$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/452f9cf0-2d54-3e3c-b39e-92e08c51315f.roa File: 452f9cf0-2d54-3e3c-b39e-92e08c51315f.roa (raw, json) Hash identifier: /F5rrKbcZsS1vbSWvXO+QBQXorH2vMQEEivZwfjzp14= Subject key identifier: EE:83:93:C5:D6:E0:29:7A:56:20:C2:7F:39:A6:65:F1:6D:3E:55:66 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B84E78B179C435FE8551FC740 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/452f9cf0-2d54-3e3c-b39e-92e08c51315f.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 396561 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:8b:17:9c:43:5f:e8:55:1f:c7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=24e5d27c-eae3-4595-aa03-b47e74296d55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ac:2a:0f:47:88:8b:28:50:8d:9d:c4:01:a3: 15:d8:c1:15:2e:42:84:c3:49:5d:f6:6f:a3:10:3e: b8:dc:7c:75:6a:14:8c:34:34:ee:64:fd:f8:03:8c: 25:af:06:29:d8:dc:67:44:ef:5b:ca:63:a7:89:f0: c2:cc:a7:30:83:72:fd:26:a0:63:cf:6a:f0:36:05: d1:a0:6f:67:c7:d0:a6:d1:53:26:42:b0:81:4b:72: 98:4c:f1:5d:6a:e4:72:43:4d:7d:11:14:f1:38:c3: ed:ab:24:0f:30:43:58:8d:28:f6:6a:15:74:4c:91: 34:46:02:3d:b8:00:59:ca:a0:70:c7:27:88:f2:e3: 93:9b:61:6d:dc:cd:a6:a8:82:77:9f:f9:21:87:95: 7a:da:c1:1f:45:56:7c:a0:a6:7e:e3:51:88:9f:59: 89:a8:56:10:5f:13:cb:4d:3d:fb:96:60:52:94:d3: e7:b1:d0:02:fe:51:3b:0f:d1:95:79:c4:9e:5d:a4: 55:ff:8f:c7:d3:5f:30:90:68:e0:f2:21:e2:dc:26: 6b:6d:a8:b2:e2:26:91:f5:7a:dc:91:88:f3:71:19: f0:70:89:58:bf:f9:e3:f5:0f:b3:aa:90:be:94:57: aa:e0:84:5a:f4:57:fa:2d:11:d5:9c:fe:19:4c:15: 2b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:83:93:C5:D6:E0:29:7A:56:20:C2:7F:39:A6:65:F1:6D:3E:55:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/452f9cf0-2d54-3e3c-b39e-92e08c51315f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:3f:cb:1c:08:0b:21:68:96:2c:dd:28:d9:2c:e4:c2:e2:38: 25:78:a2:73:79:f2:d1:98:26:fc:73:7d:04:c4:1b:ba:74:02: 2a:86:93:ff:d9:2c:6c:49:e5:5a:b1:27:ab:ab:a4:56:e8:f7: 17:eb:ae:f2:b2:f5:ba:df:92:bf:66:85:13:f3:d8:8a:b3:4f: 96:93:58:7e:2a:ff:c7:c3:65:20:e3:92:10:71:44:d9:b8:b3: 69:ee:74:4f:ac:3d:fb:c5:43:45:1f:d4:31:2b:be:6e:a5:81: 25:1d:ec:fe:5b:6d:c9:07:3c:9d:55:dd:34:f6:f4:01:b2:6f: bb:b3:26:af:3c:84:a3:e0:54:dc:87:ee:2c:75:72:18:34:44: fc:e5:34:99:1a:dc:8a:9f:63:5f:ae:4c:78:81:16:e3:c5:48: a2:f1:09:35:2f:1a:6a:c1:03:aa:65:ef:c5:d6:c3:f9:b8:2b: 37:88:e8:f6:35:0f:cf:0b:a2:b9:76:0f:b5:4f:b1:95:27:c2: 82:dc:54:bd:44:11:8f:0a:34:72:e3:49:61:af:04:83:e1:d3: 50:99:e5:5a:cb:fa:11:d2:eb:ad:35:29:0d:d2:83:e2:bc:2a: 57:b3:07:ae:f3:e1:c7:44:16:1a:91:7f:5f:ca:70:84:0c:54: 2c:b3:39:d5 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE54sXnENf6FUfx0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk MjRlNWQyN2MtZWFlMy00NTk1LWFhMDMtYjQ3ZTc0Mjk2ZDU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKwqD0eIiyhQjZ3EAaMV2MEVLkKEw0ld9m+j ED643Hx1ahSMNDTuZP34A4wlrwYp2NxnRO9bymOnifDCzKcwg3L9JqBjz2rwNgXR oG9nx9Cm0VMmQrCBS3KYTPFdauRyQ019ERTxOMPtqyQPMENYjSj2ahV0TJE0RgI9 uABZyqBwxyeI8uOTm2Ft3M2mqIJ3n/khh5V62sEfRVZ8oKZ+41GIn1mJqFYQXxPL TT37lmBSlNPnsdAC/lE7D9GVecSeXaRV/4/H018wkGjg8iHi3CZrbaiy4iaR9Xrc kYjzcRnwcIlYv/nj9Q+zqpC+lFeq4IRa9Ff6LRHVnP4ZTBUrTQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFO6Dk8XW4Cl6ViDCfzmmZfFtPlVmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDUyZjljZjAtMmQ1NC0z ZTNjLWIzOWUtOTJlMDhjNTEzMTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBAP8scCAshaJYs3SjZLOTC4jgleKJzefLRmCb8 c30ExBu6dAIqhpP/2SxsSeVasSerq6RW6PcX667ysvW635K/ZoUT89iKs0+Wk1h+ Kv/Hw2Ug45IQcUTZuLNp7nRPrD37xUNFH9QxK75upYElHez+W23JBzydVd009vQB sm+7syavPISj4FTch+4sdXIYNET85TSZGtyKn2Nfrkx4gRbjxUii8Qk1LxpqwQOq Ze/F1sP5uCs3iOj2NQ/PC6K5dg+1T7GVJ8KC3FS9RBGPCjRy40lhrwSD4dNQmeVa y/oR0uutNSkN0oPivCpXsweu8+HHRBYakX9fynCEDFQssznV -----END CERTIFICATE-----Generated at Mon Oct 20 15:59:30 2025 by rpki-client