$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fce1a1a7-b6f2-3a0c-94cf-b18201677957.roa File: fce1a1a7-b6f2-3a0c-94cf-b18201677957.roa (raw, json) Hash identifier: LiM/bMK/Mmft6pMFNpSfV0a22Hp8AbZH5dGS58OyYd8= Subject key identifier: F2:11:01:39:B7:7D:66:FA:35:74:98:2C:26:EB:A2:6B:B3:E8:5E:02 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B48E212692C02326D03E2DB00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fce1a1a7-b6f2-3a0c-94cf-b18201677957.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 396592 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:12:69:2c:02:32:6d:03:e2:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=d3cb40a4-3a35-41df-9e73-221b4e3d46b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:0e:e6:11:d9:05:cd:6a:f1:74:86:8e:16:66: 17:2d:bd:83:c6:8b:01:ab:f6:80:89:10:53:22:cd: e9:99:96:b0:24:6c:d7:f4:1f:32:da:7e:0c:42:bb: b6:b9:30:5c:4e:12:1c:2f:05:49:3e:46:97:38:a8: a0:b8:7e:1b:e7:49:29:73:6a:5c:ae:7e:b6:1c:17: 0a:9b:5a:35:35:35:62:b4:0a:cf:42:fb:03:3e:a3: ab:c2:6b:36:c3:9e:cd:9a:c3:b9:21:ef:91:2f:1a: f5:d6:ad:1b:4c:34:74:ba:48:22:96:55:be:cd:86: 83:49:01:90:3f:8c:51:bf:f4:09:69:15:87:f8:16: 01:ea:a6:19:02:1d:48:c4:4b:03:63:70:fa:eb:ec: 4b:40:a5:5b:df:01:ae:36:d9:f3:e3:73:49:5c:0d: bf:ea:e3:a9:04:29:eb:4d:9b:d9:57:db:bf:90:97: 1d:b4:8e:58:d8:b5:4a:67:25:d5:76:ef:77:3d:cd: 19:fd:a9:6b:ba:49:71:df:0a:ae:9a:19:11:e7:de: 71:0d:c6:53:c4:e3:33:74:13:68:ac:53:4f:0e:28: cc:8e:8f:4f:bc:25:fa:c4:74:3c:fa:ce:5a:f1:b1: 44:bb:74:8b:3b:a4:98:cc:9e:f4:fd:25:6a:ca:b0: 22:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:11:01:39:B7:7D:66:FA:35:74:98:2C:26:EB:A2:6B:B3:E8:5E:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fce1a1a7-b6f2-3a0c-94cf-b18201677957.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:15:1f:7d:c5:a5:f8:82:73:cf:28:90:40:d6:1e:5c:02:16: 4a:e0:bc:c4:19:bc:8f:ab:78:6f:a5:b3:84:9e:6f:eb:07:35: 6f:f1:f9:db:e3:f2:b0:ac:d4:90:ff:ff:9b:ca:9e:ff:5f:39: 1c:55:9a:a9:32:6a:39:90:88:a3:21:94:74:0f:71:c2:95:fe: 66:18:bb:1a:ef:5a:f1:13:c6:0e:16:53:08:bd:56:68:1c:2f: 17:cb:b3:43:03:76:89:35:4c:fd:cc:a0:89:ab:ec:18:96:7d: b5:37:4c:e3:b9:17:dd:37:9e:03:87:1f:b2:39:77:77:94:62: 90:a9:c2:69:62:f9:f2:b1:de:1e:df:cd:d5:81:80:c1:20:b1: e1:37:a6:ab:fa:c3:a5:84:62:dc:ab:89:d4:bf:81:3a:d8:8a: 6b:ad:e8:19:06:c5:8e:ae:6e:8d:ac:6a:4c:59:30:2b:bd:35: 15:68:b1:91:0b:be:72:65:6c:11:14:50:bd:ba:fc:f1:52:ab: 57:8a:e4:f7:dc:17:b6:83:d1:3f:31:3b:f3:67:ca:22:f2:07: 67:2e:1e:d3:76:fd:3c:a5:34:f7:46:6d:bc:b3:ac:f3:95:0b: b0:1e:82:8c:5d:b8:d8:15:c4:88:7a:40:14:d6:09:4b:75:c1: 33:25:0f:cb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4hJpLAIybQPi2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZDNjYjQwYTQtM2EzNS00MWRmLTllNzMtMjIxYjRlM2Q0NmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhg7mEdkFzWrxdIaOFmYXLb2DxosBq/aAiRBT Is3pmZawJGzX9B8y2n4MQru2uTBcThIcLwVJPkaXOKiguH4b50kpc2pcrn62HBcK m1o1NTVitArPQvsDPqOrwms2w57NmsO5Ie+RLxr11q0bTDR0ukgillW+zYaDSQGQ P4xRv/QJaRWH+BYB6qYZAh1IxEsDY3D66+xLQKVb3wGuNtnz43NJXA2/6uOpBCnr TZvZV9u/kJcdtI5Y2LVKZyXVdu93Pc0Z/alruklx3wqumhkR595xDcZTxOMzdBNo rFNPDijMjo9PvCX6xHQ8+s5a8bFEu3SLO6SYzJ70/SVqyrAiDQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPIRATm3fWb6NXSYLCbromuz6F4CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmNlMWExYTctYjZmMi0z YTBjLTk0Y2YtYjE4MjAxNjc3OTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGcVH33FpfiCc88okEDWHlwCFkrgvMQZvI+reG+ls4Seb+sHNW/x +dvj8rCs1JD//5vKnv9fORxVmqkyajmQiKMhlHQPccKV/mYYuxrvWvETxg4WUwi9 VmgcLxfLs0MDdok1TP3MoImr7BiWfbU3TOO5F903ngOHH7I5d3eUYpCpwmli+fKx 3h7fzdWBgMEgseE3pqv6w6WEYtyridS/gTrYimut6BkGxY6ubo2sakxZMCu9NRVo sZELvnJlbBEUUL26/PFSq1eK5PfcF7aD0T8xO/NnyiLyB2cuHtN2/TylNPdGbbyz rPOVC7AegoxduNgVxIh6QBTWCUt1wTMlD8s= -----END CERTIFICATE-----Generated at Wed Oct 29 20:22:28 2025 by rpki-client