$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7b4533f5-6724-3b14-a682-5ee294a59a91.roa File: 7b4533f5-6724-3b14-a682-5ee294a59a91.roa (raw, json) Hash identifier: A0Tu0ZL1EfTUw3CCIAdVZ5nFGrDBDC6B1+UnOC6zTfo= Subject key identifier: 9D:DD:D0:A5:36:09:B7:A4:26:C6:24:FE:43:93:29:F1:9E:16:A6:86 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B3557014DD2E0E0B55036A240 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7b4533f5-6724-3b14-a682-5ee294a59a91.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 396542 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:57:01:4d:d2:e0:e0:b5:50:36:a2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=c4644dc6-45dd-4742-9508-62ce09ddebcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:68:4d:06:5d:75:fb:db:e5:ad:a9:ae:39:c8: 90:cb:ac:fd:2a:8d:31:20:17:2f:a4:09:1c:4b:ef: 7b:c6:35:63:93:d6:3f:f9:cb:36:e2:ce:a3:f1:46: b3:b8:d0:fe:c8:30:a6:bc:c3:f0:5e:45:90:ff:24: 85:91:b2:d6:b6:ba:49:dd:a6:bb:e3:87:e7:a1:68: 15:b4:f8:46:59:f9:e8:c0:0c:bd:d3:91:69:de:d7: b8:85:4e:75:9b:89:f4:cb:48:62:10:ef:71:c1:63: b2:f9:22:dd:13:bc:41:98:a6:64:6f:f3:c7:b9:60: 3a:24:f3:86:5a:74:70:f1:dd:81:1d:10:7d:f3:9d: 15:d0:14:6d:e4:74:e8:67:9c:5e:9d:ed:ab:ba:0f: 95:b1:4d:a4:44:b5:97:6b:bc:e5:12:1e:93:60:20: e5:37:ef:15:59:9a:4a:90:ed:e9:48:2b:8e:fc:97: 2e:de:32:ac:a1:46:22:99:03:25:20:f6:ee:58:f7: a1:68:10:c2:ca:7a:c9:cd:c5:d9:44:fd:71:9e:a2: 2f:f6:7c:47:c8:d7:c8:c4:24:2b:18:60:47:a0:9f: 97:a5:62:41:f7:84:ad:5d:6d:32:13:24:79:db:e8: e1:8e:56:f6:d5:63:35:78:71:d8:9a:47:f4:10:07: c6:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:DD:D0:A5:36:09:B7:A4:26:C6:24:FE:43:93:29:F1:9E:16:A6:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7b4533f5-6724-3b14-a682-5ee294a59a91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:b3:a5:a5:f6:b2:53:d5:2a:ae:14:73:39:bc:32:54:05:41: 08:69:b8:24:b6:fc:24:86:43:66:e0:e2:7b:d5:c6:15:87:93: df:90:45:72:91:5a:d0:08:22:64:a5:ce:76:9b:f0:5a:c1:d5: e0:2a:d5:c4:67:ce:69:bb:03:60:9b:c7:db:60:0e:59:9b:12: 9a:7d:31:fc:35:78:57:6b:94:90:09:87:c9:9e:44:00:01:6d: 7f:d1:a3:d2:2b:87:da:b1:50:f0:06:3d:a2:ad:23:22:8a:47: 5c:2e:81:81:9b:01:a3:51:f6:ca:6a:bc:fd:bb:76:87:fd:28: aa:3c:5b:ad:07:79:8b:5d:00:27:d8:2c:89:ba:b3:81:1c:1b: 42:4d:ef:ca:68:b2:2b:6a:4e:ff:ce:0a:ae:ef:c1:60:a3:65: 1c:b4:ee:ef:5b:ea:6e:f0:75:7e:47:3c:ce:a8:cb:9f:7d:49: 7a:ce:68:dc:34:c0:f8:c8:db:f9:9f:73:02:1f:b4:0e:10:46: db:5c:c8:89:14:00:67:7c:c5:3b:56:fb:07:63:fa:3f:96:d7: 28:87:45:9e:9b:41:55:d8:b6:cf:33:2a:9e:e4:de:86:f3:55: 6a:0d:0f:bd:63:03:84:3d:54:a5:9a:ab:ce:79:4e:df:74:a7: d0:98:93:76 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEs1VwFN0uDgtVA2okAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk YzQ2NDRkYzYtNDVkZC00NzQyLTk1MDgtNjJjZTA5ZGRlYmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWhNBl11+9vlramuOciQy6z9Ko0xIBcvpAkc S+97xjVjk9Y/+cs24s6j8UazuND+yDCmvMPwXkWQ/ySFkbLWtrpJ3aa744fnoWgV tPhGWfnowAy905Fp3te4hU51m4n0y0hiEO9xwWOy+SLdE7xBmKZkb/PHuWA6JPOG WnRw8d2BHRB9850V0BRt5HToZ5xene2rug+VsU2kRLWXa7zlEh6TYCDlN+8VWZpK kO3pSCuO/Jcu3jKsoUYimQMlIPbuWPehaBDCynrJzcXZRP1xnqIv9nxHyNfIxCQr GGBHoJ+XpWJB94StXW0yEyR52+jhjlb21WM1eHHYmkf0EAfGrQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJ3d0KU2CbekJsYk/kOTKfGeFqaGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvN2I0NTMzZjUtNjcyNC0z YjE0LWE2ODItNWVlMjk0YTU5YTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAqs6Wl9rJT1SquFHM5vDJUBUEIabgktvwkhkNm 4OJ71cYVh5PfkEVykVrQCCJkpc52m/BawdXgKtXEZ85puwNgm8fbYA5ZmxKafTH8 NXhXa5SQCYfJnkQAAW1/0aPSK4fasVDwBj2irSMiikdcLoGBmwGjUfbKarz9u3aH /SiqPFutB3mLXQAn2CyJurOBHBtCTe/KaLIrak7/zgqu78Fgo2UctO7vW+pu8HV+ RzzOqMuffUl6zmjcNMD4yNv5n3MCH7QOEEbbXMiJFABnfMU7VvsHY/o/ltcoh0We m0FV2LbPMyqe5N6G81VqDQ+9YwOEPVSlmqvOeU7fdKfQmJN2 -----END CERTIFICATE-----Generated at Mon Oct 20 15:59:11 2025 by rpki-client