$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/68965c62-5420-328c-98c0-645cdde1957d.roa File: 68965c62-5420-328c-98c0-645cdde1957d.roa (raw, json) Hash identifier: 6LOs+p80XX6E908QJwrA6WChO1TS7tPd5sZf08HcQ18= Subject key identifier: 26:4C:0D:B1:78:1A:0A:4B:62:6A:84:3C:DA:41:0D:E5:4A:D9:4B:C6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B3557005EC6F94F779657C0C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/68965c62-5420-328c-98c0-645cdde1957d.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 36625 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:57:00:5e:c6:f9:4f:77:96:57:c0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=2bd54467-9a0b-445f-ad22-d7b779f36890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:dd:13:b8:43:da:bf:ff:e5:d1:83:dd:72:b2: 77:ad:cf:95:2a:92:ef:58:54:ea:02:ce:e1:01:19: e7:65:0c:a4:f3:bd:23:27:82:81:b9:48:52:66:d8: 20:1b:8a:ad:77:d3:c0:54:25:92:ec:46:6c:98:67: 2a:0e:75:d4:d0:56:8d:fb:0f:28:73:1f:70:73:bc: 1d:1e:09:59:9d:33:2a:fc:b2:99:e3:02:26:53:74: 43:62:e8:72:3f:73:43:2a:84:73:91:9c:44:ef:02: b4:7b:48:db:ed:2c:c3:89:48:fb:f0:c6:cd:61:fa: dc:b7:14:c6:54:d5:b9:db:f8:e7:7a:77:75:02:4b: 9f:ac:fa:64:57:93:ef:ec:79:57:1f:02:60:af:2d: 8e:27:e4:f8:6b:3b:bb:ce:89:f8:b9:19:6d:67:d1: 7b:a5:fa:92:7e:a3:e9:fa:5b:c1:a3:86:a6:d2:a9: e4:8d:03:51:4c:94:6f:08:16:a7:79:3a:10:06:8d: d7:5f:d3:46:f7:ae:93:26:35:0d:09:74:23:5a:c1: 5e:b3:07:ad:42:c7:b6:ad:6a:12:9e:9a:d9:1f:99: 2e:c8:ca:13:3f:ff:ce:7d:42:e9:a4:6a:e7:38:d3: 68:45:fb:e1:3e:61:93:b0:d9:99:57:bb:12:d3:5f: 82:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:4C:0D:B1:78:1A:0A:4B:62:6A:84:3C:DA:41:0D:E5:4A:D9:4B:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/68965c62-5420-328c-98c0-645cdde1957d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:ec:ae:a9:9f:ed:e0:33:8c:39:64:bf:4f:1a:8d:74:9f:61: 73:c5:3f:47:48:46:ee:fe:58:e0:9f:c3:29:4d:c9:91:e0:5e: 43:ea:8f:92:22:c7:2c:45:91:08:4c:f6:0f:fd:41:41:73:77: 5d:26:da:ea:4a:dc:08:3e:13:84:cf:8a:b8:96:c9:2e:db:cd: 80:59:34:ca:db:1b:53:39:bd:ce:fd:00:17:59:c6:24:94:2e: 8c:1c:1e:45:b9:eb:4c:66:70:3d:d3:b2:2d:f0:35:13:d9:fb: 72:25:8b:2b:1f:d0:0d:d0:93:67:2c:29:e6:d3:9d:e4:69:fc: 53:41:98:2d:f2:36:fb:b9:04:99:24:22:9c:49:32:82:ac:78: bd:30:ee:3d:dd:5e:e9:a0:61:29:6d:99:34:74:0c:d4:4e:e1: 94:1d:65:68:97:d3:74:a8:0f:88:98:f9:d9:f8:15:54:ee:89: 16:de:a1:54:39:a2:a7:05:c5:3b:4a:27:80:37:0e:f0:0c:79: 82:21:5a:01:9a:28:20:f7:c3:0f:33:7b:8f:cf:be:86:8e:ca: 8d:6a:ce:f6:9a:28:b6:8c:5d:a3:e9:2d:27:48:eb:74:ae:cb: 7d:10:ee:36:e3:16:49:64:cf:d7:51:4e:bd:fa:4e:51:96:60: 2d:d9:8a:e4 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEs1VwBexvlPd5ZXwMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk MmJkNTQ0NjctOWEwYi00NDVmLWFkMjItZDdiNzc5ZjM2ODkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAid0TuEPav//l0YPdcrJ3rc+VKpLvWFTqAs7h ARnnZQyk870jJ4KBuUhSZtggG4qtd9PAVCWS7EZsmGcqDnXU0FaN+w8ocx9wc7wd HglZnTMq/LKZ4wImU3RDYuhyP3NDKoRzkZxE7wK0e0jb7SzDiUj78MbNYfrctxTG VNW52/jnend1AkufrPpkV5Pv7HlXHwJgry2OJ+T4azu7zon4uRltZ9F7pfqSfqPp +lvBo4am0qnkjQNRTJRvCBaneToQBo3XX9NG966TJjUNCXQjWsFeswetQse2rWoS nprZH5kuyMoTP//OfULppGrnONNoRfvhPmGTsNmZV7sS01+CAQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCZMDbF4GgpLYmqEPNpBDeVK2UvGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjg5NjVjNjItNTQyMC0z MjhjLTk4YzAtNjQ1Y2RkZTE5NTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA37K6pn+3gM4w5ZL9PGo10n2FzxT9HSEbu/ljg n8MpTcmR4F5D6o+SIscsRZEITPYP/UFBc3ddJtrqStwIPhOEz4q4lsku282AWTTK 2xtTOb3O/QAXWcYklC6MHB5FuetMZnA907It8DUT2ftyJYsrH9AN0JNnLCnm053k afxTQZgt8jb7uQSZJCKcSTKCrHi9MO493V7poGEpbZk0dAzUTuGUHWVol9N0qA+I mPnZ+BVU7okW3qFUOaKnBcU7SieANw7wDHmCIVoBmigg98MPM3uPz76GjsqNas72 mii2jF2j6S0nSOt0rst9EO424xZJZM/XUU69+k5RlmAt2Yrk -----END CERTIFICATE-----Generated at Mon Oct 20 10:25:13 2025 by rpki-client