$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/180fb14a-7f05-31e9-99bb-13a4086b648b.roa File: 180fb14a-7f05-31e9-99bb-13a4086b648b.roa (raw, json) Hash identifier: JBCpThfRBfXjYpoGbkM4dAX2aI51X2xE2XuGEFJ66Xc= Subject key identifier: 8D:86:CD:48:85:60:F3:ED:8A:C4:1D:8E:DB:F1:96:9A:A2:34:9A:95 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B715CDB26945B9CC13B601BC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/180fb14a-7f05-31e9-99bb-13a4086b648b.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 397208 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:db:26:94:5b:9c:c1:3b:60:1b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=daa0a3c9-a7e7-458d-bf13-7084a92eeddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:47:45:35:47:fd:9b:32:5e:f6:0c:4d:8f:f7: 96:62:58:b5:21:89:33:72:9c:1e:b7:02:aa:47:00: a6:d1:ea:1a:71:c4:8c:06:b5:e7:bb:b5:c5:3f:d1: 66:ea:b3:6b:57:e7:9a:43:54:53:01:2c:03:72:92: d9:52:a0:16:b7:b9:78:fe:d8:48:c2:85:40:35:fd: 20:4a:32:99:9b:8b:60:b2:9e:63:32:27:06:e4:9b: a8:84:62:5e:4c:eb:57:8e:c8:dc:27:fb:e4:56:70: f4:3e:c3:64:2f:22:37:4a:5b:ca:2b:80:27:c7:25: a7:b7:4a:47:be:61:52:6a:63:34:25:b5:d1:e2:ea: 7d:2b:28:2d:b7:f2:1f:85:c4:75:ed:35:5a:87:59: 29:f3:27:2e:8d:bf:b7:49:09:d2:41:82:68:4e:00: ea:36:b8:d7:22:3d:3e:8b:64:71:db:4f:c0:de:1a: ac:47:84:08:80:bf:18:d9:08:ac:17:ab:99:9e:2a: 1d:57:aa:c1:88:be:d9:db:64:bf:e9:3b:e9:01:b9: 86:30:19:d2:41:ca:3d:e6:ef:50:56:94:99:e2:03: 17:9e:28:e4:a5:99:54:ea:25:95:b4:bf:d6:25:6e: d9:0c:8c:7f:56:87:5d:93:05:17:d3:f7:24:b9:1b: 76:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:86:CD:48:85:60:F3:ED:8A:C4:1D:8E:DB:F1:96:9A:A2:34:9A:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/180fb14a-7f05-31e9-99bb-13a4086b648b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:5c:d6:e2:93:ba:2d:0c:92:2e:2c:b9:56:5b:71:cc:b8:e7: d1:56:c3:e1:4b:ca:54:50:be:3b:12:f1:24:d3:c2:96:12:4b: 7b:d0:c5:9c:25:ef:34:7c:f1:8e:3a:83:f3:ad:79:d0:ad:72: b8:35:9d:48:34:e4:56:69:b0:f9:53:4a:40:2f:c8:21:2b:d1: b6:32:2d:0e:0d:bd:42:ea:88:a6:1f:f7:a4:89:6b:2a:80:84: 7b:f8:da:5f:01:8e:e5:42:59:cf:3a:d5:bd:17:3a:ef:d6:c2: 60:d8:44:08:4f:7f:26:01:6c:1b:ed:86:39:f9:66:63:7c:9a: 08:1a:fe:c8:43:82:d9:f0:5d:1b:4a:0e:5f:4d:dd:72:ac:0f: fa:00:00:6c:22:67:7c:c5:63:78:ee:72:2d:db:f5:5c:bb:b3: 28:6f:88:94:74:31:f7:91:c3:77:50:8e:21:f5:4c:a1:4a:27: a2:fb:a7:11:b1:fa:56:29:f8:41:b0:37:36:d5:5e:06:40:03: 8b:c4:c1:87:78:f4:2d:05:b5:67:77:53:6c:1a:ed:83:9a:21: 39:e3:db:75:b8:d3:d2:9b:72:e2:79:a7:9d:0d:59:3e:d0:21: e4:ad:17:e4:24:f8:48:f0:6b:d1:57:7e:e0:cf:f5:55:cd:d7: 8c:c7:b1:e3 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtxXNsmlFucwTtgG8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ZGFhMGEzYzktYTdlNy00NThkLWJmMTMtNzA4NGE5MmVlZGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUdFNUf9mzJe9gxNj/eWYli1IYkzcpwetwKq RwCm0eoaccSMBrXnu7XFP9Fm6rNrV+eaQ1RTASwDcpLZUqAWt7l4/thIwoVANf0g SjKZm4tgsp5jMicG5JuohGJeTOtXjsjcJ/vkVnD0PsNkLyI3SlvKK4AnxyWnt0pH vmFSamM0JbXR4up9Kygtt/IfhcR17TVah1kp8ycujb+3SQnSQYJoTgDqNrjXIj0+ i2Rx20/A3hqsR4QIgL8Y2QisF6uZniodV6rBiL7Z22S/6TvpAbmGMBnSQco95u9Q VpSZ4gMXnijkpZlU6iWVtL/WJW7ZDIx/VoddkwUX0/ckuRt2xQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFI2GzUiFYPPtisQdjtvxlpqiNJqVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTgwZmIxNGEtN2YwNS0z MWU5LTk5YmItMTNhNDA4NmI2NDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQATXNbik7otDJIuLLlWW3HMuOfRVsPhS8pUUL47 EvEk08KWEkt70MWcJe80fPGOOoPzrXnQrXK4NZ1INORWabD5U0pAL8ghK9G2Mi0O Db1C6oimH/ekiWsqgIR7+NpfAY7lQlnPOtW9Fzrv1sJg2EQIT38mAWwb7YY5+WZj fJoIGv7IQ4LZ8F0bSg5fTd1yrA/6AABsImd8xWN47nIt2/Vcu7Mob4iUdDH3kcN3 UI4h9UyhSiei+6cRsfpWKfhBsDc21V4GQAOLxMGHePQtBbVnd1NsGu2DmiE549t1 uNPSm3LieaedDVk+0CHkrRfkJPhI8GvRV37gz/VVzdeMx7Hj -----END CERTIFICATE-----Generated at Mon Oct 20 08:13:35 2025 by rpki-client