$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a747e9d-7d3e-3408-8911-e50e24f0b6db.roa File: 1a747e9d-7d3e-3408-8911-e50e24f0b6db.roa (raw, json) Hash identifier: r4m+2UCq8mqcuHYzTs0+/eRJwA9i8jEZyMY79yiXxw0= Subject key identifier: 7E:7F:47:3B:BA:12:02:1E:F1:BE:F9:0D:AF:25:9F:C8:D6:F9:07:92 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B715CE166E2700113A9CD3200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a747e9d-7d3e-3408-8911-e50e24f0b6db.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 396592 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:e1:66:e2:70:01:13:a9:cd:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=3a209ba7-0e07-4c99-9139-5ce1e79e2a13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:85:d3:86:56:c2:16:11:b1:71:01:30:39:55: 7c:ca:26:3f:7e:f3:d0:35:38:c0:ee:c7:7e:81:60: d8:21:39:ee:15:4a:9e:1b:15:1a:4b:c0:45:d6:96: 6d:c6:fa:20:76:4a:cf:85:c1:e8:84:7d:fd:d5:a7: cd:00:83:e8:de:cc:d5:71:7f:0e:14:42:44:fa:40: fc:19:fb:1a:46:46:bc:a0:d8:de:24:dd:65:22:06: 91:40:2f:00:b4:9d:33:33:41:b6:94:df:63:0e:a7: 6e:9a:7d:87:7e:5e:ab:c6:a8:52:d0:24:bc:fd:94: b9:ec:8e:01:f2:67:11:89:db:05:3a:c0:59:2e:59: ec:de:7e:ca:44:3b:81:7d:83:d7:20:7d:e1:f5:0a: b8:0d:d4:15:5d:21:5b:24:4b:86:f0:a9:06:00:18: 48:d1:c6:d1:bb:34:ab:16:92:6f:8a:32:9b:06:22: 83:d1:48:bd:35:ce:e8:57:e7:47:99:4d:c5:37:e4: 9c:32:70:ba:dc:d5:0d:84:94:9c:83:8e:d4:71:84: cd:82:52:cd:97:7f:09:08:2a:59:c9:d3:59:0c:3f: db:d1:36:be:11:f7:61:08:36:50:5c:49:89:e0:60: 92:4f:09:49:e2:67:ff:9a:45:b5:04:0a:11:57:cb: 57:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:7F:47:3B:BA:12:02:1E:F1:BE:F9:0D:AF:25:9F:C8:D6:F9:07:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a747e9d-7d3e-3408-8911-e50e24f0b6db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:de:a0:57:8f:5d:04:68:03:49:fb:e7:e3:fe:6a:d0:92:ad: 8d:37:4d:21:6a:4a:ca:ac:24:dd:8b:04:24:b4:be:6d:71:1e: e4:f1:61:08:e0:17:22:89:53:10:5b:2a:9b:d9:02:fa:26:d6: 49:b5:d6:0b:4b:4a:f2:aa:c0:d1:f3:bf:00:44:dd:39:e4:61: 15:a9:2e:9f:fb:a6:68:89:6a:69:ec:eb:b3:4f:8b:df:a1:49: 1f:01:bb:a2:af:ab:52:3f:6a:c1:5a:a9:d2:ef:78:9e:cb:a7: fc:4b:3f:d1:7c:2b:0a:50:32:ce:10:c0:2d:ba:b3:ea:d4:c4: 55:ef:4e:30:3d:b7:43:18:d1:14:25:9c:d8:56:6c:ea:7f:73: 66:ff:e4:b3:31:2d:71:54:a8:16:9a:0a:e9:8c:73:d9:b1:2c: 6f:3e:9d:fe:29:ea:41:b6:80:af:0f:d1:0f:18:43:16:00:4a: 1e:ba:64:80:74:12:1b:76:46:a2:d4:b1:b9:33:a9:12:55:0e: cd:ad:f0:dd:1f:f0:03:98:cb:8d:1d:ca:91:ca:55:4a:ee:45: 04:99:53:4a:d1:80:35:8e:5d:0e:b4:44:1f:a5:10:c1:b1:68: b0:59:1f:d6:0e:c5:1c:bf:0a:ec:00:e0:30:5d:bf:de:66:8b: c4:e2:42:0b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtxXOFm4nABE6nNMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk M2EyMDliYTctMGUwNy00Yzk5LTkxMzktNWNlMWU3OWUyYTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIXThlbCFhGxcQEwOVV8yiY/fvPQNTjA7sd+ gWDYITnuFUqeGxUaS8BF1pZtxvogdkrPhcHohH391afNAIPo3szVcX8OFEJE+kD8 GfsaRka8oNjeJN1lIgaRQC8AtJ0zM0G2lN9jDqdumn2Hfl6rxqhS0CS8/ZS57I4B 8mcRidsFOsBZLlns3n7KRDuBfYPXIH3h9Qq4DdQVXSFbJEuG8KkGABhI0cbRuzSr FpJvijKbBiKD0Ui9Nc7oV+dHmU3FN+ScMnC63NUNhJScg47UcYTNglLNl38JCCpZ ydNZDD/b0Ta+EfdhCDZQXEmJ4GCSTwlJ4mf/mkW1BAoRV8tXawIDAQABo4IDYjCC A14wHQYDVR0OBBYEFH5/Rzu6EgIe8b75Da8ln8jW+QeSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWE3NDdlOWQtN2QzZS0z NDA4LTg5MTEtZTUwZTI0ZjBiNmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBt3qBXj10EaANJ++fj/mrQkq2NN00hakrKrCTd iwQktL5tcR7k8WEI4BciiVMQWyqb2QL6JtZJtdYLS0ryqsDR878ARN055GEVqS6f +6ZoiWpp7OuzT4vfoUkfAbuir6tSP2rBWqnS73iey6f8Sz/RfCsKUDLOEMAturPq 1MRV704wPbdDGNEUJZzYVmzqf3Nm/+SzMS1xVKgWmgrpjHPZsSxvPp3+KepBtoCv D9EPGEMWAEoeumSAdBIbdkai1LG5M6kSVQ7NrfDdH/ADmMuNHcqRylVK7kUEmVNK 0YA1jl0OtEQfpRDBsWiwWR/WDsUcvwrsAOAwXb/eZovE4kIL -----END CERTIFICATE-----Generated at Mon Oct 20 20:44:50 2025 by rpki-client