$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/31273230-b169-3645-8de6-f0cec455218f.roa File: 31273230-b169-3645-8de6-f0cec455218f.roa (raw, json) Hash identifier: RWnA0TkYp34Z2y2/C3CZ09OWrYzvQ8Y3dcXiV8HOrfQ= Subject key identifier: 76:C7:4B:AF:3F:85:36:82:87:44:68:46:54:56:86:31:1D:9F:CD:BE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E79763140D059762A8C880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/31273230-b169-3645-8de6-f0cec455218f.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 396547 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:97:63:14:0d:05:97:62:a8:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=7a717efa-3a54-4c7c-bb89-6e6463e81334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:95:6e:63:91:fe:18:84:f5:cb:62:b3:ed:ce: 5d:0f:d6:1f:40:e0:26:52:e3:a8:0f:e9:d5:16:73: 1a:d9:61:78:ce:04:1c:2c:4e:7a:4a:35:43:74:3a: 96:d9:19:d4:bc:c9:6f:c0:f4:c7:19:92:e7:62:1c: 42:56:18:48:d7:eb:78:21:78:03:20:55:5e:18:9e: 83:36:92:e0:66:74:23:86:f7:4b:6b:c6:e6:44:9e: ab:af:8f:8c:80:51:8e:2a:79:29:da:20:3b:cf:43: 3e:f8:9f:30:b4:0e:51:a3:78:a7:bf:6e:f8:07:f2: 6a:30:6f:a9:e1:ac:a9:93:14:d8:e6:f9:0f:14:66: 57:b8:4e:e0:49:d2:40:2f:57:df:a6:68:16:15:80: 08:dc:b5:96:3d:97:8c:84:e4:91:50:cc:a4:f1:21: 9b:2b:25:aa:46:c2:4c:a7:00:a6:33:b7:1b:2d:4a: 13:9a:b1:6c:54:96:40:70:a7:dd:09:0e:59:2e:ff: 41:cc:90:44:de:08:cf:27:e1:f3:5b:ca:d5:8e:9b: fb:79:88:82:a3:c1:e3:b0:df:41:ea:31:e0:f3:ac: a2:48:5c:ab:5c:9c:ea:6f:72:3d:68:16:c8:2c:24: b6:f0:a0:52:46:dc:57:77:92:fb:ae:86:e8:78:10: e7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:C7:4B:AF:3F:85:36:82:87:44:68:46:54:56:86:31:1D:9F:CD:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/31273230-b169-3645-8de6-f0cec455218f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:6d:92:f3:86:ba:26:30:19:33:1d:64:02:d3:0b:a6:20:34: fd:c9:f7:2f:d9:3b:43:9a:57:f2:3f:1b:28:c0:c5:6a:36:48: 20:fa:22:5d:94:97:87:f0:08:d4:13:4b:18:47:30:86:5a:e4: 92:b9:64:60:ff:e8:61:67:64:39:4a:cd:93:1e:1f:71:0e:42: 7e:14:b7:29:2e:f8:c6:53:c3:41:c0:e2:46:c3:e0:45:c7:cc: a6:d0:ad:d1:ea:c5:09:72:7e:65:27:48:f0:1a:e8:4f:52:6c: a5:99:00:3c:81:a3:6d:e6:25:6c:1a:f5:44:2f:cc:54:cd:b9: cc:49:4a:0e:68:e0:39:d7:13:8b:7a:04:6a:a1:79:35:be:0b: 02:23:20:9e:dc:39:3f:b5:e1:25:c2:b5:16:6c:90:55:db:6a: af:d8:82:5e:b4:38:45:d7:9f:1b:cb:c8:bb:54:cb:5f:e3:aa: 93:ef:16:ba:8d:6a:e7:53:19:5f:ea:3e:39:e5:06:0f:6c:69: 73:39:65:19:63:86:00:cd:df:6f:40:cc:77:d3:aa:6c:8d:a4: 89:4e:6f:40:b4:b1:9c:0e:6f:5e:11:34:3b:f7:db:0a:36:2a: 14:46:42:0a:4f:94:00:b2:f0:fd:85:e3:a6:8a:73:4b:10:40: e6:3d:96:46 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE55djFA0Fl2KoyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk N2E3MTdlZmEtM2E1NC00YzdjLWJiODktNmU2NDYzZTgxMzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZVuY5H+GIT1y2Kz7c5dD9YfQOAmUuOoD+nV FnMa2WF4zgQcLE56SjVDdDqW2RnUvMlvwPTHGZLnYhxCVhhI1+t4IXgDIFVeGJ6D NpLgZnQjhvdLa8bmRJ6rr4+MgFGOKnkp2iA7z0M++J8wtA5Ro3inv274B/JqMG+p 4aypkxTY5vkPFGZXuE7gSdJAL1ffpmgWFYAI3LWWPZeMhOSRUMyk8SGbKyWqRsJM pwCmM7cbLUoTmrFsVJZAcKfdCQ5ZLv9BzJBE3gjPJ+HzW8rVjpv7eYiCo8HjsN9B 6jHg86yiSFyrXJzqb3I9aBbILCS28KBSRtxXd5L7roboeBDnqQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHbHS68/hTaCh0RoRlRWhjEdn82+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzEyNzMyMzAtYjE2OS0z NjQ1LThkZTYtZjBjZWM0NTUyMThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA9bZLzhromMBkzHWQC0wumIDT9yfcv2TtDmlfy PxsowMVqNkgg+iJdlJeH8AjUE0sYRzCGWuSSuWRg/+hhZ2Q5Ss2THh9xDkJ+FLcp LvjGU8NBwOJGw+BFx8ym0K3R6sUJcn5lJ0jwGuhPUmylmQA8gaNt5iVsGvVEL8xU zbnMSUoOaOA51xOLegRqoXk1vgsCIyCe3Dk/teElwrUWbJBV22qv2IJetDhF158b y8i7VMtf46qT7xa6jWrnUxlf6j455QYPbGlzOWUZY4YAzd9vQMx306psjaSJTm9A tLGcDm9eETQ799sKNioURkIKT5QAsvD9heOminNLEEDmPZZG -----END CERTIFICATE-----Generated at Mon Oct 20 10:38:38 2025 by rpki-client