$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4339716f-1035-3a93-8a86-6a2a6d14ef21.roa File: 4339716f-1035-3a93-8a86-6a2a6d14ef21.roa (raw, json) Hash identifier: BsIoO7VV47fMhFYdCjfuiqaAKZdNYr5+4YrBqRo78g0= Subject key identifier: 92:05:0B:76:4C:D4:E3:20:81:38:3E:D3:5A:35:9B:DF:87:75:64:99 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6201F5B08E39FDC670015BC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4339716f-1035-3a93-8a86-6a2a6d14ef21.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 396543 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:f5:b0:8e:39:fd:c6:70:01:5b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=ec481270-bf82-47dc-b473-1656ad6a4231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:28:a5:88:01:5c:3a:51:eb:ec:b4:1f:4c:9b: f4:6f:ad:71:1e:86:c1:0c:d9:96:ad:f3:1d:6f:d8: f9:d9:85:6e:c7:b0:e1:79:81:17:02:67:2f:8e:ee: 01:a0:53:b1:ce:02:f7:ca:50:d6:68:24:87:92:ce: e4:85:3f:15:60:a5:59:53:8b:51:97:1a:ea:d7:df: 28:c9:cc:ac:ee:33:ad:86:ba:68:4c:62:71:ad:9f: 7a:b4:5a:39:27:69:4b:36:86:46:e9:04:7d:47:d6: 1a:c7:0d:72:0d:c9:9b:05:9b:71:52:aa:9f:79:1b: e3:03:84:9c:18:93:bb:91:28:e3:fc:cb:45:51:73: 69:d1:b4:32:25:53:b6:d8:5e:69:04:12:cb:a6:33: 23:e7:0c:97:d9:fc:1f:d6:a3:e2:7b:31:80:36:4a: 84:00:8d:a3:87:75:fb:d3:29:b5:40:36:46:00:c1: 32:b9:b5:6c:58:22:ed:d0:82:0d:c9:eb:63:e5:e3: ee:55:d3:8e:26:c1:1c:dd:1c:56:e0:b5:d1:38:f2: 7a:be:2e:09:09:95:11:33:26:f0:07:ef:c4:de:80: e7:c3:51:6c:1b:09:c4:05:3d:df:5a:09:85:01:d1: f1:a2:9f:a4:74:45:da:c5:08:dc:e0:17:33:f6:15: 6e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:05:0B:76:4C:D4:E3:20:81:38:3E:D3:5A:35:9B:DF:87:75:64:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4339716f-1035-3a93-8a86-6a2a6d14ef21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:ee:45:15:74:c1:20:bb:f2:a3:18:64:45:34:7a:e6:28:44: 98:56:ef:1b:04:95:fd:06:26:ba:d2:60:e0:34:d1:35:ca:02: 8b:cd:ab:04:e8:67:d5:2e:64:f6:c8:ff:1d:a9:c9:48:c8:33: d4:4b:3c:01:68:65:0c:5f:2b:74:f1:b4:44:75:d9:21:17:29: c7:64:8e:2b:5a:18:b6:69:f7:f3:7e:c2:cf:b2:13:80:20:ea: 62:ac:4a:18:19:b3:6f:3a:21:7f:eb:21:69:93:6b:10:17:ac: 01:55:fe:ee:14:63:f7:be:15:1f:23:be:3c:b7:78:10:e3:4e: ed:76:b6:83:c6:a0:48:f4:c8:20:15:b9:24:89:55:1e:61:46: 68:78:04:34:03:83:a6:a6:69:0b:f4:49:4a:9c:57:c7:7b:3c: 03:95:c5:8d:95:9d:0c:4e:c3:fe:50:3d:0c:9f:85:18:6c:b0: b5:18:bb:3d:89:0f:21:9c:35:34:a0:60:ed:62:d9:0a:44:fb: 29:22:12:9e:31:c3:76:04:fe:31:c9:b6:8b:a5:32:0e:41:8b: 02:81:5a:5b:06:41:43:f4:a8:cd:ac:8f:65:2b:e9:08:3a:ff: 41:f1:27:3c:eb:f9:b5:4a:67:9d:2d:6b:62:00:a3:11:28:60: 8b:45:2e:95 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtiAfWwjjn9xnABW8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZWM0ODEyNzAtYmY4Mi00N2RjLWI0NzMtMTY1NmFkNmE0MjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCiliAFcOlHr7LQfTJv0b61xHobBDNmWrfMd b9j52YVux7DheYEXAmcvju4BoFOxzgL3ylDWaCSHks7khT8VYKVZU4tRlxrq198o ycys7jOthrpoTGJxrZ96tFo5J2lLNoZG6QR9R9Yaxw1yDcmbBZtxUqqfeRvjA4Sc GJO7kSjj/MtFUXNp0bQyJVO22F5pBBLLpjMj5wyX2fwf1qPiezGANkqEAI2jh3X7 0ym1QDZGAMEyubVsWCLt0IINyetj5ePuVdOOJsEc3RxW4LXROPJ6vi4JCZURMybw B+/E3oDnw1FsGwnEBT3fWgmFAdHxop+kdEXaxQjc4Bcz9hVuGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJIFC3ZM1OMggTg+01o1m9+HdWSZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDMzOTcxNmYtMTAzNS0z YTkzLThhODYtNmEyYTZkMTRlZjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADnuRRV0wSC78qMYZEU0euYoRJhW7xsElf0GJrrSYOA00TXKAovN qwToZ9UuZPbI/x2pyUjIM9RLPAFoZQxfK3TxtER12SEXKcdkjitaGLZp9/N+ws+y E4Ag6mKsShgZs286IX/rIWmTaxAXrAFV/u4UY/e+FR8jvjy3eBDjTu12toPGoEj0 yCAVuSSJVR5hRmh4BDQDg6amaQv0SUqcV8d7PAOVxY2VnQxOw/5QPQyfhRhssLUY uz2JDyGcNTSgYO1i2QpE+ykiEp4xw3YE/jHJtoulMg5BiwKBWlsGQUP0qM2sj2Ur 6Qg6/0HxJzzr+bVKZ50ta2IAoxEoYItFLpU= -----END CERTIFICATE-----Generated at Mon Oct 20 10:40:32 2025 by rpki-client