$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/59158cff-9c0b-3136-912a-af20996d6dd6.roa File: 59158cff-9c0b-3136-912a-af20996d6dd6.roa (raw, json) Hash identifier: RU1OyoQAMsQD+ll61T0MfFqYBdm9eE7QVLdXXyh6bks= Subject key identifier: 42:F9:E9:7B:47:ED:3B:28:96:E6:44:75:73:66:98:E8:81:A9:37:66 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B715CE6F7861B8DB92893E780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/59158cff-9c0b-3136-912a-af20996d6dd6.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 396560 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:e6:f7:86:1b:8d:b9:28:93:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=72e8495d-356c-467d-b324-9ce7c2538b12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e8:c1:97:88:87:24:b4:da:3d:d4:0e:f1:27: 67:28:c5:cb:bb:32:11:4a:22:8c:0e:57:73:2a:a9: bd:91:05:04:1d:61:d4:d4:b8:cb:a8:f2:e6:0f:66: 41:18:50:e9:ef:0d:23:be:76:92:a5:50:bb:9c:00: 03:7d:14:c1:56:38:59:94:ab:a2:54:32:02:d9:22: 82:f1:91:af:dc:2f:72:9f:62:47:17:9b:0e:60:e2: 5a:8d:40:9e:44:bb:88:2b:a5:97:4a:16:81:e9:70: bc:94:90:16:ee:ea:d0:33:99:cd:97:69:02:a9:62: dd:2b:df:e1:f4:ed:72:b0:56:bc:1a:f1:b8:b0:75: 29:a1:24:45:0f:56:8a:1b:8d:f4:d0:2e:c4:76:5a: 2c:09:99:bb:51:de:b6:ce:a8:0e:e1:a6:72:30:c9: 92:2a:b6:de:a2:57:fb:44:73:a6:ec:67:ec:a4:c7: 20:56:6c:09:5d:cd:e9:3e:00:05:25:4d:16:61:80: 40:ae:8e:58:e3:37:b2:4c:97:80:28:51:0f:65:d9: e6:9d:b9:d8:94:99:81:11:c6:8e:ed:4d:ad:78:0d: 15:97:75:56:d6:a7:e8:4f:cb:5d:3c:8c:f5:c9:76: 4f:d7:66:da:4d:92:64:9d:f5:0f:ef:ca:8d:7e:c3: 89:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F9:E9:7B:47:ED:3B:28:96:E6:44:75:73:66:98:E8:81:A9:37:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/59158cff-9c0b-3136-912a-af20996d6dd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:2a:75:bd:8d:38:ba:4b:81:0a:c3:58:3f:d1:0c:c2:dc:b9: 04:71:1d:b3:61:a8:17:69:66:6d:6f:c5:1e:6d:fe:e8:96:d0: ae:8a:49:8f:86:f2:90:ef:20:f5:58:83:45:e1:a1:81:14:56: 96:af:3c:fd:a7:62:82:cb:46:f3:a6:02:04:47:7a:d8:bd:5b: f0:f3:dd:25:89:6e:ec:b0:59:f5:f2:14:0e:58:c2:db:8e:7b: ff:45:96:36:1a:0d:b1:a2:62:dc:10:e2:f1:46:0d:58:ec:99: ee:f7:29:aa:c8:14:fa:fd:ee:05:4e:00:83:73:24:fe:d7:7e: fa:7b:b3:c6:84:7d:b2:59:cc:92:9d:83:f7:0b:1f:f6:0f:de: ed:6c:fc:fa:56:df:ad:ea:3b:34:cd:fd:4e:4e:6f:af:b6:10: e9:a9:86:87:21:7e:f0:df:fe:b3:56:57:de:0e:4d:54:46:3d: 88:f1:d3:d1:5b:75:d6:43:5e:86:65:0b:8d:79:bc:56:0a:2f: da:d9:77:67:7e:1d:e4:85:23:81:09:02:21:ca:af:d5:fb:d8: 0c:d1:59:93:8c:69:55:50:fc:e5:29:20:b4:63:77:bb:13:90: de:95:87:ec:6a:70:2d:f7:66:48:00:e6:6a:6d:60:ba:37:f1: be:06:83:28 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtxXOb3hhuNuSiT54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NzJlODQ5NWQtMzU2Yy00NjdkLWIzMjQtOWNlN2MyNTM4YjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqejBl4iHJLTaPdQO8SdnKMXLuzIRSiKMDldz Kqm9kQUEHWHU1LjLqPLmD2ZBGFDp7w0jvnaSpVC7nAADfRTBVjhZlKuiVDIC2SKC 8ZGv3C9yn2JHF5sOYOJajUCeRLuIK6WXShaB6XC8lJAW7urQM5nNl2kCqWLdK9/h 9O1ysFa8GvG4sHUpoSRFD1aKG4300C7EdlosCZm7Ud62zqgO4aZyMMmSKrbeolf7 RHOm7GfspMcgVmwJXc3pPgAFJU0WYYBAro5Y4zeyTJeAKFEPZdnmnbnYlJmBEcaO 7U2teA0Vl3VW1qfoT8tdPIz1yXZP12baTZJknfUP78qNfsOJOwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEL56XtH7TsoluZEdXNmmOiBqTdmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTkxNThjZmYtOWMwYi0z MTM2LTkxMmEtYWYyMDk5NmQ2ZGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCGKnW9jTi6S4EKw1g/0QzC3LkEcR2zYagXaWZt b8Uebf7oltCuikmPhvKQ7yD1WINF4aGBFFaWrzz9p2KCy0bzpgIER3rYvVvw890l iW7ssFn18hQOWMLbjnv/RZY2Gg2xomLcEOLxRg1Y7Jnu9ymqyBT6/e4FTgCDcyT+ 1376e7PGhH2yWcySnYP3Cx/2D97tbPz6Vt+t6js0zf1OTm+vthDpqYaHIX7w3/6z VlfeDk1URj2I8dPRW3XWQ16GZQuNebxWCi/a2Xdnfh3khSOBCQIhyq/V+9gM0VmT jGlVUPzlKSC0Y3e7E5DelYfsanAt92ZIAOZqbWC6N/G+BoMo -----END CERTIFICATE-----Generated at Mon Oct 20 13:25:07 2025 by rpki-client