$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ac2a394-d64c-3bed-9517-56c35f8fc3b7.roa File: 1ac2a394-d64c-3bed-9517-56c35f8fc3b7.roa (raw, json) Hash identifier: ElT9pyKKjaFjyAw4np7BmRz53Lto/H03VVLYiO8Daok= Subject key identifier: 67:70:94:FF:48:9B:03:57:DA:F6:E4:6E:98:8A:F1:5F:56:1B:0C:7F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E7962814B1656118350340 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ac2a394-d64c-3bed-9517-56c35f8fc3b7.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 396576 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:96:28:14:b1:65:61:18:35:03:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=60373c63-a8d4-4d54-9caf-4cd2640a0693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:42:9b:56:73:bc:f0:a2:1e:60:f0:f5:2b:03: 17:c8:3f:b3:54:73:81:40:be:b5:63:44:09:9f:14: 6b:44:dd:8c:25:75:ee:68:0a:1d:d9:c2:e3:50:d6: 3b:c5:b4:11:0e:9e:fb:6e:e7:8f:3c:c5:0e:f8:10: d2:2b:5d:de:c0:ac:0c:91:a8:d9:01:e9:49:9e:fb: b7:8e:a7:a6:92:4a:db:31:4d:0f:8e:cd:f1:57:8b: 7f:57:21:74:72:af:84:3a:6d:e8:62:31:94:c1:d0: 68:13:b5:1f:22:e2:b1:0c:7a:e5:0f:7c:e7:ea:0a: cf:ff:b9:2e:cb:f6:cd:ea:2e:78:70:40:51:55:c3: b5:c7:38:1a:14:20:d6:19:73:4f:89:9a:62:9c:d5: 8f:65:40:23:ed:90:62:5f:bf:58:a1:53:da:ee:41: 6c:5c:5c:b3:5b:f2:d6:26:ed:99:58:8e:a9:35:62: 65:e8:d1:57:b3:76:0b:89:7b:84:77:de:78:76:3e: dd:e1:db:91:d7:9f:5c:20:8e:4b:fc:9a:5e:72:01: fa:63:e6:d9:e5:53:63:bd:99:e9:7c:59:ac:3e:3b: 1d:d5:16:cd:fa:22:08:59:88:c1:1d:98:ea:21:37: 8f:cd:02:64:e5:7e:8f:b3:b1:88:72:f6:91:fe:2f: 09:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:70:94:FF:48:9B:03:57:DA:F6:E4:6E:98:8A:F1:5F:56:1B:0C:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ac2a394-d64c-3bed-9517-56c35f8fc3b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:2b:55:25:ed:be:9f:f5:f1:78:e0:97:d4:af:b5:03:f4:a3: 17:63:48:c9:ef:57:4e:63:d3:1c:a5:56:04:bf:cc:86:72:1c: dc:64:06:4c:77:f4:d2:21:e7:aa:2d:07:76:e7:18:7b:24:d0: ea:ad:f8:35:ad:9d:72:01:a4:8d:40:ad:91:eb:1b:c7:65:91: 4e:e4:57:fa:c1:e0:a2:b2:e2:47:f6:b6:d0:42:b3:08:87:28: 20:b9:c9:e4:62:4c:dd:f8:08:c5:3c:4f:0c:ad:10:e5:23:d2: f4:ef:07:1a:10:71:92:59:70:1e:bf:d4:4a:86:18:25:bb:e3: cd:3a:29:84:64:ab:8e:65:3d:7e:4b:7e:67:8a:79:6d:12:ff: 1e:aa:a1:60:d1:fc:e9:f4:d9:a1:8c:7d:b5:b4:94:9c:e8:9c: f1:f7:0b:7d:50:10:54:5d:30:c1:fa:7a:bb:3e:bb:88:6a:04: 24:43:0a:9d:3b:c1:4e:35:c9:b4:9c:02:0a:ef:9d:bd:ca:de: 6c:61:78:1b:a1:5c:22:c1:41:2e:b3:32:b0:ad:f7:93:47:a5: 91:a8:ef:9e:29:8d:8d:a1:9a:73:d0:2c:e1:43:44:d5:6c:95: c1:a2:d1:57:5a:b7:92:44:71:75:53:03:0a:bc:27:16:30:8b: 3f:ab:0e:aa -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE55YoFLFlYRg1A0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk NjAzNzNjNjMtYThkNC00ZDU0LTljYWYtNGNkMjY0MGEwNjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokKbVnO88KIeYPD1KwMXyD+zVHOBQL61Y0QJ nxRrRN2MJXXuaAod2cLjUNY7xbQRDp77buePPMUO+BDSK13ewKwMkajZAelJnvu3 jqemkkrbMU0Pjs3xV4t/VyF0cq+EOm3oYjGUwdBoE7UfIuKxDHrlD3zn6grP/7ku y/bN6i54cEBRVcO1xzgaFCDWGXNPiZpinNWPZUAj7ZBiX79YoVPa7kFsXFyzW/LW Ju2ZWI6pNWJl6NFXs3YLiXuEd954dj7d4duR159cII5L/JpecgH6Y+bZ5VNjvZnp fFmsPjsd1RbN+iIIWYjBHZjqITePzQJk5X6Ps7GIcvaR/i8J8wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGdwlP9ImwNX2vbkbpiK8V9WGwx/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWFjMmEzOTQtZDY0Yy0z YmVkLTk1MTctNTZjMzVmOGZjM2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAFK1Ul7b6f9fF44JfUr7UD9KMXY0jJ71dOY9Mc pVYEv8yGchzcZAZMd/TSIeeqLQd25xh7JNDqrfg1rZ1yAaSNQK2R6xvHZZFO5Ff6 weCisuJH9rbQQrMIhyggucnkYkzd+AjFPE8MrRDlI9L07wcaEHGSWXAev9RKhhgl u+PNOimEZKuOZT1+S35ninltEv8eqqFg0fzp9NmhjH21tJSc6Jzx9wt9UBBUXTDB +nq7PruIagQkQwqdO8FONcm0nAIK7529yt5sYXgboVwiwUEuszKwrfeTR6WRqO+e KY2NoZpz0CzhQ0TVbJXBotFXWreSRHF1UwMKvCcWMIs/qw6q -----END CERTIFICATE-----Generated at Mon Oct 20 08:12:23 2025 by rpki-client