$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1029c147-7e62-3aa7-8236-17a4a4d30c98.roa File: 1029c147-7e62-3aa7-8236-17a4a4d30c98.roa (raw, json) Hash identifier: smXhauMI166fK+sUTGVqo2TtGPqC13Cjkr1wZjRBLy0= Subject key identifier: 4A:1B:9D:0F:2C:D8:9E:BB:5C:B8:B9:DB:08:FD:F8:89:02:A8:09:C7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6201FA885D28C9F48B5BE380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1029c147-7e62-3aa7-8236-17a4a4d30c98.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 396603 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:fa:88:5d:28:c9:f4:8b:5b:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=06271616-bf3c-43ee-98bd-fc181949efe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:0a:a8:ac:75:1f:f6:e5:02:b4:0a:10:6d:36: 8f:6c:5f:4a:8c:04:70:37:4a:f2:e9:7a:ae:9a:36: 43:3f:62:23:28:a9:71:7f:24:20:45:1d:2a:6d:d1: 44:8f:80:e9:12:43:04:e6:59:b8:ee:31:19:76:01: f0:b5:5d:a7:35:5e:f2:69:49:3b:ae:c6:5a:86:6f: a7:bb:05:49:30:85:5e:46:b4:25:1d:95:78:76:7e: 7c:38:3b:aa:17:48:49:ab:1d:ef:60:7f:99:d9:8b: 71:1c:d0:20:d2:bb:59:29:80:6f:fb:bc:5a:28:89: ab:38:f5:40:3e:f4:85:54:cd:9e:f8:13:ab:4c:c2: ff:ae:19:67:b7:1e:f0:e7:40:b2:5f:b1:dd:46:b1: 04:96:ee:f9:57:c6:88:99:b7:a6:77:82:eb:72:2e: 92:d9:98:16:38:3b:95:63:2e:14:bc:00:42:72:df: 3b:9d:7f:ea:37:1d:01:ae:c0:70:62:01:41:99:e0: 43:cf:8d:3f:04:56:fc:a8:3b:85:69:c4:6d:66:a9: a1:8c:3d:70:53:ce:ad:06:66:21:09:b5:c0:88:c3: 1a:93:c4:f4:29:ba:da:af:ac:04:14:08:a0:8e:32: a2:38:b5:35:9a:b3:7e:52:8a:3a:91:bd:d5:99:b4: 43:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:1B:9D:0F:2C:D8:9E:BB:5C:B8:B9:DB:08:FD:F8:89:02:A8:09:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1029c147-7e62-3aa7-8236-17a4a4d30c98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:d7:f2:bc:f1:ba:36:8e:fa:44:9f:ac:17:69:11:eb:87:31: fe:bb:57:6b:0e:2a:4e:86:e9:16:86:7b:59:ab:49:fe:71:79: 8e:91:0b:5c:e4:6f:14:9a:a5:bf:5e:99:c7:18:99:73:a3:79: fa:92:2a:b2:e1:6b:af:f9:8c:d6:22:eb:7e:6b:b4:f5:70:cf: e2:ed:98:12:d2:5f:77:c4:b5:82:66:93:d4:c0:51:8a:40:b4: a4:a6:7b:29:17:bb:29:65:28:9e:42:fd:f0:8f:06:78:6f:a5: 88:5a:39:c8:7a:c5:10:0c:a5:3d:a9:7f:05:b0:1c:f2:2c:14: 3b:f5:5b:7e:0b:27:94:bf:b9:c7:5f:02:31:5e:7a:5a:39:07: e4:c7:e1:c9:bb:6c:b0:ef:9b:4b:f1:11:d2:e8:30:59:bb:dd: 71:9a:79:9d:47:e0:0a:22:57:83:95:a0:13:8b:09:be:b1:05: 8f:cc:29:cc:24:da:d0:6a:fe:d3:ab:44:d1:72:87:34:35:9d: a3:ac:14:8f:d5:71:cd:84:06:af:78:2a:33:b8:85:0a:09:8f: 86:b2:52:2b:cf:4e:0d:01:94:94:9e:0d:a2:ad:5f:68:7a:44: 8d:7d:49:15:da:dc:7a:6e:f8:02:92:30:1a:2c:38:95:99:8a: a5:7a:36:a3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAfqIXSjJ9Itb44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk MDYyNzE2MTYtYmYzYy00M2VlLTk4YmQtZmMxODE5NDllZmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQqorHUf9uUCtAoQbTaPbF9KjARwN0ry6Xqu mjZDP2IjKKlxfyQgRR0qbdFEj4DpEkME5lm47jEZdgHwtV2nNV7yaUk7rsZahm+n uwVJMIVeRrQlHZV4dn58ODuqF0hJqx3vYH+Z2YtxHNAg0rtZKYBv+7xaKImrOPVA PvSFVM2e+BOrTML/rhlntx7w50CyX7HdRrEElu75V8aImbemd4Lrci6S2ZgWODuV Yy4UvABCct87nX/qNx0BrsBwYgFBmeBDz40/BFb8qDuFacRtZqmhjD1wU86tBmYh CbXAiMMak8T0Kbrar6wEFAigjjKiOLU1mrN+Uoo6kb3VmbRDBwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEobnQ8s2J67XLi52wj9+IkCqAnHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTAyOWMxNDctN2U2Mi0z YWE3LTgyMzYtMTdhNGE0ZDMwYzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEPX8rzxujaO+kSfrBdpEeuHMf67V2sOKk6G6RaGe1mrSf5xeY6R C1zkbxSapb9emccYmXOjefqSKrLha6/5jNYi635rtPVwz+LtmBLSX3fEtYJmk9TA UYpAtKSmeykXuyllKJ5C/fCPBnhvpYhaOch6xRAMpT2pfwWwHPIsFDv1W34LJ5S/ ucdfAjFeelo5B+TH4cm7bLDvm0vxEdLoMFm73XGaeZ1H4AoiV4OVoBOLCb6xBY/M Kcwk2tBq/tOrRNFyhzQ1naOsFI/Vcc2EBq94KjO4hQoJj4ayUivPTg0BlJSeDaKt X2h6RI19SRXa3Hpu+AKSMBosOJWZiqV6NqM= -----END CERTIFICATE-----Generated at Mon Oct 20 15:54:56 2025 by rpki-client