$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7a74a651-0e7a-317e-837f-7b4ae1b60400.roa File: 7a74a651-0e7a-317e-837f-7b4ae1b60400.roa (raw, json) Hash identifier: DTameWXhF1YDfJJU7rwVmZm/mwvIUHz2jHQtjiJFDEQ= Subject key identifier: 7B:AA:5A:46:4B:3E:87:99:A4:A7:41:0F:21:F0:44:FB:79:8D:3F:46 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B715CE7388C75BC7EE4BFC8C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7a74a651-0e7a-317e-837f-7b4ae1b60400.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 396614 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:e7:38:8c:75:bc:7e:e4:bf:c8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=47bcfa4b-ce2b-4542-a08c-35359bb5b0e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:fd:af:41:d3:09:8e:79:45:38:b8:db:90:bd: e6:28:c0:d1:78:f0:78:2b:9b:d2:1f:cc:b4:df:ec: de:df:62:24:61:c9:b5:07:8a:4f:79:8a:4b:e8:86: 89:da:4d:b8:e2:e4:26:29:aa:a9:b1:0e:2b:68:73: f2:18:1a:2a:78:40:8f:8a:a0:32:f8:ad:58:22:fc: 87:79:6b:a7:3e:48:f8:08:33:6d:3f:c0:a1:2e:e1: 7a:ba:e2:e0:45:18:45:d3:15:17:79:f0:9f:5e:a8: 8f:6b:52:ee:2e:04:6f:5f:c6:ec:98:f1:13:dd:35: 3e:aa:a6:8d:03:e1:d4:99:f8:8a:00:9d:ad:a2:4b: 04:82:36:d0:f6:f3:b4:88:39:66:41:36:ce:4b:9c: 0b:99:18:8b:42:c1:90:91:ed:bb:e9:5f:6b:8a:71: 41:bd:33:ad:e6:02:63:eb:35:5a:84:7d:b1:d3:96: 47:08:d3:e0:c7:a8:cf:bd:18:69:37:c5:be:a7:35: 80:5d:75:b2:5b:0b:22:2a:7e:eb:ae:44:da:19:3a: 7f:74:85:f6:8c:53:aa:3a:e4:3a:92:de:8f:31:b2: e2:8a:a4:0c:8e:ef:7e:da:fd:88:16:a1:57:05:bc: 5f:fd:8a:6b:84:8f:97:d8:6b:00:39:13:01:8a:97: b9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:AA:5A:46:4B:3E:87:99:A4:A7:41:0F:21:F0:44:FB:79:8D:3F:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7a74a651-0e7a-317e-837f-7b4ae1b60400.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:f2:59:f5:e8:fd:82:9d:d2:61:a9:bb:93:bc:28:b4:f3:9e: da:88:a6:5b:1e:ff:1c:09:24:7a:c0:95:c1:8d:77:f4:8a:0b: 34:ed:e0:37:a5:4b:ab:f4:b6:2c:af:58:49:58:9f:f3:91:5a: 7b:4f:1a:e4:3b:a9:c9:c6:e3:b0:74:cc:f8:dd:53:77:e5:06: df:bb:40:ef:d7:c4:ae:a0:83:a5:2c:02:73:f8:e1:35:86:71: 14:50:c8:8c:68:35:f4:c5:79:bb:cc:73:c5:cc:0c:08:65:fc: ad:bb:15:ab:9c:eb:dc:b6:b2:75:7e:d1:ac:c9:1e:65:00:cd: 71:a2:83:79:23:a8:6b:37:67:36:e5:66:6c:47:40:34:6f:0a: d0:ae:f0:ac:5c:6b:1a:95:d4:4e:bf:b9:e0:df:83:2a:86:3f: 60:65:13:cc:6c:0f:ca:15:12:a3:c9:df:32:91:4d:98:43:a8: b7:37:2b:6a:ad:9b:47:c1:6c:69:6a:ca:8e:aa:36:aa:92:c3: af:14:36:9d:09:87:2c:d2:72:61:ea:3a:5f:f2:2b:ff:f1:e3: 4d:c0:46:71:5f:40:25:fe:e3:02:b9:20:dd:c9:a4:6f:6a:ef: 6e:3f:23:c9:eb:7c:9a:c8:c7:08:a7:f4:ff:67:b3:20:d5:ff: ec:d7:1d:25 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtxXOc4jHW8fuS/yMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NDdiY2ZhNGItY2UyYi00NTQyLWEwOGMtMzUzNTliYjViMGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAif2vQdMJjnlFOLjbkL3mKMDRePB4K5vSH8y0 3+ze32IkYcm1B4pPeYpL6IaJ2k244uQmKaqpsQ4raHPyGBoqeECPiqAy+K1YIvyH eWunPkj4CDNtP8ChLuF6uuLgRRhF0xUXefCfXqiPa1LuLgRvX8bsmPET3TU+qqaN A+HUmfiKAJ2toksEgjbQ9vO0iDlmQTbOS5wLmRiLQsGQke276V9rinFBvTOt5gJj 6zVahH2x05ZHCNPgx6jPvRhpN8W+pzWAXXWyWwsiKn7rrkTaGTp/dIX2jFOqOuQ6 kt6PMbLiiqQMju9+2v2IFqFXBbxf/YprhI+X2GsAORMBipe5sQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHuqWkZLPoeZpKdBDyHwRPt5jT9GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvN2E3NGE2NTEtMGU3YS0z MTdlLTgzN2YtN2I0YWUxYjYwNDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA48ln16P2CndJhqbuTvCi0857aiKZbHv8cCSR6 wJXBjXf0igs07eA3pUur9LYsr1hJWJ/zkVp7TxrkO6nJxuOwdMz43VN35Qbfu0Dv 18SuoIOlLAJz+OE1hnEUUMiMaDX0xXm7zHPFzAwIZfytuxWrnOvctrJ1ftGsyR5l AM1xooN5I6hrN2c25WZsR0A0bwrQrvCsXGsaldROv7ng34Mqhj9gZRPMbA/KFRKj yd8ykU2YQ6i3NytqrZtHwWxpasqOqjaqksOvFDadCYcs0nJh6jpf8iv/8eNNwEZx X0Al/uMCuSDdyaRvau9uPyPJ63yayMcIp/T/Z7Mg1f/s1x0l -----END CERTIFICATE-----Generated at Mon Oct 20 10:26:05 2025 by rpki-client