$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2dc5c1b6-0ae9-388d-a815-6302292992c9.roa File: 2dc5c1b6-0ae9-388d-a815-6302292992c9.roa (raw, json) Hash identifier: 7E6aG6exCS36lcZh/Ht103tHJBO18OOirdDVlGizQKQ= Subject key identifier: B3:66:37:36:EC:E3:73:7D:26:66:58:E0:05:ED:F9:E8:1A:3C:D1:B9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B48E1A90C67E86FFA90C4BB00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2dc5c1b6-0ae9-388d-a815-6302292992c9.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 396613 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:a9:0c:67:e8:6f:fa:90:c4:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=6eb24d94-f7eb-4686-a97c-b335410025e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:34:5f:e2:c7:b3:11:b3:7b:cb:fd:5b:c0:06: c6:8e:64:e8:70:f1:2e:14:99:d1:7f:2e:95:7b:b3: 93:04:39:12:f3:5d:c9:6e:1d:5d:d7:c8:f5:96:36: f4:ae:74:bc:af:58:38:74:5a:89:b4:79:93:db:94: 6c:21:55:02:e9:dd:70:75:4b:2e:de:6f:2d:5c:f0: 80:2a:49:f2:bb:35:5d:27:51:b6:b1:65:ce:4f:21: 36:9d:f6:db:ac:c0:d7:90:5f:07:ea:2b:df:03:02: ac:7a:17:03:d7:eb:1d:6b:f7:13:bf:95:6e:b7:d5: c1:bd:42:3f:91:3f:c3:31:47:10:65:39:c6:f0:9a: 2c:ec:4f:85:1e:07:3b:cb:cb:22:6d:c7:ce:4f:63: f5:0d:d9:fd:21:f8:53:07:d1:da:61:12:00:99:55: 09:47:d7:38:13:8b:d3:1d:8b:20:ac:41:8c:01:b5: 55:e6:27:65:d5:7e:fa:5c:75:87:a7:81:1a:78:7a: 39:73:6a:92:07:25:ee:c5:63:35:92:7b:d8:a3:e6: 90:13:35:97:6b:d0:7e:a0:62:cd:ed:c5:35:6b:ae: 9c:39:12:78:e1:f0:07:e8:dd:e8:21:26:39:90:eb: 6b:3a:61:47:1d:81:e8:63:41:6c:ba:96:8a:ed:0e: 33:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:66:37:36:EC:E3:73:7D:26:66:58:E0:05:ED:F9:E8:1A:3C:D1:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2dc5c1b6-0ae9-388d-a815-6302292992c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:41:4e:ee:1c:18:ad:f0:b1:b7:4b:b4:cb:2d:e8:72:82:d8: a0:a9:5a:8f:50:6b:d0:a1:b7:05:8a:c4:bb:fa:3d:20:9c:12: e4:c1:0f:b1:fa:16:5f:9d:b9:fe:84:f1:53:96:7f:ed:f6:4d: 0d:c5:85:d3:dd:43:a9:00:b2:5d:25:cf:ae:7a:9f:93:26:77: 1b:2c:88:ae:4b:b6:7c:85:e6:8e:d6:cc:62:41:96:bf:9f:f0: 02:0e:f9:12:28:81:18:56:93:1e:fc:d7:0a:33:4c:ae:ec:bd: ca:bb:16:bf:8f:c0:18:56:03:c2:4e:30:7a:24:09:6c:f7:48: fe:cc:aa:54:30:10:dc:8b:82:83:64:9c:3f:01:f1:94:95:90: 6f:cb:41:ee:b1:7b:4d:b7:3e:c4:af:7f:b1:29:86:f7:09:1f: 82:e4:9e:c3:b6:f9:e5:0a:c8:fa:1e:12:87:9a:26:ca:9d:d7: 9d:db:74:ab:c8:7c:fc:bb:9a:b1:b7:6e:17:39:e6:ce:2a:eb: ae:e7:52:07:50:40:5f:7c:2d:2f:dc:1d:96:87:0e:a9:7a:d5: e0:40:5c:e9:d3:b4:51:09:36:c5:ff:74:62:fc:4c:6c:ea:b5: 16:3e:99:d9:ba:22:fe:70:13:90:1a:fb:6a:4b:b5:25:0d:d1: 31:f4:4b:c5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4akMZ+hv+pDEuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk NmViMjRkOTQtZjdlYi00Njg2LWE5N2MtYjMzNTQxMDAyNWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jRf4sezEbN7y/1bwAbGjmTocPEuFJnRfy6V e7OTBDkS813Jbh1d18j1ljb0rnS8r1g4dFqJtHmT25RsIVUC6d1wdUsu3m8tXPCA KknyuzVdJ1G2sWXOTyE2nfbbrMDXkF8H6ivfAwKsehcD1+sda/cTv5Vut9XBvUI/ kT/DMUcQZTnG8Jos7E+FHgc7y8sibcfOT2P1Ddn9IfhTB9HaYRIAmVUJR9c4E4vT HYsgrEGMAbVV5idl1X76XHWHp4EaeHo5c2qSByXuxWM1knvYo+aQEzWXa9B+oGLN 7cU1a66cORJ44fAH6N3oISY5kOtrOmFHHYHoY0FsupaK7Q4zOwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLNmNzbs43N9JmZY4AXt+egaPNG5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmRjNWMxYjYtMGFlOS0z ODhkLWE4MTUtNjMwMjI5Mjk5MmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHZBTu4cGK3wsbdLtMst6HKC2KCpWo9Qa9ChtwWKxLv6PSCcEuTB D7H6Fl+duf6E8VOWf+32TQ3FhdPdQ6kAsl0lz656n5MmdxssiK5LtnyF5o7WzGJB lr+f8AIO+RIogRhWkx781wozTK7svcq7Fr+PwBhWA8JOMHokCWz3SP7MqlQwENyL goNknD8B8ZSVkG/LQe6xe023PsSvf7EphvcJH4LknsO2+eUKyPoeEoeaJsqd153b dKvIfPy7mrG3bhc55s4q667nUgdQQF98LS/cHZaHDql61eBAXOnTtFEJNsX/dGL8 TGzqtRY+mdm6Iv5wE5Aa+2pLtSUN0TH0S8U= -----END CERTIFICATE-----Generated at Mon Oct 20 10:28:40 2025 by rpki-client