$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4cee037e-2581-3264-9e76-963e4f5cc668.roa File: 4cee037e-2581-3264-9e76-963e4f5cc668.roa (raw, json) Hash identifier: nI21N3APJLDpkcW4Z8fnCY23jFRMPcw54PqkuVnxjmg= Subject key identifier: C1:F0:D1:46:54:0C:42:D5:A3:6B:07:D3:70:47:12:71:44:FB:A8:3C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B48E2101B661A0EAB5B06FE80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4cee037e-2581-3264-9e76-963e4f5cc668.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 32651 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:10:1b:66:1a:0e:ab:5b:06:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=cb2eb919-a562-47a5-bb4d-ee5ded96b668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:65:03:69:d0:49:28:ce:52:19:1a:44:e8:3d: b9:15:d6:e5:4d:98:06:37:57:75:54:5c:85:3f:f9: a1:52:63:fe:7c:b0:ab:ee:2a:7b:81:87:91:ef:b4: e0:2e:dc:0c:fd:ab:8a:c9:24:37:0d:22:6e:ff:cd: e3:63:e4:85:60:2d:75:e6:5c:9d:50:58:57:37:92: 96:1d:7d:96:68:3e:1a:75:67:73:af:ad:ea:6d:1e: 49:6b:13:7a:ae:c8:64:a9:bd:81:82:ce:dc:de:7c: f5:60:7a:b3:ac:06:a6:37:0f:48:0e:9c:d7:6a:50: fd:73:f1:b5:72:6c:05:84:dd:49:71:f7:f7:19:b1: b0:d1:ba:62:15:5b:73:40:bf:4e:04:95:ec:02:c3: 3c:e1:d7:ec:a0:e1:c5:c6:9b:79:40:f3:40:ef:a8: 3d:19:fb:47:e1:5f:72:fa:4b:93:c4:4d:4f:56:20: 65:f7:58:21:c5:d9:99:c2:ab:fe:a7:1c:d3:61:c9: 33:ed:7f:a3:bb:c9:45:fb:12:f4:91:cd:6e:11:eb: fa:d9:87:2c:b8:ad:8a:54:f8:98:5d:d5:a2:6a:62: 9a:dc:96:c8:e3:43:99:2b:7e:d8:19:c4:10:0d:da: aa:34:4d:0f:90:a1:95:1f:65:d4:03:a3:c7:9b:84: 1a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F0:D1:46:54:0C:42:D5:A3:6B:07:D3:70:47:12:71:44:FB:A8:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4cee037e-2581-3264-9e76-963e4f5cc668.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:fc:a1:01:47:32:15:67:d6:ad:e5:4e:ff:24:f9:47:45:fc: f5:b6:f6:69:c0:cd:de:bd:c9:81:f6:6f:3d:00:a0:97:26:c0: b0:e3:78:10:71:15:cf:96:75:4a:1d:16:76:51:e8:63:e4:b3: d6:2f:ad:51:c5:97:cb:69:5f:2d:3e:5b:8e:fb:5a:81:c1:f1: bc:c4:91:08:45:af:f3:c6:30:a3:ed:54:e6:32:da:60:7c:db: 6a:07:d8:17:4b:d7:ef:97:e3:30:56:c9:f0:19:a8:c6:43:a7: ec:34:01:b8:87:18:36:39:d7:30:de:8d:48:d6:80:1f:06:66: da:d6:7d:da:63:5c:71:3e:f1:21:2b:13:c3:5d:ee:7a:67:20: 3e:1c:c0:94:54:76:70:9f:2a:65:84:57:c7:46:c5:32:af:11: c2:4b:fc:e2:85:32:be:39:53:bf:21:ad:a0:df:62:25:fb:6f: b9:6a:84:e2:0e:f7:1d:23:d3:06:fa:7c:b9:7c:12:83:f5:76: 57:2b:f3:2c:13:5d:7a:cc:cf:57:8e:cf:f5:9d:86:15:ea:99: de:35:ce:d0:8c:ea:5c:b2:f2:d2:bd:9b:03:85:ca:81:f4:42: 7e:6a:93:f6:d9:12:6a:74:55:7a:a1:8b:45:06:fa:53:e2:75: 42:ab:55:f3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4hAbZhoOq1sG/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk Y2IyZWI5MTktYTU2Mi00N2E1LWJiNGQtZWU1ZGVkOTZiNjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGUDadBJKM5SGRpE6D25FdblTZgGN1d1VFyF P/mhUmP+fLCr7ip7gYeR77TgLtwM/auKySQ3DSJu/83jY+SFYC115lydUFhXN5KW HX2WaD4adWdzr63qbR5JaxN6rshkqb2Bgs7c3nz1YHqzrAamNw9IDpzXalD9c/G1 cmwFhN1Jcff3GbGw0bpiFVtzQL9OBJXsAsM84dfsoOHFxpt5QPNA76g9GftH4V9y +kuTxE1PViBl91ghxdmZwqv+pxzTYckz7X+ju8lF+xL0kc1uEev62YcsuK2KVPiY XdWiamKa3JbI40OZK37YGcQQDdqqNE0PkKGVH2XUA6PHm4Qa2QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMHw0UZUDELVo2sH03BHEnFE+6g8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGNlZTAzN2UtMjU4MS0z MjY0LTllNzYtOTYzZTRmNWNjNjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADf8oQFHMhVn1q3lTv8k+UdF/PW29mnAzd69yYH2bz0AoJcmwLDj eBBxFc+WdUodFnZR6GPks9YvrVHFl8tpXy0+W477WoHB8bzEkQhFr/PGMKPtVOYy 2mB822oH2BdL1++X4zBWyfAZqMZDp+w0AbiHGDY51zDejUjWgB8GZtrWfdpjXHE+ 8SErE8Nd7npnID4cwJRUdnCfKmWEV8dGxTKvEcJL/OKFMr45U78hraDfYiX7b7lq hOIO9x0j0wb6fLl8EoP1dlcr8ywTXXrMz1eOz/WdhhXqmd41ztCM6lyy8tK9mwOF yoH0Qn5qk/bZEmp0VXqhi0UG+lPidUKrVfM= -----END CERTIFICATE-----Generated at Mon Oct 20 13:06:12 2025 by rpki-client