$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1f475bbe-f5df-3f83-a1a4-acf23a726ce4.roa File: 1f475bbe-f5df-3f83-a1a4-acf23a726ce4.roa (raw, json) Hash identifier: 0sF8ip+KndYJeHLvnts5AV3oo27Z5Fr4X9+Za/8ZMKs= Subject key identifier: 2F:A5:FD:7E:75:FC:46:AF:DA:47:72:AC:DD:08:AC:9A:CB:7A:5C:CC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B62022FE07150FE3EFA404300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1f475bbe-f5df-3f83-a1a4-acf23a726ce4.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 396574 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:2f:e0:71:50:fe:3e:fa:40:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=c74e5f37-a62b-4ffb-8e05-c9ec4b2748d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b5:47:a5:2c:91:25:e4:d2:dd:15:d5:76:b9: 4a:a5:29:9e:52:a5:f4:92:d0:98:d0:bf:f2:db:a2: d9:3b:14:d8:1b:27:4f:55:41:26:cf:63:95:c3:ab: 5c:2d:4d:80:0c:7d:83:98:ec:73:f1:71:71:c8:83: cd:80:94:34:7e:81:94:fb:18:25:3d:76:3d:8f:f0: a0:2f:14:c7:04:e3:1c:75:81:13:2f:55:4b:1d:17: db:5a:db:95:60:13:72:66:f1:9c:67:9e:cb:6d:d0: ed:9e:46:d1:7d:8f:b0:6a:0e:6b:c8:41:8e:0b:46: 84:bf:1b:02:64:30:45:5b:c6:28:b6:b0:bd:32:3e: 5f:3c:2d:9e:c0:6c:66:bc:e7:55:22:2b:97:a7:da: e6:18:34:20:85:52:22:97:8a:58:92:42:b8:73:52: 21:4a:f4:c6:84:cc:89:60:5b:62:47:2d:88:08:8f: 45:07:98:e4:af:7e:9b:30:e6:5e:c7:0c:b5:89:a2: b9:be:e5:95:3b:3f:81:34:d3:18:9d:a6:13:ba:84: 9e:5b:df:29:89:a9:4d:7a:29:ad:3a:8c:a9:c7:91: 48:5d:07:c5:85:07:1b:84:1e:fb:7c:56:08:7f:53: 14:0b:78:2a:9a:0d:fc:61:c9:27:0f:a9:6d:74:57: 0a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:A5:FD:7E:75:FC:46:AF:DA:47:72:AC:DD:08:AC:9A:CB:7A:5C:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1f475bbe-f5df-3f83-a1a4-acf23a726ce4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:52:45:91:72:63:a6:02:23:de:b4:df:fa:28:56:0a:e7:7f: 3a:eb:b6:da:65:96:4e:1a:81:4f:a5:82:58:6f:37:fe:72:f3: e4:d5:56:e7:e2:5c:50:c9:14:e9:65:53:ad:1b:f8:06:08:c9: 70:0e:c5:17:34:4b:64:fc:be:7c:64:90:8f:c8:d9:a0:57:cf: ee:61:c9:b4:a8:9a:be:11:a0:ef:be:ea:ca:86:d7:60:1e:14: 75:7e:7b:f1:7d:ff:73:55:48:64:53:b8:25:03:2a:d2:67:d5: 18:c3:93:c1:4f:a4:80:b6:3e:8e:ba:07:d4:c1:1a:52:42:f6: c3:da:86:ba:d2:3f:8d:a0:0c:52:0d:a2:c7:1c:d3:cf:b0:69: 43:1f:16:ce:20:bb:d3:b7:ad:07:c4:90:04:54:a9:25:fe:bf: 97:ff:e6:eb:28:57:89:9d:42:e2:24:21:be:1e:b8:b5:f6:8d: f6:69:78:3e:7b:8d:d5:ac:9c:08:42:4f:a2:2c:ca:fc:aa:d4: aa:bb:c2:62:4c:51:31:12:05:09:c5:62:97:3c:5c:9a:50:85: d8:03:6c:00:46:53:46:e8:2a:7c:8c:15:02:52:b9:7a:80:f1: 28:f2:cb:c7:2a:01:1e:b0:ae:f1:58:a5:76:e0:03:e2:d5:3a: f0:a1:fe:52 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAi/gcVD+PvpAQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk Yzc0ZTVmMzctYTYyYi00ZmZiLThlMDUtYzllYzRiMjc0OGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibVHpSyRJeTS3RXVdrlKpSmeUqX0ktCY0L/y 26LZOxTYGydPVUEmz2OVw6tcLU2ADH2DmOxz8XFxyIPNgJQ0foGU+xglPXY9j/Cg LxTHBOMcdYETL1VLHRfbWtuVYBNyZvGcZ57LbdDtnkbRfY+wag5ryEGOC0aEvxsC ZDBFW8YotrC9Mj5fPC2ewGxmvOdVIiuXp9rmGDQghVIil4pYkkK4c1IhSvTGhMyJ YFtiRy2ICI9FB5jkr36bMOZexwy1iaK5vuWVOz+BNNMYnaYTuoSeW98pialNeimt Ooypx5FIXQfFhQcbhB77fFYIf1MUC3gqmg38YcknD6ltdFcKwQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC+l/X51/Eav2kdyrN0IrJrLelzMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWY0NzViYmUtZjVkZi0z ZjgzLWExYTQtYWNmMjNhNzI2Y2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAdSRZFyY6YCI9603/ooVgrnfzrrttpllk4agU+lglhvN/5y8+TV VufiXFDJFOllU60b+AYIyXAOxRc0S2T8vnxkkI/I2aBXz+5hybSomr4RoO++6sqG 12AeFHV+e/F9/3NVSGRTuCUDKtJn1RjDk8FPpIC2Po66B9TBGlJC9sPahrrSP42g DFINoscc08+waUMfFs4gu9O3rQfEkARUqSX+v5f/5usoV4mdQuIkIb4euLX2jfZp eD57jdWsnAhCT6Isyvyq1Kq7wmJMUTESBQnFYpc8XJpQhdgDbABGU0boKnyMFQJS uXqA8Sjyy8cqAR6wrvFYpXbgA+LVOvCh/lI= -----END CERTIFICATE-----Generated at Mon Oct 20 08:06:52 2025 by rpki-client