$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0859e3de-d7bd-3f51-b107-036347946467.roa File: 0859e3de-d7bd-3f51-b107-036347946467.roa (raw, json) Hash identifier: l98mTWnaqcd5eGSweSWdz3/4Rdeld+W6YKG0O/iOK3I= Subject key identifier: 1E:05:4F:8F:63:D2:AF:A4:B6:39:FD:A7:BC:FA:0D:2B:F4:8B:01:CF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B48E1BC0FE7E562D41F3ABDE0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0859e3de-d7bd-3f51-b107-036347946467.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 396602 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:bc:0f:e7:e5:62:d4:1f:3a:bd:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=566287ff-1a14-41c4-8896-1f3c924ab0f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:26:a2:bc:45:87:d4:73:0b:90:e4:35:e1:a1: b6:17:cd:9c:eb:a0:15:fe:1d:64:80:43:eb:08:cb: 7d:fa:aa:f4:ca:47:33:f1:93:34:49:d7:cb:16:f5: 54:e9:3b:2a:59:fd:69:2b:78:bf:04:e0:29:dd:c7: 24:09:ed:e0:8c:2b:59:e7:61:b7:e4:63:ab:58:b5: af:51:29:d6:dd:1f:61:ab:2f:26:24:ce:60:c2:f1: 2a:a7:d7:49:17:a4:4d:eb:23:a2:06:ce:aa:2b:56: aa:40:d2:3c:54:e4:04:b6:36:5c:c9:7f:bc:e2:11: 9a:03:49:b2:c0:95:2e:fd:2c:b3:bf:63:a8:60:c5: 9a:fb:38:38:1f:22:c4:bd:a7:99:5a:29:61:f9:8b: 3a:ba:18:5a:15:06:a5:e2:4a:9d:bb:83:98:91:12: f6:16:da:08:dd:11:76:70:0c:01:15:6e:26:a9:43: 8a:1a:d0:d9:d0:3f:70:81:a8:f6:4e:9d:69:45:a5: 2e:7b:92:01:41:84:e8:9a:53:e7:7e:f0:89:ba:6f: 47:61:4a:fb:9a:14:8b:dd:ed:55:6b:1b:05:61:63: 88:98:e6:ca:0a:a0:8e:c9:3b:a3:42:42:43:9c:a9: 6c:21:53:fe:a7:c3:45:70:c6:a7:01:81:62:0c:8a: f2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:05:4F:8F:63:D2:AF:A4:B6:39:FD:A7:BC:FA:0D:2B:F4:8B:01:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0859e3de-d7bd-3f51-b107-036347946467.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:44:24:73:95:ad:91:4c:b9:0d:d4:68:24:70:12:1c:1a:86: 51:5a:94:53:28:af:a7:c2:e1:b6:3b:af:16:17:5d:f5:4d:ae: e8:9b:f8:b7:e9:8b:cf:54:4b:16:d4:0c:84:a9:57:0f:51:8f: 26:ee:4b:2d:80:99:a7:25:01:f9:e5:58:c2:5a:17:1f:38:33: 57:29:b1:a3:f1:e9:80:10:3d:12:0f:f5:85:70:75:2c:39:00: a0:57:92:6d:e4:f5:cc:0c:b5:fb:c5:b2:0c:59:71:ef:9b:4c: 96:87:50:df:ba:5a:43:ed:d3:ed:1f:30:9b:03:92:00:86:e4: f2:77:6a:31:19:e7:99:07:fe:6e:3c:05:ca:55:91:47:77:ee: 57:94:2a:bf:c4:1b:16:12:5e:33:2a:48:d1:a8:7e:f9:43:9e: 8b:63:67:bd:9d:ff:4d:48:c1:cc:59:88:91:ff:14:67:15:1f: 88:8f:a9:69:fa:80:cc:ec:94:d2:18:fe:b4:ce:b1:b3:a5:0f: 49:d4:8c:b2:2c:0e:cb:53:a9:12:f0:31:b5:18:1b:e5:95:bb: ab:ba:bf:03:81:4b:ae:14:a4:02:80:55:31:bb:84:d6:55:cc: a5:e8:3d:50:68:8e:f3:2c:cd:c2:87:ad:a7:05:0d:4e:b1:0f: 6b:1c:18:8a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4bwP5+Vi1B86veAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk NTY2Mjg3ZmYtMWExNC00MWM0LTg4OTYtMWYzYzkyNGFiMGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSaivEWH1HMLkOQ14aG2F82c66AV/h1kgEPr CMt9+qr0ykcz8ZM0SdfLFvVU6TsqWf1pK3i/BOAp3cckCe3gjCtZ52G35GOrWLWv USnW3R9hqy8mJM5gwvEqp9dJF6RN6yOiBs6qK1aqQNI8VOQEtjZcyX+84hGaA0my wJUu/Syzv2OoYMWa+zg4HyLEvaeZWilh+Ys6uhhaFQal4kqdu4OYkRL2FtoI3RF2 cAwBFW4mqUOKGtDZ0D9wgaj2Tp1pRaUue5IBQYTomlPnfvCJum9HYUr7mhSL3e1V axsFYWOImObKCqCOyTujQkJDnKlsIVP+p8NFcManAYFiDIry5QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB4FT49j0q+ktjn9p7z6DSv0iwHPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDg1OWUzZGUtZDdiZC0z ZjUxLWIxMDctMDM2MzQ3OTQ2NDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEhEJHOVrZFMuQ3UaCRwEhwahlFalFMor6fC4bY7rxYXXfVNruib +Lfpi89USxbUDISpVw9RjybuSy2AmaclAfnlWMJaFx84M1cpsaPx6YAQPRIP9YVw dSw5AKBXkm3k9cwMtfvFsgxZce+bTJaHUN+6WkPt0+0fMJsDkgCG5PJ3ajEZ55kH /m48BcpVkUd37leUKr/EGxYSXjMqSNGofvlDnotjZ72d/01IwcxZiJH/FGcVH4iP qWn6gMzslNIY/rTOsbOlD0nUjLIsDstTqRLwMbUYG+WVu6u6vwOBS64UpAKAVTG7 hNZVzKXoPVBojvMszcKHracFDU6xD2scGIo= -----END CERTIFICATE-----Generated at Mon Oct 20 10:45:20 2025 by rpki-client