFICATE-----Generated at Wed Oct 29 20:42:29 2025 by rpki-client