$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/711c59b2-beb5-3fae-9fc5-735ab21a2ac0.roa File: 711c59b2-beb5-3fae-9fc5-735ab21a2ac0.roa (raw, json) Hash identifier: DxXjVZC1bPvkM5ymNEIgDYrijUSg0S+1xHDDV6nDjS0= Subject key identifier: 86:DA:40:CA:FE:46:70:DF:5C:C7:EF:9A:3C:74:A9:11:D8:9A:8D:69 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B48E1BBB9BD6369B26F08C600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/711c59b2-beb5-3fae-9fc5-735ab21a2ac0.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 396586 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:bb:b9:bd:63:69:b2:6f:08:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=6f2d2baa-fe50-4389-bed0-155fe9c04f1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cc:79:55:08:b1:b7:83:10:28:67:a9:cc:1a: 20:b9:6b:26:af:b0:0e:3b:4c:63:0f:72:03:68:22: f4:50:b6:c1:8d:be:44:1c:9f:26:74:26:87:23:39: 57:a9:6d:89:66:00:15:6c:59:59:05:c7:f5:a2:e9: 53:c6:bc:db:e4:a9:91:fa:35:87:60:3c:88:70:d1: 06:10:fc:95:87:0f:2a:12:ee:b3:9e:bb:41:6c:d9: 77:bd:cb:b4:cc:95:e2:21:ec:e7:c6:f3:f5:54:4c: 42:76:65:e2:8f:a7:b9:0b:bf:37:f2:25:26:67:23: 51:8a:5f:4b:61:b9:60:a8:5d:15:b8:42:d8:62:a8: b7:d2:80:3d:80:5b:23:8d:10:c6:77:a1:56:30:bc: 42:b3:75:95:79:40:33:e4:0d:87:f7:61:40:55:f2: ab:ff:6a:0a:ee:77:ed:62:9e:06:5d:e2:eb:1e:74: 57:b7:29:4c:53:05:43:dd:e8:87:1b:71:60:0c:b1: 24:07:51:3e:35:25:50:1b:ed:8e:a3:55:4d:02:90: 3e:f7:17:d2:c0:18:46:37:63:f6:d6:91:31:d7:01: c9:f4:f9:b6:85:7a:02:8e:0f:48:c5:b6:f3:76:6c: 45:54:7c:3f:5f:4b:27:56:f9:88:12:92:a3:e6:d0: e6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:DA:40:CA:FE:46:70:DF:5C:C7:EF:9A:3C:74:A9:11:D8:9A:8D:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/711c59b2-beb5-3fae-9fc5-735ab21a2ac0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:d7:4a:a8:e3:71:ce:b3:eb:90:5e:6e:04:77:45:64:5d:9f: 94:f2:b3:eb:af:76:e2:fa:41:85:27:7a:d4:38:76:90:84:f8: 4a:29:71:1c:47:3c:77:b1:6c:a1:4f:9b:6f:77:7c:3d:f8:50: e4:54:a1:53:e6:85:84:f3:bb:84:3a:e1:86:d3:c4:5f:3c:0f: 1a:80:9b:c1:d7:b3:25:34:13:f1:3d:85:92:ef:49:55:b3:73: 58:da:27:e7:94:d6:9d:10:86:3b:f8:f8:82:11:29:94:52:99: 4c:47:e8:a9:8e:df:8a:5d:85:6a:b6:cd:70:93:59:76:ca:7d: e1:92:18:a2:d3:a0:e7:8d:65:2c:da:38:8d:6b:3b:4b:b2:17: 0f:d6:5b:ca:70:58:10:2c:2e:cb:2f:f7:0b:0f:16:0b:15:40: f2:52:65:83:0f:3d:1c:1f:31:7c:19:ce:9a:61:cc:22:36:85: 37:8b:b7:f5:a6:c2:53:ad:2d:e0:64:f2:52:3e:48:19:e3:f3: 59:29:10:b5:16:4c:8d:5c:3c:74:66:08:bd:71:b9:7f:f6:34: a4:e0:e2:e8:f1:4e:27:d8:35:0c:15:05:b8:89:29:68:1e:e6: 96:59:b1:5d:1e:ac:44:40:1c:67:ae:bb:5e:18:1b:27:49:d3: 60:47:1e:e7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4bu5vWNpsm8IxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk NmYyZDJiYWEtZmU1MC00Mzg5LWJlZDAtMTU1ZmU5YzA0ZjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMx5VQixt4MQKGepzBoguWsmr7AOO0xjD3ID aCL0ULbBjb5EHJ8mdCaHIzlXqW2JZgAVbFlZBcf1oulTxrzb5KmR+jWHYDyIcNEG EPyVhw8qEu6znrtBbNl3vcu0zJXiIeznxvP1VExCdmXij6e5C7838iUmZyNRil9L YblgqF0VuELYYqi30oA9gFsjjRDGd6FWMLxCs3WVeUAz5A2H92FAVfKr/2oK7nft Yp4GXeLrHnRXtylMUwVD3eiHG3FgDLEkB1E+NSVQG+2Oo1VNApA+9xfSwBhGN2P2 1pEx1wHJ9Pm2hXoCjg9IxbbzdmxFVHw/X0snVvmIEpKj5tDm4wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIbaQMr+RnDfXMfvmjx0qRHYmo1pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzExYzU5YjItYmViNS0z ZmFlLTlmYzUtNzM1YWIyMWEyYWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFzXSqjjcc6z65BebgR3RWRdn5Tys+uvduL6QYUnetQ4dpCE+Eop cRxHPHexbKFPm293fD34UORUoVPmhYTzu4Q64YbTxF88DxqAm8HXsyU0E/E9hZLv SVWzc1jaJ+eU1p0Qhjv4+IIRKZRSmUxH6KmO34pdhWq2zXCTWXbKfeGSGKLToOeN ZSzaOI1rO0uyFw/WW8pwWBAsLssv9wsPFgsVQPJSZYMPPRwfMXwZzpphzCI2hTeL t/WmwlOtLeBk8lI+SBnj81kpELUWTI1cPHRmCL1xuX/2NKTg4ujxTifYNQwVBbiJ KWge5pZZsV0erERAHGeuu14YGydJ02BHHuc= -----END CERTIFICATE-----Generated at Mon Oct 20 08:16:41 2025 by rpki-client